last executing test programs: 1m43.171905335s ago: executing program 4 (id=643): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="e704010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="20e2240000004ee6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m40.761128221s ago: executing program 4 (id=652): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000002000400200004000", 0x58}], 0x1) 1m40.550380201s ago: executing program 4 (id=654): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e23, 0x1, 0xcd, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m39.78319574s ago: executing program 4 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m39.299114892s ago: executing program 4 (id=664): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsmount(0xffffffffffffffff, 0x1, 0x80) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x77543000) 1m38.282600487s ago: executing program 4 (id=673): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x6, 0x3, "3e2face0f1002aca5463040755b7dea2"}}, 0x799fc0) 1m37.065144136s ago: executing program 32 (id=673): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x6, 0x3, "3e2face0f1002aca5463040755b7dea2"}}, 0x799fc0) 10.155869203s ago: executing program 2 (id=1057): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="50e9"], 0x14) 8.986269161s ago: executing program 2 (id=1062): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x40000000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/113, 0x71) 8.206197535s ago: executing program 2 (id=1067): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1000000, 0x5, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x4, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fe800, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x8, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x2, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x4, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xa, 0x2}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a5, 0x3, 0x6, 0x7, 0x5b8, 0x2, 0x6, 0x3, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0xfffffff9, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x3ff, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x1e, 0xe, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x8004, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x9, 0x0, 0x2, 0x81, 0xffff, 0x6, 0x10000, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x50000, 0xfffffffd, 0x3, 0x2, 0x89a, 0x100, 0xd3, 0x2, 0x1, 0x3, 0xfffffffb, 0xe253, 0x6, 0x20000007, 0x918, 0x4, 0x0, 0x8ea, 0x5, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5e5f, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x41, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x0, 0x1fb, 0xb, 0x400, 0x7f, 0xbc, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0xa, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x28, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0x101, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 7.026301036s ago: executing program 2 (id=1073): exit(0x100000000000035) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x412000, 0x40, 0x40}, 0x18) 6.215078675s ago: executing program 6 (id=1077): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x5e) 6.120814849s ago: executing program 6 (id=1078): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xca) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80143, 0x0) pread64(r1, &(0x7f00000000c0)=""/23, 0x17, 0x1) 5.347730838s ago: executing program 3 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2d, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8c4) 5.017844197s ago: executing program 6 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x2001, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 4.93311479s ago: executing program 3 (id=1085): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f00000000c0)=0xff12) 4.797782041s ago: executing program 0 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, &(0x7f0000000000)='7', 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200004ffc000) 4.66111393s ago: executing program 3 (id=1088): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/246, 0xf6}], 0x1}, 0x60000100) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xe, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.656399297s ago: executing program 6 (id=1089): r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x9}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.462798176s ago: executing program 2 (id=1090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x3, 0x19, {0x19, 0x2, "63c7519298a87ea07cbd7db8b6073a89305c7275b6ea73"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.38276582s ago: executing program 0 (id=1092): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x156) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000100", @ANYRES8=r0], 0x456681) 4.28769714s ago: executing program 5 (id=1093): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.958847177s ago: executing program 0 (id=1094): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 3.948221862s ago: executing program 6 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000015ac0)='./file0\x00', 0x2, &(0x7f0000000200)={[{@nolargeio}, {@ikeep}]}, 0x1, 0x15b6c, &(0x7f000002b640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 3.79611451s ago: executing program 1 (id=1096): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 3.508318889s ago: executing program 5 (id=1097): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 3.385919313s ago: executing program 1 (id=1098): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 2.094965597s ago: executing program 0 (id=1099): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8000000000003ff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.094774772s ago: executing program 3 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.979951726s ago: executing program 1 (id=1101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) 1.799102418s ago: executing program 1 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1.719402417s ago: executing program 5 (id=1103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 1.680789996s ago: executing program 3 (id=1104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x228e, &(0x7f0000003340)=ANY=[], 0x0) 1.269177744s ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x16000a80) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x400000041000000}], 0x0) 1.079416902s ago: executing program 5 (id=1106): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 1.041371191s ago: executing program 1 (id=1107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000240)='\r', 0x1}, {&(0x7f00000005c0)="d4e3", 0x2}], 0x2}}], 0x1, 0x0) 996.651421ms ago: executing program 2 (id=1108): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 892.051093ms ago: executing program 3 (id=1109): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x3, "a5add5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="001745000000cfcf7cacea32fa5b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 457.831471ms ago: executing program 0 (id=1110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xffffffff) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000008}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 418.377725ms ago: executing program 6 (id=1111): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r0, 0x0, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 406.707657ms ago: executing program 1 (id=1112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 215.570245ms ago: executing program 5 (id=1113): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) 0s ago: executing program 5 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x76cd000) write(r0, &(0x7f0000000100)='s', 0x1) kernel console output (not intermixed with test programs): ile system [ 229.322028][ T5758] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 229.369089][ T1212] rc_core: IR keymap rc-technisat-usb2 not found [ 229.369114][ T1212] Registered IR keymap rc-empty [ 229.544445][ T5758] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.544503][ T5758] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.544549][ T5758] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.544592][ T5758] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.611790][ T5758] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.625582][ T1212] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 229.629841][ T1212] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 229.680876][ T5758] usb 3-1: USB disconnect, device number 7 [ 229.701622][ T1212] dvb-usb: schedule remote query interval to 100 msecs. [ 229.730435][ T1212] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 229.804720][ T7988] loop0: detected capacity change from 0 to 512 [ 229.810905][ T7988] EXT4-fs: Ignoring removed i_version option [ 229.829735][ T7988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.839320][ T1212] usb 1-1: USB disconnect, device number 7 [ 229.865708][ T7988] EXT4-fs (loop0): 1 truncate cleaned up [ 229.938264][ T7988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.052446][ T31] audit: type=1800 audit(1788995769.097:35): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.713" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 230.275991][ T1212] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 230.493338][ T7862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.530815][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.538774][ T7862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.579036][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.588985][ T7862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.607415][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.609491][ T7999] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.716'. [ 230.610000][ T7862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.654332][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.782914][ T5770] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.932027][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.935838][ T5770] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 230.937444][ T5770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.937501][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.290079][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.363996][ T7862] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.382076][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.382205][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.434911][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.435038][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.507641][ T5770] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 231.593843][ T5724] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.695056][ T7862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.700851][ T5770] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 231.713699][ T5770] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0004/input/input12 [ 231.768262][ T5724] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 231.769280][ T5724] usb 1-1: config 0 has no interfaces? [ 231.781883][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.781925][ T5724] usb 1-1: Product: syz [ 231.781953][ T5724] usb 1-1: Manufacturer: syz [ 231.781980][ T5724] usb 1-1: SerialNumber: syz [ 231.833833][ T5724] usb 1-1: config 0 descriptor?? [ 232.098117][ T5770] usb 2-1: USB disconnect, device number 5 [ 232.267575][ T1212] usb 1-1: USB disconnect, device number 8 [ 234.148558][ T7862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.292858][ T6598] Bluetooth: hci0: command 0x0406 tx timeout [ 234.304688][ T5617] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 234.304737][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 234.304782][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 234.304805][ T5617] Call Trace: [ 234.304817][ T5617] [ 234.304832][ T5617] dump_stack_lvl+0x100/0x190 [ 234.304893][ T5617] gfs2_assert_warn_i.cold+0x3a/0x118 [ 234.304947][ T5617] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 234.304989][ T5617] ? mark_held_locks+0x40/0x70 [ 234.305026][ T5617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.305080][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.305133][ T5617] gfs2_make_fs_ro+0x25e/0x370 [ 234.305185][ T5617] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 234.305239][ T5617] ? __pfx_autoremove_wake_function+0x10/0x10 [ 234.305298][ T5617] ? __pfx___might_resched+0x10/0x10 [ 234.305355][ T5617] ? gfs2_put_super+0x149/0x670 [ 234.305403][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.305466][ T5617] gfs2_put_super+0x1a4/0x670 [ 234.305525][ T5617] ? __pfx_gfs2_put_super+0x10/0x10 [ 234.305577][ T5617] generic_shutdown_super+0x167/0x360 [ 234.305630][ T5617] kill_block_super+0x3b/0xa0 [ 234.305680][ T5617] gfs2_kill_sb+0x4a9/0x590 [ 234.305731][ T5617] deactivate_locked_super+0xbd/0x140 [ 234.305785][ T5617] deactivate_super+0xea/0x110 [ 234.305839][ T5617] cleanup_mnt+0x21f/0x450 [ 234.305904][ T5617] task_work_run+0x150/0x240 [ 234.305961][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 234.306019][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.306074][ T5617] exit_to_user_mode_loop+0x1d8/0x700 [ 234.306115][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.306160][ T5617] ? rcu_is_watching+0x13/0xc0 [ 234.306212][ T5617] do_syscall_64+0x661/0x790 [ 234.306277][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.306317][ T5617] RIP: 0033:0x7fca9159f397 [ 234.306347][ T5617] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 234.306385][ T5617] RSP: 002b:00007ffd37b09328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 234.306422][ T5617] RAX: 0000000000000000 RBX: 00007fca9163448b RCX: 00007fca9159f397 [ 234.306447][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd37b093e0 [ 234.306475][ T5617] RBP: 00007ffd37b093e0 R08: 00007ffd37b0a3e0 R09: 00000000ffffffff [ 234.306501][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd37b0a470 [ 234.306525][ T5617] R13: 00007fca9163448b R14: 0000000000037e97 R15: 00007ffd37b0a4b0 [ 234.306576][ T5617] [ 234.375809][ T5738] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 234.573578][ T5738] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.578206][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.624357][ T5738] usb 2-1: config 0 descriptor?? [ 234.683331][ T5738] cp210x 2-1:0.0: cp210x converter detected [ 235.300020][ T8038] loop0: detected capacity change from 0 to 32768 [ 235.344300][ T5738] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 235.344376][ T5738] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 235.396949][ T5738] usb 2-1: cp210x converter now attached to ttyUSB0 [ 235.441270][ T5738] usb 2-1: USB disconnect, device number 6 [ 235.463538][ T8038] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 235.581779][ T31] audit: type=1800 audit(1788995774.627:36): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.726" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 235.612037][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.637842][ T5738] cp210x 2-1:0.0: device disconnected [ 236.077170][ T5770] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 236.226355][ T5770] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 236.233568][ T5770] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 236.233615][ T5770] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 236.233676][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.316578][ T5770] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 236.402416][ T7862] veth0_vlan: entered promiscuous mode [ 236.491238][ T5770] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 236.588265][ T7862] veth1_vlan: entered promiscuous mode [ 236.637931][ T7862] veth0_macvtap: entered promiscuous mode [ 236.646009][ T7862] veth1_macvtap: entered promiscuous mode [ 236.759375][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.813263][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.904570][ T5623] ocfs2: Unmounting device (7,0) on (node local) [ 236.946773][ T6010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.946903][ T6010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.947714][ T6010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.947778][ T6010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.113014][ T8059] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 237.113366][ T8059] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 237.113723][ T8059] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 237.361333][ T8058] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 237.377035][ T5770] usb 4-1: USB disconnect, device number 3 [ 237.412135][ T5770] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 237.415849][ T5770] spcp8x5 4-1:1.0: device disconnected [ 237.545507][ T8075] loop2: detected capacity change from 0 to 16 [ 237.659905][ T8075] erofs (device loop2): mounted with root inode @ nid 36. [ 237.671446][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.671477][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.956884][ T1424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.956921][ T1424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.098348][ T8082] loop1: detected capacity change from 0 to 256 [ 238.208337][ T8082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 239.122682][ T5769] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 239.437422][ T5769] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 239.439999][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 239.440053][ T5769] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 239.440143][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.683341][ T8105] loop1: detected capacity change from 0 to 32768 [ 239.765573][ T8105] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.828407][ T31] audit: type=1800 audit(1788995778.877:37): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.748" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 240.271376][ T8124] bridge0: entered allmulticast mode [ 240.641515][ T5625] ocfs2: Unmounting device (7,1) on (node local) [ 240.883961][ T5769] pegasus 6-1:1.0: can't reset MAC [ 240.884343][ T5769] pegasus 6-1:1.0: probe with driver pegasus failed with error -5 [ 240.949603][ T5769] usb 6-1: USB disconnect, device number 3 [ 241.772625][ T5738] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 241.933897][ T5738] usb 3-1: Using ep0 maxpacket: 8 [ 241.940529][ T5738] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 241.955515][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.955561][ T5738] usb 3-1: Product: syz [ 241.955587][ T5738] usb 3-1: Manufacturer: syz [ 241.955615][ T5738] usb 3-1: SerialNumber: syz [ 241.991131][ T5738] usb 3-1: config 0 descriptor?? [ 242.243849][ T5738] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.332384][ T8154] trusted_key: syz.6.766 sent an empty control message without MSG_MORE. [ 242.468342][ T5738] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 242.513227][ T5738] usb 3-1: USB disconnect, device number 8 [ 243.127174][ T8165] FAULT_INJECTION: forcing a failure. [ 243.127174][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 243.127231][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT(full) [ 243.127278][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 243.127302][ T8165] Call Trace: [ 243.127315][ T8165] [ 243.127330][ T8165] dump_stack_lvl+0x100/0x190 [ 243.127391][ T8165] should_fail_ex.cold+0x5/0xa [ 243.127437][ T8165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.127498][ T8165] should_failslab+0xc2/0x120 [ 243.127537][ T8165] __kmalloc_cache_noprof+0x91/0x6d0 [ 243.127586][ T8165] ? __might_fault+0xc5/0x140 [ 243.127630][ T8165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.127679][ T8165] ? landlock_create_ruleset+0x8f/0x3a0 [ 243.127745][ T8165] landlock_create_ruleset+0x8f/0x3a0 [ 243.127799][ T8165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.127852][ T8165] __do_sys_landlock_create_ruleset+0x2b0/0x770 [ 243.127911][ T8165] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 243.127968][ T8165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.128028][ T8165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.128084][ T8165] do_syscall_64+0x123/0x790 [ 243.128152][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.128193][ T8165] RIP: 0033:0x7fca9159e159 [ 243.128225][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.128265][ T8165] RSP: 002b:00007fca924e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 243.128305][ T8165] RAX: ffffffffffffffda RBX: 00007fca91825fa0 RCX: 00007fca9159e159 [ 243.128332][ T8165] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000040 [ 243.128357][ T8165] RBP: 00007fca9163503b R08: 0000000000000000 R09: 0000000000000000 [ 243.128383][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.128410][ T8165] R13: 00007fca91826038 R14: 00007fca91825fa0 R15: 00007ffd37b0a0b8 [ 243.128467][ T8165] [ 243.551819][ T8171] loop1: detected capacity change from 0 to 512 [ 243.574878][ T8171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.622781][ T8171] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 243.622894][ T8171] ext4 filesystem being remounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.626847][ T8174] loop3: detected capacity change from 0 to 256 [ 243.701076][ T8174] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 243.836151][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.020136][ T8163] loop6: detected capacity change from 0 to 32768 [ 245.211107][ T8163] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 245.477837][ T31] audit: type=1800 audit(1788995784.527:38): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.768" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 246.192425][ T8215] loop2: detected capacity change from 0 to 2048 [ 246.229034][ T8193] loop1: detected capacity change from 0 to 32768 [ 246.231616][ T8193] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.781 (8193) [ 246.320234][ T8215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.446725][ T31] audit: type=1804 audit(1788995785.497:39): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.787" name="/newroot/152/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 246.519974][ T8193] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 246.520028][ T8193] BTRFS info (device loop1): using blake2b checksum algorithm [ 246.831646][ T7862] ocfs2: Unmounting device (7,6) on (node local) [ 246.881486][ T8193] BTRFS info (device loop1): enabling ssd optimizations [ 246.881530][ T8193] BTRFS info (device loop1): turning on async discard [ 246.881561][ T8193] BTRFS info (device loop1): enabling free space tree [ 246.881592][ T8193] BTRFS info (device loop1): use zstd compression, level 3 [ 247.102830][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.830118][ T31] audit: type=1800 audit(1788995786.877:40): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.781" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 248.230763][ T1339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.263547][ T5625] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.338328][ T8255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'. [ 248.412044][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 248.897500][ T1339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.148892][ T6598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.170415][ T6598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.182106][ T6598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.190310][ T6598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.206288][ T6598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.421485][ T1339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.751971][ T1339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.883914][ T8275] loop6: detected capacity change from 0 to 8192 [ 249.961670][ T31] audit: type=1800 audit(1788995789.007:41): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.802" name="file2" dev="loop6" ino=1048636 res=0 errno=0 [ 249.989607][ T8275] syz.6.802: attempt to access beyond end of device [ 249.989607][ T8275] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 250.247946][ T8282] FAULT_INJECTION: forcing a failure. [ 250.247946][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.248006][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.2.805 Not tainted syzkaller #0 PREEMPT(full) [ 250.248055][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 250.248079][ T8282] Call Trace: [ 250.248092][ T8282] [ 250.248107][ T8282] dump_stack_lvl+0x100/0x190 [ 250.248176][ T8282] should_fail_ex.cold+0x5/0xa [ 250.248228][ T8282] core_sys_select+0x938/0xbb0 [ 250.248304][ T8282] ? __pfx_core_sys_select+0x10/0x10 [ 250.248366][ T8282] ? futex_wake+0x4ea/0x5e0 [ 250.248436][ T8282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.248525][ T8282] ? __pfx_set_user_sigmask+0x10/0x10 [ 250.248593][ T8282] ? __pfx_do_futex+0x10/0x10 [ 250.248648][ T8282] do_pselect.constprop.0+0x238/0x270 [ 250.248721][ T8282] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 250.248785][ T8282] ? __x64_sys_futex+0x358/0x4d0 [ 250.248839][ T8282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.248891][ T8282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.248940][ T8282] ? xfd_validate_state+0x129/0x190 [ 250.249016][ T8282] __x64_sys_pselect6+0x149/0x1c0 [ 250.249089][ T8282] do_syscall_64+0x123/0x790 [ 250.249164][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.249207][ T8282] RIP: 0033:0x7f5a0199e159 [ 250.249239][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.249278][ T8282] RSP: 002b:00007f5a027cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 250.249318][ T8282] RAX: ffffffffffffffda RBX: 00007f5a01c25fa0 RCX: 00007f5a0199e159 [ 250.249346][ T8282] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 250.249376][ T8282] RBP: 00007f5a01a3503b R08: 0000200000000280 R09: 0000000000000000 [ 250.249403][ T8282] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 250.249429][ T8282] R13: 00007f5a01c26038 R14: 00007f5a01c25fa0 R15: 00007ffd05f6b2c8 [ 250.249482][ T8282] [ 250.366381][ T8280] loop0: detected capacity change from 0 to 32768 [ 250.429293][ T8280] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 250.429325][ T8280] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 250.500276][ T8280] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 250.502319][ T5945] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 250.502344][ T5945] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 250.537515][ T1212] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.714975][ T1212] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 250.717858][ T1212] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 250.717907][ T1212] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.717948][ T1212] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.718010][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.795376][ T8278] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.875701][ T5945] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 373ms [ 250.888456][ T5945] gfs2: fsid=syz:syz.0: jid=0: Done [ 250.888512][ T8280] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 250.929083][ T1212] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 251.084096][ T8280] gfs2: fsid=syz:syz.0: found 1 quota changes [ 251.090395][ T1212] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 251.168142][ T1212] usb 6-1: USB disconnect, device number 4 [ 251.258542][ T7761] Bluetooth: hci3: command tx timeout [ 251.378911][ T1212] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 251.379805][ T1212] cyberjack 6-1:1.0: device disconnected [ 251.682884][ T5769] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 251.815404][ T5623] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 251.815462][ T5623] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 251.815509][ T5623] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5623 [syz-executor] gfs2_quota_sync+0x322/0x570 [ 251.815581][ T5623] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 251.815621][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 251.815656][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 251.815675][ T5623] Call Trace: [ 251.815685][ T5623] [ 251.815698][ T5623] dump_stack_lvl+0x100/0x190 [ 251.815744][ T5623] gfs2_withdraw.cold+0xa/0xed [ 251.815784][ T5623] inode_go_instantiate+0xd63/0x1540 [ 251.815817][ T5623] ? __pfx_bit_wait+0x10/0x10 [ 251.815867][ T5623] ? __pfx_inode_go_instantiate+0x10/0x10 [ 251.815902][ T5623] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 251.815959][ T5623] gfs2_instantiate+0x16c/0x250 [ 251.816007][ T5623] gfs2_glock_wait+0x214/0x330 [ 251.816055][ T5623] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 251.816104][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.816147][ T5623] gfs2_glock_nq+0xa03/0x14f0 [ 251.816182][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.816226][ T5623] do_sync+0x705/0xd60 [ 251.816269][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.816306][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 251.816358][ T5623] ? __pfx_do_sync+0x10/0x10 [ 251.816401][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.816448][ T5623] ? qd_grab_sync+0x41e/0x560 [ 251.816501][ T5623] ? gfs2_quota_sync+0x322/0x570 [ 251.816546][ T5623] ? gfs2_quota_sync+0x278/0x570 [ 251.816592][ T5623] ? gfs2_quota_sync+0x278/0x570 [ 251.816638][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.816687][ T5623] gfs2_quota_sync+0x322/0x570 [ 251.816747][ T5623] gfs2_sync_fs+0x44/0xb0 [ 251.816785][ T5623] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 251.816822][ T5623] sync_filesystem+0x117/0x290 [ 251.816861][ T5623] generic_shutdown_super+0x86/0x360 [ 251.816911][ T5623] kill_block_super+0x3b/0xa0 [ 251.816955][ T5623] gfs2_kill_sb+0x4a9/0x590 [ 251.817001][ T5623] deactivate_locked_super+0xbd/0x140 [ 251.817047][ T5623] deactivate_super+0xea/0x110 [ 251.817094][ T5623] cleanup_mnt+0x21f/0x450 [ 251.817151][ T5623] task_work_run+0x150/0x240 [ 251.817201][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 251.817254][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.817302][ T5623] exit_to_user_mode_loop+0x1d8/0x700 [ 251.817337][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.817373][ T5623] ? rcu_is_watching+0x13/0xc0 [ 251.817417][ T5623] do_syscall_64+0x661/0x790 [ 251.817477][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.817511][ T5623] RIP: 0033:0x7f243ab9f397 [ 251.817540][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 251.817571][ T5623] RSP: 002b:00007ffdff2b0698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 251.817604][ T5623] RAX: 0000000000000000 RBX: 00007f243ac3448b RCX: 00007f243ab9f397 [ 251.817630][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff2b0750 [ 251.817652][ T5623] RBP: 00007ffdff2b0750 R08: 00007ffdff2b1750 R09: 00000000ffffffff [ 251.817673][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdff2b17e0 [ 251.817694][ T5623] R13: 00007f243ac3448b R14: 000000000003d653 R15: 00007ffdff2b1820 [ 251.817740][ T5623] [ 251.819740][ T5623] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 251.878989][ T5769] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 251.940339][ T5769] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 251.940383][ T5769] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 251.940417][ T5769] usb 2-1: config 4 has no interface number 0 [ 251.940469][ T5769] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.995988][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.996029][ T5769] usb 2-1: Product: syz [ 251.996051][ T5769] usb 2-1: Manufacturer: syz [ 251.996073][ T5769] usb 2-1: SerialNumber: syz [ 252.481577][ T8305] dvmrp0: entered allmulticast mode [ 252.527444][ T1339] bridge_slave_1: left allmulticast mode [ 252.527524][ T1339] bridge_slave_1: left promiscuous mode [ 252.530920][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.604128][ T1339] bridge_slave_0: left allmulticast mode [ 252.604171][ T1339] bridge_slave_0: left promiscuous mode [ 252.607771][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.622781][ T5945] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 252.675291][ T5769] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 252.681499][ T5769] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 252.703325][ T5769] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 252.703394][ T5769] usb 2-1: media controller created [ 252.707726][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.777409][ T5945] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 252.789842][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.789918][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 252.789966][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 252.790012][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 252.790950][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.808139][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 