last executing test programs: 3.929204473s ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmwgfx/uevent\x00', 0x0, 0x0) 3.020747461s ago: executing program 3 (id=61): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/4096, 0x1000) 2.866293027s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/snd_dummy\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/snd_aloop\x00', 0x0, 0x0) 2.762551445s ago: executing program 3 (id=66): write(0x1, &(0x7f0000000100)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006100"/305, 0x138) 2.742303439s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/nfit/drivers\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001000), 0x1000) r1 = openat(r0, &(0x7f0000001043), 0x0, 0x0) openat(r1, &(0x7f0000000300)='bind\x00', 0x1, 0x0) 2.725324886s ago: executing program 1 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/drm/card0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/drm/card1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/drm/renderD128\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/drm/renderD129\x00', 0x0, 0x0) 2.630641891s ago: executing program 3 (id=70): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "93d7"}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000140)="0b00020002000000010001") nanosleep(&(0x7f0000000800)={0x1}, 0x0) 2.630177791s ago: executing program 1 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='offline\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='offline\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='offline\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='offline\n', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='offline\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='offline\n', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0) write(r8, &(0x7f0000000700)='offline\n', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0) write(r9, &(0x7f0000000700)='offline\n', 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0) write(r10, &(0x7f0000000700)='offline\n', 0x8) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r11, &(0x7f0000000700)='offline\n', 0x8) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0) write(r12, &(0x7f0000000700)='offline\n', 0x8) r13 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0) write(r13, &(0x7f0000000700)='offline\n', 0x8) r14 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0) write(r14, &(0x7f0000000700)='offline\n', 0x8) 1.175926878s ago: executing program 1 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c000180080001000000000008000200e0a6240008000300a0b8250008000400409c000008000600d0070000"]}}, 0x0) 802.650846ms ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/slots\x00', 0x0, 0x0) 787.022701ms ago: executing program 1 (id=77): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="28040000f303010001000000000000000400000002000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000002f66696c65300000"], 0x428}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) 726.236358ms ago: executing program 1 (id=78): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "93d7"}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") nanosleep(&(0x7f0000000800)={0x1}, 0x0) 674.732715ms ago: executing program 2 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/drivers_autoprobe\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/10, 0xa) 647.246583ms ago: executing program 2 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.2/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:1f.2/enable\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:1f.2/modalias\x00', 0x0, 0x0) 582.475846ms ago: executing program 2 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.3/driver\x00', &(0x7f0000000200)=""/256, 0x100) 471.065464ms ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000020)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) 407.809783ms ago: executing program 0 (id=83): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x0, 0x0}, {0x0, 0x0, 'rxe\x00'}, {0x0, 0x0, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 393.341337ms ago: executing program 2 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./disk\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)='00', 0x1) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000500)='qnx6\x00', 0x0, &(0x7f0000000600)='mmi_fs\x00') 262.66165ms ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100), &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/firewire\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/firewire_ohci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/firewire/drivers/firewire_net\x00', 0x0, 0x0) 262.314338ms ago: executing program 0 (id=86): ioctl(0x0, 0xc138fd03, &(0x7f0000000200)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000736e61703000"/156) 143.486717ms ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/PNP0103:00/driver\x00', 0x0, 0x0) 139.076298ms ago: executing program 2 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='freezer\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='disk\n', 0x5) 38.62799ms ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) 0s ago: executing program 0 (id=90): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 82.189328][ T5602] cgroup: Unknown subsys name 'net' [ 82.262062][ T5602] cgroup: Unknown subsys name 'cpuset' [ 82.271202][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.920223][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.621881][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.623948][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.627834][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.636051][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.637975][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.639055][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.639993][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.640362][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.640855][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.641890][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.651759][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.652386][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.655448][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.656254][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.678566][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.684970][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.692847][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.711562][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.720059][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.733338][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.422686][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.422866][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.423020][ T5612] bridge_slave_0: entered allmulticast mode [ 89.425732][ T5612] bridge_slave_0: entered promiscuous mode [ 89.480636][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.480816][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.480952][ T5612] bridge_slave_1: entered allmulticast mode [ 89.482458][ T5612] bridge_slave_1: entered promiscuous mode [ 89.529671][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.529840][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.529956][ T5614] bridge_slave_0: entered allmulticast mode [ 89.531402][ T5614] bridge_slave_0: entered promiscuous mode [ 89.586042][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.586205][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.586308][ T5614] bridge_slave_1: entered allmulticast mode [ 89.587821][ T5614] bridge_slave_1: entered promiscuous mode [ 89.622095][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.665656][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.665926][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.666022][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.666190][ T5611] bridge_slave_0: entered allmulticast mode [ 89.667829][ T5611] bridge_slave_0: entered promiscuous mode [ 89.707874][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.708846][ T54] Bluetooth: hci2: command tx timeout [ 89.730398][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.730572][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.730883][ T5611] bridge_slave_1: entered allmulticast mode [ 89.732067][ T5611] bridge_slave_1: entered promiscuous mode [ 89.766150][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.788659][ T4931] Bluetooth: hci3: command tx timeout [ 89.788676][ T5624] Bluetooth: hci0: command tx timeout [ 89.788917][ T54] Bluetooth: hci1: command tx timeout [ 89.828252][ T5612] team0: Port device team_slave_0 added [ 89.857932][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.897788][ T5612] team0: Port device team_slave_1 added [ 89.904365][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.925128][ T5614] team0: Port device team_slave_0 added [ 89.951730][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.951891][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.951988][ T5613] bridge_slave_0: entered allmulticast mode [ 89.953780][ T5613] bridge_slave_0: entered promiscuous mode [ 89.965391][ T5614] team0: Port device team_slave_1 added [ 90.007694][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.007881][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.008014][ T5613] bridge_slave_1: entered allmulticast mode [ 90.013146][ T5613] bridge_slave_1: entered promiscuous mode [ 90.042698][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.042716][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.042743][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.046410][ T5611] team0: Port device team_slave_0 added [ 90.107180][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.107200][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.107227][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.112224][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.112300][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.112375][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.135378][ T5611] team0: Port device team_slave_1 added [ 90.206624][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.206641][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.206664][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.254782][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.257738][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.333168][ T5613] team0: Port device team_slave_0 added [ 90.333910][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.333926][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.333951][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.336481][ T5613] team0: Port device team_slave_1 added [ 90.351803][ T5612] hsr_slave_0: entered promiscuous mode [ 90.353558][ T5612] hsr_slave_1: entered promiscuous mode [ 90.403829][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.403874][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.403946][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.489387][ T5614] hsr_slave_0: entered promiscuous mode [ 90.490247][ T5614] hsr_slave_1: entered promiscuous mode [ 90.490814][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 90.490891][ T5614] Cannot create hsr debugfs directory [ 90.492127][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.492139][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.492162][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.528029][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.528403][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.528431][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.668397][ T5611] hsr_slave_0: entered promiscuous mode [ 90.669164][ T5611] hsr_slave_1: entered promiscuous mode [ 90.669705][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 90.669726][ T5611] Cannot create hsr debugfs directory [ 90.787120][ T5613] hsr_slave_0: entered promiscuous mode [ 90.788984][ T5613] hsr_slave_1: entered promiscuous mode [ 90.791114][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 90.791175][ T5613] Cannot create hsr debugfs directory [ 