last executing test programs: 5.941157144s ago: executing program 0 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)) 5.68183171s ago: executing program 2 (id=630): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.68060041s ago: executing program 0 (id=631): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000880)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x8, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xd, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000100)="1000000011000000000000000000000000000000000001", 0x17) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004c099) close(r5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.439053255s ago: executing program 2 (id=633): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) write$cgroup_devices(r2, &(0x7f0000001800)=ANY=[], 0xfffffeff) recvmsg$unix(r3, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x2021) sync_file_range(r0, 0x101, 0x5, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x100) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000500)=@buf={0x9a, &(0x7f0000000540)="2628502feeb986aa69e554635e73e90709456b28abee58a6f972229979b4621dcb1b6a33a2345a215cdf4e76ca3d7ba29f120b5a38d6032065a2478872a9d4c5935f5df2193e014f77cc7d63444cb480d74cfd28f743ca18bef9ddef1163363e9a6dd742571e5cf1253acdaad41686e52fc54b9589a9dd01ebb5d7379cca9628450f8b4d5aa58fa3a897911d745ef5897c4985a3b4f691e402c4"}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000600)={0x3ffffffffffffe96, &(0x7f0000000640)=[{0x2000, 0x5}]}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x88841, 0x0) listen(0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 3.281570521s ago: executing program 0 (id=636): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc0145b0e, &(0x7f00000006c0)={0x0, 0x0, 0xfffffff8, 0xfffffffe}) 3.202828288s ago: executing program 4 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000280)='2', 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x300) 2.352343264s ago: executing program 0 (id=642): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x345441, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000140)=0x653d) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x109, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0xffffffff, 0x0, 0x2, 0xfffefff9, 0x6, 0x1, 0x400]}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2d) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f00000003c0)) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000380)={0xf4, 0x35, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x20, 0x0, 0x0, 0x8}, {0x6, 0xff}]}) r5 = msgget$private(0x0, 0x201) msgrcv(r5, 0x0, 0x0, 0xffffffffffffffff, 0x2000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a010200000010000000000000000a1400000011000100004000000000000a00000a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2.342267755s ago: executing program 2 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./sys\x00', &(0x7f0000001540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f0000001800)="b1", 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001600)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000001640)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f0000001700)={0x1, &(0x7f0000001740)=[{0xe000003, 0x19, &(0x7f0000001780)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r4}, 0x50) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000015c0)=r1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000040)="40000000240001040400000000000000000000000100000000000400030001000000000008000100657473001400028005000100100000000500020003000000", 0x40) 2.237994556s ago: executing program 4 (id=644): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.075728072s ago: executing program 3 (id=646): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$cec(&(0x7f0000000140), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000180)={0xd0, 0x2, 0x0, 0x40000008}) r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000080)={0x1, 0x2d, 0x0, 0x3a, 0x5, 0x2c}, 0x48) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) read$watch_queue(r0, &(0x7f0000000340)=""/221, 0xdd) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1.98878727s ago: executing program 1 (id=647): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000880)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x8, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xd, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000100)="1000000011000000000000000000000000000000000001", 0x17) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004c099) close(r5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.978619951s ago: executing program 2 (id=648): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mlockall(0x3) munmap(&(0x7f00000ca000/0x2000)=nil, 0x2000) write(r0, &(0x7f0000000280), 0x0) 1.738775286s ago: executing program 3 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dummy\x00', 0x42, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x1, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x16, 0x0, @void}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r2, &(0x7f00000003c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r2, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.656398154s ago: executing program 1 (id=650): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000001900)='GPL\x00', 0x7, 0x1000, &(0x7f0000001940)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0xd4, &(0x7f0000002940)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x109e02, 0x0) write(r1, &(0x7f0000000800)='100', 0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r4, 0x5409, 0x4) connect$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000600), &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write(r5, &(0x7f0000002ac0)='dir .', 0x5) write(r5, &(0x7f0000002b00)='bind', 0x4) io_submit(r3, 0x4, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000040)="769f34fd404865fc6e029506d058248e275a80c255430502bbc367148421", 0x1e, 0x4, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f00000001c0)="1e155383706f1ea0d4e248278c5e6c7bb3c14aa34d24fff9ba273ebc91aa8d9a101564e84a201772ae37423df405db95d3df2383c681c9c124f6eeac4e76c1dc928637a71696810e9b8ea232d72e56a5b5999ac054c48cba9e46152b77f3de8fa078c97cdcd78354587028d4c311f24d4e03341c549c9c4e5d814d2763080c82f4598f10b7cc747a61b32f6b4dff24ce85f306925b131591c47a2ec44e26e1fed71c431fdef18d34cdcad42c49b2a48702a47f08830acfe01e8485ab9f5829190771cab1bb033c978c758971cb340dc56972f94bce536b776c2359aeb853dd9ecb245011c5b7c01a2c44185e1bac0e960c525c0b06b32cabf6", 0xf9, 0x4, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xa06, r1, &(0x7f0000000300)="5f8b785ee7b2354c861397aaafd7da9824f6f747a4c149fab5dcf11acf6d55c204958eb9d193c73b093f06ef9f89cee4de091fb4a4d40ca375ef134278a5049cc8ccf2bdb267a31da5c758c8327681cae5b142bdb4ef82f8f6eda8a92ff4106524b8039adda6fd98a6ad7f617b25af29bc3009474ebca5971a59e247fb20d5ac5c87af534f2428c9124aeb9dd1b5e2c4ffad1dc556d5d14bf27191f685e6e366778ae60d2bccf10eb2d8aede9cd88e0c3346c6b8245cc59c0da3919afe5f5c2f6c93a63ee0d623dc2eafc73e436a1c1cd584333b0740", 0xd6, 0x401, 0x0, 0x2, r1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000880)="08a0db8ab567a73a2d8d2486ac9cfb440fa4709385708d7481c374af16f4d3f1459d3fdd7363d878d7e05ef133b7bc015092edaecdde98305e70367e9a3e8505772ac3c61c0f770434faa76d7fb379a77b4cf8f84a8b09a83169036544d58873df51458b9173c047a6cdb5d5543e5c471a21d0ea3ce45a771f72c6af8427bad2acc3d7f85901b4f8d82712351a17604d20ba26527f125c2e6bedb9dedecee7ca20073db257e1d93e157879cc16dc37cbb570f8eca49ef7c0f57c7383a69ae5c0d4badc50e964395e7b6a2a89c76330544646c674ebfcf409b8e6a798683b8a883d781352da989936d932254e811e188d6a99c500759be0cb9a0c8e9c542898075c182aadfeba6468754acf81365b29e26013a68fb7615d6b15b07141835086d0f3ae48ac02fb6b940525bb0e9921d7a4c676a33de580c46d79e86ebcd3aab8519e69a4fd78a907f6c38133974b3732a1bf2c119926a787d5ebe630f4f3924b23565226911d4183514df2b3fd1b20c6a3424ca7088f270279193994f0de93444be7a4efb4c845040f1cf37f6a24733afd4a52c774c126f371ab40cb30dbe26f2880973bf038315419e35a6fb1d4cb7690f91517a2d710e4741cbc761272c45c9947da2021a8d4a73f0fb1220b9d007d2cbcf59088ac71148cad9f93f39b114fcd25fc288a73981ab95f8eb7f28bdacc810d245b7aca657ea761a624330059cdf6294327d233bc6298f0f7d22baaf8ba3205bb745a199261a2494c6dabb0e6226725ca30c3653c94997355ef92c49ac44d27434b49bac24b2cee1f9814bcb392259b7280c7b28dc12343c35ff889b6b6c0b795a644349c06f3aa98a9f8b4db3b3a419bb6c700cde1b462106ddc90efd75ac8c7e6ab02abb60414c1a2c9f1ef110c40822a1a6b689fd959772bc8a89b9494ded452bd936075627f527119a8a978b2270d18e383382a286c52ad4ae3548aeb74788f867c42d98683e6c0b4865d3f55e23fa0a91697588a41d192ca50cf0b76ba17c45c06034cc7b2d561a63358d229ef94eee9896169ecb4bfd5ae0afc5f6f874b4fa89dd0c785a6196c96c172a4ec884ad7b35ba4a49420db723a1037248367222fcb702b7d5815637a78c68fb88fede10c5ebf52f0dc0d73d5350ee03a69aeec3f1bbf59454d7f1aee58ce4e2201c53b9626e253f8255f136d1a33d441fdbe6173f66392585c30d260b32122be13d8e142a5ff99047c3e7a1adf53debd9c4ee82b6e285d38f764d352f12d16bfcb081174e8a76e3fbb29cfcf3ceac893d783e4c00f9b2fd619c2c834fe7361ed33fd82d1ca669b5738e3b3eabd51db4a38de39a73f8b0a0d160f9c47a1dd2e78e13e9b0aacc7ff93267936e3dbd44d0082a289472fd0181171c4d6c2705e941af31baacc8da10a1268ba313f861a6e551d7cb708af107dd3142c7ff0b1917a24df06c33c87d9f2eaaadf16cb416138039e01a0edaec33f18c15096ede5fe6cd16b5d8844d7a0186b8c09376f187843bb74857d6ab9cfd3de9d7ca06770475eae5f66d776b3b4da12a5dc370d79329ad02f2621b5608b61fb5acc83476d7301cb6b40e633a6b2c62b485302fd0aacdb55c4ce4d3c5b37603c4ec8ab25cac57646e3667eab90aabdf7ab4c5466168bf164e70e545b2eabf39a2ddac2e48cef7cee2f4a03ac729c5c5319dc21c0bdb52a21a4c8a4c606676d8e02d18cab9f988c158cd39500a70d6cbf70267c79d790b58940a825470c587e04a7e81bffd4cae65a4105cda4b29770f26be9ef9e6b0cf328f8c76d675fed176c92bb2c4be82f93207d2b959a8be83aa63f67dac9d3051b6699589649b8c9b3786e909fca529ea08ee5dda24904461bca5a93e2613db40ae38b8322e44adaecdf1d626bdea2704a6dab087367f41a39c0925d524e716da7ce36abb57f13847b5fb9bf48cdceecd787597afdd4110530f51b353ebd57a59784338d70b1a3d22f1e41accd7ac399646b42a6daacfbae273d49c19de134ab00e0f5cfa6996beaf00a76c63aac3565adf32a22a47a3d82a419fa4147dc17603179ad90befa1005f5b883ec3cd5e2df733dfa860b49c59f6be9cc7cec6cfe7e55286374ff03290545632444786ea7ee508092521d0def7a97392e77b858ea9d5ebddd26c5dc3fe26e8ab4331ded12ccfa26267b9938cefb45505045a6e99cc37acbffb6d2d42596f651b5dcae7ba7027efca535624311b85dd9f1a4737b9ea09f23316e24d21a1d588c8e305653c0d2cefdfe3650af8654ed55994ea2f1f811c668e96211237772ed4ded124d03dfec9286d5f9e73d59056e253fcf8a8a2f06ef7589f968ab98501ef146b22323bcc37603e2bbd14851bb3dbc28791be6f20754d9f0c010947ccf8dc4bae9280e2892596046cc46594e45fd95e7aed3b4dfd035dd194bd805069f7dfee57d88b550192c9cba93c464acd6303d0c85ea4681bd35370c47c2668126dbbab278a1b63274c5398fe21f8fade6fcf1b078ab8ff99852378fe6ad4bb8e215c514f15b4447678b8d08e1d238799c358867d5f4daa23ced9fefcb419f9f3c8a4722ddf0458129d9079f94b679e1925666773255860c5c8bbea5ca7c6e9b8fbd04c20da4484585fae128fe12d76a8b0fc3767dcec160b3fbc7c56b9eb09d9dc17f10c59a8a218b3243937efc9d0cb2182db5c8dc2008fa532bde6b43a0070c7edcb6df9adc28d095d5522c436cf2b31b7885291361d8c6a70287059f1b233e9a5a1f9357be563d74ffe2642804aeb5901f220c389a7bcf61900bfc4c5addc9a4b6542f7ca2a0b6588e581620e90b37949934243bdf5ae89d5f292a456737dcf471eadaffaee0e62977dde7f4be15a864247b505ad6623255ba09357c8b799ef173b8eb25e0f4a68c7c5a3461eacd5cfc0f065bce73a579e1381ec6dbe23d6e54b874a3abd6ba1679e826fa15073f0b2657c30e4aefc3d7523d7c9e98df7f27f67baaf0a0fd745cdd1d10c2d76ce932c8eb7c7a658ee5a443d807eeda52b9d816c4f6936be08e5bda22425ea46dabe2ee12c5b6ae374d9c5631f9655322340203cd0a6343832387f7f86140ae545964e66f81295a397dc8f3c64376fe5e8a4a40a9a8db7dd333a7c4a539d8b42670109333a9c1854fd01da55d62f388a0769c027e316f0f17870d563689f33aa5604cefe386dfb9aba88f2be187c0c2b83a2928db4b5847f7a3d0ec801afb72972374991cea06c0f2b635bf1a38ee7b708ea26d1e0ea45e8369bc929b864f8fcad07633d8218b9f04b02984a6c8333968894b5be18d8f101e8cd1159bcce22b88b86eac613d5fea2c94ef4e8530e861962e1ac5d8cf65c47c648810e11f9c2d46c67c19a6f455809996c6936c04be0d904efef8dddcd7bfadf670314bbada2654eeef607d99ea6e0e1d7cfbc9ed84fe43aa352910efb5fc306027a3f5c6b0df34b58a687b0060e94fdfae459cc3deaf4ae31669a87d2671a0be77a91cc4564d68ea9a0db627779cde872f6e8911d78852c33290a4f9434ba7db026038dc5f9194528fcab7460e901812db3935a1cc9441b2de29a5c220bce27b3e657d0ecb2db56c55a1ad055fb920be4bd27385ba1795d5bdcfb8b042c517302a35a27e60f329251fc18f2a463fda52ca4c9e97d3aa6d93752d88089e2d3fba08b8dcbce91c449f1ee49005c86f6b062a313fc611496364addf973b3d0dcb13bd672c6c24a7763e923f41292a3b27afb94319179b27a7e4b8efd192193674402243eea065a8dbec4b0efe38ab4b6426d7a94f1295bd64c343a7d42145c12925966421c4028c3e4ed08ced1e39a5c007b26420945e905e5cab05136ca05d5eacbccc565e9b4a987cac01e523e3b557440150b00a9fa80740005e044992572a3a6151b1e8b5453434b144555ba87a994331335a9e2f82c596565cd41b8a91b39f09d49b765021eda6984eabcf1d5939aa6f04a9f40c29b8ffacff49888332edc782f00b4b3ae087a669f1787936929534d6889796070069c6289df3ff3a5ec7e8a900d692d2790ab98359b368c249d6cfe5ea409d7fa1576ec8fa2fe84dc0123bf3ab4b3a38a86cd7fdcaca9dfb30c400d3d79f1ae8943618acb04ee687ada5e34254c969a765f71e1890115d311ee69ec4c80b21dace3226482d9b8d49c9d8353c7275323e1d75d270a4e5340c725519731c940a2698bb5913a95c52e3b60949189483bcc2a456db7552f969ec3af3243f28d0146b2b99967489debde290abc7754d0a8b31f397f6a07ef8efb7a175a6352b3f36e7f9ef695ec1340b58d8dbc0e727f90a7d64374fffd25c3405da7062e5a59779259a04030f41ccd140bd18b1538bc8ff417413520d6326c12562ba1c360c02e3d48ca4ba360eeabcc4dd6d97940f65f6279b53f890e0e3018f5370a222dea2a226132be9e3281cd425a5c5143463f80bcb340dac0f75008fa16d7e5e0e66300652ce7e2aa7b57b0d621261ee357556000d11b955da3cdb942662006f2fe0ec9d1314f96d4ba199af8b71d8ef56a185f43d1e6d510bd83263fcb4d002667c38877ba18223b207df2342d78513809f89b8b19cd74e9855d2868e0a65c28c31ab1ee369880fcb47e413a0617b15682ec936bd4618e4a473c2890946b78270c55f9f4896b6da9d759f3db0e0c60b0a56f041c32547c0f64be06eb018df8e2507bb589adcc0e255133efd9163862d2e3c0433c3bd17b104f564af8797011901049667a849b514b012acb919509c1b6ee8f4b82808c156fe8c6992375e209fcbefad9478ec32a95564fb6e9343f37976bd54f3c413b9c3378ef7392e5e4f3518de5705348333baab59fe83c18f35004e1ab26be7d975e81b1f2fb19ff7463777cd0c5d0077d8e2f2ce3b16f2ed4ba9700573be161dce7cc6ff095cf96141bed9963e0496948c364c3bc080240ff0c3aeb2b67130e87980ee7da4da5306d858ea20ba714de7b584ffe73b5a3433eda817569b5284db88a09fdca5163186ff40de744fa304f06d601140010c53e17cf4f5e6f79ebdbe68277e83aaabaf06fa39289f6016da7e7e5b6a539ec324ba62f722a8c37efcf1b836354f7d2b388488c656ff516f5e5c548c3be3b34740325f77660b8fc85b3f3f5692a801645a8ef7d247ad1edcb1187220173397c26b121f08c6c5f92bf9b03c327cb299014804a5d81f0e377a8dc916c905035f38f7460fa3c0e1de997a48d5411dd21a24e67cac6b0c51fd86f88b93abf606dcf48e0c8fdb46dcc333f9547068c2d6d0cb6962906d8812a899d24106b1a4e2d32e01be767621d2a10939a4419cab4cca62eea26dff2adeb90840ae132036698a06edb4f40ece4120c783063d8fc0da7b61bd34a21d8904f3ae677d48d441398c30880a7656e164688dc27242783944a4fec124e4e3702e6d733f40e11b2e5da6ec8335197ad9b15712b2b2cc17b13dda2ccd8a7dee29cec7a7e88400837e19631d8cb39af0f41f350fb67741f9fffd6dbc8ef7b5d03dc6abd75e1219ddcc31e5b2452099022938efe201f9d8696bf8a148da4ba1440f821d9408ba929245bab02a64ce31d4152341fa37a57a1bbf69b3e7d0f86011a8574886e22f5c8553ca8b337483981a53010a268eb9e1923760991352afab5bcbf4713c202cfec6cdbd44630e5cdc072bdc066cac8c053e3f9b1b028d50f38f5479d8d68c6d5fedf5aad08cf123a3bc19dc4aa0e2b5972e3f651a29fe34ec6cdbda9f213e5be82f5dfcf06e4f08dd1322fcc30acc35fa0ed34b958592c9c850ed2068ff", 0xff0, 0x9, 0x0, 0x0, r1}]) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000840)='syzkaller\x00'}, 0x94) 1.635189016s ago: executing program 4 (id=651): timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)={0xd0, 0x2, 0x0, 0x40000008}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x2d, 0x0, 0x3a, 0x5, 0x2c}, 0x48) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1.489103701s ago: executing program 3 (id=652): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc0145b0e, &(0x7f00000006c0)={0x0, 0x0, 0xfffffff8, 0xfffffffe}) 1.322103407s ago: executing program 1 (id=653): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000340), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000003c0)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000440)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000004c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.29499706s ago: executing program 4 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000280)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x300) 1.252033924s ago: executing program 0 (id=655): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) write$cgroup_devices(r2, &(0x7f0000001800)=ANY=[], 0xfffffeff) recvmsg$unix(r3, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x2021) sync_file_range(r0, 0x101, 0x5, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x100) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000500)=@buf={0x9a, &(0x7f0000000540)="2628502feeb986aa69e554635e73e90709456b28abee58a6f972229979b4621dcb1b6a33a2345a215cdf4e76ca3d7ba29f120b5a38d6032065a2478872a9d4c5935f5df2193e014f77cc7d63444cb480d74cfd28f743ca18bef9ddef1163363e9a6dd742571e5cf1253acdaad41686e52fc54b9589a9dd01ebb5d7379cca9628450f8b4d5aa58fa3a897911d745ef5897c4985a3b4f691e402c4"}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000600)={0x3ffffffffffffe96, &(0x7f0000000640)=[{0x2000, 0x5}]}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x88841, 0x0) listen(0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 1.183842111s ago: executing program 1 (id=656): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000001900)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0xd4, &(0x7f0000002940)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x109e02, 0x0) write(r1, &(0x7f0000000800)='100', 0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r4, 0x5409, 0x4) connect$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000600), &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000002a40)='./file0\x00') r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write(r5, &(0x7f0000002ac0)='dir .', 0x5) write(r5, &(0x7f0000002b00)='bind', 0x4) io_submit(r3, 0x4, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000040)="769f34fd404865fc6e029506d058248e275a80c255430502bbc367148421", 0x1e, 0x4, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f00000001c0)="1e155383706f1ea0d4e248278c5e6c7bb3c14aa34d24fff9ba273ebc91aa8d9a101564e84a201772ae37423df405db95d3df2383c681c9c124f6eeac4e76c1dc928637a71696810e9b8ea232d72e56a5b5999ac054c48cba9e46152b77f3de8fa078c97cdcd78354587028d4c311f24d4e03341c549c9c4e5d814d2763080c82f4598f10b7cc747a61b32f6b4dff24ce85f306925b131591c47a2ec44e26e1fed71c431fdef18d34cdcad42c49b2a48702a47f08830acfe01e8485ab9f5829190771cab1bb033c978c758971cb340dc56972f94bce536b776c2359aeb853dd9ecb245011c5b7c01a2c44185e1bac0e960c525c0b06b32cabf6", 0xf9, 