252.808185][ T5945] usb 3-1: Product: syz [ 252.808211][ T5945] usb 3-1: Manufacturer: syz [ 252.808238][ T5945] usb 3-1: SerialNumber: syz [ 252.839752][ T5945] usb 3-1: config 0 descriptor?? [ 252.917527][ T5769] DVB: Unable to find symbol dib7000p_attach() [ 252.917551][ T5769] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 253.075707][ T5769] rc_core: IR keymap rc-dib0700-rc5 not found [ 253.075736][ T5769] Registered IR keymap rc-empty [ 253.075998][ T5769] dvb-usb: could not initialize remote control. [ 253.076011][ T5769] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 253.125019][ T5945] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 253.125063][ T5945] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 253.201075][ T5769] usb 2-1: USB disconnect, device number 7 [ 253.255299][ T5769] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 253.332925][ T7761] Bluetooth: hci3: command tx timeout [ 253.348954][ T5945] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 253.348998][ T5945] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 253.349032][ T5945] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 253.548676][ T5945] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 253.938202][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.034518][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.046952][ T1339] bond0 (unregistering): Released all slaves [ 254.130491][ T8308] dvmrp1: entered allmulticast mode [ 254.177642][ T8305] dvmrp0: left allmulticast mode [ 254.177819][ T8305] dvmrp1: left allmulticast mode [ 254.209787][ T5945] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 254.212376][ T5945] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 254.279073][ T5945] usb 3-1: USB disconnect, device number 9 [ 255.178661][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.178744][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.254950][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.292032][ T8348] FAULT_INJECTION: forcing a failure. [ 255.292032][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 255.292085][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.2.822 Not tainted syzkaller #0 PREEMPT(full) [ 255.292124][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 255.292144][ T8348] Call Trace: [ 255.292154][ T8348] [ 255.292168][ T8348] dump_stack_lvl+0x100/0x190 [ 255.292223][ T8348] should_fail_ex.cold+0x5/0xa [ 255.292262][ T8348] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.292313][ T8348] should_failslab+0xc2/0x120 [ 255.292349][ T8348] __kmalloc_cache_noprof+0x91/0x6d0 [ 255.292395][ T8348] ? copy_ipcs+0x10d/0x7e0 [ 255.292463][ T8348] copy_ipcs+0x10d/0x7e0 [ 255.292514][ T8348] create_new_namespaces+0x20a/0xac0 [ 255.292551][ T8348] ? security_capable+0x80/0x260 [ 255.292593][ T8348] unshare_nsproxy_namespaces+0xf2/0x220 [ 255.292630][ T8348] ksys_unshare+0x4a2/0xa70 [ 255.292666][ T8348] ? __pfx_ksys_unshare+0x10/0x10 [ 255.292729][ T8348] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.292785][ T8348] __x64_sys_unshare+0x31/0x40 [ 255.292821][ T8348] do_syscall_64+0x123/0x790 [ 255.292879][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.292914][ T8348] RIP: 0033:0x7f5a0199e159 [ 255.292943][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.292977][ T8348] RSP: 002b:00007f5a027cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 255.293010][ T8348] RAX: ffffffffffffffda RBX: 00007f5a01c25fa0 RCX: 00007f5a0199e159 [ 255.293033][ T8348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 255.293056][ T8348] RBP: 00007f5a01a3503b R08: 0000000000000000 R09: 0000000000000000 [ 255.293077][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.293099][ T8348] R13: 00007f5a01c26038 R14: 00007f5a01c25fa0 R15: 00007ffd05f6b2c8 [ 255.293143][ T8348] [ 255.415022][ T7761] Bluetooth: hci3: command tx timeout [ 255.567388][ T8344] loop5: detected capacity change from 0 to 8192 [ 255.661132][ T31] audit: type=1800 audit(1788995794.707:42): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.819" name="file2" dev="loop5" ino=1048637 res=0 errno=0 [ 255.683097][ T8344] syz.5.819: attempt to access beyond end of device [ 255.683097][ T8344] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 256.289310][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.825'. [ 256.537424][ T8370] FAULT_INJECTION: forcing a failure. [ 256.537424][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 256.537480][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.1.827 Not tainted syzkaller #0 PREEMPT(full) [ 256.537527][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.537555][ T8370] Call Trace: [ 256.537568][ T8370] [ 256.537583][ T8370] dump_stack_lvl+0x100/0x190 [ 256.537643][ T8370] should_fail_ex.cold+0x5/0xa [ 256.537687][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.537742][ T8370] should_failslab+0xc2/0x120 [ 256.537780][ T8370] __kmalloc_noprof+0xfc/0x840 [ 256.537833][ T8370] ? __register_sysctl_table+0xbc8/0x1650 [ 256.537886][ T8370] ? __register_sysctl_table+0xbe4/0x1650 [ 256.537953][ T8370] __register_sysctl_table+0xbe4/0x1650 [ 256.538014][ T8370] ? __pfx___register_sysctl_table+0x10/0x10 [ 256.538064][ T8370] ? register_pidns_sysctls+0x48/0x1c0 [ 256.538126][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.538174][ T8370] ? __asan_memcpy+0x3c/0x60 [ 256.538232][ T8370] register_pidns_sysctls+0x11d/0x1c0 [ 256.538287][ T8370] ? __ns_common_init+0x299/0x4b0 [ 256.538337][ T8370] copy_pid_ns+0x680/0x10a0 [ 256.538388][ T8370] ? __pfx_copy_pid_ns+0x10/0x10 [ 256.538433][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.538484][ T8370] ? __pfx_copy_mnt_ns+0x10/0x10 [ 256.538534][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.538586][ T8370] ? create_new_namespaces+0x30/0xac0 [ 256.538627][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.538683][ T8370] create_new_namespaces+0x2aa/0xac0 [ 256.538735][ T8370] unshare_nsproxy_namespaces+0xf2/0x220 [ 256.538783][ T8370] ksys_unshare+0x4a2/0xa70 [ 256.538828][ T8370] ? __pfx_ksys_unshare+0x10/0x10 [ 256.538869][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.538943][ T8370] __x64_sys_unshare+0x31/0x40 [ 256.538986][ T8370] do_syscall_64+0x123/0x790 [ 256.539054][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.539096][ T8370] RIP: 0033:0x7fadbc19e159 [ 256.539127][ T8370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.539167][ T8370] RSP: 002b:00007fadbd00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 256.539207][ T8370] RAX: ffffffffffffffda RBX: 00007fadbc425fa0 RCX: 00007fadbc19e159 [ 256.539234][ T8370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 256.539259][ T8370] RBP: 00007fadbc23503b R08: 0000000000000000 R09: 0000000000000000 [ 256.539285][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.539310][ T8370] R13: 00007fadbc426038 R14: 00007fadbc425fa0 R15: 00007ffd08be6ee8 [ 256.539362][ T8370] [ 256.680561][ T8370] sysctl could not get directory: /kernel -12 [ 256.850590][ T8366] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 256.853913][ T5623] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 256.853971][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 256.854015][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.854038][ T5623] Call Trace: [ 256.854050][ T5623] [ 256.854065][ T5623] dump_stack_lvl+0x100/0x190 [ 256.854125][ T5623] gfs2_assert_warn_i.cold+0x3a/0x118 [ 256.854181][ T5623] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 256.854223][ T5623] ? mark_held_locks+0x40/0x70 [ 256.854259][ T5623] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.854312][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.854366][ T5623] gfs2_make_fs_ro+0x25e/0x370 [ 256.854421][ T5623] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 256.854475][ T5623] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.854534][ T5623] ? __pfx___might_resched+0x10/0x10 [ 256.854591][ T5623] ? gfs2_put_super+0x149/0x670 [ 256.854639][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.854696][ T5623] gfs2_put_super+0x1a4/0x670 [ 256.854751][ T5623] ? __pfx_gfs2_put_super+0x10/0x10 [ 256.854804][ T5623] generic_shutdown_super+0x167/0x360 [ 256.854856][ T5623] kill_block_super+0x3b/0xa0 [ 256.854905][ T5623] gfs2_kill_sb+0x4a9/0x590 [ 256.854961][ T5623] deactivate_locked_super+0xbd/0x140 [ 256.855015][ T5623] deactivate_super+0xea/0x110 [ 256.855068][ T5623] cleanup_mnt+0x21f/0x450 [ 256.855131][ T5623] task_work_run+0x150/0x240 [ 256.855188][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 256.855246][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.855300][ T5623] exit_to_user_mode_loop+0x1d8/0x700 [ 256.855340][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.855385][ T5623] ? rcu_is_watching+0x13/0xc0 [ 256.855438][ T5623] do_syscall_64+0x661/0x790 [ 256.855500][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.855541][ T5623] RIP: 0033:0x7f243ab9f397 [ 256.855572][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 256.855608][ T5623] RSP: 002b:00007ffdff2b0698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 256.855644][ T5623] RAX: 0000000000000000 RBX: 00007f243ac3448b RCX: 00007f243ab9f397 [ 256.855669][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff2b0750 [ 256.855693][ T5623] RBP: 00007ffdff2b0750 R08: 00007ffdff2b1750 R09: 00000000ffffffff [ 256.855718][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdff2b17e0 [ 256.855743][ T5623] R13: 00007f243ac3448b R14: 000000000003d653 R15: 00007ffdff2b1820 [ 256.855794][ T5623] [ 257.149128][ T8366] bridge1: entered promiscuous mode [ 257.235229][ T8368] bond0: invalid NS target :: specified for addition [ 257.235270][ T8368] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 257.492653][ T7761] Bluetooth: hci3: command tx timeout [ 257.583184][ T1339] hsr_slave_0: left promiscuous mode [ 257.599693][ T1339] hsr_slave_1: left promiscuous mode [ 257.600992][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.601043][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.632650][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.632715][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.979904][ T1339] veth1_macvtap: left promiscuous mode [ 257.979993][ T1339] veth0_macvtap: left promiscuous mode [ 258.494454][ T8397] loop1: detected capacity change from 0 to 2048 [ 258.703789][ T8397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.815660][ T8398] loop0: detected capacity change from 0 to 40427 [ 258.829784][ T8398] F2FS-fs (loop0): Image doesn't support compression [ 258.829818][ T8398] F2FS-fs (loop0): build fault injection rate: 690 [ 258.832313][ T8398] F2FS-fs (loop0): invalid crc value [ 258.973635][ T8398] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.979334][ T8398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.103446][ T31] audit: type=1804 audit(1788995798.137:43): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.833" name="/newroot/148/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 259.237681][ T31] audit: type=1800 audit(1788995798.287:44): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.810" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 259.238150][ T8380] loop6: detected capacity change from 0 to 32768 [ 259.242192][ T8380] xfs: Deprecated parameter 'noattr2' [ 259.242229][ T8380] XFS: noattr2 mount option is deprecated. [ 259.242271][ T8380] xfs: Deprecated parameter 'noattr2' [ 259.242297][ T8380] XFS: noattr2 mount option is deprecated. [ 259.422653][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 259.431046][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.486403][ T8380] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.550530][ T5623] syz-executor: attempt to access beyond end of device [ 259.550530][ T5623] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.586723][ T5945] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 259.588105][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.613479][ T5945] usb 6-1: config 0 descriptor?? [ 259.621694][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 259.621744][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 259.621768][ T5623] Call Trace: [ 259.621781][ T5623] [ 259.621795][ T5623] dump_stack_lvl+0x100/0x190 [ 259.621857][ T5623] f2fs_stop_checkpoint+0x5e6/0xb30 [ 259.621899][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.621948][ T5623] ? errseq_set+0xe3/0x150 [ 259.621994][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.622049][ T5623] f2fs_write_end_bio+0xef9/0x12d0 [ 259.622100][ T5623] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 259.622144][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.622197][ T5623] ? find_held_lock+0x2b/0x80 [ 259.622249][ T5623] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 259.622309][ T5623] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 259.622365][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.622420][ T5623] f2fs_write_end_io+0xc8/0x240 [ 259.622468][ T5623] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 259.622516][ T5623] bio_endio+0x7ba/0x9c0 [ 259.622577][ T5623] submit_bio_noacct+0x22a/0x2130 [ 259.622638][ T5623] f2fs_submit_write_bio+0x133/0x330 [ 259.622681][ T5623] __submit_merged_bio+0x330/0x7b0 [ 259.622726][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.622781][ T5623] __submit_merged_write_cond+0x3fe/0x510 [ 259.622839][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 259.622897][ T5623] ? __pfx___might_resched+0x10/0x10 [ 259.622957][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623003][ T5623] ? folio_clear_dirty_for_io+0x178/0x960 [ 259.623061][ T5623] f2fs_write_cache_pages+0x20e9/0x2630 [ 259.623139][ T5623] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 259.623194][ T5623] ? __kasan_check_byte+0x13/0x50 [ 259.623231][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623279][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623326][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.623377][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623423][ T5623] ? __kasan_check_byte+0x13/0x50 [ 259.623459][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623511][ T5623] ? is_bpf_text_address+0x8a/0x1a0 [ 259.623551][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623597][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.623657][ T5623] ? kernel_text_address+0x8d/0x100 [ 259.623713][ T5623] ? lock_acquire+0x1d1/0x380 [ 259.623747][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623793][ T5623] ? __kernel_text_address+0xd/0x30 [ 259.623910][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.623956][ T5623] ? check_prev_add+0x354/0xe60 [ 259.624021][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.624067][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.624120][ T5623] f2fs_write_data_pages+0x799/0x16d0 [ 259.624188][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.624242][ T5623] ? lock_acquire+0x1d1/0x380 [ 259.624285][ T5623] ? do_writepages+0x4b5/0x600 [ 259.624334][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.624386][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.624445][ T5623] do_writepages+0x278/0x600 [ 259.624507][ T5623] ? __pfx_do_writepages+0x10/0x10 [ 259.624557][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 259.624603][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.624650][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 259.624708][ T5623] filemap_writeback+0x22d/0x2e0 [ 259.624766][ T5623] ? __pfx_filemap_writeback+0x10/0x10 [ 259.624873][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.624921][ T5623] ? find_held_lock+0x2b/0x80 [ 259.624971][ T5623] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 259.625026][ T5623] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 259.625078][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.625135][ T5623] f2fs_sync_dirty_inodes+0x452/0x960 [ 259.625204][ T5623] block_operations+0x2a6/0xfc0 [ 259.625268][ T5623] ? __pfx_block_operations+0x10/0x10 [ 259.625372][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.625422][ T5623] ? ktime_get+0x22c/0x320 [ 259.625459][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.625512][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.625566][ T5623] f2fs_write_checkpoint+0x58b/0x53e0 [ 259.625649][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 259.625718][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.625764][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.625810][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.625857][ T5623] ? kthread_stop+0x280/0x630 [ 259.625912][ T5623] kill_f2fs_super+0x3f1/0x4a0 [ 259.625968][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 259.626044][ T5623] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.626102][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.626150][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.626212][ T5623] deactivate_locked_super+0xbd/0x140 [ 259.626268][ T5623] deactivate_super+0xea/0x110 [ 259.626323][ T5623] cleanup_mnt+0x21f/0x450 [ 259.626388][ T5623] task_work_run+0x150/0x240 [ 259.626445][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 259.626513][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.626569][ T5623] exit_to_user_mode_loop+0x1d8/0x700 [ 259.626611][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.626657][ T5623] ? rcu_is_watching+0x13/0xc0 [ 259.626710][ T5623] do_syscall_64+0x661/0x790 [ 259.626776][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.626817][ T5623] RIP: 0033:0x7f243ab9f397 [ 259.626848][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 259.626888][ T5623] RSP: 002b:00007ffdff2b0698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.626926][ T5623] RAX: 0000000000000000 RBX: 00007f243ac3448b RCX: 00007f243ab9f397 [ 259.626952][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff2b0750 [ 259.626977][ T5623] RBP: 00007ffdff2b0750 R08: 00007ffdff2b1750 R09: 00000000ffffffff [ 259.627003][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdff2b17e0 [ 259.627028][ T5623] R13: 00007f243ac3448b R14: 000000000003f4af R15: 00007ffdff2b1820 [ 259.627080][ T5623] [ 259.650148][ T8380] XFS (loop6): Ending clean mount [ 259.704039][ T8426] loop2: detected capacity change from 0 to 128 [ 259.727773][ T5623] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 259.858324][ T8426] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.874430][ T8426] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.149298][ T8380] XFS (loop6): Quotacheck needed: Please wait. [ 260.461313][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.563571][ T5769] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.711003][ T8380] XFS (loop6): Quotacheck: Done. [ 260.756180][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 260.759739][ T5769] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 260.770104][ T5769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.770163][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.779657][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.779701][ T5769] usb 2-1: Product: syz [ 260.779728][ T5769] usb 2-1: Manufacturer: syz [ 260.779754][ T5769] usb 2-1: SerialNumber: syz [ 260.818161][ T5769] usb 2-1: config 0 descriptor?? [ 261.010350][ T5945] usb 6-1: Cannot set autoneg [ 261.010596][ T5945] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 261.049519][ T5945] usb 6-1: USB disconnect, device number 5 [ 261.168763][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 261.331888][ T7862] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 261.391325][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 261.545431][ T5769] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 261.788945][ T8438] loop2: detected capacity change from 0 to 512 [ 261.893784][ T8438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.893949][ T8438] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.107507][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.152599][ T5769] rc_core: IR keymap rc-imon-pad not found [ 262.152626][ T5769] Registered IR keymap rc-empty [ 262.152770][ T5769] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 262.152801][ T5769] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 262.181322][ T8438] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.842: mark_inode_dirty error [ 262.222454][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.230732][ T5769] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 262.234244][ T5769] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 262.260026][ T8446] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.265849][ T8446] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.842: mark_inode_dirty error [ 262.347809][ T5769] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:8> initialized [ 262.562037][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 262.565259][ T5945] usb 2-1: USB disconnect, device number 8 [ 262.578588][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.596821][ T8438] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.842: mark_inode_dirty error [ 262.599290][ T8438] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.599939][ T8438] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.842: mark_inode_dirty error [ 262.674369][ T8447] EXT4-fs warning (device loop2): ext4_es_cache_extent:1079: inode #2: comm syz.2.842: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 262.674369][ T8447] [ 262.686080][ T8447] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.842: corrupted inode contents [ 262.781697][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.843'. [ 262.964220][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.348692][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 263.645539][ T8453] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 263.646096][ T8453] bridge1: entered promiscuous mode [ 264.288650][ T8476] FAULT_INJECTION: forcing a failure. [ 264.288650][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 264.288703][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.6.851 Not tainted syzkaller #0 PREEMPT(full) [ 264.288749][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 264.288774][ T8476] Call Trace: [ 264.288786][ T8476] [ 264.288801][ T8476] dump_stack_lvl+0x100/0x190 [ 264.288859][ T8476] should_fail_ex.cold+0x5/0xa [ 264.288902][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.288964][ T8476] should_failslab+0xc2/0x120 [ 264.289003][ T8476] __kmalloc_node_noprof+0xff/0x880 [ 264.289065][ T8476] ? __pfx___up_read+0x10/0x10 [ 264.289107][ T8476] ? crypto_create_tfm_node+0x8d/0x3b0 [ 264.289177][ T8476] crypto_create_tfm_node+0x8d/0x3b0 [ 264.289238][ T8476] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 264.289297][ T8476] crypto_spawn_tfm2+0x62/0xc0 [ 264.289347][ T8476] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 264.289402][ T8476] crypto_sig_init_tfm+0xba/0xf0 [ 264.289443][ T8476] crypto_create_tfm_node+0x171/0x3b0 [ 264.289509][ T8476] crypto_alloc_tfm_node+0x102/0x260 [ 264.289579][ T8476] public_key_verify_signature+0x21b/0x910 [ 264.289630][ T8476] ? __pfx_public_key_verify_signature+0x10/0x10 [ 264.289694][ T8476] ? asymmetric_key_generate_id+0x7e/0x180 [ 264.289768][ T8476] x509_check_for_self_signed+0x325/0x510 [ 264.289821][ T8476] x509_cert_parse+0x60c/0x910 [ 264.289869][ T8476] x509_key_preparse+0x65/0x9c0 [ 264.289914][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.289977][ T8476] asymmetric_key_preparse+0xce/0x1d0 [ 264.290039][ T8476] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 264.290105][ T8476] __key_create_or_update+0x463/0xe30 [ 264.290175][ T8476] ? __pfx___key_create_or_update+0x10/0x10 [ 264.290236][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.290282][ T8476] ? lookup_user_key+0x3f3/0x1300 [ 264.290357][ T8476] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 264.290424][ T8476] key_create_or_update+0x42/0x60 [ 264.290492][ T8476] __do_sys_add_key+0x2e8/0x460 [ 264.290535][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.290585][ T8476] ? __pfx___do_sys_add_key+0x10/0x10 [ 264.290638][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.290693][ T8476] do_syscall_64+0x123/0x790 [ 264.290757][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.290799][ T8476] RIP: 0033:0x7f6f5a19e159 [ 264.290828][ T8476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.290867][ T8476] RSP: 002b:00007f6f5b08f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 264.290905][ T8476] RAX: ffffffffffffffda RBX: 00007f6f5a425fa0 RCX: 00007f6f5a19e159 [ 264.290932][ T8476] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 264.290963][ T8476] RBP: 00007f6f5a23503b R08: ffffffffffffffff R09: 0000000000000000 [ 264.290989][ T8476] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 264.291014][ T8476] R13: 00007f6f5a426038 R14: 00007f6f5a425fa0 R15: 00007ffdc2e5d248 [ 264.291066][ T8476] [ 264.321429][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.852'. [ 264.321500][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 264.940053][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.852'. [ 264.940089][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 264.940625][ T6012] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.942711][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.086063][ T8491] FAULT_INJECTION: forcing a failure. [ 265.086063][ T8491] name failslab, interval 1, probability 0, space 0, times 0 [ 265.086149][ T8491] CPU: 0 UID: 0 PID: 8491 Comm: syz.1.854 Not tainted syzkaller #0 PREEMPT(full) [ 265.086197][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 265.086221][ T8491] Call Trace: [ 265.086234][ T8491] [ 265.086248][ T8491] dump_stack_lvl+0x100/0x190 [ 265.086310][ T8491] should_fail_ex.cold+0x5/0xa [ 265.086353][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.086407][ T8491] should_failslab+0xc2/0x120 [ 265.086486][ T8491] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 265.086548][ T8491] ? jfs_alloc_inode+0x25/0x60 [ 265.086605][ T8491] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 265.086663][ T8491] jfs_alloc_inode+0x25/0x60 [ 265.086714][ T8491] alloc_inode+0x68/0x250 [ 265.086768][ T8491] new_inode+0x22/0x1c0 [ 265.086824][ T8491] jfs_fill_super+0x6c2/0xf70 [ 265.086882][ T8491] get_tree_bdev_flags+0x38c/0x620 [ 265.086937][ T8491] ? __pfx_jfs_fill_super+0x10/0x10 [ 265.086992][ T8491] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 265.087049][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087106][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087153][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087200][ T8491] ? security_capable+0x80/0x260 [ 265.087253][ T8491] vfs_get_tree+0x92/0x320 [ 265.087296][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087347][ T8491] path_mount+0x7d0/0x24c0 [ 265.087402][ T8491] ? __pfx_path_mount+0x10/0x10 [ 265.087451][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087499][ T8491] ? lockdep_hardirqs_on+0x7d/0x110 [ 265.087567][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087614][ T8491] ? kmem_cache_free+0x127/0x6c0 [ 265.087679][ T8491] ? __x64_sys_mount+0x293/0x310 [ 265.087724][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087772][ T8491] __x64_sys_mount+0x293/0x310 [ 265.087819][ T8491] ? __pfx___x64_sys_mount+0x10/0x10 [ 265.087872][ T8491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.087928][ T8491] do_syscall_64+0x123/0x790 [ 265.087995][ T8491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.088035][ T8491] RIP: 0033:0x7fadbc19e159 [ 265.088067][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.088106][ T8491] RSP: 002b:00007fadbd00d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.088145][ T8491] RAX: ffffffffffffffda RBX: 00007fadbc425fa0 RCX: 00007fadbc19e159 [ 265.088172][ T8491] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000 [ 265.088198][ T8491] RBP: 00007fadbc23503b R08: 0000000000000000 R09: 0000000000000000 [ 265.088223][ T8491] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000 [ 265.088248][ T8491] R13: 00007fadbc426038 R14: 00007fadbc425fa0 R15: 00007ffd08be6ee8 [ 265.088301][ T8491] [ 265.246789][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.254629][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.477775][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.477872][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.478041][ T8261] bridge_slave_0: entered allmulticast mode [ 265.489849][ T5724] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 265.493566][ T8261] bridge_slave_0: entered promiscuous mode [ 265.496554][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.496675][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.496842][ T8261] bridge_slave_1: entered allmulticast mode [ 265.499086][ T8261] bridge_slave_1: entered promiscuous mode [ 265.692985][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 265.693866][ T5724] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 265.693923][ T5724] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 265.696356][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.697612][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.698866][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.702129][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.786265][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.790381][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.791678][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.827061][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.828444][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 265.828490][ T5724] usb 7-1: SerialNumber: syz [ 265.832099][ T5724] usb 7-1: config 0 descriptor?? [ 265.869768][ T5724] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 266.012118][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.040041][ T1339] IPVS: stop unused estimator thread 0... [ 266.076658][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.196749][ T5724] bcm5974 7-1:0.0: could not read from device [ 266.298408][ T4962] bcm5974 7-1:0.0: could not read from device [ 266.366046][ T8261] team0: Port device team_slave_0 added [ 266.369378][ T8261] team0: Port device team_slave_1 added [ 266.386107][ T5724] input: failed to attach handler mousedev to device input18, error: -5 [ 266.402358][ T5724] usb 7-1: USB disconnect, device number 2 [ 266.457044][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.457073][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.457122][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.459913][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.459938][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.459986][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.500720][ T4962] bcm5974 7-1:0.0: could not read from device [ 267.014658][ T8261] hsr_slave_0: entered promiscuous mode [ 267.027082][ T8261] hsr_slave_1: entered promiscuous mode [ 267.028002][ T8261] debugfs: 'hsr0' already exists in 'hsr' [ 267.028032][ T8261] Cannot create hsr debugfs directory [ 267.547688][ T8533] loop1: detected capacity change from 0 to 128 [ 267.634889][ T8533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 267.635013][ T8533] System zones: 1-3, 19-19, 35-36 [ 267.640337][ T8533] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 267.641223][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 267.641697][ T8533] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.453134][ T5625] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.666023][ T8544] loop0: detected capacity change from 0 to 512 [ 268.718064][ T8544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.870: bg 0: block 5: invalid block bitmap [ 268.718122][ T8544] loop0: lost filesystem error report for type 5 error -117 [ 268.722578][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 268.722622][ C1] EXT4-fs (loop0): initial error at time 1788995807: ext4_validate_block_bitmap:435 [ 268.722662][ C1] EXT4-fs (loop0): last error at time 1788995807: ext4_validate_block_bitmap:435 [ 268.800829][ T8544] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 268.800870][ T8544] loop0: lost filesystem error report for type 5 error -117 [ 268.802478][ T8544] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.870: invalid indirect mapped block 3 (level 2) [ 268.846155][ T8544] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.849826][ T8544] EXT4-fs (loop0): 1 orphan inode deleted [ 268.849865][ T8544] EXT4-fs (loop0): 1 truncate cleaned up [ 268.877181][ T8544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.078799][ T8551] FAULT_INJECTION: forcing a failure. [ 269.078799][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 269.078856][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(full) [ 269.078903][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 269.078928][ T8551] Call Trace: [ 269.078940][ T8551] [ 269.078956][ T8551] dump_stack_lvl+0x100/0x190 [ 269.079018][ T8551] should_fail_ex.cold+0x5/0xa [ 269.079062][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079117][ T8551] should_failslab+0xc2/0x120 [ 269.079158][ T8551] kmem_cache_alloc_noprof+0x92/0x6a0 [ 269.079219][ T8551] ? __kernfs_new_node+0xd2/0xa10 [ 269.079277][ T8551] __kernfs_new_node+0xd2/0xa10 [ 269.079333][ T8551] ? __pfx___kernfs_new_node+0x10/0x10 [ 269.079386][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079433][ T8551] ? lock_acquire+0x1d1/0x380 [ 269.079474][ T8551] ? kernfs_root+0x23/0x2a0 [ 269.079515][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079563][ T8551] ? find_held_lock+0x2b/0x80 [ 269.079618][ T8551] ? kernfs_root+0xee/0x2a0 [ 269.079659][ T8551] ? kernfs_root+0xee/0x2a0 [ 269.079698][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079758][ T8551] kernfs_new_node+0x117/0x150 [ 269.079816][ T8551] __kernfs_create_file+0x53/0x350 [ 269.079883][ T8551] sysfs_add_file_mode_ns+0x207/0x3c0 [ 269.079963][ T8551] sysfs_merge_group+0x194/0x340 [ 269.080010][ T8551] ? __pfx_sysfs_merge_group+0x10/0x10 [ 269.080053][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080101][ T8551] ? bus_add_device+0x2e2/0x6c0 [ 269.080145][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080193][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080243][ T8551] ? __pfx_bus_add_device+0x10/0x10 [ 269.080284][ T8551] ? __pfx_dev_add_physical_location+0x10/0x10 [ 269.080345][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080400][ T8551] dpm_sysfs_add+0x237/0x280 [ 269.080463][ T8551] device_add+0x9f4/0x1970 [ 269.080527][ T8551] ? __pfx_device_add+0x10/0x10 [ 269.080585][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080639][ T8551] ? kfree+0x1e5/0x6d0 [ 269.080700][ T8551] device_create_groups_vargs+0x1f8/0x270 [ 269.080769][ T8551] device_create+0xed/0x130 [ 269.080832][ T8551] ? __pfx_device_create+0x10/0x10 [ 269.080895][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080942][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080990][ T8551] ? con_is_visible+0x65/0x150 [ 269.081028][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.081076][ T8551] ? csi_J+0x57e/0xad0 [ 269.081133][ T8551] vcs_make_sysfs+0x32/0x80 [ 269.081174][ T8551] vc_allocate+0x539/0x880 [ 269.081224][ T8551] ? __pfx_vc_allocate+0x10/0x10 [ 269.081289][ T8551] con_install+0xa1/0x620 [ 269.081343][ T8551] ? __pfx_con_install+0x10/0x10 [ 269.081403][ T8551] ? __pfx_con_install+0x10/0x10 [ 269.081454][ T8551] tty_init_dev.part.0+0x9e/0x470 [ 269.081513][ T8551] tty_open+0x953/0xe20 [ 269.081569][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.081627][ T8551] ? __pfx_tty_open+0x10/0x10 [ 269.081677][ T8551] ? chrdev_open+0x589/0x6a0 [ 269.081737][ T8551] ? chrdev_open+0x589/0x6a0 [ 269.081795][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.081851][ T8551] ? __pfx_tty_open+0x10/0x10 [ 269.081904][ T8551] chrdev_open+0x234/0x6a0 [ 269.081969][ T8551] ? __pfx_chrdev_open+0x10/0x10 [ 269.082034][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.082082][ T8551] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 269.082143][ T8551] do_dentry_open+0x6ab/0x14d0 [ 269.082197][ T8551] ? __pfx_chrdev_open+0x10/0x10 [ 269.082264][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.082317][ T8551] vfs_open+0x82/0x3f0 [ 269.082354][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.082409][ T8551] path_openat+0x19fa/0x2440 [ 269.082456][ T8551] ? __pfx_path_openat+0x10/0x10 [ 269.082508][ T8551] do_file_open+0x20e/0x430 [ 269.082548][ T8551] ? __pfx_do_file_open+0x10/0x10 [ 269.082626][ T8551] ? _raw_spin_unlock+0x28/0x50 [ 269.082679][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.082726][ T8551] ? alloc_fd+0x471/0x7a0 [ 269.082779][ T8551] do_sys_openat2+0x10f/0x1e0 [ 269.082821][ T8551] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.082867][ T8551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.082938][ T8551] __x64_sys_openat+0x12d/0x210 [ 269.082980][ T8551] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.083031][ T8551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.083082][ T8551] do_syscall_64+0x123/0x790 [ 269.083146][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.083184][ T8551] RIP: 0033:0x7fadbc15e98e [ 269.083216][ T8551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.083251][ T8551] RSP: 002b:00007fadbd00cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.083288][ T8551] RAX: ffffffffffffffda RBX: 00007fadbd00d6c0 RCX: 00007fadbc15e98e [ 269.083315][ T8551] RDX: 0000000000000002 RSI: 00007fadbd00cc00 RDI: ffffffffffffff9c [ 269.083339][ T8551] RBP: 00007fadbc23503b R08: 0000000000000000 R09: 0000000000000000 [ 269.083363][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.083388][ T8551] R13: 00007fadbc426038 R14: 00007fadbc425fa0 R15: 00007ffd08be6ee8 [ 269.083438][ T8551] [ 269.810203][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.019260][ T8556] bridge1: left promiscuous mode [ 271.222682][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.392239][ T5724] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 271.407597][ T5724] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 271.407675][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 271.407722][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.407768][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 271.407814][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 271.407859][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 271.407905][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 271.407958][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 271.408004][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 271.408067][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 271.408112][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 271.408157][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 271.408203][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 271.408252][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 271.408302][ T5724] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 271.580023][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.580069][ T5724] usb 2-1: Product: syz [ 271.580097][ T5724] usb 2-1: Manufacturer: syz [ 271.580124][ T5724] usb 2-1: SerialNumber: syz [ 271.610447][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.610644][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.610821][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611006][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611185][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611369][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611550][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611787][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.611967][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.612174][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.612349][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.622012][ T8592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.702884][ T5724] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 271.713226][ T5724] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 271.747037][ T5724] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 271.765279][ T5724] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 271.769778][ T5724] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 271.941658][ T8572] loop0: detected capacity change from 0 to 32768 [ 272.024777][ T8572] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 272.165155][ T8572] XFS (loop0): Ending clean mount [ 272.529949][ T8611] loop5: detected capacity change from 0 to 40427 [ 272.537860][ T8611] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 272.537904][ T8611] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 272.559233][ T8572] XFS (loop0): Quotacheck needed: Please wait. [ 272.644299][ T8611] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 272.651911][ T8611] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 272.651954][ T8611] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 272.861169][ T5769] usb 2-1: USB disconnect, device number 9 [ 273.098957][ T5769] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 273.132244][ T5769] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 273.159337][ T5769] keyspan 2-1:1.0: device disconnected [ 273.210035][ T8572] XFS (loop0): Quotacheck: Done. [ 273.456018][ T5623] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 273.582437][ T8261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.669320][ T8261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.684309][ T8261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.738235][ T8261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.739334][ T8261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.765026][ T8261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.767900][ T8261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.837655][ T8261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.477924][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.624105][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.889'. [ 274.624142][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 274.639258][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.727669][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.889'. [ 274.727705][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 274.795623][ T6013] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.797757][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.797882][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.842779][ T723] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.843036][ T723] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.843243][ T723] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.941958][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.942089][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.004268][ T7761] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 275.227999][ T8649] device-mapper: ioctl: device name cannot contain '/' [ 276.112883][ T5769] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 276.276568][ T8668] loop2: detected capacity change from 0 to 4096 [ 276.283594][ T5769] usb 6-1: Using ep0 maxpacket: 32 [ 276.284559][ T5769] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.288269][ T5769] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.288312][ T5769] usb 6-1: config 0 has no interface number 0 [ 276.288371][ T5769] usb 6-1: config 0 interface 184 has no altsetting 0 [ 276.308362][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.308407][ T5769] usb 6-1: Product: syz [ 276.308434][ T5769] usb 6-1: Manufacturer: syz [ 276.308461][ T5769] usb 6-1: SerialNumber: syz [ 276.332432][ T5769] usb 6-1: config 0 descriptor?? [ 276.336212][ T8668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.336243][ T8668] EXT4-fs (loop2): Test dummy encryption mode enabled [ 276.390668][ T8668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 276.390825][ T8668] System zones: 0-5 [ 276.450638][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.352335][ T8685] fscrypt: AES-256-XTS using blk-crypto-fallback [ 277.475338][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.496916][ T5738] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 277.654372][ T5738] usb 2-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 277.655861][ T5738] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.655945][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.665386][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 277.665438][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 277.666001][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 277.666044][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 277.666080][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 277.666114][ T5769] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 277.666402][ T5769] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 277.667873][ T5738] usb 2-1: config 0 descriptor?? [ 277.728841][ T5769] usb 6-1: USB disconnect, device number 6 [ 277.828592][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.252024][ T8261] veth0_vlan: entered promiscuous mode [ 278.274699][ T5738] input: HID 046d:c09b as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C09B.0005/input/input19 [ 278.367312][ T8261] veth1_vlan: entered promiscuous mode [ 278.642143][ T8261] veth0_macvtap: entered promiscuous mode [ 278.646430][ T5738] logitech-hidpp-device 0003:046D:C09B.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.1-1/input0 [ 278.694366][ T8261] veth1_macvtap: entered promiscuous mode [ 278.869289][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.983487][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.025800][ T7761] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 279.025890][ T7761] Bluetooth: hci4: Injecting HCI hardware error event [ 279.028642][ T7761] Bluetooth: hci4: hardware error 0x00 [ 279.053471][ T5738] usb 2-1: USB disconnect, device number 10 [ 279.084163][ T6006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.084239][ T6006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.084302][ T6006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.084362][ T6006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.154172][ T8724] fido_id[8724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 279.233183][ T8730] loop5: detected capacity change from 0 to 256 [ 279.364885][ T8730] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbecade97, utbl_chksum : 0xe619d30d) [ 279.443066][ T31] audit: type=1800 audit(1788995818.497:45): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=1048638 res=0 errno=0 [ 279.811038][ T6004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.811076][ T6004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.965512][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.965550][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.213750][ T8734] loop2: detected capacity change from 0 to 40427 [ 280.215774][ T8734] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 280.215813][ T8734] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 280.353829][ T8734] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 280.361850][ T8734] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 280.361889][ T8734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 281.008398][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 281.133859][ T8751] ptrace attach of ""[8753] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8751] [ 281.187285][ T7761] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 281.401316][ T8764] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 282.353291][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 282.782841][ T3210] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 282.858046][ T7761] Bluetooth: hci5: command 0x0406 tx timeout [ 282.938128][ T3210] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 282.959063][ T3210] usb 4-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 282.959135][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 282.959180][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 282.959225][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 282.959269][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 282.959314][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 282.959359][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 282.959403][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 282.959476][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 282.959522][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 282.959568][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 282.959612][ T3210] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 282.959658][ T3210] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 282.959706][ T3210] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 282.959755][ T3210] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 283.139301][ T3210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.139347][ T3210] usb 4-1: Product: syz [ 283.139374][ T3210] usb 4-1: Manufacturer: syz [ 283.139401][ T3210] usb 4-1: SerialNumber: syz [ 283.171462][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.171636][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.171786][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.171931][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.172085][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.172228][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.172370][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.191936][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.192150][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.192299][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.192441][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.207737][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.262817][ T3210] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 283.264492][ T3210] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 283.291884][ T3210] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 283.302769][ T3210] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 283.304896][ T3210] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 284.118426][ T8809] loop6: detected capacity change from 0 to 128 [ 284.149085][ T8809] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 284.176439][ T8802] loop1: detected capacity change from 0 to 32768 [ 284.225515][ T8802] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 284.225549][ T8802] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 284.309297][ T8802] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 1ms [ 284.314986][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 284.315012][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 284.349758][ T5945] usb 4-1: USB disconnect, device number 4 [ 284.498821][ T5945] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 284.530172][ T5945] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 284.532225][ T5945] keyspan 4-1:1.0: device disconnected [ 284.890203][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 575ms [ 284.890414][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 284.890464][ T8802] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 286.117578][ T8827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.612964][ T5738] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 286.773894][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 286.776747][ T5738] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.780485][ T5738] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.780530][ T5738] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.780567][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.780636][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.780676][ T5738] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.780719][ T5738] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.780783][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.860820][ T5738] usb 4-1: config 0 descriptor?? [ 287.318435][ T5738] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.598646][ T3210] usb 4-1: USB disconnect, device number 5 [ 287.639686][ T3210] usblp0: removed [ 287.686951][ T8861] input: syz1 as /devices/virtual/input/input20 [ 288.047723][ T8873] loop2: detected capacity change from 0 to 512 [ 288.065639][ T8873] EXT4-fs: Ignoring removed nobh option [ 288.082961][ T8873] EXT4-fs (loop2): Test dummy encryption mode enabled [ 288.082994][ T8873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.131863][ T8873] EXT4-fs (loop2): 1 truncate cleaned up [ 288.177047][ T8873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.871742][ T8883] dvmrp0: entered allmulticast mode [ 288.985707][ T8889] loop1: detected capacity change from 0 to 512 [ 288.990863][ T8886] dvmrp1: entered allmulticast mode [ 288.991594][ T8883] dvmrp0: left allmulticast mode [ 288.991718][ T8883] dvmrp1: left allmulticast mode [ 289.201594][ T8891] FAULT_INJECTION: forcing a failure. [ 289.201594][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 289.201653][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.0.953 Not tainted syzkaller #0 PREEMPT(full) [ 289.201701][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 289.201727][ T8891] Call Trace: [ 289.201740][ T8891] [ 289.201755][ T8891] dump_stack_lvl+0x100/0x190 [ 289.201818][ T8891] should_fail_ex.cold+0x5/0xa [ 289.201864][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.201921][ T8891] should_failslab+0xc2/0x120 [ 289.201961][ T8891] __kmalloc_cache_noprof+0x91/0x6d0 [ 289.202014][ T8891] ? assoc_array_insert+0x262/0x32c0 [ 289.202076][ T8891] assoc_array_insert+0x262/0x32c0 [ 289.202125][ T8891] ? __pfx_stack_trace_save+0x10/0x10 [ 289.202230][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.202283][ T8891] ? __key_link_lock+0x4a/0xb0 [ 289.202326][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.202380][ T8891] ? __pfx_assoc_array_insert+0x10/0x10 [ 289.202443][ T8891] ? down_write+0x146/0x1f0 [ 289.202488][ T8891] ? __pfx_down_write+0x10/0x10 [ 289.202526][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.202583][ T8891] __key_link_begin+0xf5/0x260 [ 289.202629][ T8891] __key_create_or_update+0x4ee/0xe30 [ 289.202703][ T8891] ? __pfx___key_create_or_update+0x10/0x10 [ 289.202770][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.202819][ T8891] ? lookup_user_key+0x3f3/0x1300 [ 289.202887][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.202948][ T8891] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 289.203017][ T8891] key_create_or_update+0x42/0x60 [ 289.203088][ T8891] __do_sys_add_key+0x2e8/0x460 [ 289.203137][ T8891] ? __pfx___do_sys_add_key+0x10/0x10 [ 289.203192][ T8891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.203250][ T8891] do_syscall_64+0x123/0x790 [ 289.203319][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.203362][ T8891] RIP: 0033:0x7f243ab9e159 [ 289.203393][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.203434][ T8891] RSP: 002b:00007f243bad1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 289.203478][ T8891] RAX: ffffffffffffffda RBX: 00007f243ae25fa0 RCX: 00007f243ab9e159 [ 289.203506][ T8891] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 289.203533][ T8891] RBP: 00007f243ac3503b R08: fffffffffffffffe R09: 0000000000000000 [ 289.203560][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.203585][ T8891] R13: 00007f243ae26038 R14: 00007f243ae25fa0 R15: 00007ffdff2b1428 [ 289.203639][ T8891] [ 289.374773][ T8889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.374946][ T8889] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.530140][ T8889] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 289.548035][ T8889] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.952: mark_inode_dirty error [ 289.570365][ T8889] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 289.657292][ T8889] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 289.661535][ T8889] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.952: mark_inode_dirty error [ 289.680757][ T8889] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 289.691294][ T8889] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.952: mark_inode_dirty error [ 289.696980][ T8889] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 289.700877][ T8889] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.952: mark_inode_dirty error [ 289.931889][ T8899] EXT4-fs warning (device loop1): ext4_es_cache_extent:1079: inode #2: comm syz.1.952: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 289.931889][ T8899] [ 289.963721][ T8899] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.952: corrupted inode contents [ 290.328249][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.509829][ T8909] (syz.5.958,8909,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 290.639183][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.322849][ T5945] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 291.485653][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 291.487074][ T5945] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 291.490151][ T5945] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 291.490208][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.490257][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.542978][ T5945] usb 6-1: config 0 descriptor?? [ 291.655961][ T8933] binder: 8932:8933 ioctl c0306201 200000000080 returned -14 [ 291.861319][ T8937] capability: warning: `syz.3.971' uses deprecated v2 capabilities in a way that may be insecure [ 292.015267][ T5945] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 292.392802][ T5745] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 292.418856][ T5945] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -71 [ 292.502215][ T5945] usb 6-1: USB disconnect, device number 7 [ 292.543576][ T5745] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 292.545306][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.545396][ T5745] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 292.591733][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.591778][ T5745] usb 1-1: Product: syz [ 292.591802][ T5745] usb 1-1: Manufacturer: syz [ 292.591828][ T5745] usb 1-1: SerialNumber: syz [ 292.920981][ T5745] snd-usb-caiaq 1-1:1.0: invalid EPs [ 292.921017][ T5745] usb 1-1: unable to init card! (ret=-22) [ 292.948576][ T5745] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 293.049357][ T8956] loop5: detected capacity change from 0 to 7 [ 293.056558][ T8956] Dev loop5: unable to read RDB block 7 [ 293.056610][ T8956] loop5: unable to read partition table [ 293.056857][ T8956] loop5: partition table beyond EOD, truncated [ 293.056902][ T8956] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.154391][ T5945] usb 1-1: USB disconnect, device number 9 [ 293.235505][ T8962] kAFS: Invalid Command on /proc/fs/afs/cells file [ 293.535319][ T8969] input: syz0 as /devices/virtual/input/input21 [ 293.646893][ T8971] FAULT_INJECTION: forcing a failure. [ 293.646893][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 293.646953][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.6.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.647013][ T8971] Tainted: [L]=SOFTLOCKUP [ 293.647029][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 293.647054][ T8971] Call Trace: [ 293.647067][ T8971] [ 293.647083][ T8971] dump_stack_lvl+0x100/0x190 [ 293.647147][ T8971] should_fail_ex.cold+0x5/0xa [ 293.647199][ T8971] should_failslab+0xc2/0x120 [ 293.647243][ T8971] __kmalloc_noprof+0xfc/0x840 [ 293.647306][ T8971] ? __memcg_list_lru_alloc+0x418/0x680 [ 293.647364][ T8971] __memcg_list_lru_alloc+0x418/0x680 [ 293.647410][ T8971] ? xa_load+0x149/0x2c0 [ 293.647450][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.647510][ T8971] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 293.647572][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.647632][ T8971] memcg_list_lru_alloc+0xd3/0x100 [ 293.647688][ T8971] ? zswap_store+0x60a/0x2e70 [ 293.647737][ T8971] zswap_store+0x696/0x2e70 [ 293.647801][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.647848][ T8971] ? lock_acquire+0x1d1/0x380 [ 293.647887][ T8971] ? __pfx_zswap_store+0x10/0x10 [ 293.647936][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.647984][ T8971] ? lock_acquire+0x1d1/0x380 [ 293.648021][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.648069][ T8971] ? do_raw_spin_lock+0x128/0x260 [ 293.648119][ T8971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.648165][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.648213][ T8971] ? find_held_lock+0x2b/0x80 [ 293.648264][ T8971] ? swap_writeout+0xdd8/0x1b20 [ 293.648312][ T8971] ? swap_writeout+0xdd8/0x1b20 [ 293.648358][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.648417][ T8971] swap_writeout+0xde0/0x1b20 [ 293.648482][ T8971] shrink_folio_list+0x4ffb/0x5e40 [ 293.648572][ T8971] ? __pfx_shrink_folio_list+0x10/0x10 [ 293.648715][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.648762][ T8971] ? __lock_acquire+0x5c0/0x1f40 [ 293.648798][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.648845][ T8971] ? __css_rstat_updated+0x1ce/0x590 [ 293.648893][ T8971] ? __pfx___css_rstat_updated+0x10/0x10 [ 293.648944][ T8971] reclaim_folio_list+0xe9/0x5e0 [ 293.649011][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649064][ T8971] ? __pfx_reclaim_folio_list+0x10/0x10 [ 293.649128][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649176][ T8971] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 293.649258][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649305][ T8971] ? lru_gen_update_size+0x431/0xe20 [ 293.649378][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649425][ T8971] ? lru_gen_del_folio+0x382/0x5f0 [ 293.649493][ T8971] reclaim_pages+0x428/0x5e0 [ 293.649539][ T8971] ? __pfx_reclaim_pages+0x10/0x10 [ 293.649577][ T8971] ? find_held_lock+0x2b/0x80 [ 293.649630][ T8971] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 293.649680][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649737][ T8971] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 293.649801][ T8971] ? is_bpf_text_address+0x94/0x1a0 [ 293.649845][ T8971] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 293.649891][ T8971] ? __kernel_text_address+0xd/0x30 [ 293.649949][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.649996][ T8971] ? unwind_get_return_address+0x59/0xa0 [ 293.650054][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.650102][ T8971] ? __lock_acquire+0x5c0/0x1f40 [ 293.650145][ T8971] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 293.650194][ T8971] walk_pgd_range+0xbef/0x1e00 [ 293.650260][ T8971] ? register_lock_class+0x3f/0x7b0 [ 293.650318][ T8971] ? __pfx_walk_pgd_range+0x10/0x10 [ 293.650392][ T8971] __walk_page_range+0x171/0x850 [ 293.650453][ T8971] ? __lock_acquire+0x5c0/0x1f40 [ 293.650494][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.650544][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.650599][ T8971] walk_page_range_vma_unsafe+0x209/0x8f0 [ 293.650670][ T8971] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 293.650729][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.650783][ T8971] ? find_held_lock+0x2b/0x80 [ 293.650834][ T8971] ? mlock_drain_local+0x254/0x4e0 [ 293.650884][ T8971] ? mlock_drain_local+0x254/0x4e0 [ 293.650932][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.650989][ T8971] walk_page_range_vma+0x63/0x90 [ 293.651051][ T8971] madvise_pageout+0x29e/0x5b0 [ 293.651089][ T8971] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 293.651149][ T8971] ? __pfx_madvise_pageout+0x10/0x10 [ 293.651225][ T8971] madvise_vma_behavior+0x48b/0x2350 [ 293.651272][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.651319][ T8971] ? mas_prev+0xa4/0x100 [ 293.651364][ T8971] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 293.651411][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.651459][ T8971] ? mas_walk+0x260/0x310 [ 293.651519][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.651567][ T8971] ? find_vma_prev+0xd8/0x150 [ 293.651630][ T8971] ? __pfx_find_vma_prev+0x10/0x10 [ 293.651698][ T8971] ? lock_acquire+0x1d1/0x380 [ 293.651759][ T8971] madvise_walk_vmas+0x30e/0xc50 [ 293.651808][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.651858][ T8971] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 293.651905][ T8971] ? __pfx_futex_wake_mark+0x10/0x10 [ 293.651974][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652025][ T8971] ? lock_acquire+0x1d1/0x380 [ 293.652068][ T8971] madvise_do_behavior+0x1ea/0x510 [ 293.652117][ T8971] ? __pfx_madvise_do_behavior+0x10/0x10 [ 293.652163][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652211][ T8971] ? down_read+0x13b/0x4c0 [ 293.652265][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652320][ T8971] do_madvise+0x238/0x290 [ 293.652362][ T8971] ? __pfx_do_madvise+0x10/0x10 [ 293.652403][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652451][ T8971] ? do_futex+0x190/0x440 [ 293.652508][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652555][ T8971] ? find_held_lock+0x2b/0x80 [ 293.652603][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652712][ T8971] __x64_sys_madvise+0xa9/0x110 [ 293.652755][ T8971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.652803][ T8971] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.652862][ T8971] do_syscall_64+0x123/0x790 [ 293.652929][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.652970][ T8971] RIP: 0033:0x7f6f5a19e159 [ 293.653000][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.653039][ T8971] RSP: 002b:00007f6f5b08f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 293.653077][ T8971] RAX: ffffffffffffffda RBX: 00007f6f5a425fa0 RCX: 00007f6f5a19e159 [ 293.653104][ T8971] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 293.653129][ T8971] RBP: 00007f6f5a23503b R08: 0000000000000000 R09: 0000000000000000 [ 293.653154][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.653179][ T8971] R13: 00007f6f5a426038 R14: 00007f6f5a425fa0 R15: 00007ffdc2e5d248 [ 293.653232][ T8971] [ 294.437584][ T8980] loop2: detected capacity change from 0 to 128 [ 294.497683][ T8980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.501965][ T8980] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.091747][ T8996] loop5: detected capacity change from 0 to 1024 [ 295.191701][ T8996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.290653][ T8996] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 295.403003][ T8996] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 295.403064][ T8996] EXT4-fs (loop5): This should not happen!! Data will be lost [ 295.403064][ T8996] [ 295.403094][ T8996] EXT4-fs (loop5): Total free blocks count 0 [ 295.403120][ T8996] EXT4-fs (loop5): Free/Dirty block details [ 295.403171][ T8996] EXT4-fs (loop5): free_blocks=68451041280 [ 295.403217][ T8996] EXT4-fs (loop5): dirty_blocks=16 [ 295.403258][ T8996] EXT4-fs (loop5): Block reservation details [ 295.403282][ T8996] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 295.668282][ T8996] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 296.225718][ T9019] loop1: detected capacity change from 0 to 16 [ 296.243055][ T9019] erofs (device loop1): invalid lz4 cfgs, size=6 [ 296.613081][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 296.769000][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 296.795785][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.795832][ T9] usb 7-1: Product: syz [ 296.795858][ T9] usb 7-1: Manufacturer: syz [ 296.795886][ T9] usb 7-1: SerialNumber: syz [ 296.829295][ T9] usb 7-1: config 0 descriptor?? [ 297.300310][ T31] audit: type=1800 audit(1788995836.347:46): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.988" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 297.327052][ T9] usb 7-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 297.363796][ T31] audit: type=1326 audit(1788995836.417:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.0.1008" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243ab9e159 code=0x0 [ 297.579841][ T9] usb 7-1: Read permanent extended address 00:00:00:00:00:00:00:fa from device [ 297.579886][ T9] usb 7-1: atusb_probe: initialization failed, error = -524 [ 297.580477][ T9] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 297.834888][ T9] usb 7-1: USB disconnect, device number 3 [ 298.020968][ T9047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 298.317255][ T9049] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 298.684428][ T9043] loop5: detected capacity change from 0 to 131072 [ 298.687635][ T9043] F2FS-fs (loop5): invalid crc value [ 298.795505][ T9043] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.819347][ T9043] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 299.006366][ T9058] loop3: detected capacity change from 0 to 1024 [ 299.017496][ T9058] ext4: Unknown parameter 'ba' [ 299.126404][ T3210] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 299.274005][ T3210] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 299.279477][ T3210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.279533][ T3210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.279592][ T3210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.293106][ T3210] usb 2-1: config 0 descriptor?? [ 299.591525][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.797375][ T3210] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 299.797423][ T3210] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 299.797490][ T3210] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 299.797527][ T3210] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 299.797563][ T3210] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 299.896924][ T3210] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 300.032097][ T3210] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 9: -32 [ 300.032145][ T3210] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -32 [ 300.032213][ T3210] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 300.032242][ T3210] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 300.109657][ T3210] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -32 [ 300.259129][ T3210] usb 2-1: USB disconnect, device number 11 [ 300.456532][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 300.619838][ T9079] loop0: detected capacity change from 0 to 4096 [ 300.648186][ T9079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.648221][ T9079] EXT4-fs (loop0): Test dummy encryption mode enabled [ 300.670002][ T9079] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 300.670152][ T9079] System zones: 0-5 [ 300.728057][ T9079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.632007][ T9099] loop6: detected capacity change from 0 to 256 [ 301.684518][ T9079] overlayfs: failed index dir cleanup (-512) [ 301.684546][ T9079] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 301.849925][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.896419][ T9099] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 303.583678][ T9123] input: syz0 as /devices/virtual/input/input22 [ 303.913215][ T9104] loop3: detected capacity change from 0 to 32768 [ 303.939518][ T9104] xfs: Deprecated parameter 'noattr2' [ 303.939553][ T9104] XFS: noattr2 mount option is deprecated. [ 303.955651][ T9104] xfs: Deprecated parameter 'noattr2' [ 303.956156][ T9104] XFS: noattr2 mount option is deprecated. [ 304.049483][ T9104] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.310608][ T9104] XFS (loop3): Ending clean mount [ 304.430035][ T9104] XFS (loop3): Quotacheck needed: Please wait. [ 304.850948][ T9104] XFS (loop3): Quotacheck: Done. [ 305.117421][ T9163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.208288][ T8261] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.402762][ T9168] netlink: 'syz.6.1047': attribute type 1 has an invalid length. [ 305.685958][ T9177] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 305.704397][ T9173] loop5: detected capacity change from 0 to 7 [ 305.719554][ T9173] Dev loop5: unable to read RDB block 7 [ 305.719605][ T9173] loop5: unable to read partition table [ 305.719846][ T9173] loop5: partition table beyond EOD, truncated [ 305.719874][ T9173] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.187662][ T9168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.263206][ T9169] bond1: entered promiscuous mode [ 306.263243][ T9169] bond1: entered allmulticast mode [ 306.269491][ T9186] nbd3: detected capacity change from 0 to 1125899906842625 [ 306.551616][ T9177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.732012][ T9178] bond1: (slave geneve2): making interface the new active one [ 306.764535][ T9189] block nbd3: shutting down sockets [ 306.776095][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.776226][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.808125][ T2067] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.808180][ T2067] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.831796][ T2067] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.831849][ T2067] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.833212][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.833257][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.833409][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.833791][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.833967][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.834010][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.834178][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.834221][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.834387][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.834431][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.835893][ T5627] ldm_validate_partition_table(): Disk read failed. [ 306.836013][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.836057][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.836209][ T6594] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.836253][ T6594] Buffer I/O error on dev nbd3, logical block 0, async page read [ 306.836603][ T5627] Dev nbd3: unable to read RDB block 0 [ 306.837214][ T5627] nbd3: unable to read partition table [ 306.952774][ T5627] ldm_validate_partition_table(): Disk read failed. [ 306.957195][ T5627] Dev nbd3: unable to read RDB block 0 [ 306.958632][ T5627] nbd3: unable to read partition table [ 306.978909][ T9178] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 307.452430][ T9199] loop6: detected capacity change from 0 to 32768 [ 307.511213][ T9199] JBD2: Ignoring recovery information on journal [ 307.598260][ T9199] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 307.737303][ T9199] overlayfs: upper fs does not support tmpfile. [ 307.738658][ T9199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 307.744714][ T9199] overlayfs: upper fs missing required features. [ 308.082971][ T9206] loop3: detected capacity change from 0 to 2048 [ 308.174761][ T9206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.178732][ T7862] ocfs2: Unmounting device (7,6) on (node local) [ 308.403985][ T9214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 308.843004][ T9226] loop5: detected capacity change from 0 to 128 [ 308.857843][ T9219] input: syz0 as /devices/virtual/input/input23 [ 308.918083][ T8261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.969943][ T9226] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.971482][ T9226] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.559883][ T9234] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 309.763870][ T9234] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 309.833843][ T9243] loop0: detected capacity change from 0 to 1024 [ 309.958510][ T5610] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.980933][ T9243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.141300][ T9243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 310.161673][ T9243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 310.161729][ T9243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 310.161729][ T9243] [ 310.161755][ T9243] EXT4-fs (loop0): Total free blocks count 0 [ 310.161777][ T9243] EXT4-fs (loop0): Free/Dirty block details [ 310.161801][ T9243] EXT4-fs (loop0): free_blocks=68451041280 [ 310.161828][ T9243] EXT4-fs (loop0): dirty_blocks=16 [ 310.161853][ T9243] EXT4-fs (loop0): Block reservation details [ 310.161877][ T9243] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 310.491683][ T9243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 310.643131][ T1212] batman_adv: batadv0: Interface deactivated: vlan2 [ 310.683264][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 310.837293][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 310.839713][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 310.841521][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.841589][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.841626][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.841689][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.841729][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.841772][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.841836][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.936274][ T9] usb 6-1: config 0 descriptor?? [ 311.352810][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 311.433043][ T5724] usb 6-1: USB disconnect, device number 8 [ 311.523625][ T5724] usblp0: removed [ 312.513890][ T1212] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 312.675155][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 312.679596][ T1212] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.682801][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.682850][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.682910][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.693843][ T6598] Bluetooth: hci0: command 0x0406 tx timeout [ 312.700593][ T1212] usb 3-1: config 0 descriptor?? [ 312.722182][ T5945] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.722222][ T5945] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 313.929225][ T1212] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 313.929276][ T1212] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 314.246482][ T9313] loop6: detected capacity change from 0 to 131072 [ 314.247790][ T9313] xfs: Deprecated parameter 'ikeep' [ 314.247821][ T9313] XFS: ikeep mount option is deprecated. [ 314.274007][ T1212] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 314.303990][ T1212] ft260 0003:0403:6030.0008: uart interface is not supported [ 314.308186][ T9313] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 314.530615][ T1212] usb 3-1: USB disconnect, device number 10 [ 314.727867][ T9313] XFS (loop6): Starting recovery (logdev: internal) [ 314.836597][ T9336] nbd0: detected capacity change from 0 to 1125899906842625 [ 314.842384][ T9337] block nbd0: shutting down sockets [ 314.882855][ T9313] XFS (loop6): Ending recovery (logdev: internal) [ 315.614507][ T9349] FAULT_INJECTION: forcing a failure. [ 315.614507][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 315.614566][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.0.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.614622][ T9349] Tainted: [L]=SOFTLOCKUP [ 315.614636][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 315.614659][ T9349] Call Trace: [ 315.614671][ T9349] [ 315.614686][ T9349] dump_stack_lvl+0x100/0x190 [ 315.614746][ T9349] should_fail_ex.cold+0x5/0xa [ 315.614789][ T9349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.614842][ T9349] should_failslab+0xc2/0x120 [ 315.614881][ T9349] __kmalloc_cache_noprof+0x91/0x6d0 [ 315.614933][ T9349] ? do_kimage_alloc_init+0x40/0x320 [ 315.615007][ T9349] do_kimage_alloc_init+0x40/0x320 [ 315.615072][ T9349] do_kexec_load+0x11b/0x810 [ 315.615116][ T9349] ? __pfx_do_kexec_load+0x10/0x10 [ 315.615161][ T9349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.615208][ T9349] ? _copy_from_user+0x59/0xd0 [ 315.615262][ T9349] __x64_sys_kexec_load+0x1bf/0x230 [ 315.615309][ T9349] do_syscall_64+0x123/0x790 [ 315.615376][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.615417][ T9349] RIP: 0033:0x7f243ab9e159 [ 315.615451][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.615494][ T9349] RSP: 002b:00007f243bad1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 315.615532][ T9349] RAX: ffffffffffffffda RBX: 00007f243ae25fa0 RCX: 00007f243ab9e159 [ 315.615558][ T9349] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000002 [ 315.615583][ T9349] RBP: 00007f243ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 315.615608][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.615632][ T9349] R13: 00007f243ae26038 R14: 00007f243ae25fa0 R15: 00007ffdff2b1428 [ 315.615684][ T9349] [ 316.006276][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 316.284157][ T5731] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 316.355114][ T7862] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 316.459883][ T5731] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 316.483624][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.483670][ T5731] usb 4-1: Product: syz [ 316.483697][ T5731] usb 4-1: Manufacturer: syz [ 316.483725][ T5731] usb 4-1: SerialNumber: syz [ 316.528504][ T5731] usb 4-1: config 0 descriptor?? [ 316.539912][ T5945] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 316.539947][ T5945] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 316.542725][ C0] ------------[ cut here ]------------ [ 316.542742][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 316.542791][ C0] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#0: syz.5.1114/9374 [ 316.578684][ C0] Modules linked in: [ 316.582606][ C0] CPU: 0 UID: 0 PID: 9374 Comm: syz.5.