91.173867][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.182450][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.191952][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.204061][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.205324][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.210158][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.217760][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.236209][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.315463][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.325145][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.328751][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.342513][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.350253][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.353959][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.359835][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.379565][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.487682][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.497261][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.507116][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.516823][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.524764][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.537123][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.556210][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.566658][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.659501][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.665483][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.666907][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.690299][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.703012][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.706978][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.707798][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.724296][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.760757][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.798677][ T54] Bluetooth: hci2: command tx timeout [ 91.816051][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.846364][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.846533][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.868888][ T4931] Bluetooth: hci0: command tx timeout [ 91.868925][ T4931] Bluetooth: hci3: command tx timeout [ 91.869029][ T54] Bluetooth: hci1: command tx timeout [ 91.909273][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.909353][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915865][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.985245][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.000640][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.031616][ T32] cfg80211: failed to load regulatory.db [ 92.047058][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.047134][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.053495][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.053772][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.100359][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.132780][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.132853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.167993][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.168395][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.226362][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.330489][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.361260][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.361368][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.394658][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.394762][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.179963][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.351264][ T5612] veth0_vlan: entered promiscuous mode [ 93.386361][ T5612] veth1_vlan: entered promiscuous mode [ 93.417553][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.441922][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.534427][ T5612] veth0_macvtap: entered promiscuous mode [ 93.551650][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.556097][ T5612] veth1_macvtap: entered promiscuous mode [ 93.619090][ T5611] veth0_vlan: entered promiscuous mode [ 93.668873][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.670962][ T5614] veth0_vlan: entered promiscuous mode [ 93.676410][ T5611] veth1_vlan: entered promiscuous mode [ 93.700516][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.740889][ T5614] veth1_vlan: entered promiscuous mode [ 93.767729][ T5613] veth0_vlan: entered promiscuous mode [ 93.820417][ T5613] veth1_vlan: entered promiscuous mode [ 93.869063][ T5624] Bluetooth: hci2: command tx timeout [ 93.887644][ T5611] veth0_macvtap: entered promiscuous mode [ 93.927923][ T5611] veth1_macvtap: entered promiscuous mode [ 93.940212][ T3296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.940238][ T3296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.950658][ T5624] Bluetooth: hci1: command tx timeout [ 93.950752][ T5624] Bluetooth: hci3: command tx timeout [ 93.950815][ T5624] Bluetooth: hci0: command tx timeout [ 93.966095][ T5614] veth0_macvtap: entered promiscuous mode [ 93.993279][ T5614] veth1_macvtap: entered promiscuous mode [ 94.046909][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.056324][ T3296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.056345][ T3296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.087708][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.098017][ T5613] veth0_macvtap: entered promiscuous mode [ 94.107606][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.136270][ T5613] veth1_macvtap: entered promiscuous mode [ 94.155393][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.211385][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.215719][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.260932][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261505][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261550][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261589][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261633][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261670][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261705][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261742][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.265625][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.275210][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276649][ T3352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276695][ T3352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276734][ T3352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.449943][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450952][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.531758][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.531781][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.587563][ T5766] null_blk: disk nullb1 created [ 94.654821][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.654848][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.688958][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.716366][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.716390][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.790234][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.835435][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.835457][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.934378][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.934400][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.074711][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.074732][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.135146][ T5775] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 95.135177][ T5775] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 95.135218][ T5775] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 95.135238][ T5775] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 95.135250][ T5775] page dumped because: unmovable page [ 95.135272][ T5775] page_owner info is not present (never set?) [ 95.285246][ T5775] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 95.285278][ T5775] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 95.285311][ T5775] raw: 017ff00000002000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 95.285331][ T5775] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 95.285345][ T5775] page dumped because: unmovable page [ 95.285369][ T5775] page_owner info is not present (never set?) [ 95.370405][ T5775] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 95.370440][ T5775] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 95.370474][ T5775] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 95.370496][ T5775] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 95.370527][ T5775] page dumped because: unmovable page [ 95.370548][ T5775] page_owner info is not present (never set?) [ 95.403312][ T5764] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.552954][ T5775] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 95.552998][ T5775] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.553017][ T5775] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.553038][ T5775] page_type: f5(slab) [ 95.553059][ T5775] raw: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 95.553079][ T5775] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 95.553100][ T5775] head: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 95.553119][ T5775] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 95.553138][ T5775] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 95.553156][ T5775] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.553166][ T5775] page dumped because: unmovable page [ 95.553177][ T5775] page_owner tracks the page as allocated [ 95.553184][ T5775] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4990, tgid 4990 (udevd), ts 36566074431 [ 95.553218][ T5775] post_alloc_hook+0x1f9/0x250 [ 95.553259][ T5775] get_page_from_freelist+0x220f/0x2280 [ 95.553281][ T5775] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 95.553300][ T5775] allocate_slab+0x7d/0x5e0 [ 95.553317][ T5775] refill_objects+0x2d5/0x350 [ 95.553334][ T5775] __pcs_replace_empty_main+0x2c8/0x6c0 [ 95.553353][ T5775] __kmalloc_noprof+0x476/0x710 [ 95.553372][ T5775] tomoyo_realpath_from_path+0xef/0x640 [ 95.553394][ T5775] tomoyo_path_number_perm+0x246/0x5f0 [ 95.553414][ T5775] tomoyo_path_mknod+0x14a/0x1a0 [ 95.553434][ T5775] security_path_mknod+0x176/0x370 [ 95.553461][ T5775] lookup_open+0x5e3/0x1970 [ 95.553480][ T5775] path_openat+0x673/0x1da0 [ 95.553498][ T5775] do_file_open+0x23e/0x4a0 [ 95.553515][ T5775] do_sys_openat2+0x115/0x200 [ 95.553534][ T5775] __x64_sys_openat+0x138/0x170 [ 95.553552][ T5775] page last free pid 1 tgid 1 ts 28486833209 stack trace: [ 95.553567][ T5775] free_pages_prepare+0x9eb/0xaf0 [ 95.553585][ T5775] __free_contig_range_common+0x174/0x340 [ 95.553606][ T5775] destroy_args+0x4e5/0x570 [ 95.553626][ T5775] debug_vm_pgtable+0x3f8/0x410 [ 95.553644][ T5775] do_one_initcall+0x250/0x870 [ 95.553662][ T5775] do_initcall_level+0x10a/0x1a0 [ 95.553682][ T5775] do_initcalls+0x59/0xa0 [ 95.553699][ T5775] kernel_init_freeable+0x29d/0x3e0 [ 95.553718][ T5775] kernel_init+0x22/0x1d0 [ 95.553736][ T5775] ret_from_fork+0x514/0xb70 [ 95.553755][ T5775] ret_from_fork_asm+0x1a/0x30 [ 95.647505][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 95.664990][ T5764] usb 3-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.752611][ T5764] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.752686][ T5764] usb 3-1: config 0 has no interface number 0 [ 95.752818][ T5764] usb 3-1: config 0 interface 184 has no altsetting 0 [ 95.822950][ T5776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 95.823041][ T5776] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.823086][ T5776] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.823141][ T5776] page_type: f5(slab) [ 95.823195][ T5776] raw: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 95.823247][ T5776] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 95.823301][ T5776] head: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 