0x4, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xa06, r1, &(0x7f0000000300)="5f8b785ee7b2354c861397aaafd7da9824f6f747a4c149fab5dcf11acf6d55c204958eb9d193c73b093f06ef9f89cee4de091fb4a4d40ca375ef134278a5049cc8ccf2bdb267a31da5c758c8327681cae5b142bdb4ef82f8f6eda8a92ff4106524b8039adda6fd98a6ad7f617b25af29bc3009474ebca5971a59e247fb20d5ac5c87af534f2428c9124aeb9dd1b5e2c4ffad1dc556d5d14bf27191f685e6e366778ae60d2bccf10eb2d8aede9cd88e0c3346c6b8245cc59c0da3919afe5f5c2f6c93a63ee0d623dc2eafc73e436a1c1cd584333b0740", 0xd6, 0x401, 0x0, 0x2, r1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000880)="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", 0xff0, 0x9, 0x0, 0x0, r1}]) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000840)='syzkaller\x00'}, 0x94) 1.09492238s ago: executing program 4 (id=657): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x4000000, 0x3e, 0x0, 'queue0\x00', 0x1c52}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x82) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="26eba9fdb4cbab48929e1af1510000000000000005000000000001", 0x1b}], 0x1) 653.725315ms ago: executing program 4 (id=658): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000480)=0x0) io_submit(r5, 0x2, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 598.07412ms ago: executing program 1 (id=659): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$cec(&(0x7f0000000140), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000180)={0xd0, 0x2, 0x0, 0x40000008}) r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000080)={0x1, 0x2d, 0x0, 0x3a, 0x5, 0x2c}, 0x48) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) read$watch_queue(r0, &(0x7f0000000340)=""/221, 0xdd) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 492.936301ms ago: executing program 3 (id=660): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000880)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x8, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xd, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000100)="1000000011000000000000000000000000000000000001", 0x17) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004c099) close(r5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 451.695115ms ago: executing program 2 (id=661): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 320.319998ms ago: executing program 3 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dummy\x00', 0x42, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x1, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x16, 0x0, @void}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r2, &(0x7f00000003c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r2, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 303.40188ms ago: executing program 1 (id=663): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000001900)='GPL\x00', 0x7, 0x1000, &(0x7f0000001940)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0xd4, &(0x7f0000002940)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x109e02, 0x0) write(r1, &(0x7f0000000800)='100', 0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r4, 0x5409, 0x4) connect$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000600), &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write(r5, &(0x7f0000002ac0)='dir .', 0x5) write(r5, &(0x7f0000002b00)='bind', 0x4) io_submit(r3, 0x4, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000040)="769f34fd404865fc6e029506d058248e275a80c255430502bbc367148421", 0x1e, 0x4, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f00000001c0)="1e155383706f1ea0d4e248278c5e6c7bb3c14aa34d24fff9ba273ebc91aa8d9a101564e84a201772ae37423df405db95d3df2383c681c9c124f6eeac4e76c1dc928637a71696810e9b8ea232d72e56a5b5999ac054c48cba9e46152b77f3de8fa078c97cdcd78354587028d4c311f24d4e03341c549c9c4e5d814d2763080c82f4598f10b7cc747a61b32f6b4dff24ce85f306925b131591c47a2ec44e26e1fed71c431fdef18d34cdcad42c49b2a48702a47f08830acfe01e8485ab9f5829190771cab1bb033c978c758971cb340dc56972f94bce536b776c2359aeb853dd9ecb245011c5b7c01a2c44185e1bac0e960c525c0b06b32cabf6", 0xf9, 0x4, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xa06, r1, &(0x7f0000000300)="5f8b785ee7b2354c861397aaafd7da9824f6f747a4c149fab5dcf11acf6d55c204958eb9d193c73b093f06ef9f89cee4de091fb4a4d40ca375ef134278a5049cc8ccf2bdb267a31da5c758c8327681cae5b142bdb4ef82f8f6eda8a92ff4106524b8039adda6fd98a6ad7f617b25af29bc3009474ebca5971a59e247fb20d5ac5c87af534f2428c9124aeb9dd1b5e2c4ffad1dc556d5d14bf27191f685e6e366778ae60d2bccf10eb2d8aede9cd88e0c3346c6b8245cc59c0da3919afe5f5c2f6c93a63ee0d623dc2eafc73e436a1c1cd584333b0740", 0xd6, 0x401, 0x0, 0x2, r1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000880)="08a0db8ab567a73a2d8d2486ac9cfb440fa4709385708d7481c374af16f4d3f1459d3fdd7363d878d7e05ef133b7bc015092edaecdde98305e70367e9a3e8505772ac3c61c0f770434faa76d7fb379a77b4cf8f84a8b09a83169036544d58873df51458b9173c047a6cdb5d5543e5c471a21d0ea3ce45a771f72c6af8427bad2acc3d7f85901b4f8d82712351a17604d20ba26527f125c2e6bedb9dedecee7ca20073db257e1d93e157879cc16dc37cbb570f8eca49ef7c0f57c7383a69ae5c0d4badc50e964395e7b6a2a89c76330544646c674ebfcf409b8e6a798683b8a883d781352da989936d932254e811e188d6a99c500759be0cb9a0c8e9c542898075c182aadfeba6468754acf81365b29e26013a68fb7615d6b15b07141835086d0f3ae48ac02fb6b940525bb0e9921d7a4c676a33de580c46d79e86ebcd3aab8519e69a4fd78a907f6c38133974b3732a1bf2c119926a787d5ebe630f4f3924b23565226911d4183514df2b3fd1b20c6a3424ca7088f270279193994f0de93444be7a4efb4c845040f1cf37f6a24733afd4a52c774c126f371ab40cb30dbe26f2880973bf038315419e35a6fb1d4cb7690f91517a2d710e4741cbc761272c45c9947da2021a8d4a73f0fb1220b9d007d2cbcf59088ac71148cad9f93f39b114fcd25fc288a73981ab95f8eb7f28bdacc810d245b7aca657ea761a624330059cdf6294327d233bc6298f0f7d22baaf8ba3205bb745a199261a2494c6dabb0e6226725ca30c3653c94997355ef92c49ac44d27434b49bac24b2cee1f9814bcb392259b7280c7b28dc12343c35ff889b6b6c0b795a644349c06f3aa98a9f8b4db3b3a419bb6c700cde1b462106ddc90efd75ac8c7e6ab02abb60414c1a2c9f1ef110c40822a1a6b689fd959772bc8a89b9494ded452bd936075627f527119a8a978b2270d18e383382a286c52ad4ae3548aeb74788f867c42d98683e6c0b4865d3f55e23fa0a91697588a41d192ca50cf0b76ba17c45c06034cc7b2d561a63358d229ef94eee9896169ecb4bfd5ae0afc5f6f874b4fa89dd0c785a6196c96c172a4ec884ad7b35ba4a49420db723a1037248367222fcb702b7d5815637a78c68fb88fede10c5ebf52f0dc0d73d5350ee03a69aeec3f1bbf59454d7f1aee58ce4e2201c53b9626e253f8255f136d1a33d441fdbe6173f66392585c30d260b32122be13d8e142a5ff99047c3e7a1adf53debd9c4ee82b6e285d38f764d352f12d16bfcb081174e8a76e3fbb29cfcf3ceac893d783e4c00f9b2fd619c2c834fe7361ed33fd82d1ca669b5738e3b3eabd51db4a38de39a73f8b0a0d160f9c47a1dd2e78e13e9b0aacc7ff93267936e3dbd44d0082a289472fd0181171c4d6c2705e941af31baacc8da10a1268ba313f861a6e551d7cb708af107dd3142c7ff0b1917a24df06c33c87d9f2eaaadf16cb416138039e01a0edaec33f18c15096ede5fe6cd16b5d8844d7a0186b8c09376f187843bb74857d6ab9cfd3de9d7ca06770475eae5f66d776b3b4da12a5dc370d79329ad02f2621b5608b61fb5acc83476d7301cb6b40e633a6b2c62b485302fd0aacdb55c4ce4d3c5b37603c4ec8ab25cac57646e3667eab90aabdf7ab4c5466168bf164e70e545b2eabf39a2ddac2e48cef7cee2f4a03ac729c5c5319dc21c0bdb52a21a4c8a4c606676d8e02d18cab9f988c158cd39500a70d6cbf70267c79d790b58940a825470c587e04a7e81bffd4cae65a4105cda4b29770f26be9ef9e6b0cf328f8c76d675fed176c92bb2c4be82f93207d2b959a8be83aa63f67dac9d3051b6699589649b8c9b3786e909fca529ea08ee5dda24904461bca5a93e2613db40ae38b8322e44adaecdf1d626bdea2704a6dab087367f41a39c0925d524e716da7ce36abb57f13847b5fb9bf48cdceecd787597afdd4110530f51b353ebd57a59784338d70b1a3d22f1e41accd7ac399646b42a6daacfbae273d49c19de134ab00e0f5cfa6996beaf00a76c63aac3565adf32a22a47a3d82a419fa4147dc17603179ad90befa1005f5b883ec3cd5e2df733dfa860b49c59f6be9cc7cec6cfe7e55286374ff03290545632444786ea7ee508092521d0def7a97392e77b858ea9d5ebddd26c5dc3fe26e8ab4331ded12ccfa26267b9938cefb45505045a6e99cc37acbffb6d2d42596f651b5dcae7ba7027efca535624311b85dd9f1a4737b9ea09f23316e24d21a1d588c8e305653c0d2cefdfe3650af8654ed55994ea2f1f811c668e96211237772ed4ded124d03dfec9286d5f9e73d59056e253fcf8a8a2f06ef7589f968ab98501ef146b22323bcc37603e2bbd14851bb3dbc28791be6f20754d9f0c010947ccf8dc4bae9280e2892596046cc46594e45fd95e7aed3b4dfd035dd194bd805069f7dfee57d88b550192c9cba93c464acd6303d0c85ea4681bd35370c47c2668126dbbab278a1b63274c5398fe21f8fade6fcf1b078ab8ff99852378fe6ad4bb8e215c514f15b4447678b8d08e1d238799c358867d5f4daa23ced9fefcb419f9f3c8a4722ddf0458129d9079f94b679e1925666773255860c5c8bbea5ca7c6e9b8fbd04c20da4484585fae128fe12d76a8b0fc3767dcec160b3fbc7c56b9eb09d9dc17f10c59a8a218b3243937efc9d0cb2182db5c8dc2008fa532bde6b43a0070c7edcb6df9adc28d095d5522c436cf2b31b7885291361d8c6a70287059f1b233e9a5a1f9357be563d74ffe2642804aeb5901f220c389a7bcf61900bfc4c5addc9a4b6542f7ca2a0b6588e581620e90b37949934243bdf5ae89d5f292a456737dcf471eadaffaee0e62977dde7f4be15a864247b505ad6623255ba09357c8b799ef173b8eb25e0f4a68c7c5a3461eacd5cfc0f065bce73a579e1381ec6dbe23d6e54b874a3abd6ba1679e826fa15073f0b2657c30e4aefc3d7523d7c9e98df7f27f67baaf0a0fd745cdd1d10c2d76ce932c8eb7c7a658ee5a443d807eeda52b9d816c4f6936be08e5bda22425ea46dabe2ee12c5b6ae374d9c5631f9655322340203cd0a6343832387f7f86140ae545964e66f81295a397dc8f3c64376fe5e8a4a40a9a8db7dd333a7c4a539d8b42670109333a9c1854fd01da55d62f388a0769c027e316f0f17870d563689f33aa5604cefe386dfb9aba88f2be187c0c2b83a2928db4b5847f7a3d0ec801afb72972374991cea06c0f2b635bf1a38ee7b708ea26d1e0ea45e8369bc929b864f8fcad07633d8218b9f04b02984a6c8333968894b5be18d8f101e8cd1159bcce22b88b86eac613d5fea2c94ef4e8530e861962e1ac5d8cf65c47c648810e11f9c2d46c67c19a6f455809996c6936c04be0d904efef8dddcd7bfadf670314bbada2654eeef607d99ea6e0e1d7cfbc9ed84fe43aa352910efb5fc306027a3f5c6b0df34b58a687b0060e94fdfae459cc3deaf4ae31669a87d2671a0be77a91cc4564d68ea9a0db627779cde872f6e8911d78852c33290a4f9434ba7db026038dc5f9194528fcab7460e901812db3935a1cc9441b2de29a5c220bce27b3e657d0ecb2db56c55a1ad055fb920be4bd27385ba1795d5bdcfb8b042c517302a35a27e60f329251fc18f2a463fda52ca4c9e97d3aa6d93752d88089e2d3fba08b8dcbce91c449f1ee49005c86f6b062a313fc611496364addf973b3d0dcb13bd672c6c24a7763e923f41292a3b27afb94319179b27a7e4b8efd192193674402243eea065a8dbec4b0efe38ab4b6426d7a94f1295bd64c343a7d42145c12925966421c4028c3e4ed08ced1e39a5c007b26420945e905e5cab05136ca05d5eacbccc565e9b4a987cac01e523e3b557440150b00a9fa80740005e044992572a3a6151b1e8b5453434b144555ba87a994331335a9e2f82c596565cd41b8a91b39f09d49b765021eda6984eabcf1d5939aa6f04a9f40c29b8ffacff49888332edc782f00b4b3ae087a669f1787936929534d6889796070069c6289df3ff3a5ec7e8a900d692d2790ab98359b368c249d6cfe5ea409d7fa1576ec8fa2fe84dc0123bf3ab4b3a38a86cd7fdcaca9dfb30c400d3d79f1ae8943618acb04ee687ada5e34254c969a765f71e1890115d311ee69ec4c80b21dace3226482d9b8d49c9d8353c7275323e1d75d270a4e5340c725519731c940a2698bb5913a95c52e3b60949189483bcc2a456db7552f969ec3af3243f28d0146b2b99967489debde290abc7754d0a8b31f397f6a07ef8efb7a175a6352b3f36e7f9ef695ec1340b58d8dbc0e727f90a7d64374fffd25c3405da7062e5a59779259a04030f41ccd140bd18b1538bc8ff417413520d6326c12562ba1c360c02e3d48ca4ba360eeabcc4dd6d97940f65f6279b53f890e0e3018f5370a222dea2a226132be9e3281cd425a5c5143463f80bcb340dac0f75008fa16d7e5e0e66300652ce7e2aa7b57b0d621261ee357556000d11b955da3cdb942662006f2fe0ec9d1314f96d4ba199af8b71d8ef56a185f43d1e6d510bd83263fcb4d002667c38877ba18223b207df2342d78513809f89b8b19cd74e9855d2868e0a65c28c31ab1ee369880fcb47e413a0617b15682ec936bd4618e4a473c2890946b78270c55f9f4896b6da9d759f3db0e0c60b0a56f041c32547c0f64be06eb018df8e2507bb589adcc0e255133efd9163862d2e3c0433c3bd17b104f564af8797011901049667a849b514b012acb919509c1b6ee8f4b82808c156fe8c6992375e209fcbefad9478ec32a95564fb6e9343f37976bd54f3c413b9c3378ef7392e5e4f3518de5705348333baab59fe83c18f35004e1ab26be7d975e81b1f2fb19ff7463777cd0c5d0077d8e2f2ce3b16f2ed4ba9700573be161dce7cc6ff095cf96141bed9963e0496948c364c3bc080240ff0c3aeb2b67130e87980ee7da4da5306d858ea20ba714de7b584ffe73b5a3433eda817569b5284db88a09fdca5163186ff40de744fa304f06d601140010c53e17cf4f5e6f79ebdbe68277e83aaabaf06fa39289f6016da7e7e5b6a539ec324ba62f722a8c37efcf1b836354f7d2b388488c656ff516f5e5c548c3be3b34740325f77660b8fc85b3f3f5692a801645a8ef7d247ad1edcb1187220173397c26b121f08c6c5f92bf9b03c327cb299014804a5d81f0e377a8dc916c905035f38f7460fa3c0e1de997a48d5411dd21a24e67cac6b0c51fd86f88b93abf606dcf48e0c8fdb46dcc333f9547068c2d6d0cb6962906d8812a899d24106b1a4e2d32e01be767621d2a10939a4419cab4cca62eea26dff2adeb90840ae132036698a06edb4f40ece4120c783063d8fc0da7b61bd34a21d8904f3ae677d48d441398c30880a7656e164688dc27242783944a4fec124e4e3702e6d733f40e11b2e5da6ec8335197ad9b15712b2b2cc17b13dda2ccd8a7dee29cec7a7e88400837e19631d8cb39af0f41f350fb67741f9fffd6dbc8ef7b5d03dc6abd75e1219ddcc31e5b2452099022938efe201f9d8696bf8a148da4ba1440f821d9408ba929245bab02a64ce31d4152341fa37a57a1bbf69b3e7d0f86011a8574886e22f5c8553ca8b337483981a53010a268eb9e1923760991352afab5bcbf4713c202cfec6cdbd44630e5cdc072bdc066cac8c053e3f9b1b028d50f38f5479d8d68c6d5fedf5aad08cf123a3bc19dc4aa0e2b5972e3f651a29fe34ec6cdbda9f213e5be82f5dfcf06e4f08dd1322fcc30acc35fa0ed34b958592c9c850ed2068ff", 0xff0, 0x9, 0x0, 0x0, r1}]) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000840)='syzkaller\x00'}, 0x94) 78.189813ms ago: executing program 2 (id=664): timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)={0xd0, 0x2, 0x0, 0x40000008}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x2d, 0x0, 0x3a, 0x5, 0x2c}, 0x48) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 76.691562ms ago: executing program 3 (id=674): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='27', 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x80002, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x12, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): io_submit_one+0xd5/0x1340 [ 142.923891][ T5741] ? lookup_ioctx+0x680/0x680 [ 142.928565][ T5741] ? __might_fault+0xa6/0x120 [ 142.933246][ T5741] ? __might_fault+0xc2/0x120 [ 142.937926][ T5741] ? __might_fault+0xa6/0x120 [ 142.942595][ T5741] __se_sys_io_submit+0x19d/0x310 [ 142.947613][ T5741] ? __x64_sys_io_submit+0x80/0x80 [ 142.952729][ T5741] ? lockdep_hardirqs_on+0x94/0x140 [ 142.957923][ T5741] do_syscall_64+0x4c/0xa0 [ 142.962334][ T5741] ? clear_bhb_loop+0x60/0xb0 [ 142.967005][ T5741] ? clear_bhb_loop+0x60/0xb0 [ 142.971680][ T5741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.977567][ T5741] RIP: 0033:0x7f59f599fb19 [ 142.981974][ T5741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.001592][ T5741] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 143.010008][ T5741] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 143.017972][ T5741] RDX: 00002000000018c0 RSI: 0000000000000004 RDI: 00007f59f6910000 [ 143.025934][ T5741] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.033900][ T5741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.041862][ T5741] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 143.049840][ T5741] [ 143.055877][ T5746] CPU: 1 PID: 5746 Comm: syz.4.383 Not tainted syzkaller #0 [ 143.063193][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 143.073266][ T5746] Call Trace: [ 143.076558][ T5746] [ 143.079499][ T5746] dump_stack_lvl+0x188/0x24e [ 143.084203][ T5746] ? show_regs_print_info+0x12/0x12 [ 143.089427][ T5746] ? load_image+0x410/0x410 [ 143.093948][ T5746] ? __might_sleep+0xd0/0xd0 [ 143.098553][ T5746] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.103601][ T5746] should_fail_ex+0x390/0x4c0 [ 143.108304][ T5746] should_failslab+0x5/0x20 [ 143.112828][ T5746] slab_pre_alloc_hook+0x59/0x300 [ 143.115409][ T4289] Bluetooth: hci0: command 0x0c24 tx timeout [ 143.117856][ T5746] ? sctp_auth_shkey_create+0x77/0x190 [ 143.117884][ T5746] __kmem_cache_alloc_node+0x4f/0x270 [ 143.123904][ T4292] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 143.129283][ T5746] ? sctp_auth_shkey_create+0x77/0x190 [ 143.146173][ T5746] kmalloc_trace+0x26/0xe0 [ 143.150610][ T5746] sctp_auth_shkey_create+0x77/0x190 [ 143.155894][ T5746] sctp_endpoint_new+0x43c/0xa00 [ 143.160843][ T5746] sctp_init_sock+0x95b/0x11c0 [ 143.165631][ T5746] inet_create+0xc25/0xf60 [ 143.170059][ T5746] __sock_create+0x49a/0x940 [ 143.174652][ T5746] __sys_socket+0xc4/0x190 [ 143.179078][ T5746] __x64_sys_socket+0x76/0x80 [ 143.183759][ T5746] do_syscall_64+0x4c/0xa0 [ 143.188172][ T5746] ? clear_bhb_loop+0x60/0xb0 [ 143.192845][ T5746] ? clear_bhb_loop+0x60/0xb0 [ 143.197524][ T5746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.203417][ T5746] RIP: 0033:0x7feb3e19fb19 [ 143.207826][ T5746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.227433][ T5746] RSP: 002b:00007feb3f016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 143.235853][ T5746] RAX: ffffffffffffffda RBX: 00007feb3e425fa0 RCX: 00007feb3e19fb19 [ 143.243819][ T5746] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 143.251782][ T5746] RBP: 00007feb3e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.259836][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.267798][ T5746] R13: 00007feb3e426038 R14: 00007feb3e425fa0 R15: 00007ffe1ca31d38 [ 143.275773][ T5746] [ 143.801667][ T5757] EXT4-fs error: 93 callbacks suppressed [ 143.801719][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.387: Detected aborted journal [ 143.819269][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.387: Detected aborted journal [ 143.831143][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.387: Detected aborted journal [ 143.846514][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.387: Detected aborted journal [ 143.863320][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.387: Detected aborted journal [ 143.936631][ T5759] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.388: Detected aborted journal [ 144.533295][ T5766] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.391: Detected aborted journal [ 144.548263][ T5766] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.391: Detected aborted journal [ 144.562235][ T5767] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.574543][ T5769] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.389: Detected aborted journal [ 144.603627][ T5768] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.390: Detected aborted journal [ 144.977982][ T5790] EXT4-fs: 97 callbacks suppressed [ 144.977996][ T5790] EXT4-fs (sda1): Remounting filesystem read-only [ 145.027015][ T5790] EXT4-fs (sda1): Remounting filesystem read-only [ 145.058322][ T5793] EXT4-fs (sda1): Remounting filesystem read-only [ 145.138861][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.150038][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.158357][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.173261][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.180521][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 145.186639][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 145.198428][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.202093][ T5797] EXT4-fs (sda1): Remounting filesystem read-only [ 145.206677][ T5795] EXT4-fs (sda1): Remounting filesystem read-only [ 145.360258][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.536907][ T5802] 9pnet_virtio: no channels available for device syz [ 145.560254][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 