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.593489][ C0] Tainted: [L]=SOFTLOCKUP [ 316.597824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 316.607891][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 316.613308][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 bd 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 316.632957][ C0] RSP: 0000:ffffc90000007b68 EFLAGS: 00010046 [ 316.639059][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100528b14e [ 316.647045][ C0] RDX: ffff8880136ea970 RSI: ffffffff8ac1e150 RDI: ffffffff91483ef0 [ 316.655036][ C0] RBP: ffff888029458a58 R08: 0000000000000007 R09: 0000000000000000 [ 316.663029][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff8880136ea800 [ 316.671021][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d086f0 [ 316.679015][ C0] FS: 00005555864bf500(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 316.687963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.694564][ C0] CR2: 0000001b33424000 CR3: 000000002606a000 CR4: 0000000000350ef0 [ 316.702550][ C0] Call Trace: [ 316.705834][ C0] [ 316.708684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.714360][ C0] ? lock_acquire+0x1d1/0x380 [ 316.719077][ C0] ? call_timer_fn+0x11d/0x5f0 [ 316.723890][ C0] ? __pfx___queue_work+0x10/0x10 [ 316.728956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.734639][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 316.740498][ C0] call_timer_fn+0x198/0x5f0 [ 316.745159][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 316.750321][ C0] ? lock_acquire+0x1d1/0x380 [ 316.755029][ C0] ? __run_timers+0x560/0xb00 [ 316.759735][ C0] ? __run_timers+0x560/0xb00 [ 316.764443][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.770127][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 316.775974][ C0] __run_timers+0x570/0xb00 [ 316.780517][ C0] ? __pfx___run_timers+0x10/0x10 [ 316.785564][ C0] ? clockevents_program_event+0x23e/0x820 [ 316.791416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.797085][ C0] ? lock_acquire+0x1d1/0x380 [ 316.801797][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.807466][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 316.812539][ C0] run_timer_base+0x114/0x190 [ 316.817243][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 316.822460][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.828136][ C0] run_timer_softirq+0x1a/0x50 [ 316.832925][ C0] handle_softirqs+0x1e6/0x9d0 [ 316.837753][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.843083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.848747][ C0] ? _raw_spin_unlock+0x28/0x50 [ 316.853635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.859302][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 316.865004][ C0] __irq_exit_rcu+0x16a/0x210 [ 316.869738][ C0] irq_exit_rcu+0x9/0x30 [ 316.874002][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 316.879682][ C0] [ 316.882617][ C0] [ 316.885554][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.891564][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 316.896787][ C0] Code: 05 8f 47 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e 2f 5e 0f 0f 82 c9 02 00 00 8b 35 1e 61 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 47 a5 12 0f 85 09 03 00 00 48 83 c4 [ 316.916423][ C0] RSP: 0000:ffffc90007147310 EFLAGS: 00000206 [ 316.922521][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 316.930508][ C0] RDX: 0000000000000000 RSI: ffffffff8e3cd07e RDI: ffffffff8c622c80 [ 316.938540][ C0] RBP: ffffffff8edec420 R08: 000000005b1a66c4 R09: 0000000000000007 [ 316.946532][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 316.954522][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.962537][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.968219][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 316.973472][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.979672][ C0] unwind_next_frame+0xd1/0x2090 [ 316.984645][ C0] ? unwind_next_frame+0xbd/0x2090 [ 316.989792][ C0] ? stack_trace_save+0x8e/0xc0 [ 316.994684][ C0] ? __unwind_start+0x3cd/0x7e0 [ 316.999574][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.005774][ C0] arch_stack_walk+0x94/0xf0 [ 317.010408][ C0] ? stack_trace_save+0x8e/0xc0 [ 317.015311][ C0] stack_trace_save+0x8e/0xc0 [ 317.020032][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 317.025448][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.031122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.036784][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.041583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.047246][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 317.052573][ C0] save_stack+0x162/0x1e0 [ 317.056928][ C0] ? __pfx_save_stack+0x10/0x10 [ 317.061815][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 317.066787][ C0] __set_page_owner+0x8c/0x540 [ 317.071589][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 317.076996][ C0] ? bad_range+0x257/0x3f0 [ 317.081432][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.087104][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 317.092351][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.098029][ C0] ? get_page_from_freelist+0x10e6/0x35d0 [ 317.103809][ C0] post_alloc_hook+0xfd/0x120 [ 317.108530][ C0] get_page_from_freelist+0x110d/0x35d0 [ 317.114142][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.119811][ C0] ? __next_zones_zonelist+0x63/0x160 [ 317.125242][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 317.131187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.136864][ C0] ? prepare_alloc_pages+0x438/0x5b0 [ 317.142214][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 317.148160][ C0] ? __entry_text_end+0x102036/0x102039 [ 317.153743][ C0] ? mas_find+0x2cb/0x790 [ 317.158098][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.163772][ C0] ? validate_mm+0x392/0x4e0 [ 317.168403][ C0] ? __pfx_validate_mm+0x10/0x10 [ 317.173381][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 317.179763][ C0] ? __pfx_mt_find+0x10/0x10 [ 317.184385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.190059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.195723][ C0] ? mmap_region+0x410/0x6d0 [ 317.200359][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.206027][ C0] ? shmem_mapping+0xd/0x50 [ 317.210564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.216234][ C0] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 317.222161][ C0] ? security_mmap_addr+0x71/0x1e0 [ 317.227313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.232985][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.238936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.244602][ C0] ? policy_nodemask+0xed/0x4f0 [ 317.249484][ C0] alloc_pages_mpol+0x201/0x550 [ 317.254361][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 317.259760][ C0] ? lock_acquire+0x1d1/0x380 [ 317.264459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.270137][ C0] alloc_pages_noprof+0x1a/0x160 [ 317.275117][ C0] __pud_alloc+0x3b/0x690 [ 317.279477][ C0] __handle_mm_fault+0x1078/0x2f60 [ 317.284630][ C0] ? lock_vma_under_rcu+0x11d/0x590 [ 317.289861][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 317.295354][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.301030][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 317.306288][ C0] handle_mm_fault+0x363/0xa20 [ 317.311102][ C0] do_user_addr_fault+0x59c/0x12f0 [ 317.316262][ C0] exc_page_fault+0x6f/0xd0 [ 317.320815][ C0] asm_exc_page_fault+0x26/0x30 [ 317.325697][ C0] RIP: 0033:0x7ffbb046baa3 [ 317.330135][ C0] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 a0 fa ff ff 48 89 c2 48 8d 35 e4 a2 1c 00 48 8d 3d 9a a3 1c 00 31 c0 e8 5d 79 fe ff <89> 32 e9 58 ef ff ff 48 8d 05 57 4c 37 00 48 8d 3d 68 9c ee 00 c6 [ 317.349772][ C0] RSP: 002b:00007ffe975e6d30 EFLAGS: 00010246 [ 317.355872][ C0] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33464000 [ 317.363864][ C0] RDX: 0000001b33424000 RSI: 0000000000400000 RDI: 00007ffbb07e0708 [ 317.371855][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.379852][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.387850][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe975e6fc0 [ 317.395865][ C0] [ 317.398897][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.406192][ C0] CPU: 0 UID: 0 PID: 9374 Comm: syz.5.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.417074][ C0] Tainted: [L]=SOFTLOCKUP [ 317.421403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 317.431477][ C0] Call Trace: [ 317.434772][ C0] [ 317.437628][ C0] dump_stack_lvl+0x100/0x190 [ 317.442348][ C0] vpanic+0x553/0x970 [ 317.446358][ C0] ? __pfx_vpanic+0x10/0x10 [ 317.450900][ C0] panic+0xd1/0xe0 [ 317.454648][ C0] ? __pfx_panic+0x10/0x10 [ 317.459109][ C0] check_panic_on_warn.cold+0x19/0x34 [ 317.464514][ C0] ? __queue_work+0xdb7/0x1370 [ 317.469321][ C0] __warn.cold+0x191/0x318 [ 317.473771][ C0] __report_bug+0x30f/0x440 [ 317.478330][ C0] ? __queue_work+0xdb7/0x1370 [ 317.483142][ C0] ? __pfx___report_bug+0x10/0x10 [ 317.488211][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 317.493545][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.499213][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.504451][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.510119][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.515979][ C0] report_bug_entry+0xe2/0x290 [ 317.520790][ C0] ? __queue_work+0xdbb/0x1370 [ 317.525593][ C0] handle_bug+0x1cd/0x2a0 [ 317.529949][ C0] exc_invalid_op+0x17/0x50 [ 317.534480][ C0] asm_exc_invalid_op+0x1a/0x20 [ 317.539356][ C0] RIP: 0010:__queue_work+0xdbb/0x1370 [ 317.544767][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 bd 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 317.564405][ C0] RSP: 0000:ffffc90000007b68 EFLAGS: 00010046 [ 317.570503][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100528b14e [ 317.578496][ C0] RDX: ffff8880136ea970 RSI: ffffffff8ac1e150 RDI: ffffffff91483ef0 [ 317.586491][ C0] RBP: ffff888029458a58 R08: 0000000000000007 R09: 0000000000000000 [ 317.594480][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff8880136ea800 [ 317.602469][ C0] R13: 1ffff92000000f77 R14: 0000000000000000 R15: ffffffff81d086f0 [ 317.610469][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.616341][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 317.621675][ C0] ? __queue_work+0xd89/0x1370 [ 317.626484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.632148][ C0] ? lock_acquire+0x1d1/0x380 [ 317.636850][ C0] ? call_timer_fn+0x11d/0x5f0 [ 317.641665][ C0] ? __pfx___queue_work+0x10/0x10 [ 317.646729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.652407][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.658257][ C0] call_timer_fn+0x198/0x5f0 [ 317.662901][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 317.668059][ C0] ? lock_acquire+0x1d1/0x380 [ 317.672763][ C0] ? __run_timers+0x560/0xb00 [ 317.677464][ C0] ? __run_timers+0x560/0xb00 [ 317.682167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.687843][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 317.693688][ C0] __run_timers+0x570/0xb00 [ 317.698232][ C0] ? __pfx___run_timers+0x10/0x10 [ 317.703274][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.709122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.714784][ C0] ? lock_acquire+0x1d1/0x380 [ 317.719624][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.725318][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 317.730393][ C0] run_timer_base+0x114/0x190 [ 317.735101][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 317.740321][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.745993][ C0] run_timer_softirq+0x1a/0x50 [ 317.750779][ C0] handle_softirqs+0x1e6/0x9d0 [ 317.755599][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 317.760929][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.766592][ C0] ? _raw_spin_unlock+0x28/0x50 [ 317.771477][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.777143][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 317.782827][ C0] __irq_exit_rcu+0x16a/0x210 [ 317.787576][ C0] irq_exit_rcu+0x9/0x30 [ 317.791854][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 317.797535][ C0] [ 317.800491][ C0] [ 317.803451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.809474][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 317.814717][ C0] Code: 05 8f 47 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e 2f 5e 0f 0f 82 c9 02 00 00 8b 35 1e 61 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 47 a5 12 0f 85 09 03 00 00 48 83 c4 [ 317.834358][ C0] RSP: 0000:ffffc90007147310 EFLAGS: 00000206 [ 317.840459][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 317.848463][ C0] RDX: 0000000000000000 RSI: ffffffff8e3cd07e RDI: ffffffff8c622c80 [ 317.856468][ C0] RBP: ffffffff8edec420 R08: 000000005b1a66c4 R09: 0000000000000007 [ 317.864466][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 317.872463][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.880497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.886182][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 317.891434][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.897653][ C0] unwind_next_frame+0xd1/0x2090 [ 317.902653][ C0] ? unwind_next_frame+0xbd/0x2090 [ 317.907828][ C0] ? stack_trace_save+0x8e/0xc0 [ 317.912762][ C0] ? __unwind_start+0x3cd/0x7e0 [ 317.917659][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.923882][ C0] arch_stack_walk+0x94/0xf0 [ 317.928528][ C0] ? stack_trace_save+0x8e/0xc0 [ 317.933435][ C0] stack_trace_save+0x8e/0xc0 [ 317.938169][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 317.943586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.949266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.954941][ C0] ? rcu_is_watching+0x13/0xc0 [ 317.959758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.965429][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 317.970762][ C0] save_stack+0x162/0x1e0 [ 317.975125][ C0] ? __pfx_save_stack+0x10/0x10 [ 317.980022][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 317.985000][ C0] __set_page_owner+0x8c/0x540 [ 317.989813][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 317.995223][ C0] ? bad_range+0x257/0x3f0 [ 317.999666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.005330][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.010578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.016245][ C0] ? get_page_from_freelist+0x10e6/0x35d0 [ 318.022010][ C0] post_alloc_hook+0xfd/0x120 [ 318.026726][ C0] get_page_from_freelist+0x110d/0x35d0 [ 318.032336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.038005][ C0] ? __next_zones_zonelist+0x63/0x160 [ 318.043431][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 318.049368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.055039][ C0] ? prepare_alloc_pages+0x438/0x5b0 [ 318.060386][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 318.066332][ C0] ? __entry_text_end+0x102036/0x102039 [ 318.071915][ C0] ? mas_find+0x2cb/0x790 [ 318.076279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.081964][ C0] ? validate_mm+0x392/0x4e0 [ 318.086596][ C0] ? __pfx_validate_mm+0x10/0x10 [ 318.091568][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.097963][ C0] ? __pfx_mt_find+0x10/0x10 [ 318.102589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.108264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.113930][ C0] ? mmap_region+0x410/0x6d0 [ 318.118569][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.124233][ C0] ? shmem_mapping+0xd/0x50 [ 318.128774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.134447][ C0] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 318.140378][ C0] ? security_mmap_addr+0x71/0x1e0 [ 318.145546][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.151211][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.157169][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.162843][ C0] ? policy_nodemask+0xed/0x4f0 [ 318.167730][ C0] alloc_pages_mpol+0x201/0x550 [ 318.172627][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.178077][ C0] ? lock_acquire+0x1d1/0x380 [ 318.182784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.188476][ C0] alloc_pages_noprof+0x1a/0x160 [ 318.193477][ C0] __pud_alloc+0x3b/0x690 [ 318.197849][ C0] __handle_mm_fault+0x1078/0x2f60 [ 318.203003][ C0] ? lock_vma_under_rcu+0x11d/0x590 [ 318.208233][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 318.213773][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.219447][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 318.224706][ C0] handle_mm_fault+0x363/0xa20 [ 318.229516][ C0] do_user_addr_fault+0x59c/0x12f0 [ 318.234678][ C0] exc_page_fault+0x6f/0xd0 [ 318.239224][ C0] asm_exc_page_fault+0x26/0x30 [ 318.244096][ C0] RIP: 0033:0x7ffbb046baa3 [ 318.248527][ C0] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 a0 fa ff ff 48 89 c2 48 8d 35 e4 a2 1c 00 48 8d 3d 9a a3 1c 00 31 c0 e8 5d 79 fe ff <89> 32 e9 58 ef ff ff 48 8d 05 57 4c 37 00 48 8d 3d 68 9c ee 00 c6 [ 318.268161][ C0] RSP: 002b:00007ffe975e6d30 EFLAGS: 00010246 [ 318.274259][ C0] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33464000 [ 318.282257][ C0] RDX: 0000001b33424000 RSI: 0000000000400000 RDI: 00007ffbb07e0708 [ 318.290257][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.298247][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 318.306238][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe975e6fc0 [ 318.314263][ C0] [ 318.317535][ C0] Kernel Offset: disabled [ 318.321867][ C0] Rebooting in 86400 seconds..