95.823352][ T5776] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 95.823414][ T5776] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 95.823509][ T5776] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.823542][ T5776] page dumped because: unmovable page [ 95.823565][ T5776] page_owner tracks the page as allocated [ 95.823587][ T5776] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 52955878034 [ 95.823680][ T5776] post_alloc_hook+0x1f9/0x250 [ 95.823748][ T5776] get_page_from_freelist+0x220f/0x2280 [ 95.823802][ T5776] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 95.823861][ T5776] allocate_slab+0x7d/0x5e0 [ 95.823929][ T5776] refill_objects+0x2d5/0x350 [ 95.823982][ T5776] __pcs_replace_empty_main+0x2c8/0x6c0 [ 95.824034][ T5776] kmem_cache_alloc_lru_noprof+0x37e/0x5f0 [ 95.824090][ T5776] shmem_alloc_inode+0x28/0x40 [ 95.824135][ T5776] alloc_inode+0x6a/0x1b0 [ 95.824186][ T5776] new_inode+0x1f/0x170 [ 95.824231][ T5776] shmem_get_inode+0x3a4/0x1030 [ 95.824283][ T5776] shmem_symlink+0xa2/0x4d0 [ 95.950379][ T54] Bluetooth: hci2: command tx timeout [ 95.956007][ T5776] vfs_symlink+0x18e/0x330 [ 95.956137][ T5776] filename_symlinkat+0x1cd/0x410 [ 95.956192][ T5776] __se_sys_symlink+0x4d/0x2b0 [ 95.956245][ T5776] do_syscall_64+0x166/0x520 [ 95.956299][ T5776] page last free pid 4981 tgid 4981 ts 52884813291 stack trace: [ 95.956349][ T5776] __free_frozen_pages+0xc97/0xd90 [ 95.956405][ T5776] __slab_free+0x269/0x2c0 [ 95.956459][ T5776] qlist_free_all+0x99/0x100 [ 95.956504][ T5776] kasan_quarantine_reduce+0x148/0x160 [ 95.956566][ T5776] __kasan_slab_alloc+0x22/0x80 [ 95.956627][ T5776] __kmalloc_cache_noprof+0x29a/0x600 [ 95.956691][ T5776] kernfs_fop_open+0x38c/0xd20 [ 95.956737][ T5776] do_dentry_open+0x80e/0x1360 [ 95.956789][ T5776] vfs_open_consume+0x4a/0x350 [ 95.956834][ T5776] path_openat+0x14a6/0x1da0 [ 95.956880][ T5776] do_file_open+0x23e/0x4a0 [ 95.956924][ T5776] do_sys_openat2+0x115/0x200 [ 95.956976][ T5776] __x64_sys_openat+0x138/0x170 [ 95.957020][ T5776] do_syscall_64+0x166/0x520 [ 95.957072][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.990481][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.990561][ T5764] usb 3-1: Product: syz [ 95.990610][ T5764] usb 3-1: Manufacturer: syz [ 95.990664][ T5764] usb 3-1: SerialNumber: syz [ 96.029188][ T5624] Bluetooth: hci3: command tx timeout [ 96.029222][ T5624] Bluetooth: hci1: command tx timeout [ 96.029294][ T54] Bluetooth: hci0: command tx timeout [ 96.197811][ T5775] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa53d6a4 pfn:0x68000 [ 96.197847][ T5775] flags: 0xfff08000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 96.197963][ T5775] raw: 00fff08000000014 0000000000000000 dead000000000122 0000000000000000 [ 96.197984][ T5775] raw: 00000007fa53d6a4 0000000000000000 0000000400000002 0000000000000000 [ 96.197997][ T5775] page dumped because: unmovable page [ 96.198009][ T5775] page_owner tracks the page as allocated [ 96.198017][ T5775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87384093471 [ 96.198056][ T5775] post_alloc_hook+0x1f9/0x250 [ 96.198467][ T5775] get_page_from_freelist+0x220f/0x2280 [ 96.198538][ T5775] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 96.198597][ T5775] alloc_pages_mpol+0x21e/0x390 [ 96.198643][ T5775] alloc_pages_noprof+0xb1/0x2b0 [ 96.198694][ T5775] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 96.198771][ T5775] vmalloc_user_noprof+0xad/0xe0 [ 96.198815][ T5775] kcov_ioctl+0x55/0x630 [ 96.198859][ T5775] __se_sys_ioctl+0xfc/0x170 [ 96.198903][ T5775] do_syscall_64+0x166/0x520 [ 96.198967][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.199026][ T5775] page last free pid 5602 tgid 5602 ts 84740413325 stack trace: [ 96.199066][ T5775] free_unref_folios+0xdc6/0x14e0 [ 96.199117][ T5775] folios_put_refs+0x9e9/0xb30 [ 96.199166][ T5775] free_pages_and_swap_cache+0x2ba/0x490 [ 96.199219][ T5775] tlb_flush_mmu+0x6d3/0xa30 [ 96.199262][ T5775] tlb_finish_mmu+0xf4/0x220 [ 96.199310][ T5775] unmap_region+0x2a5/0x330 [ 96.199387][ T5775] vms_complete_munmap_vmas+0x427/0xbe0 [ 96.199412][ T5775] do_vmi_align_munmap+0x3b7/0x4b0 [ 96.199469][ T5775] do_vmi_munmap+0x252/0x2d0 [ 96.199513][ T5775] __vm_munmap+0x241/0x3e0 [ 96.224184][ T5775] __x64_sys_munmap+0x60/0x70 [ 96.266317][ T5775] do_syscall_64+0x166/0x520 [ 96.266407][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.401305][ T5764] usb 3-1: config 0 descriptor?? [ 96.457518][ T5776] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x5fe00 [ 96.457548][ T5776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.457577][ T5776] raw: 00fff00000000000 ffffea00017f8048 ffffea00017f7fc8 0000000000000000 [ 96.457614][ T5776] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 96.457627][ T5776] page dumped because: unmovable page [ 96.457637][ T5776] page_owner tracks the page as allocated [ 96.457646][ T5776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5609, tgid 5609 (syz-executor), ts 87506578681 [ 96.457680][ T5776] post_alloc_hook+0x1f9/0x250 [ 96.457704][ T5776] get_page_from_freelist+0x220f/0x2280 [ 96.457725][ T5776] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 96.457746][ T5776] alloc_pages_mpol+0x21e/0x390 [ 96.457766][ T5776] alloc_pages_noprof+0xb1/0x2b0 [ 96.457785][ T5776] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 96.457805][ T5776] vmalloc_user_noprof+0xad/0xe0 [ 96.457824][ T5776] kcov_ioctl+0x55/0x630 [ 96.457844][ T5776] __se_sys_ioctl+0xfc/0x170 [ 96.457863][ T5776] do_syscall_64+0x166/0x520 [ 96.457884][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.457905][ T5776] page last free pid 1 tgid 1 ts 27558293883 stack trace: [ 96.457921][ T5776] free_pages_prepare+0x9eb/0xaf0 [ 96.457939][ T5776] __free_contig_range_common+0x174/0x340 [ 96.457959][ T5776] destroy_args+0x4e5/0x570 [ 96.457978][ T5776] debug_vm_pgtable+0x3f8/0x410 [ 96.457998][ T5776] do_one_initcall+0x250/0x870 [ 96.458018][ T5776] do_initcall_level+0x10a/0x1a0 [ 96.458039][ T5776] do_initcalls+0x59/0xa0 [ 96.458649][ T5776] kernel_init_freeable+0x29d/0x3e0 [ 96.458704][ T5776] kernel_init+0x22/0x1d0 [ 96.458748][ T5776] ret_from_fork+0x514/0xb70 [ 96.458792][ T5776] ret_from_fork_asm+0x1a/0x30 [ 97.211627][ T58] nintendo 0005:057E:2017.0001: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 97.295342][ T5771] syz.0.6 (5771): drop_caches: 2 [ 97.467269][ T5795] lo speed is unknown, defaulting to 1000 [ 97.475391][ T5795] lo speed is unknown, defaulting to 1000 [ 97.486925][ T5795] lo speed is unknown, defaulting to 1000 [ 97.498230][ T5708] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.650602][ T5708] usb 2-1: New USB device found: idVendor=0403, idProduct=6001, bcdDevice=6.00 [ 97.653289][ T5708] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.653318][ T5708] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 97.653378][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.701235][ T5791] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.701392][ T5791] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.729363][ T5708] ftdi_sio 2-1:1.0: FTDI USB Serial Device converter detected [ 97.732448][ T5708] usb 2-1: Detected FT232R [ 97.816788][ T5795] infiniband syz0: set active [ 97.816810][ T5795] infiniband syz0: added lo [ 97.817594][ T5701] lo speed is unknown, defaulting to 1000 [ 97.857024][ T5795] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 97.857057][ T5795] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 97.857140][ T5795] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 97.936111][ T5795] RDS/IB: syz0: added [ 97.936615][ T5795] smc: adding ib device syz0 with port count 1 [ 97.936718][ T5795] smc: ib device syz0 port 1 has no pnetid [ 97.957648][ T5701] lo speed is unknown, defaulting to 1000 [ 97.969842][ T5795] lo speed is unknown, defaulting to 1000 [ 98.262162][ T5795] lo speed is unknown, defaulting to 1000 [ 98.416142][ T5708] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 98.427274][ T5708] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 98.435188][ T5708] ftdi_sio 2-1:1.0: GPIO initialisation failed: -71 [ 98.453742][ T5708] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.497334][ T5708] usb 2-1: USB disconnect, device number 2 [ 98.532677][ T5708] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.535451][ T5708] ftdi_sio 2-1:1.0: device disconnected [ 98.635156][ T5795] lo speed is unknown, defaulting to 1000 [ 98.855871][ T5795] lo speed is unknown, defaulting to 1000 [ 99.213565][ T5804] svc: failed to register lockdv1 RPC service (errno 111). [ 99.213797][ T5804] lockd_up: makesock failed, error=-111 [ 99.288350][ T5347] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 99.375782][ T5804] svc: failed to register nfsdv3 RPC service (errno 111). [ 99.385907][ T5804] svc: failed to register nfsaclv3 RPC service (errno 111). [ 99.385930][ T5804] failed to unregister tcp with rpcbind [ 99.386530][ T5804] svc: failed to register nfsdv3 RPC service (errno 97). [ 99.386596][ T5804] svc: failed to register nfsaclv3 RPC service (errno 97). [ 99.386612][ T5804] failed to unregister tcp with rpcbind [ 99.440562][ T5347] usb 2-1: Invalid ep0 maxpacket: 64 [ 99.568320][ T5347] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 99.718394][ T5347] usb 2-1: Invalid ep0 maxpacket: 64 [ 99.734634][ T5347] usb usb2-port1: attempt power cycle [ 99.980013][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 99.980049][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.980701][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.980810][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 99.980831][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 99.980850][ T5764] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.018961][ T5764] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 100.078180][ T5764] usb 3-1: USB disconnect, device number 2 [ 100.119062][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.121619][ T5347] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 100.143832][ T5347] usb 2-1: Invalid ep0 maxpacket: 64 [ 100.234479][ T5817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 100.234512][ T5817] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 100.234545][ T5817] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 100.234566][ T5817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 100.234578][ T5817] page dumped because: unmovable page [ 100.234590][ T5817] page_owner info is not present (never set?) [ 100.284537][ T5347] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 100.285521][ T5817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 100.285547][ T5817] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 100.285579][ T5817] raw: 017ff00000002000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 100.285598][ T5817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 100.285611][ T5817] page dumped because: unmovable page [ 100.285622][ T5817] page_owner info is not present (never set?) [ 100.298679][ T10] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 100.334893][ T5817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 100.335025][ T5817] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 100.335110][ T5817] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 100.335229][ T5817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 100.335261][ T5817] page dumped because: unmovable page [ 100.335285][ T5817] page_owner info is not present (never set?) [ 100.339212][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.398918][ T5817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 100.398991][ T5817] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 100.399079][ T5817] raw: 017ff00000002000 ffffea0004000008 ffffea0004000008 0000000000000000 [ 100.399139][ T5817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 100.399179][ T5817] page dumped because: unmovable page [ 100.399237][ T5817] page_owner info is not present (never set?) [ 100.473690][ T5347] usb 2-1: Invalid ep0 maxpacket: 64 [ 100.474138][ T5347] usb usb2-port1: unable to enumerate USB device [ 100.513787][ T5817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 100.513817][ T5817] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.513863][ T5817] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.513885][ T5817] page_type: f5(slab) [ 100.513906][ T5817] raw: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 100.513927][ T5817] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 100.513949][ T5817] head: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 100.513969][ T5817] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 100.514017][ T5817] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 100.514037][ T5817] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.514050][ T5817] page dumped because: unmovable page [ 100.514061][ T5817] page_owner tracks the page as allocated [ 100.514070][ T5817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4990, tgid 4990 (udevd), ts 36566074431 [ 100.514105][ T5817] post_alloc_hook+0x1f9/0x250 [ 100.514158][ T5817] get_page_from_freelist+0x220f/0x2280 [ 100.514181][ T5817] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 100.514202][ T5817] allocate_slab+0x7d/0x5e0 [ 100.514222][ T5817] refill_objects+0x2d5/0x350 [ 100.514241][ T5817] __pcs_replace_empty_main+0x2c8/0x6c0 [ 100.514262][ T5817] __kmalloc_noprof+0x476/0x710 [ 100.514310][ T5817] tomoyo_realpath_from_path+0xef/0x640 [ 100.514332][ T5817] tomoyo_path_number_perm+0x246/0x5f0 [ 100.514353][ T5817] tomoyo_path_mknod+0x14a/0x1a0 [ 100.514373][ T5817] security_path_mknod+0x176/0x370 [ 100.514394][ T5817] lookup_open+0x5e3/0x1970 [ 100.514413][ T5817] path_openat+0x673/0x1da0 [ 100.514457][ T5817] do_file_open+0x23e/0x4a0 [ 100.514477][ T5817] do_sys_openat2+0x115/0x200 [ 100.514497][ T5817] __x64_sys_openat+0x138/0x170 [ 100.514523][ T5817] page last free pid 1 tgid 1 ts 28486833209 stack trace: [ 100.514538][ T5817] free_pages_prepare+0x9eb/0xaf0 [ 100.514558][ T5817] __free_contig_range_common+0x174/0x340 [ 100.514607][ T5817] destroy_args+0x4e5/0x570 [ 100.514628][ T5817] debug_vm_pgtable+0x3f8/0x410 [ 100.514648][ T5817] do_one_initcall+0x250/0x870 [ 100.514669][ T5817] do_initcall_level+0x10a/0x1a0 [ 100.514690][ T5817] do_initcalls+0x59/0xa0 [ 100.514708][ T5817] kernel_init_freeable+0x29d/0x3e0 [ 100.514751][ T5817] kernel_init+0x22/0x1d0 [ 100.525711][ T5817] ret_from_fork+0x514/0xb70 [ 100.525792][ T5817] ret_from_fork_asm+0x1a/0x30 [ 100.673170][ T5817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 100.673199][ T5817] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.673219][ T5817] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.673241][ T5817] page_type: f5(slab) [ 100.673263][ T5817] raw: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 100.673310][ T5817] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 100.673332][ T5817] head: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 100.673352][ T5817] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 100.673374][ T5817] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 100.673396][ T5817] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.673408][ T5817] page dumped because: unmovable page [ 100.673448][ T5817] page_owner tracks the page as allocated [ 100.673458][ T5817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 52955878034 [ 100.673504][ T5817] post_alloc_hook+0x1f9/0x250 [ 100.673528][ T5817] get_page_from_freelist+0x220f/0x2280 [ 100.673548][ T5817] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 100.673595][ T5817] allocate_slab+0x7d/0x5e0 [ 100.673617][ T5817] refill_objects+0x2d5/0x350 [ 100.673635][ T5817] __pcs_replace_empty_main+0x2c8/0x6c0 [ 100.673655][ T5817] kmem_cache_alloc_lru_noprof+0x37e/0x5f0 [ 100.673678][ T5817] shmem_alloc_inode+0x28/0x40 [ 100.673697][ T5817] alloc_inode+0x6a/0x1b0 [ 100.673744][ T5817] new_inode+0x1f/0x170 [ 100.673764][ T5817] shmem_get_inode+0x3a4/0x1030 [ 100.673785][ T5817] shmem_symlink+0xa2/0x4d0 [ 100.673804][ T5817] vfs_symlink+0x18e/0x330 [ 100.673822][ T5817] filename_symlinkat+0x1cd/0x410 [ 100.673842][ T5817] __se_sys_symlink+0x4d/0x2b0 [ 100.673889][ T5817] do_syscall_64+0x166/0x520 [ 100.673912][ T5817] page last free pid 4981 tgid 4981 ts 52884813291 stack trace: [ 100.673928][ T5817] __free_frozen_pages+0xc97/0xd90 [ 100.673949][ T5817] __slab_free+0x269/0x2c0 [ 100.673967][ T5817] qlist_free_all+0x99/0x100 [ 100.673985][ T5817] kasan_quarantine_reduce+0x148/0x160 [ 100.674033][ T5817] __kasan_slab_alloc+0x22/0x80 [ 100.674055][ T5817] __kmalloc_cache_noprof+0x29a/0x600 [ 100.674117][ T5817] kernfs_fop_open+0x38c/0xd20 [ 100.674247][ T5817] do_dentry_open+0x80e/0x1360 [ 100.674307][ T5817] vfs_open_consume+0x4a/0x350 [ 100.674417][ T5817] path_openat+0x14a6/0x1da0 [ 100.674470][ T5817] do_file_open+0x23e/0x4a0 [ 100.674581][ T5817] do_sys_openat2+0x115/0x200 [ 100.674642][ T5817] __x64_sys_openat+0x138/0x170 [ 100.674741][ T5817] do_syscall_64+0x166/0x520 [ 100.674795][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.962255][ T5817] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa53d6a4 pfn:0x68000 [ 100.962443][ T5817] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 100.962534][ T5817] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 100.962639][ T5817] raw: 00000007fa53d6a4 0000000000000000 0000000400000002 0000000000000000 [ 100.962672][ T5817] page dumped because: unmovable page [ 100.962703][ T5817] page_owner tracks the page as allocated [ 100.962725][ T5817] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87384093471 [ 100.962874][ T5817] post_alloc_hook+0x1f9/0x250 [ 100.962936][ T5817] get_page_from_freelist+0x220f/0x2280 [ 100.963053][ T5817] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 100.963127][ T5817] alloc_pages_mpol+0x21e/0x390 [ 100.963250][ T5817] alloc_pages_noprof+0xb1/0x2b0 [ 100.963302][ T5817] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 100.963363][ T5817] vmalloc_user_noprof+0xad/0xe0 [ 100.963477][ T5817] kcov_ioctl+0x55/0x630 [ 100.963529][ T5817] __se_sys_ioctl+0xfc/0x170 [ 100.963581][ T5817] do_syscall_64+0x166/0x520 [ 100.963685][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.963748][ T5817] page last free pid 5602 tgid 5602 ts 84740413325 stack trace: [ 100.963788][ T5817] free_unref_folios+0xdc6/0x14e0 [ 100.963894][ T5817] folios_put_refs+0x9e9/0xb30 [ 100.963933][ T5817] free_pages_and_swap_cache+0x2ba/0x490 [ 100.963968][ T5817] tlb_flush_mmu+0x6d3/0xa30 [ 100.964063][ T5817] tlb_finish_mmu+0xf4/0x220 [ 100.995385][ T5817] unmap_region+0x2a5/0x330 [ 100.995524][ T5817] vms_complete_munmap_vmas+0x427/0xbe0 [ 100.995588][ T5817] do_vmi_align_munmap+0x3b7/0x4b0 [ 100.995700][ T5817] do_vmi_munmap+0x252/0x2d0 [ 100.995759][ T5817] __vm_munmap+0x241/0x3e0 [ 100.995875][ T5817] __x64_sys_munmap+0x60/0x70 [ 100.995933][ T5817] do_syscall_64+0x166/0x520 [ 100.996040][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.290976][ T5817] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 101.291008][ T5817] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 101.291042][ T5817] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 101.291062][ T5817] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 101.291074][ T5817] page dumped because: unmovable page [ 101.291085][ T5817] page_owner tracks the page as allocated [ 101.291121][ T5817] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87507346074 [ 101.291156][ T5817] post_alloc_hook+0x1f9/0x250 [ 101.291182][ T5817] get_page_from_freelist+0x220f/0x2280 [ 101.291204][ T5817] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 101.291225][ T5817] alloc_pages_mpol+0x21e/0x390 [ 101.291272][ T5817] alloc_pages_noprof+0xb1/0x2b0 [ 101.291292][ T5817] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 101.291313][ T5817] vmalloc_user_noprof+0xad/0xe0 [ 101.291332][ T5817] kcov_ioctl+0x55/0x630 [ 101.291350][ T5817] __se_sys_ioctl+0xfc/0x170 [ 101.291370][ T5817] do_syscall_64+0x166/0x520 [ 101.291426][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.291450][ T5817] page last free pid 1 tgid 1 ts 27562876099 stack trace: [ 101.291465][ T5817] free_pages_prepare+0x9eb/0xaf0 [ 101.291485][ T5817] __free_contig_range_common+0x174/0x340 [ 101.291507][ T5817] destroy_args+0x4e5/0x570 [ 101.291527][ T5817] debug_vm_pgtable+0x3f8/0x410 [ 101.293649][ T5817] do_one_initcall+0x250/0x870 [ 101.293677][ T5817] do_initcall_level+0x10a/0x1a0 [ 101.293699][ T5817] do_initcalls+0x59/0xa0 [ 101.293718][ T5817] kernel_init_freeable+0x29d/0x3e0 [ 101.293763][ T5817] kernel_init+0x22/0x1d0 [ 101.293783][ T5817] ret_from_fork+0x514/0xb70 [ 101.293803][ T5817] ret_from_fork_asm+0x1a/0x30 [ 101.367680][ T58] nintendo 0005:057E:2017.0001: Failed to get joycon info; ret=-110 [ 101.367707][ T58] nintendo 0005:057E:2017.0001: Failed to retrieve controller info; ret=-110 [ 101.367727][ T58] nintendo 0005:057E:2017.0001: Failed to initialize controller; ret=-110 [ 101.396175][ T10] usb 1-1: usb_control_msg returned -71 [ 101.396314][ T10] usbtmc 1-1:1.0: can't read capabilities [ 101.528634][ T5817] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x5fe00 [ 101.528707][ T5817] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.528781][ T5817] raw: 00fff00000000000 ffffea00017f8048 ffffea00017f7fc8 0000000000000000 [ 101.528840][ T5817] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 101.528871][ T5817] page dumped because: unmovable page [ 101.528899][ T5817] page_owner tracks the page as allocated [ 101.528928][ T5817] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5609, tgid 5609 (syz-executor), ts 87506578681 [ 101.529015][ T5817] post_alloc_hook+0x1f9/0x250 [ 101.529054][ T5817] get_page_from_freelist+0x220f/0x2280 [ 101.529077][ T5817] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 101.529097][ T5817] alloc_pages_mpol+0x21e/0x390 [ 101.529117][ T5817] alloc_pages_noprof+0xb1/0x2b0 [ 101.529136][ T5817] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 101.529157][ T5817] vmalloc_user_noprof+0xad/0xe0 [ 101.529176][ T5817] kcov_ioctl+0x55/0x630 [ 101.529195][ T5817] __se_sys_ioctl+0xfc/0x170 [ 101.529215][ T5817] do_syscall_64+0x166/0x520 [ 101.529236][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.529259][ T5817] page last free pid 1 tgid 1 ts 27558293883 stack trace: [ 101.529274][ T5817] free_pages_prepare+0x9eb/0xaf0 [ 101.529295][ T5817] __free_contig_range_common+0x174/0x340 [ 101.529315][ T5817] destroy_args+0x4e5/0x570 [ 101.529335][ T5817] debug_vm_pgtable+0x3f8/0x410 [ 101.529355][ T5817] do_one_initcall+0x250/0x870 [ 101.529375][ T5817] do_initcall_level+0x10a/0x1a0 [ 101.529403][ T5817] do_initcalls+0x59/0xa0 [ 101.529422][ T5817] kernel_init_freeable+0x29d/0x3e0 [ 101.529442][ T5817] kernel_init+0x22/0x1d0 [ 101.529460][ T5817] ret_from_fork+0x514/0xb70 [ 101.529479][ T5817] ret_from_fork_asm+0x1a/0x30 [ 101.750414][ T58] nintendo 0005:057E:2017.0001: probe - fail = -110 [ 101.750542][ T58] nintendo 0005:057E:2017.0001: probe with driver nintendo failed with error -110 [ 101.795102][ T10] usb 1-1: USB disconnect, device number 2 [ 102.251212][ T5827] Bluetooth: ISO socket layer initialized [ 102.269245][ T5827] Bluetooth: MGMT ver 1.23 [ 102.316180][ T5815] syz.2.18 (5815): drop_caches: 2 [ 102.816241][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 103.238199][ T58] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.391833][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 103.392620][ T58] usb 2-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 103.393590][ T58] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 103.393616][ T58] usb 2-1: config 0 has no interface number 0 [ 103.393662][ T58] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.396121][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.396145][ T58] usb 2-1: Product: syz [ 103.396160][ T58] usb 2-1: Manufacturer: syz [ 103.396174][ T58] usb 2-1: SerialNumber: syz [ 103.464047][ T58] usb 2-1: config 0 descriptor?? [ 103.482894][ T58] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.608322][ T5837] NFSD: Unable to initialize client recovery tracking! (-110) [ 103.608345][ T5837] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 103.608359][ T5837] NFSD: starting 90-second grace period (net f000047c) [ 103.729320][ T5861] rnbd_client L203: map_device: Unknown parameter or missing value 'hello' [ 103.757354][ T3258] usb 2-1: Failed to submit