145.571094][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.578970][ T5802] FAULT_INJECTION: forcing a failure. [ 145.578970][ T5802] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.592601][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.614841][ T5802] CPU: 1 PID: 5802 Comm: syz.2.400 Not tainted syzkaller #0 [ 145.620644][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.622138][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 145.622151][ T5802] Call Trace: [ 145.622159][ T5802] [ 145.622167][ T5802] dump_stack_lvl+0x188/0x24e [ 145.622200][ T5802] ? show_regs_print_info+0x12/0x12 [ 145.650443][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.652815][ T5802] ? load_image+0x410/0x410 [ 145.652848][ T5802] ? __cgroup_rstat_updated+0xce/0x350 [ 145.652872][ T5802] ? rcu_read_lock_sched_held+0x86/0x110 [ 145.669123][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.672423][ T5802] ? sched_slice+0x430/0x430 [ 145.672455][ T5802] should_fail_ex+0x390/0x4c0 [ 145.672481][ T5802] get_futex_key+0x1a6/0xe70 [ 145.672503][ T5802] ? futex_setup_timer+0xc0/0xc0 [ 145.672517][ T5802] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.672538][ T5802] ? __lock_acquire+0x7ea0/0x7ea0 [ 145.672561][ T5802] ? lock_chain_count+0x20/0x20 [ 145.672587][ T5802] futex_wait_setup+0xb8/0x270 [ 145.672609][ T5802] ? futex_wait_multiple+0x970/0x970 [ 145.672625][ T5802] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 145.672648][ T5802] ? _raw_spin_unlock+0x40/0x40 [ 145.672672][ T5802] futex_wait+0x1cb/0x640 [ 145.672697][ T5802] ? futex_wait_setup+0x270/0x270 [ 145.672731][ T5802] ? lockdep_hardirqs_on+0x94/0x140 [ 145.689540][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.696720][ T5802] do_futex+0x310/0x320 [ 145.696750][ T5802] ? __ia32_sys_get_robust_list+0x100/0x100 [ 145.696778][ T5802] __se_sys_futex+0x381/0x410 [ 145.696800][ T5802] ? __x64_sys_futex+0xf0/0xf0 [ 145.720473][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.721507][ T5802] ? __x64_sys_futex+0x1d/0xf0 [ 145.721535][ T5802] do_syscall_64+0x4c/0xa0 [ 145.812344][ T5802] ? clear_bhb_loop+0x60/0xb0 [ 145.817047][ T5802] ? clear_bhb_loop+0x60/0xb0 [ 145.821748][ T5802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.827664][ T5802] RIP: 0033:0x7f31f339fb19 [ 145.832093][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.851716][ T5802] RSP: 002b:00007f31f429e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.860149][ T5802] RAX: ffffffffffffffda RBX: 00007f31f3625fa8 RCX: 00007f31f339fb19 [ 145.868135][ T5802] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31f3625fa8 [ 145.876122][ T5802] RBP: 00007f31f3625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 145.884108][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.892094][ T5802] R13: 00007f31f3626038 R14: 00007fffa65053d0 R15: 00007fffa65054b8 [ 145.900095][ T5802] [ 146.088576][ T14] usb 2-1: GET_CAPABILITIES returned 0 [ 146.094278][ T14] usbtmc 2-1:16.0: can't read capabilities [ 146.109622][ T5805] CacheFiles: Failed to register: -95 [ 146.184850][ T5807] 9pnet_virtio: no channels available for device syz [ 146.198005][ T5807] CacheFiles: Failed to register: -95 [ 146.209642][ T5807] FAULT_INJECTION: forcing a failure. [ 146.209642][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.276107][ T5807] CPU: 1 PID: 5807 Comm: syz.3.402 Not tainted syzkaller #0 [ 146.283445][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 146.293520][ T5807] Call Trace: [ 146.296818][ T5807] [ 146.299767][ T5807] dump_stack_lvl+0x188/0x24e [ 146.304482][ T5807] ? show_regs_print_info+0x12/0x12 [ 146.309712][ T5807] ? load_image+0x410/0x410 [ 146.314242][ T5807] ? __lock_acquire+0x7ea0/0x7ea0 [ 146.314423][ T14] usb 2-1: USB disconnect, device number 5 [ 146.319273][ T5807] ? up_read+0x20/0x20 [ 146.319304][ T5807] should_fail_ex+0x390/0x4c0 [ 146.319329][ T5807] _copy_from_user+0x2c/0x170 [ 146.338561][ T5807] io_submit_one+0xd5/0x1340 [ 146.343191][ T5807] ? lookup_ioctx+0x680/0x680 [ 146.347893][ T5807] ? __might_fault+0xa6/0x120 [ 146.352604][ T5807] ? __might_fault+0xc2/0x120 [ 146.357303][ T5807] ? __might_fault+0xa6/0x120 [ 146.362006][ T5807] __se_sys_io_submit+0x19d/0x310 [ 146.367055][ T5807] ? __x64_sys_io_submit+0x80/0x80 [ 146.372202][ T5807] ? lockdep_hardirqs_on+0x94/0x140 [ 146.377428][ T5807] do_syscall_64+0x4c/0xa0 [ 146.381865][ T5807] ? clear_bhb_loop+0x60/0xb0 [ 146.386570][ T5807] ? clear_bhb_loop+0x60/0xb0 [ 146.391276][ T5807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.397190][ T5807] RIP: 0033:0x7f49d299fb19 [ 146.401605][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.421224][ T5807] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 146.429663][ T5807] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 146.437653][ T5807] RDX: 00002000000018c0 RSI: 0000000000000004 RDI: 00007f49d38ab000 [ 146.442116][ T5811] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 146.445622][ T5807] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 146.445638][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.445650][ T5807] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 146.445679][ T5807] [ 147.260297][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 147.447170][ T5824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 147.885590][ T5848] 9pnet_virtio: no channels available for device syz [ 147.936411][ T5848] FAULT_INJECTION: forcing a failure. [ 147.936411][ T5848] name fail_futex, interval 1, probability 0, space 0, times 0 [ 147.960391][ T5848] CPU: 0 PID: 5848 Comm: syz.0.414 Not tainted syzkaller #0 [ 147.967714][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 147.977788][ T5848] Call Trace: [ 147.981080][ T5848] [ 147.984027][ T5848] dump_stack_lvl+0x188/0x24e [ 147.988729][ T5848] ? __kmem_cache_free+0xb6/0x200 [ 147.993776][ T5848] ? vfs_write+0x2dc/0x9a0 [ 147.998206][ T5848] ? show_regs_print_info+0x12/0x12 [ 148.003424][ T5848] ? load_image+0x410/0x410 [ 148.007934][ T5848] should_fail_ex+0x390/0x4c0 [ 148.012611][ T5848] get_futex_key+0x1a6/0xe70 [ 148.017202][ T5848] ? futex_setup_timer+0xc0/0xc0 [ 148.022137][ T5848] ? memset+0x1e/0x40 [ 148.026139][ T5848] futex_wake+0x123/0x4f0 [ 148.030476][ T5848] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 148.037064][ T5848] ? futex_wake_mark+0x150/0x150 [ 148.042002][ T5848] ? cachefiles_daemon_write+0x118/0x6b0 [ 148.047635][ T5848] ? file_end_write+0xd8/0x250 [ 148.052401][ T5848] ? vfs_write+0x777/0x9a0 [ 148.056814][ T5848] do_futex+0x2e2/0x320 [ 148.060970][ T5848] ? file_end_write+0x250/0x250 [ 148.065834][ T5848] ? __ia32_sys_get_robust_list+0x100/0x100 [ 148.071736][ T5848] __se_sys_futex+0x381/0x410 [ 148.076438][ T5848] ? __x64_sys_futex+0xf0/0xf0 [ 148.081201][ T5848] ? __x64_sys_futex+0x1d/0xf0 [ 148.085964][ T5848] do_syscall_64+0x4c/0xa0 [ 148.090384][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 148.095062][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 148.099743][ T5848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.105641][ T5848] RIP: 0033:0x7fce6999fb19 [ 148.110051][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.129830][ T5848] RSP: 002b:00007fce6a8900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.138240][ T5848] RAX: ffffffffffffffda RBX: 00007fce69c25fa8 RCX: 00007fce6999fb19 [ 148.146210][ T5848] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fce69c25fac [ 148.154176][ T5848] RBP: 00007fce69c25fa0 R08: 00351000f7dfa792 R09: 0000000000000000 [ 148.162160][ T5848] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 148.170139][ T5848] R13: 00007fce69c26038 R14: 00007ffd379bffc0 R15: 00007ffd379c00a8 [ 148.178129][ T5848] [ 148.274473][ T5855] 9pnet_virtio: no channels available for device syz [ 148.302328][ T5855] FAULT_INJECTION: forcing a failure. [ 148.302328][ T5855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.346274][ T5855] CPU: 1 PID: 5855 Comm: syz.2.417 Not tainted syzkaller #0 [ 148.353600][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 148.363673][ T5855] Call Trace: [ 148.366965][ T5855] [ 148.369909][ T5855] dump_stack_lvl+0x188/0x24e [ 148.374616][ T5855] ? mt_find+0x157/0x830 [ 148.378882][ T5855] ? show_regs_print_info+0x12/0x12 [ 148.384106][ T5855] ? load_image+0x410/0x410 [ 148.388643][ T5855] should_fail_ex+0x390/0x4c0 [ 148.393345][ T5855] get_futex_key+0x1a6/0xe70 [ 148.397952][ T5855] ? __get_user_4+0x1c/0x30 [ 148.402482][ T5855] ? lock_mm_and_find_vma+0x107/0x2f0 [ 148.407871][ T5855] ? __get_user_4+0x1c/0x30 [ 148.412401][ T5855] ? futex_setup_timer+0xc0/0xc0 [ 148.417355][ T5855] ? fixup_exception+0xdf4/0x1e80 [ 148.422404][ T5855] futex_wake+0x123/0x4f0 [ 148.426752][ T5855] ? ex_get_fixup_type+0x60/0x60 [ 148.431716][ T5855] ? futex_wake_mark+0x150/0x150 [ 148.436686][ T5855] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.442696][ T5855] ? do_user_addr_fault+0x8dd/0xbb0 [ 148.447924][ T5855] ? lock_chain_count+0x20/0x20 [ 148.452803][ T5855] do_futex+0x2e2/0x320 [ 148.456974][ T5855] ? lockdep_hardirqs_on+0x94/0x140 [ 148.462190][ T5855] ? exc_page_fault+0x88/0x100 [ 148.466976][ T5855] ? __ia32_sys_get_robust_list+0x100/0x100 [ 148.472912][ T5855] __se_sys_futex+0x381/0x410 [ 148.472942][ T5855] ? __x64_sys_futex+0xf0/0xf0 [ 148.472967][ T5855] ? __x64_sys_futex+0x1d/0xf0 [ 148.472987][ T5855] do_syscall_64+0x4c/0xa0 [ 148.473011][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 148.473034][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 148.473059][ T5855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.473081][ T5855] RIP: 0033:0x7f31f339fb19 [ 148.473098][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.473112][ T5855] RSP: 002b:00007f31f429e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.473132][ T5855] RAX: ffffffffffffffda RBX: 00007f31f3625fa8 RCX: 00007f31f339fb19 [ 148.473147][ T5855] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f31f3625fac [ 148.473159][ T5855] RBP: 00007f31f3625fa0 R08: 000f82f7785bf470 R09: 0000000000000000 [ 148.473172][ T5855] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 148.473185][ T5855] R13: 00007f31f3626038 R14: 00007fffa65053d0 R15: 00007fffa65054b8 [ 148.473212][ T5855] [ 148.765600][ T5848] CacheFiles: Failed to register: -95 [ 148.814884][ T4263] EXT4-fs error: 77 callbacks suppressed [ 148.814898][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 148.861880][ T5859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.419: Detected aborted journal [ 148.876359][ T5847] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.414: Detected aborted journal [ 148.893416][ T5860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.420: Detected aborted journal [ 148.907822][ T5859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.419: Detected aborted journal [ 148.917450][ T5860] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.420: Detected aborted journal [ 148.940415][ T5862] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.990261][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.019377][ T5863] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.421: Detected aborted journal [ 149.023106][ T5864] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.422: Detected aborted journal [ 149.053508][ T5864] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.422: Detected aborted journal [ 149.062990][ T5863] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.421: Detected aborted journal [ 149.086799][ T5866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 149.220312][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 149.232874][ T22] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 149.342165][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.472985][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.565090][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.644044][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.660447][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 149.666550][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 149.727117][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.814285][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.980907][ T5878] EXT4-fs: 81 callbacks suppressed [ 149.980952][ T5878] EXT4-fs (sda1): Remounting filesystem read-only [ 150.000969][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 150.069229][ T5880] EXT4-fs (sda1): Remounting filesystem read-only [ 150.070216][ T5881] EXT4-fs (sda1): Remounting filesystem read-only [ 150.093691][ T5881] EXT4-fs (sda1): Remounting filesystem read-only [ 150.097772][ T5880] EXT4-fs (sda1): Remounting filesystem read-only [ 150.109873][ T5881] EXT4-fs (sda1): Remounting filesystem read-only [ 150.136586][ T5856] EXT4-fs (sda1): Remounting filesystem read-only [ 150.151083][ T22] usb 3-1: GET_CAPABILITIES returned 0 [ 150.156637][ T22] usbtmc 3-1:16.0: can't read capabilities [ 150.178366][ T4263] EXT4-fs (sda1): Remounting filesystem read-only [ 150.261028][ T5887] EXT4-fs (sda1): Remounting filesystem read-only [ 150.323025][ T5890] 9pnet_virtio: no channels available for device syz [ 150.364791][ T7] usb 3-1: USB disconnect, device number 7 [ 150.384093][ T5894] CacheFiles: Failed to register: -95 [ 150.439675][ T5890] FAULT_INJECTION: forcing a failure. [ 150.439675][ T5890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.477744][ T5890] CPU: 1 PID: 5890 Comm: syz.1.428 Not tainted syzkaller #0 [ 150.485076][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.495145][ T5890] Call Trace: [ 150.498433][ T5890] [ 150.501372][ T5890] dump_stack_lvl+0x188/0x24e [ 150.506075][ T5890] ? show_regs_print_info+0x12/0x12 [ 150.511298][ T5890] ? load_image+0x410/0x410 [ 150.515823][ T5890] ? __lock_acquire+0x7ea0/0x7ea0 [ 150.520871][ T5890] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.526874][ T5890] ? do_user_addr_fault+0x8dd/0xbb0 [ 150.532098][ T5890] should_fail_ex+0x390/0x4c0 [ 150.536800][ T5890] _copy_from_user+0x2c/0x170 [ 150.541502][ T5890] __sys_bpf+0x2ea/0x780 [ 150.545767][ T5890] ? bpf_link_show_fdinfo+0x550/0x550 [ 150.551178][ T5890] ? lock_chain_count+0x20/0x20 [ 150.556058][ T5890] __x64_sys_bpf+0x78/0x90 [ 150.560501][ T5890] do_syscall_64+0x4c/0xa0 [ 150.564940][ T5890] ? clear_bhb_loop+0x60/0xb0 [ 150.569644][ T5890] ? clear_bhb_loop+0x60/0xb0 [ 150.574352][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.580276][ T5890] RIP: 0033:0x7f59f599fb19 [ 150.584702][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.604306][ T5890] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.612717][ T5890] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 150.620687][ T5890] RDX: 0000000000000050 RSI: 0000200000002b40 RDI: 0000000000000000 [ 150.628677][ T5890] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 150.636642][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.644606][ T5890] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 150.652587][ T5890] [ 150.700262][ T5902] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 150.881572][ T5907] 9pnet_virtio: no channels available for device syz [ 150.908541][ T5907] FAULT_INJECTION: forcing a failure. [ 150.908541][ T5907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 150.915624][ T5909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 150.936640][ T5907] CPU: 0 PID: 5907 Comm: syz.3.435 Not tainted syzkaller #0 [ 150.943950][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.954019][ T5907] Call Trace: [ 150.957313][ T5907] [ 150.960256][ T5907] dump_stack_lvl+0x188/0x24e [ 150.964960][ T5907] ? show_regs_print_info+0x12/0x12 [ 150.970187][ T5907] ? load_image+0x410/0x410 [ 150.974710][ T5907] ? stack_trace_save+0xa6/0xf0 [ 150.979586][ T5907] ? __stack_depot_save+0x35/0x480 [ 150.984729][ T5907] should_fail_ex+0x390/0x4c0 [ 150.989518][ T5907] get_futex_key+0x1a6/0xe70 [ 150.994224][ T5907] ? futex_setup_timer+0xc0/0xc0 [ 150.999188][ T5907] futex_wake+0x123/0x4f0 [ 151.003536][ T5907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.009539][ T5907] ? futex_wake_mark+0x150/0x150 [ 151.014504][ T5907] ? lockdep_hardirqs_on+0x94/0x140 [ 151.019726][ T5907] do_futex+0x2e2/0x320 [ 151.023897][ T5907] ? __ia32_sys_get_robust_list+0x100/0x100 [ 151.029812][ T5907] __se_sys_futex+0x381/0x410 [ 151.034514][ T5907] ? __x64_sys_futex+0xf0/0xf0 [ 151.039302][ T5907] ? __x64_sys_futex+0x1d/0xf0 [ 151.044095][ T5907] do_syscall_64+0x4c/0xa0 [ 151.048531][ T5907] ? clear_bhb_loop+0x60/0xb0 [ 151.053234][ T5907] ? clear_bhb_loop+0x60/0xb0 [ 151.057936][ T5907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.063852][ T5907] RIP: 0033:0x7f49d299fb19 [ 151.068281][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.087904][ T5907] RSP: 002b:00007f49d38cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.096345][ T5907] RAX: ffffffffffffffda RBX: 00007f49d2c25fa8 RCX: 00007f49d299fb19 [ 151.104343][ T5907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49d2c25fac [ 151.112358][ T5907] RBP: 00007f49d2c25fa0 R08: 0033463d7bc56a88 R09: 0000000000000000 [ 151.112376][ T5907] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 151.112388][ T5907] R13: 00007f49d2c26038 R14: 00007ffe33058820 R15: 00007ffe33058908 [ 151.112417][ T5907] [ 151.133839][ T5907] CacheFiles: Failed to register: -95 [ 152.140622][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 152.146694][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 152.689937][ T5940] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 152.707732][ T5942] 9pnet_virtio: no channels available for device syz [ 152.722564][ T5942] FAULT_INJECTION: forcing a failure. [ 152.722564][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 152.755762][ T5942] CPU: 0 PID: 5942 Comm: syz.3.446 Not tainted syzkaller #0 [ 152.763091][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.773158][ T5942] Call Trace: [ 152.776443][ T5942] [ 152.779375][ T5942] dump_stack_lvl+0x188/0x24e [ 152.784063][ T5942] ? show_regs_print_info+0x12/0x12 [ 152.789263][ T5942] ? load_image+0x410/0x410 [ 152.793762][ T5942] ? __might_sleep+0xd0/0xd0 [ 152.798346][ T5942] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.803454][ T5942] ? aa_get_newest_label+0xf9/0x5b0 [ 152.808655][ T5942] should_fail_ex+0x390/0x4c0 [ 152.813332][ T5942] should_failslab+0x5/0x20 [ 152.817831][ T5942] slab_pre_alloc_hook+0x59/0x300 [ 152.822861][ T5942] kmem_cache_alloc+0x56/0x2f0 [ 152.827626][ T5942] ? getname_kernel+0x56/0x2f0 [ 152.832390][ T5942] getname_kernel+0x56/0x2f0 [ 152.836985][ T5942] kern_path+0x19/0x50 [ 152.841048][ T5942] cachefiles_add_cache+0x255/0xd60 [ 152.846250][ T5942] ? init_once+0x20/0x20 [ 152.850497][ T5942] ? memcpy+0x3c/0x60 [ 152.854474][ T5942] ? kstrdup+0x52/0x70 [ 152.858543][ T5942] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 152.864088][ T5942] cachefiles_daemon_write+0x5f5/0x6b0 [ 152.869545][ T5942] ? cachefiles_daemon_read+0x440/0x440 [ 152.875089][ T5942] vfs_write+0x2dc/0x9a0 [ 152.879328][ T5942] ? file_end_write+0x250/0x250 [ 152.884172][ T5942] ? __fget_files+0x28/0x460 [ 152.888764][ T5942] ? __fget_files+0x3fc/0x460 [ 152.893442][ T5942] ? __fdget_pos+0x1d4/0x360 [ 152.898028][ T5942] ? ksys_write+0x70/0x260 [ 152.902439][ T5942] ksys_write+0x14d/0x260 [ 152.906766][ T5942] ? __ia32_sys_read+0x80/0x80 [ 152.911532][ T5942] ? lockdep_hardirqs_on+0x94/0x140 [ 152.916726][ T5942] do_syscall_64+0x4c/0xa0 [ 152.921140][ T5942] ? clear_bhb_loop+0x60/0xb0 [ 152.925815][ T5942] ? clear_bhb_loop+0x60/0xb0 [ 152.930506][ T5942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.936399][ T5942] RIP: 0033:0x7f49d299fb19 [ 152.940811][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.960410][ T5942] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.968818][ T5942] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 152.976787][ T5942] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 152.984750][ T5942] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 152.992713][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.000680][ T5942] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 153.008659][ T5942] [ 153.112668][ T5942] CacheFiles: Failed to register: -12 [ 153.137432][ T5949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 153.330491][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.493568][ T5963] 9pnet_virtio: no channels available for device syz [ 153.550436][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 153.566592][ T22] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 153.617346][ T5963] FAULT_INJECTION: forcing a failure. [ 153.617346][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 153.651474][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.730803][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.757268][ T5963] CPU: 1 PID: 5963 Comm: syz.3.452 Not tainted syzkaller #0 [ 153.764596][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.774665][ T5963] Call Trace: [ 153.777955][ T5963] [ 153.780898][ T5963] dump_stack_lvl+0x188/0x24e [ 153.785602][ T5963] ? show_regs_print_info+0x12/0x12 [ 153.790823][ T5963] ? load_image+0x410/0x410 [ 153.795346][ T5963] ? __might_sleep+0xd0/0xd0 [ 153.799945][ T5963] ? __lock_acquire+0x7ea0/0x7ea0 [ 153.804982][ T5963] ? aa_get_newest_label+0xf9/0x5b0 [ 153.810199][ T5963] should_fail_ex+0x390/0x4c0 [ 153.814910][ T5963] should_failslab+0x5/0x20 [ 153.819427][ T5963] slab_pre_alloc_hook+0x59/0x300 [ 153.824472][ T5963] kmem_cache_alloc+0x56/0x2f0 [ 153.829257][ T5963] ? getname_kernel+0x56/0x2f0 [ 153.834039][ T5963] getname_kernel+0x56/0x2f0 [ 153.838647][ T5963] kern_path+0x19/0x50 [ 153.842727][ T5963] cachefiles_add_cache+0x255/0xd60 [ 153.847950][ T5963] ? init_once+0x20/0x20 [ 153.852220][ T5963] ? memcpy+0x3c/0x60 [ 153.856220][ T5963] ? kstrdup+0x52/0x70 [ 153.860318][ T5963] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 153.865888][ T5963] cachefiles_daemon_write+0x5f5/0x6b0 [ 153.871368][ T5963] ? cachefiles_daemon_read+0x440/0x440 [ 153.876930][ T5963] vfs_write+0x2dc/0x9a0 [ 153.881193][ T5963] ? file_end_write+0x250/0x250 [ 153.886067][ T5963] ? __fget_files+0x28/0x460 [ 153.890676][ T5963] ? __fget_files+0x3fc/0x460 [ 153.895393][ T5963] ? __fdget_pos+0x1d4/0x360 [ 153.900006][ T5963] ? ksys_write+0x70/0x260 [ 153.904432][ T5963] ksys_write+0x14d/0x260 [ 153.908774][ T5963] ? __ia32_sys_read+0x80/0x80 [ 153.913555][ T5963] ? lockdep_hardirqs_on+0x94/0x140 [ 153.918772][ T5963] do_syscall_64+0x4c/0xa0 [ 153.923212][ T5963] ? clear_bhb_loop+0x60/0xb0 [ 153.927915][ T5963] ? clear_bhb_loop+0x60/0xb0 [ 153.932610][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.938519][ T5963] RIP: 0033:0x7f49d299fb19 [ 153.942947][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.962563][ T5963] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.970989][ T5963] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 153.978975][ T5963] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 153.986958][ T5963] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 153.994942][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.002921][ T5963] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 154.010918][ T5963] [ 154.080578][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.157157][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.220555][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 154.226629][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 154.243500][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.251870][ T5962] EXT4-fs error: 107 callbacks suppressed [ 154.251914][ T5962] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.452: Detected aborted journal [ 154.273847][ T5963] CacheFiles: Failed to register: -12 [ 154.277913][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.292989][ T5972] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.455: Detected aborted journal [ 154.311605][ T5972] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.455: Detected aborted journal [ 154.366812][ T5974] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.456: Detected aborted journal [ 154.372024][ T5974] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.456: Detected aborted journal [ 154.549723][ T5945] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.447: Detected aborted journal [ 154.564438][ T5980] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.457: Detected aborted journal [ 154.578741][ T22] usb 5-1: GET_CAPABILITIES returned 0 [ 154.588581][ T22] usbtmc 5-1:16.0: can't read capabilities [ 154.621337][ T5958] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.451: Detected aborted journal [ 154.643398][ T5703] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4646: inode #1135: block 215: comm udevd: unable to read itable block [ 154.646194][ T5981] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.458: Detected aborted journal [ 154.851732][ T7] usb 5-1: USB disconnect, device number 2 [ 154.936940][ T5991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 154.991177][ T5995] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 155.006002][ T5990] EXT4-fs: 87 callbacks suppressed [ 155.006014][ T5990] EXT4-fs (sda1): Remounting filesystem read-only [ 155.009612][ T5996] EXT4-fs (sda1): Remounting filesystem read-only [ 155.018415][ T5990] EXT4-fs (sda1): Remounting filesystem read-only [ 155.030585][ T5996] EXT4-fs (sda1): Remounting filesystem read-only [ 155.046576][ T5998] 9pnet_virtio: no channels available for device syz [ 155.054624][ T5998] FAULT_INJECTION: forcing a failure. [ 155.054624][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 155.067680][ T5998] CPU: 0 PID: 5998 Comm: syz.1.462 Not tainted syzkaller #0 [ 155.074985][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.085053][ T5998] Call Trace: [ 155.088343][ T5998] [ 155.091287][ T5998] dump_stack_lvl+0x188/0x24e [ 155.095991][ T5998] ? show_regs_print_info+0x12/0x12 [ 155.101214][ T5998] ? load_image+0x410/0x410 [ 155.105742][ T5998] ? __might_sleep+0xd0/0xd0 [ 155.110348][ T5998] ? __lock_acquire+0x7ea0/0x7ea0 [ 155.115400][ T5998] ? trace_raw_output_contention_end+0xd0/0xd0 [ 155.121577][ T5998] should_fail_ex+0x390/0x4c0 [ 155.126281][ T5998] should_failslab+0x5/0x20 [ 155.130787][ T5998] slab_pre_alloc_hook+0x59/0x300 [ 155.135813][ T5998] ? __might_fault+0xa6/0x120 [ 155.140485][ T5998] ? cachefiles_daemon_bind+0x24f/0x3a0 [ 155.146026][ T5998] __kmem_cache_alloc_node+0x4f/0x270 [ 155.151398][ T5998] ? cachefiles_daemon_write+0x576/0x6b0 [ 155.157032][ T5998] ? cachefiles_daemon_bind+0x24f/0x3a0 [ 155.162596][ T5998] __kmalloc_node_track_caller+0xa0/0x240 [ 155.168316][ T5998] kstrdup+0x37/0x70 [ 155.172223][ T5998] cachefiles_daemon_bind+0x24f/0x3a0 [ 155.177599][ T5998] cachefiles_daemon_write+0x5f5/0x6b0 [ 155.183062][ T5998] ? cachefiles_daemon_read+0x440/0x440 [ 155.188615][ T5998] vfs_write+0x2dc/0x9a0 [ 155.192859][ T5998] ? file_end_write+0x250/0x250 [ 155.197707][ T5998] ? __fget_files+0x28/0x460 [ 155.202297][ T5998] ? __fget_files+0x3fc/0x460 [ 155.206977][ T5998] ? __fdget_pos+0x1d4/0x360 [ 155.211563][ T5998] ? ksys_write+0x70/0x260 [ 155.215971][ T5998] ksys_write+0x14d/0x260 [ 155.220305][ T5998] ? __ia32_sys_read+0x80/0x80 [ 155.225069][ T5998] ? lockdep_hardirqs_on+0x94/0x140 [ 155.230268][ T5998] do_syscall_64+0x4c/0xa0 [ 155.234687][ T5998] ? clear_bhb_loop+0x60/0xb0 [ 155.239362][ T5998] ? clear_bhb_loop+0x60/0xb0 [ 155.244034][ T5998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.249927][ T5998] RIP: 0033:0x7f59f599fb19 [ 155.254339][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.273958][ T5998] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.282377][ T5998] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 155.290346][ T5998] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 155.298314][ T5998] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 155.306295][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.314264][ T5998] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 155.322251][ T5998] [ 155.365669][ T6002] EXT4-fs (sda1): Remounting filesystem read-only [ 155.378854][ T6002] EXT4-fs (sda1): Remounting filesystem read-only [ 155.387215][ T6002] EXT4-fs (sda1): Remounting filesystem read-only [ 155.400473][ T6002] EXT4-fs (sda1): Remounting filesystem read-only [ 155.459979][ T6002] EXT4-fs (sda1): Remounting filesystem read-only [ 155.547592][ T6005] EXT4-fs (sda1): Remounting filesystem read-only [ 156.380495][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 156.386640][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 156.815196][ T6024] 9pnet_virtio: no channels available for device syz [ 156.907742][ T6024] FAULT_INJECTION: forcing a failure. [ 156.907742][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 156.935790][ T6024] CPU: 1 PID: 6024 Comm: syz.1.469 Not tainted syzkaller #0 [ 156.943119][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.953194][ T6024] Call Trace: [ 156.956484][ T6024] [ 156.959424][ T6024] dump_stack_lvl+0x188/0x24e [ 156.964137][ T6024] ? show_regs_print_info+0x12/0x12 [ 156.969360][ T6024] ? load_image+0x410/0x410 [ 156.973891][ T6024] ? __lock_acquire+0x7ea0/0x7ea0 [ 156.978943][ T6024] ? trace_raw_output_contention_end+0xd0/0xd0 [ 156.985122][ T6024] should_fail_ex+0x390/0x4c0 [ 156.989833][ T6024] should_failslab+0x5/0x20 [ 156.994354][ T6024] slab_pre_alloc_hook+0x59/0x300 [ 156.999407][ T6024] ? __might_fault+0xa6/0x120 [ 157.004107][ T6024] ? cachefiles_daemon_dir+0x72/0x100 [ 157.009510][ T6024] __kmem_cache_alloc_node+0x4f/0x270 [ 157.014910][ T6024] ? cachefiles_daemon_dir+0x72/0x100 [ 157.020303][ T6024] __kmalloc_node_track_caller+0xa0/0x240 [ 157.026041][ T6024] ? __might_fault+0xc2/0x120 [ 157.030742][ T6024] kstrdup+0x37/0x70 [ 157.034695][ T6024] cachefiles_daemon_dir+0x72/0x100 [ 157.039916][ T6024] cachefiles_daemon_write+0x5f5/0x6b0 [ 157.045400][ T6024] ? cachefiles_daemon_read+0x440/0x440 [ 157.050966][ T6024] vfs_write+0x2dc/0x9a0 [ 157.055233][ T6024] ? file_end_write+0x250/0x250 [ 157.060100][ T6024] ? __fget_files+0x28/0x460 [ 157.064724][ T6024] ? __fget_files+0x3fc/0x460 [ 157.069523][ T6024] ? __fdget_pos+0x1d4/0x360 [ 157.074139][ T6024] ? ksys_write+0x70/0x260 [ 157.078574][ T6024] ksys_write+0x14d/0x260 [ 157.082924][ T6024] ? __ia32_sys_read+0x80/0x80 [ 157.087708][ T6024] ? lockdep_hardirqs_on+0x94/0x140 [ 157.092927][ T6024] do_syscall_64+0x4c/0xa0 [ 157.097365][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 157.102074][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 157.106781][ T6024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.112699][ T6024] RIP: 0033:0x7f59f599fb19 [ 157.117139][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.136763][ T6024] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.145200][ T6024] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 157.153190][ T6024] RDX: 0000000000000005 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 157.161178][ T6024] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 157.169164][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.177149][ T6024] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 157.185177][ T6024] [ 157.388836][ T6040] 9pnet_virtio: no channels available for device syz [ 157.399460][ T6040] FAULT_INJECTION: forcing a failure. [ 157.399460][ T6040] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.412661][ T6040] CPU: 1 PID: 6040 Comm: syz.3.474 Not tainted syzkaller #0 [ 157.419961][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 157.430021][ T6040] Call Trace: [ 157.433298][ T6040] [ 157.436234][ T6040] dump_stack_lvl+0x188/0x24e [ 157.440946][ T6040] ? security_file_alloc+0x30/0x110 [ 157.446157][ T6040] ? alloc_empty_file+0x90/0x180 [ 157.451095][ T6040] ? show_regs_print_info+0x12/0x12 [ 157.456299][ T6040] ? load_image+0x410/0x410 [ 157.460804][ T6040] ? mark_lock+0x94/0x320 [ 157.465135][ T6040] should_fail_ex+0x390/0x4c0 [ 157.469827][ T6040] get_futex_key+0x1a6/0xe70 [ 157.474445][ T6040] ? futex_setup_timer+0xc0/0xc0 [ 157.479390][ T6040] futex_wake+0x123/0x4f0 [ 157.483723][ T6040] ? futex_wake_mark+0x150/0x150 [ 157.488663][ T6040] ? percpu_counter_add_batch+0x135/0x150 [ 157.494392][ T6040] do_futex+0x2e2/0x320 [ 157.498550][ T6040] ? __ia32_sys_get_robust_list+0x100/0x100 [ 157.504441][ T6040] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.509466][ T6040] __se_sys_futex+0x381/0x410 [ 157.514154][ T6040] ? __x64_sys_futex+0xf0/0xf0 [ 157.518925][ T6040] ? __x64_sys_futex+0x1d/0xf0 [ 157.523712][ T6040] do_syscall_64+0x4c/0xa0 [ 157.528130][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 157.532811][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 157.537488][ T6040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.543377][ T6040] RIP: 0033:0x7f49d299fb19 [ 157.547787][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.567393][ T6040] RSP: 002b:00007f49d38cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.575803][ T6040] RAX: ffffffffffffffda RBX: 00007f49d2c25fa8 RCX: 00007f49d299fb19 [ 157.583773][ T6040] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49d2c25fac [ 157.591737][ T6040] RBP: 00007f49d2c25fa0 R08: 0014e0420449b5be R09: 0000000000000000 [ 157.599700][ T6040] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 157.607666][ T6040] R13: 00007f49d2c26038 R14: 00007ffe33058820 R15: 00007ffe33058908 [ 157.615643][ T6040] [ 157.637229][ T6031] CacheFiles: No cache directory specified [ 157.783731][ T6051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 157.868036][ T6057] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 158.150263][ T4375] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.780345][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 158.786568][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 159.015554][ T4375] usb 2-1: Using ep0 maxpacket: 8 [ 159.028704][ T4375] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 159.065110][ T4375] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.092486][ T4375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.120216][ T4375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.145605][ T4375] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.185811][ T4375] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.215323][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.298361][ T6090] EXT4-fs error: 83 callbacks suppressed [ 159.298401][ T6090] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.489: Detected aborted journal [ 159.349915][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.353979][ T6090] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.489: Detected aborted journal [ 159.388492][ T6092] 9pnet_virtio: no channels available for device syz [ 159.403145][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.403746][ T6092] FAULT_INJECTION: forcing a failure. [ 159.403746][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 159.431349][ T6092] CPU: 0 PID: 6092 Comm: syz.3.489 Not tainted syzkaller #0 [ 159.438664][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.448737][ T6092] Call Trace: [ 159.450981][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.452013][ T6092] [ 159.465793][ T6092] dump_stack_lvl+0x188/0x24e [ 159.470495][ T6092] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.476678][ T6092] ? show_regs_print_info+0x12/0x12 [ 159.481906][ T6092] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.488095][ T6092] should_fail_ex+0x390/0x4c0 [ 159.492797][ T6092] should_failslab+0x5/0x20 [ 159.495385][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.497300][ T6092] slab_pre_alloc_hook+0x59/0x300 [ 159.513159][ T6092] ? __might_fault+0xa6/0x120 [ 159.517851][ T6092] ? cachefiles_daemon_dir+0x72/0x100 [ 159.523244][ T6092] __kmem_cache_alloc_node+0x4f/0x270 [ 159.528640][ T6092] ? cachefiles_daemon_dir+0x72/0x100 [ 159.534036][ T6092] __kmalloc_node_track_caller+0xa0/0x240 [ 159.539774][ T6092] ? __might_fault+0xc2/0x120 [ 159.544475][ T6092] kstrdup+0x37/0x70 [ 159.548390][ T6092] cachefiles_daemon_dir+0x72/0x100 [ 159.553615][ T6092] cachefiles_daemon_write+0x5f5/0x6b0 [ 159.559094][ T6092] ? cachefiles_daemon_read+0x440/0x440 [ 159.564656][ T6092] vfs_write+0x2dc/0x9a0 [ 159.568921][ T6092] ? file_end_write+0x250/0x250 [ 159.573788][ T6092] ? __fget_files+0x28/0x460 [ 159.578399][ T6092] ? __fget_files+0x3fc/0x460 [ 159.583109][ T6092] ? __fdget_pos+0x1d4/0x360 [ 159.587722][ T6092] ? ksys_write+0x70/0x260 [ 159.592154][ T6092] ksys_write+0x14d/0x260 [ 159.596500][ T6092] ? __ia32_sys_read+0x80/0x80 [ 159.601281][ T6092] ? lockdep_hardirqs_on+0x94/0x140 [ 159.606497][ T6092] do_syscall_64+0x4c/0xa0 [ 159.610933][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 159.615627][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 159.620324][ T6092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.626235][ T6092] RIP: 0033:0x7f49d299fb19 [ 159.630664][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.650290][ T6092] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.658721][ T6092] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 159.666711][ T6092] RDX: 0000000000000005 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 159.674701][ T6092] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 159.682693][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.690677][ T6092] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 159.691354][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.698649][ T6092] [ 159.700500][ T6075] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.484: Detected aborted journal [ 159.726969][ T6054] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.479: Detected aborted journal [ 159.750350][ T6091] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.490: Detected aborted journal [ 159.757867][ T6096] CacheFiles: No cache directory specified [ 159.782778][ T4375] usb 2-1: GET_CAPABILITIES returned 0 [ 159.788504][ T4375] usbtmc 2-1:16.0: can't read capabilities [ 159.889716][ T6098] 9pnet_virtio: no channels available for device syz [ 159.918535][ T6098] FAULT_INJECTION: forcing a failure. [ 159.918535][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 159.940378][ T6098] CPU: 1 PID: 6098 Comm: syz.4.491 Not tainted syzkaller #0 [ 159.947698][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.957768][ T6098] Call Trace: [ 159.961048][ T6098] [ 159.963981][ T6098] dump_stack_lvl+0x188/0x24e [ 159.968663][ T6098] ? show_regs_print_info+0x12/0x12 [ 159.973859][ T6098] ? load_image+0x410/0x410 [ 159.978361][ T6098] ? __might_sleep+0xd0/0xd0 [ 159.982955][ T6098] ? __lock_acquire+0x7ea0/0x7ea0 [ 159.987984][ T6098] should_fail_ex+0x390/0x4c0 [ 159.992660][ T6098] should_failslab+0x5/0x20 [ 159.997160][ T6098] slab_pre_alloc_hook+0x59/0x300 [ 160.002186][ T6098] ? security_prepare_creds+0x47/0x130 [ 160.007640][ T6098] __kmem_cache_alloc_node+0x4f/0x270 [ 160.013008][ T6098] ? security_prepare_creds+0x47/0x130 [ 160.018458][ T6098] __kmalloc+0xa3/0x240 [ 160.022603][ T6098] ? get_task_cred+0x1f/0x370 [ 160.027280][ T6098] security_prepare_creds+0x47/0x130 [ 160.032556][ T6098] prepare_kernel_cred+0x33b/0x6c0 [ 160.037671][ T6098] cachefiles_get_security_ID+0x1d/0x120 [ 160.043300][ T6098] cachefiles_add_cache+0x1ce/0xd60 [ 160.048499][ T6098] ? init_once+0x20/0x20 [ 160.052743][ T6098] ? memcpy+0x3c/0x60 [ 160.056720][ T6098] ? kstrdup+0x52/0x70 [ 160.060787][ T6098] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 160.066328][ T6098] cachefiles_daemon_write+0x5f5/0x6b0 [ 160.071782][ T6098] ? cachefiles_daemon_read+0x440/0x440 [ 160.077319][ T6098] vfs_write+0x2dc/0x9a0 [ 160.081559][ T6098] ? file_end_write+0x250/0x250 [ 160.086401][ T6098] ? __fget_files+0x28/0x460 [ 160.090987][ T6098] ? __fget_files+0x3fc/0x460 [ 160.095667][ T6098] ? __fdget_pos+0x1d4/0x360 [ 160.100258][ T6098] ? ksys_write+0x70/0x260 [ 160.104669][ T6098] ksys_write+0x14d/0x260 [ 160.108991][ T6098] ? __ia32_sys_read+0x80/0x80 [ 160.113749][ T6098] ? lockdep_hardirqs_on+0x94/0x140 [ 160.118944][ T6098] do_syscall_64+0x4c/0xa0 [ 160.123358][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 160.128032][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 160.132709][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.138596][ T6098] RIP: 0033:0x7feb3e19fb19 [ 160.143004][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.162604][ T6098] RSP: 002b:00007feb3f016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.171015][ T6098] RAX: ffffffffffffffda RBX: 00007feb3e425fa0 RCX: 00007feb3e19fb19 [ 160.178978][ T6098] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 160.186939][ T6098] RBP: 00007feb3e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 160.194910][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.202872][ T6098] R13: 00007feb3e426038 R14: 00007feb3e425fa0 R15: 00007ffe1ca31d38 [ 160.210846][ T6098] [ 160.259946][ T6098] CacheFiles: Failed to register: -12 [ 160.315682][ T6102] EXT4-fs: 64 callbacks suppressed [ 160.315698][ T6102] EXT4-fs (sda1): Remounting filesystem read-only [ 160.357175][ T6103] EXT4-fs (sda1): Remounting filesystem read-only [ 160.366620][ T6102] EXT4-fs (sda1): Remounting filesystem read-only [ 160.387785][ T26] usb 2-1: USB disconnect, device number 6 [ 160.403911][ T6103] EXT4-fs (sda1): Remounting filesystem read-only [ 160.429119][ T6104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 160.483444][ T6102] EXT4-fs (sda1): Remounting filesystem read-only [ 160.495501][ T6108] EXT4-fs (sda1): Remounting filesystem read-only [ 160.502329][ T6102] EXT4-fs (sda1): Remounting filesystem read-only [ 160.516195][ T6109] EXT4-fs (sda1): Remounting filesystem read-only [ 160.526463][ T6109] EXT4-fs (sda1): Remounting filesystem read-only [ 160.537839][ T6108] EXT4-fs (sda1): Remounting filesystem read-only [ 160.675325][ T6120] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 160.860442][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 160.860490][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 160.876110][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 161.846251][ T6140] 9pnet_virtio: no channels available for device syz [ 161.853919][ T6139] 9pnet_virtio: no channels available for device syz [ 161.882977][ T6139] FAULT_INJECTION: forcing a failure. [ 161.882977][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 161.903980][ T6140] FAULT_INJECTION: forcing a failure. [ 161.903980][ T6140] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.934696][ T6139] CPU: 1 PID: 6139 Comm: syz.2.504 Not tainted syzkaller #0 [ 161.942017][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 161.952083][ T6139] Call Trace: [ 161.955373][ T6139] [ 161.958321][ T6139] dump_stack_lvl+0x188/0x24e [ 161.963030][ T6139] ? show_regs_print_info+0x12/0x12 [ 161.968252][ T6139] ? load_image+0x410/0x410 [ 161.972776][ T6139] ? __might_sleep+0xd0/0xd0 [ 161.977384][ T6139] ? __lock_acquire+0x7ea0/0x7ea0 [ 161.982434][ T6139] should_fail_ex+0x390/0x4c0 [ 161.987137][ T6139] should_failslab+0x5/0x20 [ 161.991653][ T6139] slab_pre_alloc_hook+0x59/0x300 [ 161.996697][ T6139] ? ksys_write+0x14d/0x260 [ 162.001218][ T6139] kmem_cache_alloc+0x56/0x2f0 [ 162.005990][ T6139] ? prepare_kernel_cred+0x27/0x6c0 [ 162.011191][ T6139] prepare_kernel_cred+0x27/0x6c0 [ 162.016220][ T6139] cachefiles_get_security_ID+0x1d/0x120 [ 162.021850][ T6139] cachefiles_add_cache+0x1ce/0xd60 [ 162.027053][ T6139] ? init_once+0x20/0x20 [ 162.031301][ T6139] ? memcpy+0x3c/0x60 [ 162.035275][ T6139] ? kstrdup+0x52/0x70 [ 162.039339][ T6139] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 162.044882][ T6139] cachefiles_daemon_write+0x5f5/0x6b0 [ 162.050338][ T6139] ? cachefiles_daemon_read+0x440/0x440 [ 162.055878][ T6139] vfs_write+0x2dc/0x9a0 [ 162.060115][ T6139] ? file_end_write+0x250/0x250 [ 162.064966][ T6139] ? __fget_files+0x28/0x460 [ 162.069558][ T6139] ? __fget_files+0x3fc/0x460 [ 162.074242][ T6139] ? __fdget_pos+0x1d4/0x360 [ 162.078829][ T6139] ? ksys_write+0x70/0x260 [ 162.083239][ T6139] ksys_write+0x14d/0x260 [ 162.087562][ T6139] ? __ia32_sys_read+0x80/0x80 [ 162.092329][ T6139] ? lockdep_hardirqs_on+0x94/0x140 [ 162.097526][ T6139] do_syscall_64+0x4c/0xa0 [ 162.101940][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 162.106611][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 162.111299][ T6139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.117202][ T6139] RIP: 0033:0x7f31f339fb19 [ 162.121618][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.141236][ T6139] RSP: 002b:00007f31f429e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.149650][ T6139] RAX: ffffffffffffffda RBX: 00007f31f3625fa0 RCX: 00007f31f339fb19 [ 162.157617][ T6139] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 162.165584][ T6139] RBP: 00007f31f3437b70 R08: 0000000000000000 R09: 0000000000000000 [ 162.173570][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.181545][ T6139] R13: 00007f31f3626038 R14: 00007f31f3625fa0 R15: 00007fffa65054b8 [ 162.189534][ T6139] [ 162.200241][ T6140] CPU: 0 PID: 6140 Comm: syz.4.502 Not tainted syzkaller #0 [ 162.207567][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 162.217637][ T6140] Call Trace: [ 162.220926][ T6140] [ 162.223875][ T6140] dump_stack_lvl+0x188/0x24e [ 162.228581][ T6140] ? show_regs_print_info+0x12/0x12 [ 162.233800][ T6140] ? load_image+0x410/0x410 [ 162.238328][ T6140] ? rcu_read_lock_sched_held+0x86/0x110 [ 162.243982][ T6140] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 162.249984][ T6140] ? __update_load_avg_cfs_rq+0x745/0xb70 [ 162.255725][ T6140] should_fail_ex+0x390/0x4c0 [ 162.260425][ T6140] get_futex_key+0x1a6/0xe70 [ 162.265036][ T6140] ? futex_setup_timer+0xc0/0xc0 [ 162.269985][ T6140] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.275992][ T6140] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.281037][ T6140] ? lock_chain_count+0x20/0x20 [ 162.285909][ T6140] futex_wait_setup+0xb8/0x270 [ 162.290697][ T6140] ? futex_wait_multiple+0x970/0x970 [ 162.296001][ T6140] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.301918][ T6140] ? _raw_spin_unlock+0x40/0x40 [ 162.306798][ T6140] futex_wait+0x1cb/0x640 [ 162.311154][ T6140] ? futex_wait_setup+0x270/0x270 [ 162.316226][ T6140] do_futex+0x310/0x320 [ 162.320397][ T6140] ? rcu_force_quiescent_state+0x220/0x220 [ 162.326241][ T6140] ? __ia32_sys_get_robust_list+0x100/0x100 [ 162.332156][ T6140] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 162.338251][ T6140] __se_sys_futex+0x381/0x410 [ 162.342951][ T6140] ? __x64_sys_futex+0xf0/0xf0 [ 162.347743][ T6140] ? __x64_sys_futex+0x1d/0xf0 [ 162.352531][ T6140] do_syscall_64+0x4c/0xa0 [ 162.356965][ T6140] ? clear_bhb_loop+0x60/0xb0 [ 162.361665][ T6140] ? clear_bhb_loop+0x60/0xb0 [ 162.366366][ T6140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.372282][ T6140] RIP: 0033:0x7feb3e19fb19 [ 162.376708][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.396332][ T6140] RSP: 002b:00007feb3f0160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 162.404765][ T6140] RAX: ffffffffffffffda RBX: 00007feb3e425fa8 RCX: 00007feb3e19fb19 [ 162.412752][ T6140] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb3e425fa8 [ 162.420740][ T6140] RBP: 00007feb3e425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 162.428727][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.436711][ T6140] R13: 00007feb3e426038 R14: 00007ffe1ca31c50 R15: 00007ffe1ca31d38 [ 162.444715][ T6140] [ 162.547169][ T6139] CacheFiles: Failed to register: -12 [ 162.608287][ T6157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 162.940323][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 162.946442][ T4292] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 163.110347][ T4375] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.178984][ T6173] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 163.300223][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 163.964484][ T4375] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 163.974877][ T4375] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.985214][ T4375] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.995320][ T4375] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.005703][ T4375] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.019234][ T4375] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.028622][ T4375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.244404][ T4375] usb 3-1: GET_CAPABILITIES returned 0 [ 164.250017][ T4375] usbtmc 3-1:16.0: can't read capabilities [ 164.279032][ T6188] 9pnet_virtio: no channels available for device syz [ 164.301355][ T6188] FAULT_INJECTION: forcing a failure. [ 164.301355][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 164.325107][ T4263] EXT4-fs error: 88 callbacks suppressed [ 164.325121][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 164.343660][ T6188] CPU: 0 PID: 6188 Comm: syz.3.518 Not tainted syzkaller #0 [ 164.350976][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.361040][ T6188] Call Trace: [ 164.364345][ T6188] [ 164.367287][ T6188] dump_stack_lvl+0x188/0x24e [ 164.371996][ T6188] ? show_regs_print_info+0x12/0x12 [ 164.372505][ T6194] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.521: Detected aborted journal [ 164.377201][ T6188] ? load_image+0x410/0x410 [ 164.377229][ T6188] ? __lock_acquire+0x7ea0/0x7ea0 [ 164.397610][ T6188] ? trace_raw_output_contention_end+0xd0/0xd0 [ 164.399729][ T6194] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.521: Detected aborted journal [ 164.403772][ T6188] should_fail_ex+0x390/0x4c0 [ 164.403804][ T6188] should_failslab+0x5/0x20 [ 164.423787][ T6188] slab_pre_alloc_hook+0x59/0x300 [ 164.428815][ T6188] ? __might_fault+0xa6/0x120 [ 164.433495][ T6188] ? cachefiles_daemon_dir+0x72/0x100 [ 164.438866][ T6188] __kmem_cache_alloc_node+0x4f/0x270 [ 164.444241][ T6188] ? cachefiles_daemon_dir+0x72/0x100 [ 164.449622][ T6188] __kmalloc_node_track_caller+0xa0/0x240 [ 164.455345][ T6188] ? __might_fault+0xc2/0x120 [ 164.460024][ T6188] kstrdup+0x37/0x70 [ 164.463921][ T6188] cachefiles_daemon_dir+0x72/0x100 [ 164.469121][ T6188] cachefiles_daemon_write+0x5f5/0x6b0 [ 164.474589][ T6188] ? cachefiles_daemon_read+0x440/0x440 [ 164.480140][ T6188] vfs_write+0x2dc/0x9a0 [ 164.484387][ T6188] ? file_end_write+0x250/0x250 [ 164.489228][ T6188] ? __fget_files+0x28/0x460 [ 164.493825][ T6188] ? __fget_files+0x3fc/0x460 [ 164.498520][ T6188] ? __fdget_pos+0x1d4/0x360 [ 164.503153][ T6188] ? ksys_write+0x70/0x260 [ 164.507581][ T6188] ksys_write+0x14d/0x260 [ 164.511917][ T6188] ? __ia32_sys_read+0x80/0x80 [ 164.516692][ T6188] ? lockdep_hardirqs_on+0x94/0x140 [ 164.521898][ T6188] do_syscall_64+0x4c/0xa0 [ 164.526316][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 164.530995][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 164.535676][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.541572][ T6188] RIP: 0033:0x7f49d299fb19 [ 164.545989][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.565598][ T6188] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.574010][ T6188] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 164.581980][ T6188] RDX: 0000000000000005 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 164.589965][ T6188] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 164.597929][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.605896][ T6188] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 164.613872][ T6188] [ 164.630297][ T6190] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.519: Detected aborted journal [ 164.646664][ T6196] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.520: Detected aborted journal [ 164.662318][ T6196] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.520: Detected aborted journal [ 164.674040][ T6190] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.519: Detected aborted journal [ 164.689046][ T6188] CacheFiles: No cache directory specified [ 164.692649][ T14] usb 3-1: USB disconnect, device number 8 [ 164.705943][ T6200] 9pnet_virtio: no channels available for device syz [ 164.719817][ T6200] CacheFiles: Failed to register: -95 [ 164.733641][ T6200] FAULT_INJECTION: forcing a failure. [ 164.733641][ T6200] name fail_futex, interval 1, probability 0, space 0, times 0 [ 164.760241][ T6200] CPU: 1 PID: 6200 Comm: syz.4.520 Not tainted syzkaller #0 [ 164.767554][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.777614][ T6200] Call Trace: [ 164.780893][ T6200] [ 164.783820][ T6200] dump_stack_lvl+0x188/0x24e [ 164.788504][ T6200] ? show_regs_print_info+0x12/0x12 [ 164.793715][ T6200] ? load_image+0x410/0x410 [ 164.798219][ T6200] ? __lock_acquire+0x1359/0x7ea0 [ 164.803261][ T6200] should_fail_ex+0x390/0x4c0 [ 164.807938][ T6200] get_futex_key+0x1a6/0xe70 [ 164.812523][ T6200] ? lockdep_hardirqs_on+0x94/0x140 [ 164.817723][ T6200] ? verify_lock_unused+0x140/0x140 [ 164.822924][ T6200] ? futex_setup_timer+0xc0/0xc0 [ 164.827857][ T6200] ? iocb_destroy+0xc0/0xc0 [ 164.832360][ T6200] ? slab_free_freelist_hook+0x133/0x1b0 [ 164.838000][ T6200] futex_wake+0x123/0x4f0 [ 164.842333][ T6200] ? futex_wake_mark+0x150/0x150 [ 164.847280][ T6200] do_futex+0x2e2/0x320 [ 164.851464][ T6200] ? __ia32_sys_get_robust_list+0x100/0x100 [ 164.857353][ T6200] ? percpu_ref_put+0x1e/0x230 [ 164.862119][ T6200] __se_sys_futex+0x381/0x410 [ 164.866794][ T6200] ? __x64_sys_io_submit+0x80/0x80 [ 164.871904][ T6200] ? __x64_sys_futex+0xf0/0xf0 [ 164.876665][ T6200] ? __x64_sys_futex+0x1d/0xf0 [ 164.881426][ T6200] do_syscall_64+0x4c/0xa0 [ 164.885840][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 164.890515][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 164.895190][ T6200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.901086][ T6200] RIP: 0033:0x7feb3e19fb19 [ 164.905498][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.925097][ T6200] RSP: 002b:00007feb3f0160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.933510][ T6200] RAX: ffffffffffffffda RBX: 00007feb3e425fa8 RCX: 00007feb3e19fb19 [ 164.941478][ T6200] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb3e425fac [ 164.949444][ T6200] RBP: 00007feb3e425fa0 R08: 0029243f0deb8ef2 R09: 0000000000000000 [ 164.957413][ T6200] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 164.965381][ T6200] R13: 00007feb3e426038 R14: 00007ffe1ca31c50 R15: 00007ffe1ca31d38 [ 164.973360][ T6200] [ 165.013294][ T6201] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.522: Detected aborted journal [ 165.024321][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 165.031208][ T4292] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 165.092971][ T6201] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.522: Detected aborted journal [ 165.122673][ T6209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.523: Detected aborted journal [ 165.153175][ T6210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 165.327284][ T6217] EXT4-fs: 77 callbacks suppressed [ 165.327294][ T6217] EXT4-fs (sda1): Remounting filesystem read-only [ 165.352822][ T6220] EXT4-fs (sda1): Remounting filesystem read-only [ 165.353895][ T6216] EXT4-fs (sda1): Remounting filesystem read-only [ 165.364131][ T6220] EXT4-fs (sda1): Remounting filesystem read-only [ 165.407558][ T6218] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 165.542499][ T6220] EXT4-fs (sda1): Remounting filesystem read-only [ 165.550869][ T6220] EXT4-fs (sda1): Remounting filesystem read-only [ 165.563234][ T6220] EXT4-fs (sda1): Remounting filesystem read-only [ 166.134523][ T6201] EXT4-fs (sda1): Remounting filesystem read-only [ 166.234630][ T6228] EXT4-fs (sda1): Remounting filesystem read-only [ 166.245226][ T6229] EXT4-fs (sda1): Remounting filesystem read-only [ 166.656529][ T6244] 9pnet_virtio: no channels available for device syz [ 166.708061][ T6247] CacheFiles: Failed to register: -95 [ 166.738775][ T6244] FAULT_INJECTION: forcing a failure. [ 166.738775][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 166.791438][ T6244] CPU: 1 PID: 6244 Comm: syz.3.533 Not tainted syzkaller #0 [ 166.798756][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 166.808803][ T6244] Call Trace: [ 166.812087][ T6244] [ 166.815019][ T6244] dump_stack_lvl+0x188/0x24e [ 166.819717][ T6244] ? show_regs_print_info+0x12/0x12 [ 166.824918][ T6244] ? load_image+0x410/0x410 [ 166.829429][ T6244] ? __might_sleep+0xd0/0xd0 [ 166.834021][ T6244] ? __lock_acquire+0x7ea0/0x7ea0 [ 166.839054][ T6244] should_fail_ex+0x390/0x4c0 [ 166.843771][ T6244] should_failslab+0x5/0x20 [ 166.848295][ T6244] slab_pre_alloc_hook+0x59/0x300 [ 166.853326][ T6244] kmem_cache_alloc_lru+0x49/0x2e0 [ 166.858448][ T6244] ? __d_alloc+0x2e/0x6e0 [ 166.862790][ T6244] __d_alloc+0x2e/0x6e0 [ 166.866941][ T6244] ? d_alloc_pseudo+0xe/0x70 [ 166.871534][ T6244] d_alloc_pseudo+0x19/0x70 [ 166.876031][ T6244] alloc_file_pseudo+0xe0/0x200 [ 166.880897][ T6244] ? alloc_empty_file_noaccount+0x80/0x80 [ 166.886613][ T6244] ? alloc_fd+0x590/0x640 [ 166.890938][ T6244] sock_alloc_file+0xb3/0x240 [ 166.895621][ T6244] __sys_socket+0x12d/0x190 [ 166.900128][ T6244] __x64_sys_socket+0x76/0x80 [ 166.904822][ T6244] do_syscall_64+0x4c/0xa0 [ 166.909256][ T6244] ? clear_bhb_loop+0x60/0xb0 [ 166.913943][ T6244] ? clear_bhb_loop+0x60/0xb0 [ 166.918626][ T6244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.924537][ T6244] RIP: 0033:0x7f49d299fb19 [ 166.928947][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.948557][ T6244] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 166.956976][ T6244] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 166.964962][ T6244] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 166.972937][ T6244] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 166.980917][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.988891][ T6244] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 166.996869][ T6244] [ 167.100330][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 167.490799][ T6260] 9pnet_virtio: no channels available for device syz [ 167.507009][ T6260] CacheFiles: Failed to register: -95 [ 167.522775][ T6260] FAULT_INJECTION: forcing a failure. [ 167.522775][ T6260] name fail_futex, interval 1, probability 0, space 0, times 0 [ 167.586669][ T6260] CPU: 1 PID: 6260 Comm: syz.1.536 Not tainted syzkaller #0 [ 167.594000][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.604070][ T6260] Call Trace: [ 167.607367][ T6260] [ 167.610314][ T6260] dump_stack_lvl+0x188/0x24e [ 167.615019][ T6260] ? __kmem_cache_free+0xb6/0x200 [ 167.620064][ T6260] ? vfs_write+0x2dc/0x9a0 [ 167.624502][ T6260] ? show_regs_print_info+0x12/0x12 [ 167.629741][ T6260] ? load_image+0x410/0x410 [ 167.634273][ T6260] should_fail_ex+0x390/0x4c0 [ 167.638980][ T6260] get_futex_key+0x1a6/0xe70 [ 167.643604][ T6260] ? futex_setup_timer+0xc0/0xc0 [ 167.648557][ T6260] ? kasan_quarantine_put+0xd4/0x210 [ 167.653860][ T6260] ? lockdep_hardirqs_on+0x94/0x140 [ 167.659085][ T6260] futex_wake+0x123/0x4f0 [ 167.663434][ T6260] ? cachefiles_daemon_write+0x118/0x6b0 [ 167.669088][ T6260] ? futex_wake_mark+0x150/0x150 [ 167.674030][ T6260] ? cachefiles_daemon_write+0x118/0x6b0 [ 167.679660][ T6260] ? file_end_write+0xd8/0x250 [ 167.684419][ T6260] ? vfs_write+0x777/0x9a0 [ 167.688830][ T6260] do_futex+0x2e2/0x320 [ 167.692982][ T6260] ? file_end_write+0x250/0x250 [ 167.697826][ T6260] ? __ia32_sys_get_robust_list+0x100/0x100 [ 167.703722][ T6260] __se_sys_futex+0x381/0x410 [ 167.708398][ T6260] ? __x64_sys_futex+0xf0/0xf0 [ 167.713163][ T6260] ? __x64_sys_futex+0x1d/0xf0 [ 167.717923][ T6260] do_syscall_64+0x4c/0xa0 [ 167.722347][ T6260] ? clear_bhb_loop+0x60/0xb0 [ 167.727023][ T6260] ? clear_bhb_loop+0x60/0xb0 [ 167.731703][ T6260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.737594][ T6260] RIP: 0033:0x7f59f599fb19 [ 167.742007][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.761610][ T6260] RSP: 002b:00007f59f69310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.770018][ T6260] RAX: ffffffffffffffda RBX: 00007f59f5c25fa8 RCX: 00007f59f599fb19 [ 167.777985][ T6260] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59f5c25fac [ 167.785948][ T6260] RBP: 00007f59f5c25fa0 R08: 001c9fe69194d97c R09: 0000000000000000 [ 167.793912][ T6260] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 167.801881][ T6260] R13: 00007f59f5c26038 R14: 00007fff4ae410e0 R15: 00007fff4ae411c8 [ 167.809858][ T6260] [ 167.970299][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.010792][ T6266] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 168.170241][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 168.203136][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 168.224536][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.270440][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.297774][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.128233][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.141631][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.151068][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.261254][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 169.267406][ T4292] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 169.361965][ T6290] EXT4-fs error: 62 callbacks suppressed [ 169.361980][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.384090][ T6262] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.538: Detected aborted journal [ 169.413774][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.452222][ T14] usb 4-1: usb_control_msg returned -71 [ 169.464922][ T14] usbtmc 4-1:16.0: can't read capabilities [ 169.466121][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.488576][ T5703] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 169.503755][ T14] usb 4-1: USB disconnect, device number 8 [ 169.518793][ T5703] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 169.527942][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.554030][ T5703] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 169.560496][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.608500][ T6290] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.546: Detected aborted journal [ 169.775627][ T6298] 9pnet_virtio: no channels available for device syz [ 169.802112][ T6298] FAULT_INJECTION: forcing a failure. [ 169.802112][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 169.835288][ T6298] CPU: 1 PID: 6298 Comm: syz.2.548 Not tainted syzkaller #0 [ 169.842620][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 169.852698][ T6298] Call Trace: [ 169.855996][ T6298] [ 169.858936][ T6298] dump_stack_lvl+0x188/0x24e [ 169.863644][ T6298] ? show_regs_print_info+0x12/0x12 [ 169.868866][ T6298] ? load_image+0x410/0x410 [ 169.873393][ T6298] ? __lock_acquire+0x7ea0/0x7ea0 [ 169.878448][ T6298] should_fail_ex+0x390/0x4c0 [ 169.883150][ T6298] should_failslab+0x5/0x20 [ 169.887667][ T6298] slab_pre_alloc_hook+0x59/0x300 [ 169.892721][ T6298] ? __up_read+0x2b4/0x6b0 [ 169.897158][ T6298] ? fscache_lookup_cache+0x15e/0x800 [ 169.902548][ T6298] __kmem_cache_alloc_node+0x4f/0x270 [ 169.907944][ T6298] ? fscache_lookup_cache+0x15e/0x800 [ 169.913333][ T6298] kmalloc_trace+0x26/0xe0 [ 169.917767][ T6298] fscache_lookup_cache+0x15e/0x800 [ 169.922984][ T6298] ? kstrdup+0x37/0x70 [ 169.927074][ T6298] ? cachefiles_daemon_bind+0x24f/0x3a0 [ 169.932731][ T6298] ? cachefiles_daemon_write+0x5f5/0x6b0 [ 169.938395][ T6298] ? ksys_write+0x14d/0x260 [ 169.942911][ T6298] ? do_syscall_64+0x4c/0xa0 [ 169.947522][ T6298] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.953642][ T6298] fscache_acquire_cache+0x7a/0x190 [ 169.958866][ T6298] ? trace_fscache_cache+0x250/0x250 [ 169.964179][ T6298] cachefiles_add_cache+0xf2/0xd60 [ 169.969321][ T6298] ? init_once+0x20/0x20 [ 169.973572][ T6298] ? __kmem_cache_alloc_node+0x19d/0x270 [ 169.979208][ T6298] ? cachefiles_daemon_bind+0x24f/0x3a0 [ 169.984757][ T6298] ? rcu_is_watching+0x11/0xa0 [ 169.989525][ T6298] ? kstrdup+0x52/0x70 [ 169.993600][ T6298] ? memcpy+0x3c/0x60 [ 169.997576][ T6298] ? kstrdup+0x52/0x70 [ 170.001644][ T6298] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 170.007189][ T6298] cachefiles_daemon_write+0x5f5/0x6b0 [ 170.012645][ T6298] ? cachefiles_daemon_read+0x440/0x440 [ 170.018184][ T6298] vfs_write+0x2dc/0x9a0 [ 170.022425][ T6298] ? file_end_write+0x250/0x250 [ 170.027266][ T6298] ? __fget_files+0x28/0x460 [ 170.031857][ T6298] ? __fget_files+0x3fc/0x460 [ 170.036547][ T6298] ? __fdget_pos+0x1d4/0x360 [ 170.041132][ T6298] ? ksys_write+0x70/0x260 [ 170.045541][ T6298] ksys_write+0x14d/0x260 [ 170.049865][ T6298] ? __ia32_sys_read+0x80/0x80 [ 170.054624][ T6298] ? lockdep_hardirqs_on+0x94/0x140 [ 170.059820][ T6298] do_syscall_64+0x4c/0xa0 [ 170.064236][ T6298] ? clear_bhb_loop+0x60/0xb0 [ 170.068909][ T6298] ? clear_bhb_loop+0x60/0xb0 [ 170.073586][ T6298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.079475][ T6298] RIP: 0033:0x7f31f339fb19 [ 170.083885][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.103486][ T6298] RSP: 002b:00007f31f429e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.111893][ T6298] RAX: ffffffffffffffda RBX: 00007f31f3625fa0 RCX: 00007f31f339fb19 [ 170.119860][ T6298] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 170.127822][ T6298] RBP: 00007f31f3437b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.135786][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.143746][ T6298] R13: 00007f31f3626038 R14: 00007f31f3625fa0 R15: 00007fffa65054b8 [ 170.151728][ T6298] [ 170.420762][ T6297] EXT4-fs: 62 callbacks suppressed [ 170.420772][ T6297] EXT4-fs (sda1): Remounting filesystem read-only [ 170.549918][ T6309] EXT4-fs (sda1): Remounting filesystem read-only [ 170.550038][ T6310] EXT4-fs (sda1): Remounting filesystem read-only [ 170.576345][ T6310] EXT4-fs (sda1): Remounting filesystem read-only [ 170.578738][ T6312] EXT4-fs (sda1): Remounting filesystem read-only [ 170.591362][ T6309] EXT4-fs (sda1): Remounting filesystem read-only [ 170.607311][ T6311] 9pnet_virtio: no channels available for device syz [ 170.615834][ T6311] FAULT_INJECTION: forcing a failure. [ 170.615834][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.624260][ T6312] EXT4-fs (sda1): Remounting filesystem read-only [ 170.629586][ T6311] CPU: 0 PID: 6311 Comm: syz.1.552 Not tainted syzkaller #0 [ 170.642594][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.652661][ T6311] Call Trace: [ 170.655954][ T6311] [ 170.658895][ T6311] dump_stack_lvl+0x188/0x24e [ 170.663594][ T6311] ? show_regs_print_info+0x12/0x12 [ 170.668813][ T6311] ? load_image+0x410/0x410 [ 170.673338][ T6311] ? __lock_acquire+0x7ea0/0x7ea0 [ 170.678385][ T6311] should_fail_ex+0x390/0x4c0 [ 170.683078][ T6311] _copy_from_user+0x2c/0x170 [ 170.687760][ T6311] memdup_user_nul+0x65/0xf0 [ 170.692346][ T6311] cachefiles_daemon_write+0xdd/0x6b0 [ 170.697714][ T6311] ? fsnotify_perm+0x5a/0x550 [ 170.702393][ T6311] ? security_file_permission+0x75/0xa0 [ 170.707936][ T6311] ? cachefiles_daemon_read+0x440/0x440 [ 170.713476][ T6311] vfs_write+0x2dc/0x9a0 [ 170.717714][ T6311] ? file_end_write+0x250/0x250 [ 170.722561][ T6311] ? __fget_files+0x28/0x460 [ 170.727150][ T6311] ? __fget_files+0x3fc/0x460 [ 170.731829][ T6311] ? __fdget_pos+0x1d4/0x360 [ 170.736414][ T6311] ? ksys_write+0x70/0x260 [ 170.740823][ T6311] ksys_write+0x14d/0x260 [ 170.745148][ T6311] ? __ia32_sys_read+0x80/0x80 [ 170.749906][ T6311] ? lockdep_hardirqs_on+0x94/0x140 [ 170.755099][ T6311] do_syscall_64+0x4c/0xa0 [ 170.759508][ T6311] ? clear_bhb_loop+0x60/0xb0 [ 170.764182][ T6311] ? clear_bhb_loop+0x60/0xb0 [ 170.768861][ T6311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.774756][ T6311] RIP: 0033:0x7f59f599fb19 [ 170.779164][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.798768][ T6311] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.807177][ T6311] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 170.815141][ T6311] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 170.823108][ T6311] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.831077][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.839043][ T6311] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 170.847020][ T6311] [ 170.912383][ T6319] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 170.997575][ T6320] EXT4-fs (sda1): Remounting filesystem read-only [ 171.022037][ T6320] EXT4-fs (sda1): Remounting filesystem read-only [ 171.046754][ T6320] EXT4-fs (sda1): Remounting filesystem read-only [ 172.380263][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 172.386392][ T4286] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 172.720386][ T1185] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.838732][ T6286] syz.4.544 (6286): drop_caches: 3 [ 172.907864][ T6357] 9pnet_virtio: no channels available for device syz [ 172.925772][ T1185] usb 4-1: Using ep0 maxpacket: 8 [ 172.931073][ T6357] FAULT_INJECTION: forcing a failure. [ 172.931073][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 172.933173][ T1185] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 172.981129][ T6357] CPU: 1 PID: 6357 Comm: syz.1.563 Not tainted syzkaller #0 [ 172.983031][ T1185] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.988445][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 172.988460][ T6357] Call Trace: [ 172.988467][ T6357] [ 172.988474][ T6357] dump_stack_lvl+0x188/0x24e [ 172.988508][ T6357] ? show_regs_print_info+0x12/0x12 [ 173.005260][ T1185] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.008257][ T6357] ? load_image+0x410/0x410 [ 173.008291][ T6357] ? __lock_acquire+0x7ea0/0x7ea0 [ 173.012265][ T1185] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.014491][ T6357] ? trace_raw_output_contention_end+0xd0/0xd0 [ 173.014525][ T6357] should_fail_ex+0x390/0x4c0 [ 173.019211][ T1185] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.024361][ T6357] should_failslab+0x5/0x20 [ 173.024382][ T6357] slab_pre_alloc_hook+0x59/0x300 [ 173.024401][ T6357] ? __might_fault+0xa6/0x120 [ 173.024420][ T6357] ? cachefiles_daemon_dir+0x72/0x100 [ 173.024443][ T6357] __kmem_cache_alloc_node+0x4f/0x270 [ 173.024467][ T6357] ? cachefiles_daemon_dir+0x72/0x100 [ 173.024484][ T6357] __kmalloc_node_track_caller+0xa0/0x240 [ 173.024502][ T6357] ? __might_fault+0xc2/0x120 [ 173.024523][ T6357] kstrdup+0x37/0x70 [ 173.024548][ T6357] cachefiles_daemon_dir+0x72/0x100 [ 173.024571][ T6357] cachefiles_daemon_write+0x5f5/0x6b0 [ 173.024594][ T6357] ? cachefiles_daemon_read+0x440/0x440 [ 173.042024][ T1185] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.043783][ T6357] vfs_write+0x2dc/0x9a0 [ 173.043812][ T6357] ? file_end_write+0x250/0x250 [ 173.059207][ T1185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.059807][ T6357] ? __fget_files+0x28/0x460 [ 173.059837][ T6357] ? __fget_files+0x3fc/0x460 [ 173.069726][ T6361] 9pnet_virtio: no channels available for device syz [ 173.077403][ T6357] ? __fdget_pos+0x1d4/0x360 [ 173.077433][ T6357] ? ksys_write+0x70/0x260 [ 173.077451][ T6357] ksys_write+0x14d/0x260 [ 173.077470][ T6357] ? __ia32_sys_read+0x80/0x80 [ 173.077490][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 173.077511][ T6357] do_syscall_64+0x4c/0xa0 [ 173.077532][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 173.077555][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 173.077579][ T6357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.077600][ T6357] RIP: 0033:0x7f59f599fb19 [ 173.077616][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.077630][ T6357] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.077650][ T6357] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 173.263570][ T6357] RDX: 0000000000000005 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 173.271538][ T6357] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 173.279504][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.287469][ T6357] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 173.295448][ T6357] [ 173.387095][ T6364] CacheFiles: No cache directory specified [ 173.479992][ T6370] netlink: 212 bytes leftover after parsing attributes in process `syz.4.568'. [ 173.509919][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 173.609843][ T1185] usb 4-1: usb_control_msg returned -71 [ 173.619575][ T1185] usbtmc 4-1:16.0: can't read capabilities [ 173.642791][ T1185] usb 4-1: USB disconnect, device number 9 [ 173.703173][ T6380] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 174.489262][ T6391] EXT4-fs error: 81 callbacks suppressed [ 174.489276][ T6391] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.573: Detected aborted journal [ 174.533965][ T6391] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.573: Detected aborted journal [ 174.579755][ T6393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.574: Detected aborted journal [ 174.597800][ T6394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.575: Detected aborted journal [ 174.613536][ T6394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.575: Detected aborted journal [ 174.657737][ T6393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.574: Detected aborted journal [ 174.696860][ T6397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.577: Detected aborted journal [ 174.714873][ T6397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.577: Detected aborted journal [ 174.732469][ T6399] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.576: Detected aborted journal [ 174.753318][ T6399] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.576: Detected aborted journal [ 174.785997][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 174.786068][ T4292] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 175.057850][ T6413] 9pnet_virtio: no channels available for device syz [ 175.078040][ T6413] FAULT_INJECTION: forcing a failure. [ 175.078040][ T6413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.120235][ T6413] CPU: 1 PID: 6413 Comm: syz.3.578 Not tainted syzkaller #0 [ 175.127567][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.137642][ T6413] Call Trace: [ 175.140933][ T6413] [ 175.143881][ T6413] dump_stack_lvl+0x188/0x24e [ 175.148593][ T6413] ? show_regs_print_info+0x12/0x12 [ 175.153820][ T6413] ? load_image+0x410/0x410 [ 175.158358][ T6413] ? __lock_acquire+0x7ea0/0x7ea0 [ 175.163414][ T6413] should_fail_ex+0x390/0x4c0 [ 175.168119][ T6413] _copy_from_user+0x2c/0x170 [ 175.172825][ T6413] memdup_user_nul+0x65/0xf0 [ 175.177433][ T6413] cachefiles_daemon_write+0xdd/0x6b0 [ 175.182827][ T6413] ? fsnotify_perm+0x5a/0x550 [ 175.187528][ T6413] ? security_file_permission+0x75/0xa0 [ 175.193100][ T6413] ? cachefiles_daemon_read+0x440/0x440 [ 175.198669][ T6413] vfs_write+0x2dc/0x9a0 [ 175.202934][ T6413] ? file_end_write+0x250/0x250 [ 175.207808][ T6413] ? __fget_files+0x28/0x460 [ 175.212425][ T6413] ? __fget_files+0x3fc/0x460 [ 175.217138][ T6413] ? __fdget_pos+0x1d4/0x360 [ 175.218778][ T6416] 9pnet_virtio: no channels available for device syz [ 175.221739][ T6413] ? ksys_write+0x70/0x260 [ 175.221765][ T6413] ksys_write+0x14d/0x260 [ 175.221786][ T6413] ? __ia32_sys_read+0x80/0x80 [ 175.221805][ T6413] ? lockdep_hardirqs_on+0x94/0x140 [ 175.221830][ T6413] do_syscall_64+0x4c/0xa0 [ 175.221853][ T6413] ? clear_bhb_loop+0x60/0xb0 [ 175.221875][ T6413] ? clear_bhb_loop+0x60/0xb0 [ 175.221898][ T6413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.221919][ T6413] RIP: 0033:0x7f49d299fb19 [ 175.239061][ T6416] FAULT_INJECTION: forcing a failure. [ 175.239061][ T6416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.242048][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.242067][ T6413] RSP: 002b:00007f49d38cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.242089][ T6413] RAX: ffffffffffffffda RBX: 00007f49d2c25fa0 RCX: 00007f49d299fb19 [ 175.242102][ T6413] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 175.242113][ T6413] RBP: 00007f49d2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 175.242124][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.242135][ T6413] R13: 00007f49d2c26038 R14: 00007f49d2c25fa0 R15: 00007ffe33058908 [ 175.242161][ T6413] [ 175.386200][ T6416] CPU: 0 PID: 6416 Comm: syz.0.580 Not tainted syzkaller #0 [ 175.393531][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.403598][ T6416] Call Trace: [ 175.406929][ T6416] [ 175.409874][ T6416] dump_stack_lvl+0x188/0x24e [ 175.414579][ T6416] ? show_regs_print_info+0x12/0x12 [ 175.419801][ T6416] ? load_image+0x410/0x410 [ 175.424332][ T6416] ? __lock_acquire+0x7ea0/0x7ea0 [ 175.429375][ T6416] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.435378][ T6416] ? do_user_addr_fault+0x8dd/0xbb0 [ 175.440605][ T6416] should_fail_ex+0x390/0x4c0 [ 175.445305][ T6416] _copy_from_user+0x2c/0x170 [ 175.450006][ T6416] __sys_bpf+0x2ea/0x780 [ 175.454276][ T6416] ? bpf_link_show_fdinfo+0x550/0x550 [ 175.458908][ T6393] EXT4-fs: 74 callbacks suppressed [ 175.458921][ T6393] EXT4-fs (sda1): Remounting filesystem read-only [ 175.459666][ T6416] ? lock_chain_count+0x20/0x20 [ 175.476028][ T6416] __x64_sys_bpf+0x78/0x90 [ 175.480469][ T6416] do_syscall_64+0x4c/0xa0 [ 175.484903][ T6416] ? clear_bhb_loop+0x60/0xb0 [ 175.489599][ T6416] ? clear_bhb_loop+0x60/0xb0 [ 175.494299][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.500214][ T6416] RIP: 0033:0x7fce6999fb19 [ 175.504639][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.524256][ T6416] RSP: 002b:00007fce6a890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.532699][ T6416] RAX: ffffffffffffffda RBX: 00007fce69c25fa0 RCX: 00007fce6999fb19 [ 175.540691][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000016 [ 175.548679][ T6416] RBP: 00007fce69a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 175.556648][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.564614][ T6416] R13: 00007fce69c26038 R14: 00007fce69c25fa0 R15: 00007ffd379c00a8 [ 175.572595][ T6416] [ 175.628416][ T6420] EXT4-fs (sda1): Remounting filesystem read-only [ 175.644610][ T6420] EXT4-fs (sda1): Remounting filesystem read-only [ 175.819511][ T6423] EXT4-fs (sda1): Remounting filesystem read-only [ 175.833539][ T6424] EXT4-fs (sda1): Remounting filesystem read-only [ 175.889500][ T6424] EXT4-fs (sda1): Remounting filesystem read-only [ 175.899958][ T6429] EXT4-fs (sda1): Remounting filesystem read-only [ 175.905632][ T6427] EXT4-fs (sda1): Remounting filesystem read-only [ 175.907156][ T6428] EXT4-fs (sda1): Remounting filesystem read-only [ 175.921872][ T6427] EXT4-fs (sda1): Remounting filesystem read-only [ 175.936483][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.584'. [ 176.069956][ T6439] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 176.130243][ T4405] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.940537][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 176.946598][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 177.022703][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.050698][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.076899][ T4405] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.106259][ T4405] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.162609][ T4405] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 177.171919][ T4405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.185718][ T4405] usb 4-1: Product: syz [ 177.189905][ T4405] usb 4-1: Manufacturer: syz [ 177.200020][ T4405] usb 4-1: SerialNumber: syz [ 177.205945][ T6460] 9pnet_virtio: no channels available for device syz [ 177.238304][ T6460] CacheFiles: Failed to register: -95 [ 177.244237][ T6460] FAULT_INJECTION: forcing a failure. [ 177.244237][ T6460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.258415][ T6460] CPU: 1 PID: 6460 Comm: syz.1.592 Not tainted syzkaller #0 [ 177.265718][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 177.275766][ T6460] Call Trace: [ 177.279044][ T6460] [ 177.282000][ T6460] dump_stack_lvl+0x188/0x24e [ 177.286689][ T6460] ? show_regs_print_info+0x12/0x12 [ 177.291886][ T6460] ? load_image+0x410/0x410 [ 177.296386][ T6460] ? __lock_acquire+0x7ea0/0x7ea0 [ 177.301409][ T6460] ? up_read+0x20/0x20 [ 177.305475][ T6460] should_fail_ex+0x390/0x4c0 [ 177.310180][ T6460] _copy_from_user+0x2c/0x170 [ 177.314859][ T6460] io_submit_one+0xd5/0x1340 [ 177.319452][ T6460] ? lookup_ioctx+0x680/0x680 [ 177.324123][ T6460] ? __might_fault+0xa6/0x120 [ 177.328803][ T6460] ? __might_fault+0xc2/0x120 [ 177.333473][ T6460] ? __might_fault+0xa6/0x120 [ 177.338146][ T6460] __se_sys_io_submit+0x19d/0x310 [ 177.343165][ T6460] ? __x64_sys_io_submit+0x80/0x80 [ 177.348273][ T6460] ? lockdep_hardirqs_on+0x94/0x140 [ 177.353486][ T6460] do_syscall_64+0x4c/0xa0 [ 177.357900][ T6460] ? clear_bhb_loop+0x60/0xb0 [ 177.362578][ T6460] ? clear_bhb_loop+0x60/0xb0 [ 177.367253][ T6460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.373141][ T6460] RIP: 0033:0x7f59f599fb19 [ 177.377548][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.397146][ T6460] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 177.405554][ T6460] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 177.413517][ T6460] RDX: 00002000000018c0 RSI: 0000000000000004 RDI: 00007f59f6910000 [ 177.421481][ T6460] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 177.429447][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.437495][ T6460] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 177.445475][ T6460] [ 177.479981][ T4405] usb 4-1: USB disconnect, device number 10 [ 177.505277][ T3643] udevd[3643]: worker [5703] terminated by signal 7 (Bus error) [ 177.518354][ T3643] udevd[3643]: worker [5703] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 177.534082][ T6464] 9pnet_virtio: no channels available for device syz [ 177.542941][ T6464] FAULT_INJECTION: forcing a failure. [ 177.542941][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 177.555731][ T6464] CPU: 0 PID: 6464 Comm: syz.4.594 Not tainted syzkaller #0 [ 177.563018][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 177.573078][ T6464] Call Trace: [ 177.576343][ T6464] [ 177.579263][ T6464] dump_stack_lvl+0x188/0x24e [ 177.583936][ T6464] ? show_regs_print_info+0x12/0x12 [ 177.589122][ T6464] ? load_image+0x410/0x410 [ 177.593617][ T6464] ? __might_sleep+0xd0/0xd0 [ 177.598203][ T6464] ? __lock_acquire+0x7ea0/0x7ea0 [ 177.603222][ T6464] should_fail_ex+0x390/0x4c0 [ 177.607897][ T6464] should_failslab+0x5/0x20 [ 177.612399][ T6464] slab_pre_alloc_hook+0x59/0x300 [ 177.617447][ T6464] ? sctp_endpoint_new+0x82/0xa00 [ 177.622498][ T6464] __kmem_cache_alloc_node+0x4f/0x270 [ 177.627890][ T6464] ? sctp_endpoint_new+0x82/0xa00 [ 177.632938][ T6464] kmalloc_trace+0x26/0xe0 [ 177.637368][ T6464] sctp_endpoint_new+0x82/0xa00 [ 177.642244][ T6464] ? __raw_spin_lock_init+0x41/0x100 [ 177.647546][ T6464] sctp_init_sock+0x95b/0x11c0 [ 177.652334][ T6464] inet_create+0xc25/0xf60 [ 177.656775][ T6464] __sock_create+0x49a/0x940 [ 177.661390][ T6464] __sys_socket+0xc4/0x190 [ 177.665827][ T6464] __x64_sys_socket+0x76/0x80 [ 177.670522][ T6464] do_syscall_64+0x4c/0xa0 [ 177.674957][ T6464] ? clear_bhb_loop+0x60/0xb0 [ 177.679658][ T6464] ? clear_bhb_loop+0x60/0xb0 [ 177.684360][ T6464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.690273][ T6464] RIP: 0033:0x7feb3e19fb19 [ 177.694700][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.714327][ T6464] RSP: 002b:00007feb3f016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 177.722761][ T6464] RAX: ffffffffffffffda RBX: 00007feb3e425fa0 RCX: 00007feb3e19fb19 [ 177.730745][ T6464] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 177.738728][ T6464] RBP: 00007feb3e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 177.746715][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.754725][ T6464] R13: 00007feb3e426038 R14: 00007feb3e425fa0 R15: 00007ffe1ca31d38 [ 177.754753][ T6464] [ 178.189299][ T3643] udevd[3643]: worker [5119] terminated by signal 7 (Bus error) [ 178.208040][ T3643] udevd[3643]: worker [5119] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 178.244280][ T3643] udevd[3643]: worker [5162] terminated by signal 7 (Bus error) [ 178.260307][ T3643] udevd[3643]: worker [5162] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 178.785670][ T6501] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.100298][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 179.106537][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 179.493175][ T6506] EXT4-fs error: 68 callbacks suppressed [ 179.493189][ T6506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.605: Detected aborted journal [ 179.538516][ T6507] 9pnet_virtio: no channels available for device syz [ 179.614966][ T6507] CacheFiles: Failed to register: -95 [ 179.678227][ T6513] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.606: Detected aborted journal [ 179.704335][ T6513] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.606: Detected aborted journal [ 179.722072][ T6514] 9pnet_virtio: no channels available for device syz [ 179.730012][ T6514] FAULT_INJECTION: forcing a failure. [ 179.730012][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 179.760590][ T6514] CPU: 0 PID: 6514 Comm: syz.1.606 Not tainted syzkaller #0 [ 179.766571][ T6515] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.607: Detected aborted journal [ 179.767895][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 179.788798][ T6514] Call Trace: [ 179.792088][ T6514] [ 179.795026][ T6514] dump_stack_lvl+0x188/0x24e [ 179.799730][ T6514] ? show_regs_print_info+0x12/0x12 [ 179.804949][ T6514] ? load_image+0x410/0x410 [ 179.809475][ T6514] ? __lock_acquire+0x7ea0/0x7ea0 [ 179.814506][ T6514] ? trace_raw_output_contention_end+0xd0/0xd0 [ 179.820658][ T6514] should_fail_ex+0x390/0x4c0 [ 179.825357][ T6514] should_failslab+0x5/0x20 [ 179.829854][ T6514] slab_pre_alloc_hook+0x59/0x300 [ 179.834872][ T6514] ? __might_fault+0xa6/0x120 [ 179.839542][ T6514] ? cachefiles_daemon_dir+0x72/0x100 [ 179.844912][ T6514] __kmem_cache_alloc_node+0x4f/0x270 [ 179.850290][ T6514] ? cachefiles_daemon_dir+0x72/0x100 [ 179.855659][ T6514] __kmalloc_node_track_caller+0xa0/0x240 [ 179.861377][ T6514] ? __might_fault+0xc2/0x120 [ 179.866049][ T6514] kstrdup+0x37/0x70 [ 179.869944][ T6514] cachefiles_daemon_dir+0x72/0x100 [ 179.875140][ T6514] cachefiles_daemon_write+0x5f5/0x6b0 [ 179.880593][ T6514] ? cachefiles_daemon_read+0x440/0x440 [ 179.886130][ T6514] vfs_write+0x2dc/0x9a0 [ 179.890370][ T6514] ? file_end_write+0x250/0x250 [ 179.895213][ T6514] ? __fget_files+0x28/0x460 [ 179.899803][ T6514] ? __fget_files+0x3fc/0x460 [ 179.904482][ T6514] ? __fdget_pos+0x1d4/0x360 [ 179.909067][ T6514] ? ksys_write+0x70/0x260 [ 179.913474][ T6514] ksys_write+0x14d/0x260 [ 179.917798][ T6514] ? __ia32_sys_read+0x80/0x80 [ 179.922556][ T6514] ? lockdep_hardirqs_on+0x94/0x140 [ 179.927749][ T6514] do_syscall_64+0x4c/0xa0 [ 179.932166][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 179.936840][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 179.941512][ T6514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.947401][ T6514] RIP: 0033:0x7f59f599fb19 [ 179.951812][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.971414][ T6514] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.979819][ T6514] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 179.987786][ T6514] RDX: 0000000000000005 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 179.995749][ T6514] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 180.003714][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.011681][ T6514] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 180.019656][ T6514] [ 180.031975][ T6516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.608: Detected aborted journal [ 180.043854][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 180.047683][ T6515] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.607: Detected aborted journal [ 180.078651][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 180.081322][ T6516] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.608: Detected aborted journal [ 180.109639][ T6517] FAULT_INJECTION: forcing a failure. [ 180.109639][ T6517] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.111490][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 180.122991][ T6517] CPU: 0 PID: 6517 Comm: syz.3.607 Not tainted syzkaller #0 [ 180.140910][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 180.150980][ T6517] Call Trace: [ 180.154707][ T6517] [ 180.157714][ T6517] dump_stack_lvl+0x188/0x24e [ 180.162463][ T6517] ? show_regs_print_info+0x12/0x12 [ 180.167695][ T6517] ? load_image+0x410/0x410 [ 180.172248][ T6517] should_fail_ex+0x390/0x4c0 [ 180.176956][ T6517] get_futex_key+0x1a6/0xe70 [ 180.180408][ T6518] CacheFiles: No cache directory specified [ 180.181547][ T6517] ? verify_lock_unused+0x140/0x140 [ 180.181583][ T6517] ? futex_setup_timer+0xc0/0xc0 [ 180.197526][ T6517] ? __might_fault+0xa6/0x120 [ 180.197556][ T6517] futex_wait_setup+0xb8/0x270 [ 180.197579][ T6517] ? futex_wait_multiple+0x970/0x970 [ 180.197605][ T6517] futex_wait+0x1cb/0x640 [ 180.197630][ T6517] ? futex_wait_setup+0x270/0x270 [ 180.221648][ T6517] ? file_end_write+0x156/0x250 [ 180.226497][ T6517] ? vfs_write+0x777/0x9a0 [ 180.230907][ T6517] do_futex+0x310/0x320 [ 180.235067][ T6517] ? __ia32_sys_get_robust_list+0x100/0x100 [ 180.241052][ T6517] __se_sys_futex+0x381/0x410 [ 180.245730][ T6517] ? __x64_sys_futex+0xf0/0xf0 [ 180.250526][ T6517] ? __x64_sys_futex+0x1d/0xf0 [ 180.255290][ T6517] do_syscall_64+0x4c/0xa0 [ 180.259708][ T6517] ? clear_bhb_loop+0x60/0xb0 [ 180.264384][ T6517] ? clear_bhb_loop+0x60/0xb0 [ 180.269060][ T6517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.274950][ T6517] RIP: 0033:0x7f49d299fb19 [ 180.279360][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.299050][ T6517] RSP: 002b:00007f49d38cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.307463][ T6517] RAX: ffffffffffffffda RBX: 00007f49d2c25fa8 RCX: 00007f49d299fb19 [ 180.315434][ T6517] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49d2c25fa8 [ 180.323397][ T6517] RBP: 00007f49d2c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.331363][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.339328][ T6517] R13: 00007f49d2c26038 R14: 00007ffe33058820 R15: 00007ffe33058908 [ 180.347310][ T6517] [ 180.487434][ T6527] EXT4-fs: 66 callbacks suppressed [ 180.487446][ T6527] EXT4-fs (sda1): Remounting filesystem read-only [ 180.511657][ T6527] EXT4-fs (sda1): Remounting filesystem read-only [ 180.513491][ T6528] EXT4-fs (sda1): Remounting filesystem read-only [ 180.547947][ T6530] EXT4-fs (sda1): Remounting filesystem read-only [ 180.553604][ T6528] EXT4-fs (sda1): Remounting filesystem read-only [ 180.569535][ T6532] EXT4-fs (sda1): Remounting filesystem read-only [ 180.583602][ T6532] EXT4-fs (sda1): Remounting filesystem read-only [ 180.591123][ T6532] EXT4-fs (sda1): Remounting filesystem read-only [ 180.600913][ T6532] EXT4-fs (sda1): Remounting filesystem read-only [ 180.608210][ T6530] EXT4-fs (sda1): Remounting filesystem read-only [ 181.581215][ T4292] Bluetooth: hci0: command 0x0c24 tx timeout [ 181.587295][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 181.823610][ T6564] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.882254][ T6565] 9pnet_virtio: no channels available for device syz [ 181.901676][ T6565] CacheFiles: Failed to register: -95 [ 182.030359][ T6572] FAULT_INJECTION: forcing a failure. [ 182.030359][ T6572] name fail_futex, interval 1, probability 0, space 0, times 0 [ 182.069890][ T6572] CPU: 0 PID: 6572 Comm: syz.3.623 Not tainted syzkaller #0 [ 182.077233][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 182.087305][ T6572] Call Trace: [ 182.090597][ T6572] [ 182.093541][ T6572] dump_stack_lvl+0x188/0x24e [ 182.098245][ T6572] ? show_regs_print_info+0x12/0x12 [ 182.103471][ T6572] ? load_image+0x410/0x410 [ 182.107994][ T6572] ? __cgroup_rstat_updated+0xce/0x350 [ 182.113475][ T6572] ? rcu_read_lock_sched_held+0x86/0x110 [ 182.119139][ T6572] ? sched_slice+0x430/0x430 [ 182.123759][ T6572] should_fail_ex+0x390/0x4c0 [ 182.128457][ T6572] get_futex_key+0x1a6/0xe70 [ 182.133071][ T6572] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 182.139256][ T6572] ? futex_setup_timer+0xc0/0xc0 [ 182.144218][ T6572] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 182.150404][ T6572] futex_wait_setup+0xb8/0x270 [ 182.155188][ T6572] ? futex_wait_multiple+0x970/0x970 [ 182.160488][ T6572] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 182.166398][ T6572] ? _raw_spin_unlock+0x40/0x40 [ 182.171274][ T6572] futex_wait+0x1cb/0x640 [ 182.175632][ T6572] ? futex_wait_setup+0x270/0x270 [ 182.180681][ T6572] ? file_end_write+0x156/0x250 [ 182.185529][ T6572] ? vfs_write+0x777/0x9a0 [ 182.189940][ T6572] do_futex+0x310/0x320 [ 182.194103][ T6572] ? __ia32_sys_get_robust_list+0x100/0x100 [ 182.199998][ T6572] __se_sys_futex+0x381/0x410 [ 182.204691][ T6572] ? __x64_sys_futex+0xf0/0xf0 [ 182.209468][ T6572] ? __x64_sys_futex+0x1d/0xf0 [ 182.214240][ T6572] do_syscall_64+0x4c/0xa0 [ 182.218659][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 182.223337][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 182.228014][ T6572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.233944][ T6572] RIP: 0033:0x7f49d299fb19 [ 182.238370][ T6572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.257980][ T6572] RSP: 002b:00007f49d38cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.266405][ T6572] RAX: ffffffffffffffda RBX: 00007f49d2c25fa8 RCX: 00007f49d299fb19 [ 182.274404][ T6572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49d2c25fa8 [ 182.282376][ T6572] RBP: 00007f49d2c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.290340][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.298303][ T6572] R13: 00007f49d2c26038 R14: 00007ffe33058820 R15: 00007ffe33058908 [ 182.306285][ T6572] [ 182.347307][ T6575] 9pnet_virtio: no channels available for device syz [ 182.365275][ T6575] FAULT_INJECTION: forcing a failure. [ 182.365275][ T6575] name fail_futex, interval 1, probability 0, space 0, times 0 [ 182.396460][ T6575] CPU: 1 PID: 6575 Comm: syz.1.624 Not tainted syzkaller #0 [ 182.403792][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 182.413952][ T6575] Call Trace: [ 182.417240][ T6575] [ 182.420181][ T6575] dump_stack_lvl+0x188/0x24e [ 182.424881][ T6575] ? __kmem_cache_free+0xb6/0x200 [ 182.429926][ T6575] ? vfs_write+0x2dc/0x9a0 [ 182.434359][ T6575] ? show_regs_print_info+0x12/0x12 [ 182.439587][ T6575] ? load_image+0x410/0x410 [ 182.444120][ T6575] should_fail_ex+0x390/0x4c0 [ 182.448824][ T6575] get_futex_key+0x1a6/0xe70 [ 182.453441][ T6575] ? futex_setup_timer+0xc0/0xc0 [ 182.458396][ T6575] ? memset+0x1e/0x40 [ 182.462397][ T6575] futex_wake+0x123/0x4f0 [ 182.466749][ T6575] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 182.473355][ T6575] ? futex_wake_mark+0x150/0x150 [ 182.478314][ T6575] ? cachefiles_daemon_write+0x118/0x6b0 [ 182.483967][ T6575] ? file_end_write+0xd8/0x250 [ 182.488751][ T6575] ? vfs_write+0x777/0x9a0 [ 182.493189][ T6575] do_futex+0x2e2/0x320 [ 182.497358][ T6575] ? file_end_write+0x250/0x250 [ 182.502225][ T6575] ? __ia32_sys_get_robust_list+0x100/0x100 [ 182.508141][ T6575] __se_sys_futex+0x381/0x410 [ 182.512837][ T6575] ? __x64_sys_futex+0xf0/0xf0 [ 182.517619][ T6575] ? __x64_sys_futex+0x1d/0xf0 [ 182.522402][ T6575] do_syscall_64+0x4c/0xa0 [ 182.526833][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 182.531528][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 182.536233][ T6575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.542151][ T6575] RIP: 0033:0x7f59f599fb19 [ 182.546583][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.566207][ T6575] RSP: 002b:00007f59f69310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.574646][ T6575] RAX: ffffffffffffffda RBX: 00007f59f5c25fa8 RCX: 00007f59f599fb19 [ 182.582636][ T6575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59f5c25fac [ 182.590623][ T6575] RBP: 00007f59f5c25fa0 R08: 0013167ea50e4c44 R09: 0000000000000000 [ 182.598612][ T6575] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 182.606596][ T6575] R13: 00007f59f5c26038 R14: 00007fff4ae410e0 R15: 00007fff4ae411c8 [ 182.614601][ T6575] [ 182.755127][ T6575] CacheFiles: Failed to register: -95 [ 183.029455][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.628'. [ 183.660520][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 183.660517][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 183.673959][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 184.805184][ T4263] EXT4-fs error: 64 callbacks suppressed [ 184.805226][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.156420][ T6609] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.632: Detected aborted journal [ 185.177883][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.189426][ T4263] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 185.266597][ T6610] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.633: Detected aborted journal [ 185.283457][ T6610] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.633: Detected aborted journal [ 185.312968][ T6609] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.632: Detected aborted journal [ 185.378749][ T6615] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.634: Detected aborted journal [ 185.443072][ T6615] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.634: Detected aborted journal [ 185.447838][ T6616] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.636: Detected aborted journal [ 185.483672][ T6620] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 185.491249][ T6615] EXT4-fs: 60 callbacks suppressed [ 185.491260][ T6615] EXT4-fs (sda1): Remounting filesystem read-only [ 185.543588][ T6623] EXT4-fs (sda1): Remounting filesystem read-only [ 185.556918][ T6617] 9pnet_virtio: no channels available for device syz [ 185.571635][ T6623] EXT4-fs (sda1): Remounting filesystem read-only [ 185.580381][ T6617] CacheFiles: Failed to register: -95 [ 185.604579][ T6625] FAULT_INJECTION: forcing a failure. [ 185.604579][ T6625] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.632163][ T6625] CPU: 1 PID: 6625 Comm: syz.4.637 Not tainted syzkaller #0 [ 185.639496][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 185.644405][ T6626] EXT4-fs (sda1): Remounting filesystem read-only [ 185.649547][ T6625] Call Trace: [ 185.649556][ T6625] [ 185.649565][ T6625] dump_stack_lvl+0x188/0x24e [ 185.649598][ T6625] ? show_regs_print_info+0x12/0x12 [ 185.649624][ T6625] ? load_image+0x410/0x410 [ 185.664187][ T6626] EXT4-fs (sda1): Remounting filesystem read-only [ 185.666925][ T6625] ? sched_slice+0x430/0x430 [ 185.666959][ T6625] should_fail_ex+0x390/0x4c0 [ 185.666986][ T6625] get_futex_key+0x1a6/0xe70 [ 185.667009][ T6625] ? futex_setup_timer+0xc0/0xc0 [ 185.701886][ T6625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 185.707894][ T6625] ? __lock_acquire+0x7ea0/0x7ea0 [ 185.712945][ T6625] ? lock_chain_count+0x20/0x20 [ 185.717826][ T6625] futex_wait_setup+0xb8/0x270 [ 185.722614][ T6625] ? futex_wait_multiple+0x970/0x970 [ 185.727919][ T6625] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 185.733834][ T6625] ? _raw_spin_unlock+0x40/0x40 [ 185.738691][ T6625] futex_wait+0x1cb/0x640 [ 185.743026][ T6625] ? futex_wait_setup+0x270/0x270 [ 185.748069][ T6625] ? file_end_write+0x156/0x250 [ 185.752917][ T6625] ? vfs_write+0x777/0x9a0 [ 185.757325][ T6625] do_futex+0x310/0x320 [ 185.761478][ T6625] ? __ia32_sys_get_robust_list+0x100/0x100 [ 185.767370][ T6625] __se_sys_futex+0x381/0x410 [ 185.772133][ T6625] ? __x64_sys_futex+0xf0/0xf0 [ 185.776896][ T6625] ? __x64_sys_futex+0x1d/0xf0 [ 185.781653][ T6625] do_syscall_64+0x4c/0xa0 [ 185.786066][ T6625] ? clear_bhb_loop+0x60/0xb0 [ 185.790740][ T6625] ? clear_bhb_loop+0x60/0xb0 [ 185.795438][ T6625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.801328][ T6625] RIP: 0033:0x7feb3e19fb19 [ 185.805738][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.825334][ T6625] RSP: 002b:00007feb3f0160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.833744][ T6625] RAX: ffffffffffffffda RBX: 00007feb3e425fa8 RCX: 00007feb3e19fb19 [ 185.841708][ T6625] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb3e425fa8 [ 185.849669][ T6625] RBP: 00007feb3e425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.857633][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.865595][ T6625] R13: 00007feb3e426038 R14: 00007ffe1ca31c50 R15: 00007ffe1ca31d38 [ 185.873570][ T6625] [ 185.877334][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 185.897553][ T6629] EXT4-fs (sda1): Remounting filesystem read-only [ 185.907617][ T6629] EXT4-fs (sda1): Remounting filesystem read-only [ 185.926154][ T6630] 9pnet_virtio: no channels available for device syz [ 185.936933][ T6623] EXT4-fs (sda1): Remounting filesystem read-only [ 185.941082][ T6630] FAULT_INJECTION: forcing a failure. [ 185.941082][ T6630] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.963951][ T6630] CPU: 1 PID: 6630 Comm: syz.3.639 Not tainted syzkaller #0 [ 185.971309][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 185.981384][ T6630] Call Trace: [ 185.984677][ T6630] [ 185.987622][ T6630] dump_stack_lvl+0x188/0x24e [ 185.992328][ T6630] ? __kmem_cache_free+0xb6/0x200 [ 185.997375][ T6630] ? vfs_write+0x2dc/0x9a0 [ 186.001810][ T6630] ? show_regs_print_info+0x12/0x12 [ 186.007039][ T6630] ? load_image+0x410/0x410 [ 186.011581][ T6630] should_fail_ex+0x390/0x4c0 [ 186.016287][ T6630] get_futex_key+0x1a6/0xe70 [ 186.020906][ T6630] ? futex_setup_timer+0xc0/0xc0 [ 186.025862][ T6630] ? memset+0x1e/0x40 [ 186.029868][ T6630] futex_wake+0x123/0x4f0 [ 186.034221][ T6630] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 186.040832][ T6630] ? futex_wake_mark+0x150/0x150 [ 186.045795][ T6630] ? cachefiles_daemon_write+0x118/0x6b0 [ 186.051453][ T6630] ? file_end_write+0xd8/0x250 [ 186.056239][ T6630] ? vfs_write+0x777/0x9a0 [ 186.060675][ T6630] do_futex+0x2e2/0x320 [ 186.064852][ T6630] ? file_end_write+0x250/0x250 [ 186.069722][ T6630] ? __ia32_sys_get_robust_list+0x100/0x100 [ 186.075654][ T6630] __se_sys_futex+0x381/0x410 [ 186.077696][ T6631] EXT4-fs (sda1): Remounting filesystem read-only [ 186.080339][ T6630] ? __x64_sys_futex+0xf0/0xf0 [ 186.080368][ T6630] ? __x64_sys_futex+0x1d/0xf0 [ 186.080388][ T6630] do_syscall_64+0x4c/0xa0 [ 186.080411][ T6630] ? clear_bhb_loop+0x60/0xb0 [ 186.080435][ T6630] ? clear_bhb_loop+0x60/0xb0 [ 186.080460][ T6630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.080480][ T6630] RIP: 0033:0x7f49d299fb19 [ 186.080497][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.080513][ T6630] RSP: 002b:00007f49d38cc0e8 EFLAGS: 00000246 [ 186.125014][ T6610] EXT4-fs (sda1): Remounting filesystem read-only [ 186.140063][ T6630] ORIG_RAX: 00000000000000ca [ 186.140075][ T6630] RAX: ffffffffffffffda RBX: 00007f49d2c25fa8 RCX: 00007f49d299fb19 [ 186.140090][ T6630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49d2c25fac [ 186.140102][ T6630] RBP: 00007f49d2c25fa0 R08: 0035100129bda0a2 R09: 0000000000000000 [ 186.140113][ T6630] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 186.140124][ T6630] R13: 00007f49d2c26038 R14: 00007ffe33058820 R15: 00007ffe33058908 [ 186.140151][ T6630] [ 186.262419][ T6630] CacheFiles: Failed to register: -95 [ 186.461755][ T6641] bridge0: port 3(netdevsim0) entered blocking state [ 186.468844][ T6641] bridge0: port 3(netdevsim0) entered disabled state [ 186.485384][ T6641] device netdevsim0 entered promiscuous mode [ 186.493047][ T6641] bridge0: port 3(netdevsim0) entered blocking state [ 186.500430][ T6641] bridge0: port 3(netdevsim0) entered forwarding state [ 186.822803][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 186.822816][ T27] audit: type=1326 audit(1794148011.091:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6999fb19 code=0x0 [ 187.028472][ T6669] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 187.143652][ T6671] 9pnet_virtio: no channels available for device syz [ 187.175625][ T6671] CacheFiles: Failed to register: -95 [ 187.571023][ T6687] 9pnet_virtio: no channels available for device syz [ 187.580116][ T6687] FAULT_INJECTION: forcing a failure. [ 187.580116][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 187.603957][ T6687] CPU: 0 PID: 6687 Comm: syz.1.656 Not tainted syzkaller #0 [ 187.611277][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.621347][ T6687] Call Trace: [ 187.624637][ T6687] [ 187.627578][ T6687] dump_stack_lvl+0x188/0x24e [ 187.632289][ T6687] ? show_regs_print_info+0x12/0x12 [ 187.637509][ T6687] ? load_image+0x410/0x410 [ 187.642031][ T6687] ? __might_sleep+0xd0/0xd0 [ 187.646643][ T6687] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.651710][ T6687] should_fail_ex+0x390/0x4c0 [ 187.656392][ T6687] should_failslab+0x5/0x20 [ 187.660890][ T6687] slab_pre_alloc_hook+0x59/0x300 [ 187.665910][ T6687] ? security_prepare_creds+0x47/0x130 [ 187.671362][ T6687] __kmem_cache_alloc_node+0x4f/0x270 [ 187.676732][ T6687] ? security_prepare_creds+0x47/0x130 [ 187.682183][ T6687] __kmalloc+0xa3/0x240 [ 187.686327][ T6687] ? get_task_cred+0x1f/0x370 [ 187.691000][ T6687] security_prepare_creds+0x47/0x130 [ 187.696283][ T6687] prepare_kernel_cred+0x33b/0x6c0 [ 187.701393][ T6687] cachefiles_get_security_ID+0x1d/0x120 [ 187.707020][ T6687] cachefiles_add_cache+0x1ce/0xd60 [ 187.712226][ T6687] ? init_once+0x20/0x20 [ 187.716475][ T6687] ? memcpy+0x3c/0x60 [ 187.720451][ T6687] ? kstrdup+0x52/0x70 [ 187.724516][ T6687] ? cachefiles_daemon_bind+0x26e/0x3a0 [ 187.730058][ T6687] cachefiles_daemon_write+0x5f5/0x6b0 [ 187.735510][ T6687] ? cachefiles_daemon_read+0x440/0x440 [ 187.741055][ T6687] vfs_write+0x2dc/0x9a0 [ 187.745294][ T6687] ? file_end_write+0x250/0x250 [ 187.750137][ T6687] ? __fget_files+0x28/0x460 [ 187.754734][ T6687] ? __fget_files+0x3fc/0x460 [ 187.759414][ T6687] ? __fdget_pos+0x1d4/0x360 [ 187.764002][ T6687] ? ksys_write+0x70/0x260 [ 187.768417][ T6687] ksys_write+0x14d/0x260 [ 187.772738][ T6687] ? __ia32_sys_read+0x80/0x80 [ 187.777499][ T6687] ? lockdep_hardirqs_on+0x94/0x140 [ 187.782693][ T6687] do_syscall_64+0x4c/0xa0 [ 187.787106][ T6687] ? clear_bhb_loop+0x60/0xb0 [ 187.791779][ T6687] ? clear_bhb_loop+0x60/0xb0 [ 187.796457][ T6687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.802345][ T6687] RIP: 0033:0x7f59f599fb19 [ 187.806754][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.826353][ T6687] RSP: 002b:00007f59f6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.834759][ T6687] RAX: ffffffffffffffda RBX: 00007f59f5c25fa0 RCX: 00007f59f599fb19 [ 187.842721][ T6687] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000006 [ 187.850685][ T6687] RBP: 00007f59f5a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 187.858646][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.866609][ T6687] R13: 00007f59f5c26038 R14: 00007f59f5c25fa0 R15: 00007fff4ae411c8 [ 187.874585][ T6687] [ 187.882422][ T6687] CacheFiles: Failed to register: -12 [ 188.490986][ T6713] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 188.513453][ T6715] 9pnet_virtio: no channels available for device syz [ 188.538694][ T6715] CacheFiles: Failed to register: -95 [ 188.780289][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 188.786676][ T4286] Bluetooth: hci0: command 0x0c24 tx timeout [ 188.793644][ T4289] Bluetooth: hci0: Opcode 0x0c24 failed: -110 SYZFAIL: SIGBUS pc-offset:0xfffffffffffe2cad pc:0x7f04dfc71a63 addr:0x7f04dc9ffffc code=2 (errno 11: Resource temporarily unavailable) [ 189.524084][ T4271] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 189.535834][ T4271] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 189.544254][ T4271] CPU: 1 PID: 4271 Comm: syz-executor Not tainted syzkaller #0 [ 189.551807][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 189.561860][ T4271] RIP: 0010:ext4_mb_load_buddy_gfp+0x27a/0x1770 [ 189.568104][ T4271] Code: 00 00 e8 a9 c1 58 ff 41 bc 8b ff ff ff e9 96 05 00 00 48 89 c3 4c 8d 78 08 4d 89 fd 49 c1 ed 03 48 bd 00 00 00 00 00 fc ff df <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 46 25 aa ff 4d 8b 3f 4c 89 fe [ 189.587709][ T4271] RSP: 0018:ffffc90004337688 EFLAGS: 00010202 [ 189.593768][ T4271] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801ae4bc00 [ 189.601754][ T4271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.609714][ T4271] RBP: dffffc0000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 189.617674][ T4271] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 0000000000000004 [ 189.625635][ T4271] R13: 0000000000000001 R14: 1ffff110281b72de R15: 0000000000000008 [ 189.633597][ T4271] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 189.642514][ T4271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.649085][ T4271] CR2: 0000558f46c05040 CR3: 000000001ff59000 CR4: 00000000003526e0 [ 189.657046][ T4271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.665006][ T4271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.672962][ T4271] Call Trace: [ 189.676227][ T4271] [ 189.679152][ T4271] ext4_discard_preallocations+0x82b/0x1000 [ 189.685046][ T4271] ? mb_clear_bits+0x120/0x120 [ 189.689803][ T4271] ext4_release_file+0x164/0x300 [ 189.694730][ T4271] ? ext4_file_open+0x6f0/0x6f0 [ 189.699572][ T4271] __fput+0x20a/0x8b0 [ 189.703546][ T4271] task_work_run+0x1d0/0x260 [ 189.708125][ T4271] ? task_work_cancel+0x220/0x220 [ 189.713137][ T4271] ? do_exit+0x9d0/0x2570 [ 189.717458][ T4271] ? kmem_cache_free+0xf7/0x2a0 [ 189.722297][ T4271] do_exit+0x9d5/0x2570 [ 189.726446][ T4271] ? put_task_struct+0x80/0x80 [ 189.731203][ T4271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.737176][ T4271] ? lock_chain_count+0x20/0x20 [ 189.742018][ T4271] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.747030][ T4271] do_group_exit+0x229/0x2e0 [ 189.751610][ T4271] ? lockdep_hardirqs_on+0x94/0x140 [ 189.756796][ T4271] get_signal+0x1259/0x1340 [ 189.761298][ T4271] arch_do_signal_or_restart+0xc4/0x1310 [ 189.766921][ T4271] ? __ia32_sys_waitid+0xc0/0xc0 [ 189.771854][ T4271] ? kernel_waitid+0x3d0/0x3d0 [ 189.776611][ T4271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.782580][ T4271] ? get_sigframe_size+0x10/0x10 [ 189.787506][ T4271] ? __x64_sys_wait4+0x1b4/0x230 [ 189.792441][ T4271] ? exit_to_user_mode_loop+0x3b/0x110 [ 189.797892][ T4271] exit_to_user_mode_loop+0x70/0x110 [ 189.803194][ T4271] exit_to_user_mode_prepare+0xee/0x180 [ 189.808728][ T4271] syscall_exit_to_user_mode+0x16/0x40 [ 189.814173][ T4271] do_syscall_64+0x58/0xa0 [ 189.818602][ T4271] ? clear_bhb_loop+0x60/0xb0 [ 189.823269][ T4271] ? clear_bhb_loop+0x60/0xb0 [ 189.827935][ T4271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.833818][ T4271] RIP: 0033:0x7f59f595ac97 [ 189.838220][ T4271] Code: Unable to access opcode bytes at 0x7f59f595ac6d. [ 189.845240][ T4271] RSP: 002b:00007fff4ae416b0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 189.853640][ T4271] RAX: fffffffffffffe00 RBX: 000055555b2bf500 RCX: 00007f59f595ac97 [ 189.861600][ T4271] RDX: 0000000040000000 RSI: 00007fff4ae4170c RDI: ffffffffffffffff [ 189.869559][ T4271] RBP: 00007fff4ae4170c R08: 0000000000000000 R09: 0000000000000000 [ 189.877516][ T4271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 189.885474][ T4271] R13: 0000000000000003 R14: 00007fff4ae41968 R15: 0000000000000000 [ 189.893439][ T4271] [ 189.896457][ T4271] Modules linked in: [ 189.910721][ T3625] EXT4-fs error: 103 callbacks suppressed [ 189.910736][ T3625] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm syslogd: reading directory lblock 0 [ 189.932892][ T4271] ---[ end trace 0000000000000000 ]--- [ 189.939190][ T4271] RIP: 0010:ext4_mb_load_buddy_gfp+0x27a/0x1770 [ 189.945503][ T4271] Code: 00 00 e8 a9 c1 58 ff 41 bc 8b ff ff ff e9 96 05 00 00 48 89 c3 4c 8d 78 08 4d 89 fd 49 c1 ed 03 48 bd 00 00 00 00 00 fc ff df <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 46 25 aa ff 4d 8b 3f 4c 89 fe [ 189.945519][ T4271] RSP: 0018:ffffc90004337688 EFLAGS: 00010202 [ 189.945533][ T4271] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801ae4bc00 [ 189.945545][ T4271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.945554][ T4271] RBP: dffffc0000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 189.945567][ T4271] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 0000000000000004 [ 189.945577][ T4271] R13: 0000000000000001 R14: 1ffff110281b72de R15: 0000000000000008 [ 189.945587][ T4271] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 189.945602][ T4271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.945614][ T4271] CR2: 0000558f46c05040 CR3: 000000002f4b6000 CR4: 00000000003506e0 [ 189.945630][ T4271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.945639][ T4271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.945660][ T4271] Kernel panic - not syncing: Fatal exception [ 189.945896][ T4271] Kernel Offset: disabled [ 190.060878][ T4271] Rebooting in 86400 seconds..