usb control message: -71 [ 103.757384][ T3258] usb 2-1: unable to send the bmi data to the device: -71 [ 103.757397][ T3258] usb 2-1: unable to get target info from device [ 103.757422][ T3258] usb 2-1: could not get target info (-71) [ 103.757560][ T3258] usb 2-1: could not probe fw (-71) [ 103.765906][ T5708] usb 2-1: USB disconnect, device number 7 [ 103.970417][ T5864] syz.3.33 (5864): drop_caches: 2 [ 104.091160][ T5864] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 104.091193][ T5864] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 104.091233][ T5864] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 104.091253][ T5864] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 104.091280][ T5864] page dumped because: unmovable page [ 104.091291][ T5864] page_owner info is not present (never set?) [ 104.147375][ T5864] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 104.147406][ T5864] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 104.147440][ T5864] raw: 017ff00000002000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 104.147461][ T5864] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 104.147474][ T5864] page dumped because: unmovable page [ 104.147485][ T5864] page_owner info is not present (never set?) [ 104.210499][ T5864] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 104.210532][ T5864] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 104.210566][ T5864] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 104.210587][ T5864] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 104.210601][ T5864] page dumped because: unmovable page [ 104.210612][ T5864] page_owner info is not present (never set?) [ 104.262291][ T5864] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 104.262323][ T5864] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 104.262357][ T5864] raw: 017ff00000002000 ffffea0004000008 ffffea0004000008 0000000000000000 [ 104.262378][ T5864] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 104.262391][ T5864] page dumped because: unmovable page [ 104.262403][ T5864] page_owner info is not present (never set?) [ 104.327275][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 104.327310][ T5864] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.327329][ T5864] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.327352][ T5864] page_type: f5(slab) [ 104.327374][ T5864] raw: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 104.327395][ T5864] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 104.327418][ T5864] head: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 104.327438][ T5864] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 104.327460][ T5864] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 104.327480][ T5864] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 104.327493][ T5864] page dumped because: unmovable page [ 104.327504][ T5864] page_owner tracks the page as allocated [ 104.327512][ T5864] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4990, tgid 4990 (udevd), ts 36566074431 [ 104.327549][ T5864] post_alloc_hook+0x1f9/0x250 [ 104.327575][ T5864] get_page_from_freelist+0x220f/0x2280 [ 104.327597][ T5864] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 104.327619][ T5864] allocate_slab+0x7d/0x5e0 [ 104.327639][ T5864] refill_objects+0x2d5/0x350 [ 104.327658][ T5864] __pcs_replace_empty_main+0x2c8/0x6c0 [ 104.327679][ T5864] __kmalloc_noprof+0x476/0x710 [ 104.327707][ T5864] tomoyo_realpath_from_path+0xef/0x640 [ 104.327729][ T5864] tomoyo_path_number_perm+0x246/0x5f0 [ 104.327751][ T5864] tomoyo_path_mknod+0x14a/0x1a0 [ 104.327771][ T5864] security_path_mknod+0x176/0x370 [ 104.327792][ T5864] lookup_open+0x5e3/0x1970 [ 104.327812][ T5864] path_openat+0x673/0x1da0 [ 104.327830][ T5864] do_file_open+0x23e/0x4a0 [ 104.327848][ T5864] do_sys_openat2+0x115/0x200 [ 104.327868][ T5864] __x64_sys_openat+0x138/0x170 [ 104.327887][ T5864] page last free pid 1 tgid 1 ts 28486833209 stack trace: [ 104.327902][ T5864] free_pages_prepare+0x9eb/0xaf0 [ 104.327922][ T5864] __free_contig_range_common+0x174/0x340 [ 104.327944][ T5864] destroy_args+0x4e5/0x570 [ 104.327964][ T5864] debug_vm_pgtable+0x3f8/0x410 [ 104.327983][ T5864] do_one_initcall+0x250/0x870 [ 104.328004][ T5864] do_initcall_level+0x10a/0x1a0 [ 104.328025][ T5864] do_initcalls+0x59/0xa0 [ 104.328044][ T5864] kernel_init_freeable+0x29d/0x3e0 [ 104.334838][ T5864] kernel_init+0x22/0x1d0 [ 104.334909][ T5864] ret_from_fork+0x514/0xb70 [ 104.334963][ T5864] ret_from_fork_asm+0x1a/0x30 [ 104.469579][ T5701] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.500941][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 104.500970][ T5864] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.500988][ T5864] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.501009][ T5864] page_type: f5(slab) [ 104.501030][ T5864] raw: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 104.501051][ T5864] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 104.501073][ T5864] head: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 104.501183][ T5864] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 104.501309][ T5864] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 104.501361][ T5864] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 104.501393][ T5864] page dumped because: unmovable page [ 104.501424][ T5864] page_owner tracks the page as allocated [ 104.501446][ T5864] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 52955878034 [ 104.501541][ T5864] post_alloc_hook+0x1f9/0x250 [ 104.501605][ T5864] get_page_from_freelist+0x220f/0x2280 [ 104.501665][ T5864] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 104.503024][ T5864] allocate_slab+0x7d/0x5e0 [ 104.503088][ T5864] refill_objects+0x2d5/0x350 [ 104.503141][ T5864] __pcs_replace_empty_main+0x2c8/0x6c0 [ 104.503184][ T5864] kmem_cache_alloc_lru_noprof+0x37e/0x5f0 [ 104.503239][ T5864] shmem_alloc_inode+0x28/0x40 [ 104.503291][ T5864] alloc_inode+0x6a/0x1b0 [ 104.503334][ T5864] new_inode+0x1f/0x170 [ 104.503385][ T5864] shmem_get_inode+0x3a4/0x1030 [ 104.503437][ T5864] shmem_symlink+0xa2/0x4d0 [ 104.503467][ T5864] vfs_symlink+0x18e/0x330 [ 104.503518][ T5864] filename_symlinkat+0x1cd/0x410 [ 104.525738][ T5864] __se_sys_symlink+0x4d/0x2b0 [ 104.525829][ T5864] do_syscall_64+0x166/0x520 [ 104.525883][ T5864] page last free pid 4981 tgid 4981 ts 52884813291 stack trace: [ 104.525931][ T5864] __free_frozen_pages+0xc97/0xd90 [ 104.525985][ T5864] __slab_free+0x269/0x2c0 [ 104.526036][ T5864] qlist_free_all+0x99/0x100 [ 104.526080][ T5864] kasan_quarantine_reduce+0x148/0x160 [ 104.526132][ T5864] __kasan_slab_alloc+0x22/0x80 [ 104.526177][ T5864] __kmalloc_cache_noprof+0x29a/0x600 [ 104.526223][ T5864] kernfs_fop_open+0x38c/0xd20 [ 104.526273][ T5864] do_dentry_open+0x80e/0x1360 [ 104.526323][ T5864] vfs_open_consume+0x4a/0x350 [ 104.526368][ T5864] path_openat+0x14a6/0x1da0 [ 104.526421][ T5864] do_file_open+0x23e/0x4a0 [ 104.526464][ T5864] do_sys_openat2+0x115/0x200 [ 104.581179][ T5864] __x64_sys_openat+0x138/0x170 [ 104.581292][ T5864] do_syscall_64+0x166/0x520 [ 104.581353][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.623299][ T5868] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa53d6a4 pfn:0x68000 [ 104.623378][ T5868] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 104.623461][ T5868] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 104.623502][ T5868] raw: 00000007fa53d6a4 0000000000000000 0000000400000002 0000000000000000 [ 104.623533][ T5868] page dumped because: unmovable page [ 104.623563][ T5868] page_owner tracks the page as allocated [ 104.623584][ T5868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87384093471 [ 104.623668][ T5868] post_alloc_hook+0x1f9/0x250 [ 104.623729][ T5868] get_page_from_freelist+0x220f/0x2280 [ 104.623781][ T5868] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 104.623842][ T5868] alloc_pages_mpol+0x21e/0x390 [ 104.623893][ T5868] alloc_pages_noprof+0xb1/0x2b0 [ 104.623945][ T5868] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 104.624026][ T5868] vmalloc_user_noprof+0xad/0xe0 [ 104.624084][ T5868] kcov_ioctl+0x55/0x630 [ 104.624127][ T5868] __se_sys_ioctl+0xfc/0x170 [ 104.624180][ T5868] do_syscall_64+0x166/0x520 [ 104.624233][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.624292][ T5868] page last free pid 5602 tgid 5602 ts 84740413325 stack trace: [ 104.624326][ T5868] free_unref_folios+0xdc6/0x14e0 [ 104.624447][ T5868] folios_put_refs+0x9e9/0xb30 [ 104.624501][ T5868] free_pages_and_swap_cache+0x2ba/0x490 [ 104.624555][ T5868] tlb_flush_mmu+0x6d3/0xa30 [ 104.624600][ T5868] tlb_finish_mmu+0xf4/0x220 [ 104.624650][ T5868] unmap_region+0x2a5/0x330 [ 104.624693][ T5868] vms_complete_munmap_vmas+0x427/0xbe0 [ 104.635211][ T5868] do_vmi_align_munmap+0x3b7/0x4b0 [ 104.635289][ T5868] do_vmi_munmap+0x252/0x2d0 [ 104.635339][ T5868] __vm_munmap+0x241/0x3e0 [ 104.635389][ T5868] __x64_sys_munmap+0x60/0x70 [ 104.635438][ T5868] do_syscall_64+0x166/0x520 [ 104.635489][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.692400][ T5701] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 104.740867][ T5864] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 104.741005][ T5864] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 104.741089][ T5864] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 104.741200][ T5864] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 104.741238][ T5864] page dumped because: unmovable page [ 104.741268][ T5864] page_owner tracks the page as allocated [ 104.741343][ T5864] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87507346074 [ 104.741437][ T5864] post_alloc_hook+0x1f9/0x250 [ 104.741490][ T5864] get_page_from_freelist+0x220f/0x2280 [ 104.741513][ T5864] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 104.750970][ T5864] alloc_pages_mpol+0x21e/0x390 [ 104.751002][ T5864] alloc_pages_noprof+0xb1/0x2b0 [ 104.751022][ T5864] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 104.751045][ T5864] vmalloc_user_noprof+0xad/0xe0 [ 104.751064][ T5864] kcov_ioctl+0x55/0x630 [ 104.751103][ T5864] __se_sys_ioctl+0xfc/0x170 [ 104.751172][ T5864] do_syscall_64+0x166/0x520 [ 104.751227][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.751295][ T5864] page last free pid 1 tgid 1 ts 27562876099 stack trace: [ 104.751338][ T5864] free_pages_prepare+0x9eb/0xaf0 [ 104.751393][ T5864] __free_contig_range_common+0x174/0x340 [ 104.751445][ T5864] destroy_args+0x4e5/0x570 [ 104.751510][ T5864] debug_vm_pgtable+0x3f8/0x410 [ 104.751571][ T5864] do_one_initcall+0x250/0x870 [ 104.751625][ T5864] do_initcall_level+0x10a/0x1a0 [ 104.751678][ T5864] do_initcalls+0x59/0xa0 [ 104.751722][ T5864] kernel_init_freeable+0x29d/0x3e0 [ 104.751774][ T5864] kernel_init+0x22/0x1d0 [ 104.751824][ T5864] ret_from_fork+0x514/0xb70 [ 104.751869][ T5864] ret_from_fork_asm+0x1a/0x30 [ 104.757548][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.757623][ T5701] usb 1-1: Product: syz [ 104.757658][ T5701] usb 1-1: Manufacturer: syz [ 104.757699][ T5701] usb 1-1: SerialNumber: syz [ 105.129530][ T5864] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0x0 pfn:0x5fe00 [ 105.129604][ T5864] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 105.129686][ T5864] raw: 00fff00000000000 ffffea00017f8048 ffffea00017f7fc8 0000000000000000 [ 105.129733][ T5864] raw: 0000000000000000 0000000000000000 0000000300000001 0000000000000000 [ 105.129764][ T5864] page dumped because: unmovable page [ 105.129794][ T5864] page_owner tracks the page as allocated [ 105.129815][ T5864] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5609, tgid 5609 (syz-executor), ts 87506578681 [ 105.129900][ T5864] post_alloc_hook+0x1f9/0x250 [ 105.129970][ T5864] get_page_from_freelist+0x220f/0x2280 [ 105.130018][ T5864] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 105.130070][ T5864] alloc_pages_mpol+0x21e/0x390 [ 105.130121][ T5864] alloc_pages_noprof+0xb1/0x2b0 [ 105.130173][ T5864] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 105.130225][ T5864] vmalloc_user_noprof+0xad/0xe0 [ 105.130269][ T5864] kcov_ioctl+0x55/0x630 [ 105.130320][ T5864] __se_sys_ioctl+0xfc/0x170 [ 105.130371][ T5864] do_syscall_64+0x166/0x520 [ 105.130424][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.130478][ T5864] page last free pid 1 tgid 1 ts 27558293883 stack trace: [ 105.130520][ T5864] free_pages_prepare+0x9eb/0xaf0 [ 105.130571][ T5864] __free_contig_range_common+0x174/0x340 [ 105.130624][ T5864] destroy_args+0x4e5/0x570 [ 105.130683][ T5864] debug_vm_pgtable+0x3f8/0x410 [ 105.130736][ T5864] do_one_initcall+0x250/0x870 [ 105.130801][ T5864] do_initcall_level+0x10a/0x1a0 [ 105.130893][ T5864] do_initcalls+0x59/0xa0 [ 105.130948][ T5864] kernel_init_freeable+0x29d/0x3e0 [ 105.130988][ T5864] kernel_init+0x22/0x1d0 [ 105.172566][ T5864] ret_from_fork+0x514/0xb70 [ 105.172640][ T5864] ret_from_fork_asm+0x1a/0x30 [ 105.552064][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.686441][ T5347] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 105.704065][ T5347] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 105.881009][ T5694] usb 1-1: USB disconnect, device number 3 [ 105.960318][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 105.975720][ T5347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.118880][ T5347] usb 4-1: New USB device found: idVendor=06cb, idProduct=81a7, bcdDevice=1.00 [ 106.120088][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.395698][ T5888] device-mapper: table: 248:0: too large device [ 106.395713][ T5888] device-mapper: ioctl: error adding target to table [ 106.469912][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.486796][ T5877] ceph: No mds server is up or the cluster is laggy [ 106.593835][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 106.594082][ T10] ath9k_htc: Failed to initialize the device [ 106.597674][ T5694] usb 1-1: ath9k_htc: USB layer deinitialized [ 106.928241][ T5694] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 106.945891][ T5347] usbhid 4-1:1.0: can't add hid device: -71 [ 106.946012][ T5347] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 106.969734][ T5347] usb 4-1: USB disconnect, device number 2 [ 107.087508][ T5694] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 107.088582][ T5694] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.088625][ T5694] usb 1-1: can't read configurations, error -71 [ 107.738375][ T5894] NFSD: Unable to initialize client recovery tracking! (-110) [ 107.738398][ T5894] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 107.738411][ T5894] NFSD: starting 90-second grace period (net f0000555) [ 108.037296][ T5913] syz.1.49 (5913): drop_caches: 2 [ 108.121004][ T5916] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 108.121034][ T5916] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 108.121067][ T5916] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 108.121087][ T5916] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 108.121100][ T5916] page dumped because: unmovable page [ 108.121111][ T5916] page_owner info is not present (never set?) [ 108.148828][ T5916] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 108.148900][ T5916] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 108.148975][ T5916] raw: 017ff00000002000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 108.149027][ T5916] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 108.149059][ T5916] page dumped because: unmovable page [ 108.149082][ T5916] page_owner info is not present (never set?) [ 108.169232][ T5916] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 108.169259][ T5916] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 108.169295][ T5916] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 108.169313][ T5916] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 108.169326][ T5916] page dumped because: unmovable page [ 108.169336][ T5916] page_owner info is not present (never set?) [ 108.257987][ T5916] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 108.258462][ T5916] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 108.258548][ T5916] raw: 017ff00000002000 ffffea0004000008 ffffea0004000008 0000000000000000 [ 108.258600][ T5916] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 108.258632][ T5916] page dumped because: unmovable page [ 108.258662][ T5916] page_owner info is not present (never set?) [ 108.316574][ T5916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 108.316604][ T5916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.316623][ T5916] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.316644][ T5916] page_type: f5(slab) [ 108.316671][ T5916] raw: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 108.316690][ T5916] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 108.316730][ T5916] head: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 108.316751][ T5916] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 108.316772][ T5916] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 108.316793][ T5916] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 108.316806][ T5916] page dumped because: unmovable page [ 108.316822][ T5916] page_owner tracks the page as allocated [ 108.316831][ T5916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4990, tgid 4990 (udevd), ts 36566074431 [ 108.316868][ T5916] post_alloc_hook+0x1f9/0x250 [ 108.316895][ T5916] get_page_from_freelist+0x220f/0x2280 [ 108.316918][ T5916] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.316940][ T5916] allocate_slab+0x7d/0x5e0 [ 108.316960][ T5916] refill_objects+0x2d5/0x350 [ 108.316979][ T5916] __pcs_replace_empty_main+0x2c8/0x6c0 [ 108.317000][ T5916] __kmalloc_noprof+0x476/0x710 [ 108.317021][ T5916] tomoyo_realpath_from_path+0xef/0x640 [ 108.317044][ T5916] tomoyo_path_number_perm+0x246/0x5f0 [ 108.317066][ T5916] tomoyo_path_mknod+0x14a/0x1a0 [ 108.317086][ T5916] security_path_mknod+0x176/0x370 [ 108.317107][ T5916] lookup_open+0x5e3/0x1970 [ 108.317127][ T5916] path_openat+0x673/0x1da0 [ 108.317145][ T5916] do_file_open+0x23e/0x4a0 [ 108.317164][ T5916] do_sys_openat2+0x115/0x200 [ 108.317184][ T5916] __x64_sys_openat+0x138/0x170 [ 108.317204][ T5916] page last free pid 1 tgid 1 ts 28486833209 stack trace: [ 108.317219][ T5916] free_pages_prepare+0x9eb/0xaf0 [ 108.317239][ T5916] __free_contig_range_common+0x174/0x340 [ 108.317266][ T5916] destroy_args+0x4e5/0x570 [ 108.317286][ T5916] debug_vm_pgtable+0x3f8/0x410 [ 108.317307][ T5916] do_one_initcall+0x250/0x870 [ 108.317329][ T5916] do_initcall_level+0x10a/0x1a0 [ 108.317350][ T5916] do_initcalls+0x59/0xa0 [ 108.317369][ T5916] kernel_init_freeable+0x29d/0x3e0 [ 108.317389][ T5916] kernel_init+0x22/0x1d0 [ 108.317408][ T5916] ret_from_fork+0x514/0xb70 [ 108.317428][ T5916] ret_from_fork_asm+0x1a/0x30 [ 108.375419][ T5694] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.400478][ T5916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 108.400549][ T5916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.400593][ T5916] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.400637][ T5916] page_type: f5(slab) [ 108.400688][ T5916] raw: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 108.400738][ T5916] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 108.400793][ T5916] head: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 108.400843][ T5916] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 108.400894][ T5916] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 108.400943][ T5916] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 108.400973][ T5916] page dumped because: unmovable page [ 108.400995][ T5916] page_owner tracks the page as allocated [ 108.401015][ T5916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 52955878034 [ 108.401104][ T5916] post_alloc_hook+0x1f9/0x250 [ 108.401164][ T5916] get_page_from_freelist+0x220f/0x2280 [ 108.401222][ T5916] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.401273][ T5916] allocate_slab+0x7d/0x5e0 [ 108.401321][ T5916] refill_objects+0x2d5/0x350 [ 108.401365][ T5916] __pcs_replace_empty_main+0x2c8/0x6c0 [ 108.401414][ T5916] kmem_cache_alloc_lru_noprof+0x37e/0x5f0 [ 108.401472][ T5916] shmem_alloc_inode+0x28/0x40 [ 108.401515][ T5916] alloc_inode+0x6a/0x1b0 [ 108.401563][ T5916] new_inode+0x1f/0x170 [ 108.401611][ T5916] shmem_get_inode+0x3a4/0x1030 [ 108.401661][ T5916] shmem_symlink+0xa2/0x4d0 [ 108.401711][ T5916] vfs_symlink+0x18e/0x330 [ 108.401753][ T5916] filename_symlinkat+0x1cd/0x410 [ 108.401796][ T5916] __se_sys_symlink+0x4d/0x2b0 [ 108.413410][ T5916] do_syscall_64+0x166/0x520 [ 108.413441][ T5916] page last free pid 4981 tgid 4981 ts 52884813291 stack trace: [ 108.413457][ T5916] __free_frozen_pages+0xc97/0xd90 [ 108.413479][ T5916] __slab_free+0x269/0x2c0 [ 108.413497][ T5916] qlist_free_all+0x99/0x100 [ 108.413516][ T5916] kasan_quarantine_reduce+0x148/0x160 [ 108.413535][ T5916] __kasan_slab_alloc+0x22/0x80 [ 108.413554][ T5916] __kmalloc_cache_noprof+0x29a/0x600 [ 108.413573][ T5916] kernfs_fop_open+0x38c/0xd20 [ 108.413592][ T5916] do_dentry_open+0x80e/0x1360 [ 108.413610][ T5916] vfs_open_consume+0x4a/0x350 [ 108.413628][ T5916] path_openat+0x14a6/0x1da0 [ 108.413648][ T5916] do_file_open+0x23e/0x4a0 [ 108.413689][ T5916] do_sys_openat2+0x115/0x200 [ 108.413746][ T5916] __x64_sys_openat+0x138/0x170 [ 108.413793][ T5916] do_syscall_64+0x166/0x520 [ 108.413855][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.577362][ T5916] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa53d6a4 pfn:0x68000 [ 108.577435][ T5916] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 108.577519][ T5916] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 108.577570][ T5916] raw: 00000007fa53d6a4 0000000000000000 0000000400000002 0000000000000000 [ 108.577602][ T5916] page dumped because: unmovable page [ 108.577631][ T5916] page_owner tracks the page as allocated [ 108.577646][ T5916] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87384093471 [ 108.577723][ T5916] post_alloc_hook+0x1f9/0x250 [ 108.577780][ T5916] get_page_from_freelist+0x220f/0x2280 [ 108.577840][ T5916] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.577892][ T5916] alloc_pages_mpol+0x21e/0x390 [ 108.577945][ T5916] alloc_pages_noprof+0xb1/0x2b0 [ 108.577996][ T5916] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 108.578208][ T5916] vmalloc_user_noprof+0xad/0xe0 [ 108.578270][ T5916] kcov_ioctl+0x55/0x630 [ 108.578322][ T5916] __se_sys_ioctl+0xfc/0x170 [ 108.578375][ T5916] do_syscall_64+0x166/0x520 [ 108.578427][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.578489][ T5916] page last free pid 5602 tgid 5602 ts 84740413325 stack trace: [ 108.578531][ T5916] free_unref_folios+0xdc6/0x14e0 [ 108.578597][ T5916] folios_put_refs+0x9e9/0xb30 [ 108.578656][ T5916] free_pages_and_swap_cache+0x2ba/0x490 [ 108.578727][ T5916] tlb_flush_mmu+0x6d3/0xa30 [ 108.578772][ T5916] tlb_finish_mmu+0xf4/0x220 [ 108.578828][ T5916] unmap_region+0x2a5/0x330 [ 108.578896][ T5916] vms_complete_munmap_vmas+0x427/0xbe0 [ 108.578942][ T5916] do_vmi_align_munmap+0x3b7/0x4b0 [ 108.584918][ T5916] do_vmi_munmap+0x252/0x2d0 [ 108.585000][ T5916] __vm_munmap+0x241/0x3e0 [ 108.585046][ T5916] __x64_sys_munmap+0x60/0x70 [ 108.585097][ T5916] do_syscall_64+0x166/0x520 [ 108.585150][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.629272][ T5921] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 108.629350][ T5921] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 108.629430][ T5921] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 108.629481][ T5921] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 108.629511][ T5921] page dumped because: unmovable page [ 108.629539][ T5921] page_owner tracks the page as allocated [ 108.629560][ T5921] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87507346074 [ 108.629640][ T5921] post_alloc_hook+0x1f9/0x250 [ 108.629700][ T5921] get_page_from_freelist+0x220f/0x2280 [ 108.629763][ T5921] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.629827][ T5921] alloc_pages_mpol+0x21e/0x390 [ 108.629884][ T5921] alloc_pages_noprof+0xb1/0x2b0 [ 108.629940][ T5921] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 108.629991][ T5921] vmalloc_user_noprof+0xad/0xe0 [ 108.630041][ T5921] kcov_ioctl+0x55/0x630 [ 108.630083][ T5921] __se_sys_ioctl+0xfc/0x170 [ 108.630131][ T5921] do_syscall_64+0x166/0x520 [ 108.630181][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630234][ T5921] page last free pid 1 tgid 1 ts 27562876099 stack trace: [ 108.630273][ T5921] free_pages_prepare+0x9eb/0xaf0 [ 108.630322][ T5921] __free_contig_range_common+0x174/0x340 [ 108.630373][ T5921] destroy_args+0x4e5/0x570 [ 108.630422][ T5921] debug_vm_pgtable+0x3f8/0x410 [ 108.630472][ T5921] do_one_initcall+0x250/0x870 [ 108.630521][ T5921] do_initcall_level+0x10a/0x1a0 [ 108.630571][ T5921] do_initcalls+0x59/0xa0 [ 108.630613][ T5921] kernel_init_freeable+0x29d/0x3e0 [ 108.630662][ T5921] kernel_init+0x22/0x1d0 [ 108.630704][ T5921] ret_from_fork+0x514/0xb70 [ 108.630755][ T5921] ret_from_fork_asm+0x1a/0x30 [ 108.717094][ T5694] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 108.717139][ T5694] usb 3-1: no configurations [ 108.717153][ T5694] usb 3-1: can't read configurations, error -22 [ 108.756677][ T5916] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x5fe00 [ 108.756754][ T5916] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.756866][ T5916] raw: 00fff00000000000 ffffea00017f8048 ffffea00017f7fc8 0000000000000000 [ 108.756928][ T5916] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 108.756979][ T5916] page dumped because: unmovable page [ 108.757041][ T5916] page_owner tracks the page as allocated [ 108.757073][ T5916] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5609, tgid 5609 (syz-executor), ts 87506578681 [ 108.757208][ T5916] post_alloc_hook+0x1f9/0x250 [ 108.757337][ T5916] get_page_from_freelist+0x220f/0x2280 [ 108.757435][ T5916] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 108.757546][ T5916] alloc_pages_mpol+0x21e/0x390 [ 108.757608][ T5916] alloc_pages_noprof+0xb1/0x2b0 [ 108.757629][ T5916] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 108.757696][ T5916] vmalloc_user_noprof+0xad/0xe0 [ 108.757763][ T5916] kcov_ioctl+0x55/0x630 [ 108.757826][ T5916] __se_sys_ioctl+0xfc/0x170 [ 108.757877][ T5916] do_syscall_64+0x166/0x520 [ 108.757929][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.757989][ T5916] page last free pid 1 tgid 1 ts 27558293883 stack trace: [ 108.758030][ T5916] free_pages_prepare+0x9eb/0xaf0 [ 108.774854][ T5916] __free_contig_range_common+0x174/0x340 [ 108.774944][ T5916] destroy_args+0x4e5/0x570 [ 108.774996][ T5916] debug_vm_pgtable+0x3f8/0x410 [ 108.775047][ T5916] do_one_initcall+0x250/0x870 [ 108.775099][ T5916] do_initcall_level+0x10a/0x1a0 [ 108.775152][ T5916] do_initcalls+0x59/0xa0 [ 108.775202][ T5916] kernel_init_freeable+0x29d/0x3e0 [ 108.775263][ T5916] kernel_init+0x22/0x1d0 [ 108.775307][ T5916] ret_from_fork+0x514/0xb70 [ 108.775358][ T5916] ret_from_fork_asm+0x1a/0x30 [ 109.000522][ T5694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.489853][ T5694] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 109.489900][ T5694] usb 3-1: no configurations [ 109.489914][ T5694] usb 3-1: can't read configurations, error -22 [ 109.490236][ T5694] usb usb3-port1: attempt power cycle [ 109.828486][ T5694] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.850126][ T5694] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 109.850179][ T5694] usb 3-1: no configurations [ 109.850194][ T5694] usb 3-1: can't read configurations, error -22 [ 109.874138][ T5701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.922488][ T5950] syz.1.71 (5950): drop_caches: 2 [ 109.978226][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.981538][ T5951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 109.981569][ T5951] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 109.981603][ T5951] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 109.981624][ T5951] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.981637][ T5951] page dumped because: unmovable page [ 109.981649][ T5951] page_owner info is not present (never set?) [ 109.983117][ T5951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 109.983142][ T5951] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 109.983172][ T5951] raw: 017ff00000002000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 109.983193][ T5951] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.983206][ T5951] page dumped because: unmovable page [ 109.983217][ T5951] page_owner info is not present (never set?) [ 109.984499][ T5951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 109.984526][ T5951] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 109.984557][ T5951] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 109.984578][ T5951] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.984591][ T5951] page dumped because: unmovable page [ 109.984602][ T5951] page_owner info is not present (never set?) [ 109.985888][ T5951] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000 [ 109.985914][ T5951] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 109.985962][ T5951] raw: 017ff00000002000 ffffea0004000008 ffffea0004000008 0000000000000000 [ 109.985983][ T5951] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.985997][ T5951] page dumped because: unmovable page [ 109.986008][ T5951] page_owner info is not present (never set?) [ 110.007050][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 110.007122][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.007173][ T5951] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.007219][ T5951] page_type: f5(slab) [ 110.007279][ T5951] raw: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 110.007324][ T5951] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 110.007378][ T5951] head: 00fff00000000040 ffff88813ff25140 dead000000000100 dead000000000122 [ 110.007460][ T5951] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 110.007513][ T5951] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 110.007563][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 110.007594][ T5951] page dumped because: unmovable page [ 110.007618][ T5951] page_owner tracks the page as allocated [ 110.007639][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4990, tgid 4990 (udevd), ts 36566074431 [ 110.007740][ T5951] post_alloc_hook+0x1f9/0x250 [ 110.007803][ T5951] get_page_from_freelist+0x220f/0x2280 [ 110.007863][ T5951] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 110.007915][ T5951] allocate_slab+0x7d/0x5e0 [ 110.007966][ T5951] refill_objects+0x2d5/0x350 [ 110.008010][ T5951] __pcs_replace_empty_main+0x2c8/0x6c0 [ 110.013970][ T5951] __kmalloc_noprof+0x476/0x710 [ 110.014042][ T5951] tomoyo_realpath_from_path+0xef/0x640 [ 110.014102][ T5951] tomoyo_path_number_perm+0x246/0x5f0 [ 110.018520][ T5951] tomoyo_path_mknod+0x14a/0x1a0 [ 110.018598][ T5951] security_path_mknod+0x176/0x370 [ 110.018651][ T5951] lookup_open+0x5e3/0x1970 [ 110.018711][ T5951] path_openat+0x673/0x1da0 [ 110.018766][ T5951] do_file_open+0x23e/0x4a0 [ 110.018816][ T5951] do_sys_openat2+0x115/0x200 [ 110.018900][ T5951] __x64_sys_openat+0x138/0x170 [ 110.018950][ T5951] page last free pid 1 tgid 1 ts 28486833209 stack trace: [ 110.018991][ T5951] free_pages_prepare+0x9eb/0xaf0 [ 110.019044][ T5951] __free_contig_range_common+0x174/0x340 [ 110.019095][ T5951] destroy_args+0x4e5/0x570 [ 110.019146][ T5951] debug_vm_pgtable+0x3f8/0x410 [ 110.019194][ T5951] do_one_initcall+0x250/0x870 [ 110.019252][ T5951] do_initcall_level+0x10a/0x1a0 [ 110.019318][ T5951] do_initcalls+0x59/0xa0 [ 110.019369][ T5951] kernel_init_freeable+0x29d/0x3e0 [ 110.019420][ T5951] kernel_init+0x22/0x1d0 [ 110.019470][ T5951] ret_from_fork+0x514/0xb70 [ 110.019513][ T5951] ret_from_fork_asm+0x1a/0x30 [ 110.024209][ T5694] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 110.024246][ T5694] usb 3-1: no configurations [ 110.024259][ T5694] usb 3-1: can't read configurations, error -22 [ 110.038768][ T5694] usb usb3-port1: unable to enumerate USB device [ 110.065977][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 110.066049][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.066093][ T5951] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.066146][ T5951] page_type: f5(slab) [ 110.066192][ T5951] raw: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 110.066251][ T5951] raw: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 110.066319][ T5951] head: 00fff00000000040 ffff88801c6bec80 dead000000000100 dead000000000122 [ 110.066377][ T5951] head: 0000000000000000 0000000200150015 00000000f5000000 0000000000000000 [ 110.066429][ T5951] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 110.066480][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 110.066511][ T5951] page dumped because: unmovable page [ 110.066534][ T5951] page_owner tracks the page as allocated [ 110.066555][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 52955878034 [ 110.066646][ T5951] post_alloc_hook+0x1f9/0x250 [ 110.066717][ T5951] get_page_from_freelist+0x220f/0x2280 [ 110.066772][ T5951] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 110.066824][ T5951] allocate_slab+0x7d/0x5e0 [ 110.066876][ T5951] refill_objects+0x2d5/0x350 [ 110.066994][ T5951] __pcs_replace_empty_main+0x2c8/0x6c0 [ 110.067054][ T5951] kmem_cache_alloc_lru_noprof+0x37e/0x5f0 [ 110.067107][ T5951] shmem_alloc_inode+0x28/0x40 [ 110.067158][ T5951] alloc_inode+0x6a/0x1b0 [ 110.067195][ T5951] new_inode+0x1f/0x170 [ 110.067239][ T5951] shmem_get_inode+0x3a4/0x1030 [ 110.067292][ T5951] shmem_symlink+0xa2/0x4d0 [ 110.067342][ T5951] vfs_symlink+0x18e/0x330 [ 110.067386][ T5951] filename_symlinkat+0x1cd/0x410 [ 110.067437][ T5951] __se_sys_symlink+0x4d/0x2b0 [ 110.067487][ T5951] do_syscall_64+0x166/0x520 [ 110.067540][ T5951] page last free pid 4981 tgid 4981 ts 52884813291 stack trace: [ 110.067581][ T5951] __free_frozen_pages+0xc97/0xd90 [ 110.067626][ T5951] __slab_free+0x269/0x2c0 [ 110.067685][ T5951] qlist_free_all+0x99/0x100 [ 110.067743][ T5951] kasan_quarantine_reduce+0x148/0x160 [ 110.067803][ T5951] __kasan_slab_alloc+0x22/0x80 [ 110.067855][ T5951] __kmalloc_cache_noprof+0x29a/0x600 [ 110.067907][ T5951] kernfs_fop_open+0x38c/0xd20 [ 110.067952][ T5951] do_dentry_open+0x80e/0x1360 [ 110.068006][ T5951] vfs_open_consume+0x4a/0x350 [ 110.072436][ T5701] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 110.093307][ T5951] path_openat+0x14a6/0x1da0 [ 110.093388][ T5951] do_file_open+0x23e/0x4a0 [ 110.093432][ T5951] do_sys_openat2+0x115/0x200 [ 110.093483][ T5951] __x64_sys_openat+0x138/0x170 [ 110.093533][ T5951] do_syscall_64+0x166/0x520 [ 110.093665][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.148392][ T5764] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.167961][ T5951] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fa53d6a4 pfn:0x68000 [ 110.167989][ T5951] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 110.168030][ T5951] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 110.168429][ T5951] raw: 00000007fa53d6a4 0000000000000000 0000000400000002 0000000000000000 [ 110.168463][ T5951] page dumped because: unmovable page [ 110.168493][ T5951] page_owner tracks the page as allocated [ 110.168514][ T5951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87384093471 [ 110.168592][ T5951] post_alloc_hook+0x1f9/0x250 [ 110.168655][ T5951] get_page_from_freelist+0x220f/0x2280 [ 110.168715][ T5951] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 110.168768][ T5951] alloc_pages_mpol+0x21e/0x390 [ 110.168820][ T5951] alloc_pages_noprof+0xb1/0x2b0 [ 110.168872][ T5951] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 110.168925][ T5951] vmalloc_user_noprof+0xad/0xe0 [ 110.168975][ T5951] kcov_ioctl+0x55/0x630 [ 110.169019][ T5951] __se_sys_ioctl+0xfc/0x170 [ 110.169082][ T5951] do_syscall_64+0x166/0x520 [ 110.169135][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.169194][ T5951] page last free pid 5602 tgid 5602 ts 84740413325 stack trace: [ 110.169229][ T5951] free_unref_folios+0xdc6/0x14e0 [ 110.169281][ T5951] folios_put_refs+0x9e9/0xb30 [ 110.169332][ T5951] free_pages_and_swap_cache+0x2ba/0x490 [ 110.169392][ T5951] tlb_flush_mmu+0x6d3/0xa30 [ 110.169444][ T5951] tlb_finish_mmu+0xf4/0x220 [ 110.169482][ T5951] unmap_region+0x2a5/0x330 [ 110.177698][ T5951] vms_complete_munmap_vmas+0x427/0xbe0 [ 110.188888][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.188903][ T5951] do_vmi_align_munmap+0x3b7/0x4b0 [ 110.188914][ T5701] usb 1-1: Product: syz [ 110.188929][ T5701] usb 1-1: Manufacturer: syz [ 110.188932][ T5951] do_vmi_munmap+0x252/0x2d0 [ 110.188945][ T5701] usb 1-1: SerialNumber: syz [ 110.188952][ T5951] __vm_munmap+0x241/0x3e0 [ 110.188972][ T5951] __x64_sys_munmap+0x60/0x70 [ 110.188991][ T5951] do_syscall_64+0x166/0x520 [ 110.189011][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.229291][ T5951] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 110.229363][ T5951] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 110.229440][ T5951] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 110.229502][ T5951] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 110.229536][ T5951] page dumped because: unmovable page [ 110.229559][ T5951] page_owner tracks the page as allocated [ 110.229582][ T5951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5607, tgid 5607 (syz-executor), ts 87507346074 [ 110.229686][ T5951] post_alloc_hook+0x1f9/0x250 [ 110.229755][ T5951] get_page_from_freelist+0x220f/0x2280 [ 110.229816][ T5951] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 110.229869][ T5951] alloc_pages_mpol+0x21e/0x390 [ 110.229920][ T5951] alloc_pages_noprof+0xb1/0x2b0 [ 110.229965][ T5951] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 110.230024][ T5951] vmalloc_user_noprof+0xad/0xe0 [ 110.230076][ T5951] kcov_ioctl+0x55/0x630 [ 110.230120][ T5951] __se_sys_ioctl+0xfc/0x170 [ 110.230171][ T5951] do_syscall_64+0x166/0x520 [ 110.230224][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.230285][ T5951] page last free pid 1 tgid 1 ts 27562876099 stack trace: [ 110.230320][ T5951] free_pages_prepare+0x9eb/0xaf0 [ 110.230371][ T5951] __free_contig_range_common+0x174/0x340 [ 110.230424][ T5951] destroy_args+0x4e5/0x570 [ 110.253841][ T5951] debug_vm_pgtable+0x3f8/0x410 [ 110.253923][ T5951] do_one_initcall+0x250/0x870 [ 110.253977][ T5951] do_initcall_level+0x10a/0x1a0 [ 110.254031][ T5951] do_initcalls+0x59/0xa0 [ 110.254090][ T5951] kernel_init_freeable+0x29d/0x3e0 [ 110.254135][ T5951] kernel_init+0x22/0x1d0 [ 110.254187][ T5951] ret_from_fork+0x514/0xb70 [ 110.254238][ T5951] ret_from_fork_asm+0x1a/0x30 [ 110.272670][ T5951] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x5fe00 [ 110.272742][ T5951] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 110.272816][ T5951] raw: 00fff00000000000 ffffea00017f8048 ffffea00017f7fc8 0000000000000000 [ 110.274167][ T5951] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 110.274214][ T5951] page dumped because: unmovable page [ 110.274246][ T5951] page_owner tracks the page as allocated [ 110.274267][ T5951] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5609, tgid 5609 (syz-executor), ts 87506578681 [ 110.274353][ T5951] post_alloc_hook+0x1f9/0x250 [ 110.274416][ T5951] get_page_from_freelist+0x220f/0x2280 [ 110.274469][ T5951] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 110.274530][ T5951] alloc_pages_mpol+0x21e/0x390 [ 110.274576][ T5951] alloc_pages_noprof+0xb1/0x2b0 [ 110.274628][ T5951] __vmalloc_node_range_noprof+0x9c2/0x16f0 [ 110.274681][ T5951] vmalloc_user_noprof+0xad/0xe0 [ 110.274726][ T5951] kcov_ioctl+0x55/0x630 [ 110.274777][ T5951] __se_sys_ioctl+0xfc/0x170 [ 110.274828][ T5951] do_syscall_64+0x166/0x520 [ 110.274880][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.274934][ T5951] page last free pid 1 tgid 1 ts 27558293883 stack trace: [ 110.274975][ T5951] free_pages_prepare+0x9eb/0xaf0 [ 110.275026][ T5951] __free_contig_range_common+0x174/0x340 [ 110.275088][ T5951] destroy_args+0x4e5/0x570 [ 110.275141][ T5951] debug_vm_pgtable+0x3f8/0x410 [ 110.275206][ T5951] do_one_initcall+0x250/0x870 [ 110.275266][ T5951] do_initcall_level+0x10a/0x1a0 [ 110.275327][ T5951] do_initcalls+0x59/0xa0 [ 110.275377][ T5951] kernel_init_freeable+0x29d/0x3e0 [ 110.277151][ T5951] kernel_init+0x22/0x1d0 [ 110.277203][ T5951] ret_from_fork+0x514/0xb70 [ 110.277254][ T5951] ret_from_fork_asm+0x1a/0x30 [ 110.337225][ T5764] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 110.389957][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.390029][ T5764] usb 4-1: Product: syz [ 110.390080][ T5764] usb 4-1: Manufacturer: syz [ 110.390115][ T5764] usb 4-1: SerialNumber: syz [ 110.801309][ T5764] usb 4-1: Limiting number of CPorts to U8_MAX [ 110.802108][ T5701] usb 1-1: Limiting number of CPorts to U8_MAX [ 111.161391][ T4931] Bluetooth: hci0: command 0x0401 tx timeout [ 111.161859][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 111.431377][ T5764] debugfs: 'apb_log_enable' already exists in 'greybus' [ 111.435231][ T5701] usb 1-1: failed to set cport flags for port 0 [ 111.435415][ T5701] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 111.503815][ T5701] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 111.526297][ T5701] usb 1-1: USB disconnect, device number 6 [ 111.619501][ T5957] Zero length message leads to an empty skb [ 111.993272][ T5764] usb 4-1: failed to set cport flags for port 0 [ 111.993365][ T5764] greybus greybus2: 0/0:0: failed to enable host cport: -110 [ 112.015249][ T5764] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 112.072723][ T5347] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.165441][ T5980] qnx6: Unable to read first mmi superblock [ 112.202356][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.83'. [ 112.239153][ T5347] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 112.242090][ T5347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.242111][ T5347] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.257028][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.257100][ T5347] usb 2-1: Product: syz [ 112.257142][ T5347] usb 2-1: Manufacturer: syz [ 112.257184][ T5347] usb 2-1: SerialNumber: syz [ 112.423605][ T5990] PM: hibernation: hibernation entry [ 112.510450][ T5347] usb 2-1: Limiting number of CPorts to U8_MAX [ 112.788155][ T5694] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.948968][ T5694] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.950161][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.950214][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.952991][ T5694] usb 1-1: config 0 descriptor?? [ 113.018469][ T5347] usb 2-1: failed to set cport flags for port 0 [ 113.018552][ T5347] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 113.033778][ T5347] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 113.241374][ T5990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.243166][ T5990] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.247623][ T5990] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.271110][ T5990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.271185][ T5990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.273709][ T5990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.276725][ T5990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.276838][ T5990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.291457][ T5990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.317381][ T5990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.317491][ T5990] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.335200][ T5990] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.360244][ T5694] ath6kl: Failed to read usb control message: -32 [ 113.360282][ T5694] ath6kl: Unable to read the bmi data from the device: -32 [ 113.360293][ T5694] ath6kl: Unable to recv target info: -32 [ 113.361283][ T5694] ath6kl: Failed to init ath6kl core: -32 [ 113.361781][ T5694] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 113.536228][ T13] Filesystems sync: 0.190 seconds [ 113.545961][ T5990] Freezing user space processes [ 113.558621][ T5990] Freezing user space processes completed (elapsed 0.012 seconds) [ 113.558849][ T5990] OOM killer disabled. [ 113.582199][ T5990] PM: hibernation: Preallocating image memory [ 113.639183][ T5990] page:ffffea0000e00000 is uninitialized and poisoned [ 113.639202][ T5990] page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page)) [ 113.639216][ T5990] There is not page extension available. [ 113.639331][ T5990] ------------[ cut here ]------------ [ 113.639336][ T5990] kernel BUG at ./include/linux/mm.h:2571! [ 113.639371][ T5990] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 113.676425][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) [ 113.685556][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.695646][ T5990] RIP: 0010:mark_free_pages+0x49e/0x4b0 [ 113.701223][ T5990] Code: 5d e9 46 6c 5c 0a e8 d1 0e 23 00 90 0f 0b e8 a9 a1 59 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 a4 26 7e 8e e8 63 7d 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90 [ 113.720861][ T5990] RSP: 0018:ffffc90004f57ad8 EFLAGS: 00010046 [ 113.726977][ T5990] RAX: 30895f3e42989c00 RBX: 0000000000008fff RCX: 30895f3e42989c00 [ 113.734983][ T5990] RDX: ffffc90005da9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 113.742977][ T5990] RBP: 0000000000000000 R08: ffffffff8faa9903 R09: 1ffffffff1f55320 [ 113.750968][ T5990] R10: dffffc0000000000 R11: fffffbfff1f55321 R12: ffff88813fffbb00 [ 113.758956][ T5990] R13: 0000000000038000 R14: ffffffffffffffff R15: 0300000000000000 [ 113.766956][ T5990] FS: 00007f16e368e6c0(0000) GS:ffff88812462e000(0000) knlGS:0000000000000000 [ 113.775910][ T5990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.782501][ T5990] CR2: 00007ff3fe936faf CR3: 0000000036754000 CR4: 00000000003526f0 [ 113.790475][ T5990] Call Trace: [ 113.793767][ T5990] [ 113.796709][ T5990] hibernate_preallocate_memory+0x14f/0x750 [ 113.802619][ T5990] hibernation_snapshot+0xd5/0x3d0 [ 113.807738][ T5990] hibernate+0x29f/0x6a0 [ 113.811984][ T5990] state_store+0x234/0x290 [ 113.816403][ T5990] ? __pfx_sysfs_kf_write+0x10/0x10 [ 113.821606][ T5990] kernfs_fop_write_iter+0x3a4/0x540 [ 113.826893][ T5990] vfs_write+0x612/0xba0 [ 113.831137][ T5990] ? __pfx_vfs_write+0x10/0x10 [ 113.835900][ T5990] ? __fget_files+0x3a2/0x420 [ 113.840578][ T5990] ? __fget_files+0x2a/0x420 [ 113.845164][ T5990] ? fdget+0x1ac/0x250 [ 113.849227][ T5990] ksys_write+0x150/0x270 [ 113.853553][ T5990] ? __pfx_ksys_write+0x10/0x10 [ 113.858467][ T5990] do_syscall_64+0x166/0x520 [ 113.863084][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.869159][ T5990] ? clear_bhb_loop+0x70/0xc0 [ 113.873846][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.879759][ T5990] RIP: 0033:0x7f16e279e159 [ 113.884197][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.903809][ T5990] RSP: 002b:00007f16e368e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.912227][ T5990] RAX: ffffffffffffffda RBX: 00007f16e2a25fa0 RCX: 00007f16e279e159 [ 113.920204][ T5990] RDX: 0000000000000005 RSI: 0000200000000340 RDI: 0000000000000003 [ 113.928179][ T5990] RBP: 00007f16e283506b R08: 0000000000000000 R09: 0000000000000000 [ 113.936155][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.944122][ T5990] R13: 00007f16e2a26038 R14: 00007f16e2a25fa0 R15: 00007ffee08531b8 [ 113.952110][ T5990] [ 113.955131][ T5990] Modules linked in: [ 113.959052][ T5990] ---[ end trace 0000000000000000 ]--- [ 113.964507][ T5990] RIP: 0010:mark_free_pages+0x49e/0x4b0 [ 113.964529][ T5990] Code: 5d e9 46 6c 5c 0a e8 d1 0e 23 00 90 0f 0b e8 a9 a1 59 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 a4 26 7e 8e e8 63 7d 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90 [ 113.964541][ T5990] RSP: 0018:ffffc90004f57ad8 EFLAGS: 00010046 [ 113.964554][ T5990] RAX: 30895f3e42989c00 RBX: 0000000000008fff RCX: 30895f3e42989c00 [ 113.964565][ T5990] RDX: ffffc90005da9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 113.964575][ T5990] RBP: 0000000000000000 R08: ffffffff8faa9903 R09: 1ffffffff1f55320 [ 113.964585][ T5990] R10: dffffc0000000000 R11: fffffbfff1f55321 R12: ffff88813fffbb00 [ 113.964597][ T5990] R13: 0000000000038000 R14: ffffffffffffffff R15: 0300000000000000 [ 113.964608][ T5990] FS: 00007f16e368e6c0(0000) GS:ffff88812462e000(0000) knlGS:0000000000000000 [ 113.964621][ T5990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.964631][ T5990] CR2: 00007ff3fe936faf CR3: 0000000036754000 CR4: 00000000003526f0 [ 113.964647][ T5990] Kernel panic - not syncing: Fatal exception [ 115.189256][ T5990] Shutting down cpus with NMI [ 115.194623][ T5990] Kernel Offset: disabled [ 115.198960][ T5990] Rebooting in 86400 seconds..