last executing test programs: 3.99206774s ago: executing program 4 (id=2276): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRES8=0x0], 0x1, 0x1ef, &(0x7f0000000300)="$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") io_uring_setup(0x67bc, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200010001"], 0x454680) 3.69249802s ago: executing program 5 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x3) 3.629815716s ago: executing program 4 (id=2283): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 3.385751296s ago: executing program 5 (id=2287): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0xfffffffb, "42ffe37537853a810000e82e200000000000001e1d00003200", 0xffffffffffffffff}) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 3.217388288s ago: executing program 2 (id=2290): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) close(0x3) 3.017308067s ago: executing program 3 (id=2291): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x8100, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/243, 0xf3}], 0x1) 2.891568795s ago: executing program 5 (id=2292): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="070200000000000000000100000004000480080001000300000004000880080002000100000054000c801c"], 0x80}}, 0x800) 2.61757674s ago: executing program 1 (id=2293): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x803, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) 2.617408005s ago: executing program 3 (id=2294): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900000000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @cipso={0x86, 0x6, 0x20}]}}, "73af8881"}}}}}, 0x0) 2.488100777s ago: executing program 5 (id=2295): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x4}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.408647722s ago: executing program 2 (id=2296): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.333962812s ago: executing program 4 (id=2297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.291861175s ago: executing program 3 (id=2298): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}], 0x2, 0x4004800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000740)={r1, 0x43, 0x2, "c837"}, 0xa) 2.252801613s ago: executing program 1 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x6a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.144483279s ago: executing program 0 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0xc, 0x4) 2.065844986s ago: executing program 5 (id=2301): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20742, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.065220764s ago: executing program 3 (id=2302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='- 0 0 0', 0x7) 2.015741179s ago: executing program 2 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1.964689511s ago: executing program 1 (id=2304): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x0, 0xfe8ee28a1d8eb870, 0x8, 0x6, 0x2, 0x40, 0x65f, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port1\x00', 0x3c, 0x141000, 0xa, 0x0, 0x107, 0x100, 0x5, 0x0, 0x2, 0x1}) close(r0) 1.87114768s ago: executing program 0 (id=2305): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r0, r0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 1.120719586s ago: executing program 5 (id=2306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x58, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0) 1.119546466s ago: executing program 0 (id=2318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.119073784s ago: executing program 1 (id=2307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 1.117703404s ago: executing program 2 (id=2308): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x0, 0x7}, &(0x7f0000000200)=0x8) 1.117265165s ago: executing program 3 (id=2309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1.117121657s ago: executing program 4 (id=2310): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 931.991146ms ago: executing program 1 (id=2311): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$search(0xa, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r1) 924.495465ms ago: executing program 3 (id=2312): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 887.032963ms ago: executing program 0 (id=2313): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x10000000}) 853.662485ms ago: executing program 4 (id=2314): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x18, 0x140b, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4090) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 793.769359ms ago: executing program 2 (id=2315): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x20}, 0x0, 0xc005, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 577.104391ms ago: executing program 1 (id=2316): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 523.062791ms ago: executing program 0 (id=2317): socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000300)={0x6, 0x7, 0x6, 0xd8b8, 0x3, 0x8, 0x4, 0xe7, 0x727, 0x80000001, 0x400, 0x1b4, 0x1a, 0xaed8, 0x7, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x9, 0xfffffffffffff800}) 467.788789ms ago: executing program 4 (id=2319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) 415.839867ms ago: executing program 2 (id=2320): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 0s ago: executing program 0 (id=2321): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 40 [ 259.040494][ T9833] device_add+0x294/0x1970 [ 259.040546][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.040589][ T9833] ? lockdep_init_map_type+0x5c/0x250 [ 259.040627][ T9833] ? __pfx_device_add+0x10/0x10 [ 259.040676][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.040719][ T9833] ? lockdep_init_map_type+0x5c/0x250 [ 259.040755][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.040799][ T9833] ? __init_waitqueue_head+0xca/0x150 [ 259.040838][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.040884][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.040935][ T9833] tty_register_device_attr+0x388/0x7f0 [ 259.040984][ T9833] ? lockdep_init_map_type+0x5c/0x250 [ 259.041019][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.041064][ T9833] ? __pfx_tty_register_device_attr+0x10/0x10 [ 259.041119][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.041166][ T9833] ? tty_port_init+0x156/0x1c0 [ 259.041210][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.041260][ T9833] gsm_activate_mux+0x155/0x2a0 [ 259.041309][ T9833] gsmld_ioctl+0xbbc/0x15c0 [ 259.041369][ T9833] ? kasan_quarantine_put+0x104/0x240 [ 259.041421][ T9833] ? __pfx_gsmld_ioctl+0x10/0x10 [ 259.041479][ T9833] ? tomoyo_path_number_perm+0x28f/0x580 [ 259.041530][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.041597][ T9833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.041659][ T9833] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 259.041700][ T9833] ? __pfx_gsmld_ioctl+0x10/0x10 [ 259.041753][ T9833] tty_ioctl+0x11b4/0x1640 [ 259.041808][ T9833] ? __pfx_tty_ioctl+0x10/0x10 [ 259.041877][ T9833] ? __fget_files+0x34/0x3d0 [ 259.041946][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.041992][ T9833] ? find_held_lock+0x2b/0x80 [ 259.042040][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.042085][ T9833] ? hook_file_ioctl_common+0x140/0x440 [ 259.042151][ T9833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.042203][ T9833] ? __fget_files+0x21f/0x3d0 [ 259.042270][ T9833] ? __pfx_tty_ioctl+0x10/0x10 [ 259.042320][ T9833] __x64_sys_ioctl+0x18e/0x210 [ 259.042377][ T9833] do_syscall_64+0x123/0x790 [ 259.042438][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.042478][ T9833] RIP: 0033:0x7f15b639e159 [ 259.042509][ T9833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.042546][ T9833] RSP: 002b:00007f15b72d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.042583][ T9833] RAX: ffffffffffffffda RBX: 00007f15b6626090 RCX: 00007f15b639e159 [ 259.042610][ T9833] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 259.042635][ T9833] RBP: 00007f15b643503b R08: 0000000000000000 R09: 0000000000000000 [ 259.042659][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.042683][ T9833] R13: 00007f15b6626128 R14: 00007f15b6626090 R15: 00007fffa96c5828 [ 259.042734][ T9833] [ 259.127311][ T1821] holtek 0003:1241:5015.0011: hiddev0,hidraw0: USB HID v0.05 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 259.163483][ T9833] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 259.166197][ T1821] usb 4-1: USB disconnect, device number 9 [ 259.747995][ T9835] fido_id[9835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 260.145100][ T31] audit: type=1400 audit(1788934878.405:43): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26D52F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=9846 comm="syz.1.1504" [ 260.824204][ T9840] loop5: detected capacity change from 0 to 32768 [ 261.472272][ T9866] loop4: detected capacity change from 0 to 16 [ 261.491775][ T9866] erofs (device loop4): mounted with root inode @ nid 36. [ 261.579803][ T5616] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 261.597465][ T9866] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 261.597648][ T9866] erofs (device loop4): read error -117 @ 0 of nid 89 [ 261.604535][ T31] audit: type=1800 audit(1788934879.855:44): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1492" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 261.686485][ T9869] binder: 9868:9869 ioctl c018620c 200000000000 returned -1 [ 262.127252][ T9881] loop2: detected capacity change from 0 to 256 [ 262.135060][ T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.304037][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 262.311373][ T980] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 262.324148][ T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.324211][ T980] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.324281][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.360567][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.360625][ T980] usb 2-1: Product: syz [ 262.360668][ T980] usb 2-1: Manufacturer: syz [ 262.360699][ T980] usb 2-1: SerialNumber: syz [ 262.396639][ T980] usb 2-1: config 0 descriptor?? [ 262.833130][ T980] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 262.855743][ T5616] Bluetooth: Frame is too long (len 13, expected len 4) [ 262.909924][ T9878] loop4: detected capacity change from 0 to 32768 [ 262.977070][ T9878] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 263.060339][ T980] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 263.097741][ T980] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 263.289318][ T980] usb 2-1: USB disconnect, device number 10 [ 263.578296][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 264.361819][ T9933] loop1: detected capacity change from 0 to 1024 [ 264.371707][ T9933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.437284][ T9933] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.449771][ T9933] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.535547][ T13] EXT4-fs error (device loop1): ext4_validate_block_bitmap:444: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 264.562714][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 264.622454][ T9944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.714699][ T5885] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 264.717438][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 264.717500][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.717558][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.731937][ T5885] usb 3-1: config 0 descriptor?? [ 264.790955][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 265.076991][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1553'. [ 265.238978][ T5885] wacom 0003:056A:0331.0012: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 265.471920][ T9971] loop5: detected capacity change from 0 to 1024 [ 265.477243][ T9935] loop2: detected capacity change from 0 to 512 [ 265.498138][ T9935] EXT4-fs (loop2): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 265.606539][ T5885] usb 3-1: USB disconnect, device number 7 [ 265.708376][ T9969] fido_id[9969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 265.764696][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 266.662740][ T5776] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 266.813311][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 266.819129][ T5776] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.829423][ T5776] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 266.839860][ T5776] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.849745][ T5776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.849827][ T5776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.849880][ T5776] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.849954][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.899956][T10005] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1571'. [ 267.103684][ T5776] usb 3-1: GET_CAPABILITIES returned 0 [ 267.109278][ T5776] usbtmc 3-1:16.0: can't read capabilities [ 267.366926][ T5776] usb 3-1: USB disconnect, device number 8 [ 268.172959][ T1821] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 268.326719][ T1821] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.330095][ T1821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.330151][ T1821] usb 6-1: config 0 has no interface number 0 [ 268.330212][ T1821] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 268.330258][ T1821] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 268.330320][ T1821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.345328][ T1821] usb 6-1: config 0 descriptor?? [ 268.349079][T10038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 268.383037][ T1821] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 268.688477][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 268.715367][ T10] usb 6-1: USB disconnect, device number 14 [ 269.095601][T10069] loop4: detected capacity change from 0 to 4096 [ 269.195582][T10069] ntfs3(loop4): Failed to load $Extend (-22). [ 269.195634][T10069] ntfs3(loop4): Failed to initialize $Extend. [ 269.277114][T10069] ntfs3(loop4): ino=5, "/" indx_read_ra [ 269.686634][ T31] audit: type=1400 audit(1788934887.945:45): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26D52F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=10084 comm="syz.4.1610" [ 269.803993][T10089] loop1: detected capacity change from 0 to 128 [ 269.819786][T10089] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.971057][T10094] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 269.992526][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.4.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.992583][T10094] Tainted: [L]=SOFTLOCKUP [ 269.992596][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 269.992619][T10094] Call Trace: [ 269.992630][T10094] [ 269.992644][T10094] dump_stack_lvl+0x100/0x190 [ 269.992708][T10094] sysfs_warn_dup.cold+0x1c/0x28 [ 269.992766][T10094] sysfs_create_dir_ns+0x24b/0x2b0 [ 269.992805][T10094] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 269.992841][T10094] ? find_held_lock+0x2b/0x80 [ 269.992889][T10094] ? kobject_add_internal+0x25f/0x930 [ 269.992930][T10094] ? kobject_add_internal+0x25f/0x930 [ 269.992972][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993019][T10094] ? class_dir_child_ns_type+0xd/0x60 [ 269.993079][T10094] kobject_add_internal+0x2c8/0x930 [ 269.993127][T10094] kobject_add+0x16a/0x1e0 [ 269.993166][T10094] ? __pfx_kobject_add+0x10/0x10 [ 269.993208][T10094] ? get_device_parent+0x1b3/0x4c0 [ 269.993254][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993300][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993344][T10094] ? kobject_put+0xb9/0x640 [ 269.993392][T10094] device_add+0x294/0x1970 [ 269.993446][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993489][T10094] ? lockdep_init_map_type+0x5c/0x250 [ 269.993527][T10094] ? __pfx_device_add+0x10/0x10 [ 269.993577][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993621][T10094] ? lockdep_init_map_type+0x5c/0x250 [ 269.993658][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993709][T10094] ? __init_waitqueue_head+0xca/0x150 [ 269.993749][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993797][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993848][T10094] tty_register_device_attr+0x388/0x7f0 [ 269.993897][T10094] ? lockdep_init_map_type+0x5c/0x250 [ 269.993932][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.993982][T10094] ? __pfx_tty_register_device_attr+0x10/0x10 [ 269.994039][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.994084][T10094] ? tty_port_init+0x156/0x1c0 [ 269.994129][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.994184][T10094] gsm_activate_mux+0x155/0x2a0 [ 269.994234][T10094] gsmld_ioctl+0xbbc/0x15c0 [ 269.994298][T10094] ? kasan_quarantine_put+0x104/0x240 [ 269.994354][T10094] ? __pfx_gsmld_ioctl+0x10/0x10 [ 269.994416][T10094] ? tomoyo_path_number_perm+0x28f/0x580 [ 269.994469][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.994538][T10094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.994605][T10094] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 269.994648][T10094] ? __pfx_gsmld_ioctl+0x10/0x10 [ 269.994710][T10094] tty_ioctl+0x11b4/0x1640 [ 269.994757][T10094] ? __pfx_tty_ioctl+0x10/0x10 [ 269.994813][T10094] ? __fget_files+0x34/0x3d0 [ 269.994874][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.994919][T10094] ? find_held_lock+0x2b/0x80 [ 269.994966][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.995011][T10094] ? hook_file_ioctl_common+0x140/0x440 [ 269.995075][T10094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.995120][T10094] ? __fget_files+0x21f/0x3d0 [ 269.995185][T10094] ? __pfx_tty_ioctl+0x10/0x10 [ 269.995233][T10094] __x64_sys_ioctl+0x18e/0x210 [ 269.995289][T10094] do_syscall_64+0x123/0x790 [ 269.995348][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.995387][T10094] RIP: 0033:0x7f9166d9e159 [ 269.995415][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.995452][T10094] RSP: 002b:00007f9167ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.995488][T10094] RAX: ffffffffffffffda RBX: 00007f9167026090 RCX: 00007f9166d9e159 [ 269.995512][T10094] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 269.995537][T10094] RBP: 00007f9166e3503b R08: 0000000000000000 R09: 0000000000000000 [ 269.995560][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.995584][T10094] R13: 00007f9167026128 R14: 00007f9167026090 R15: 00007ffce0189598 [ 269.995633][T10094] [ 270.150390][T10094] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 270.608896][ T3374] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.336050][T10137] ªªªªªª: renamed from vlan0 (while UP) [ 272.488215][T10146] loop1: detected capacity change from 0 to 16 [ 272.522911][T10146] erofs (device loop1): mounted with root inode @ nid 36. [ 272.535710][ T5627] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 272.550632][T10146] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 272.550784][T10146] erofs (device loop1): read error -117 @ 0 of nid 89 [ 272.551019][ T31] audit: type=1800 audit(1788934890.805:46): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1635" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 272.811355][T10150] loop4: detected capacity change from 0 to 1024 [ 272.823650][T10150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.899572][T10150] EXT4-fs (loop4): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.916696][T10150] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.976387][T10155] loop2: detected capacity change from 0 to 16 [ 272.998622][T10155] erofs (device loop2): mounted with root inode @ nid 36. [ 273.010167][ T49] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 273.092842][ T5627] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 273.105184][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 273.126246][T10144] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 273.126409][T10144] erofs (device loop2): read error -117 @ 1 of nid 89 [ 273.126652][ T31] audit: type=1800 audit(1788934891.385:47): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 273.344991][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 274.931338][T10200] loop5: detected capacity change from 0 to 1024 [ 274.945266][T10200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.028673][T10200] EXT4-fs (loop5): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.028808][T10200] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.093425][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 275.309497][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 275.342497][ T1821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.500527][ T1821] usb 4-1: Using ep0 maxpacket: 16 [ 275.503445][ T1821] usb 4-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 275.510031][ T1821] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 275.510125][ T1821] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.510169][ T1821] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 275.510214][ T1821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.510260][ T1821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.529098][ T1821] usb 4-1: config 0 descriptor?? [ 275.692713][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1664'. [ 275.884825][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.039559][ T5885] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 276.040929][ T1821] input: HID 045e:0713 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:0713.0013/input/input26 [ 276.041978][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 276.042040][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.042098][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.052785][ T5885] usb 1-1: config 0 descriptor?? [ 276.128363][ T1821] microsoft 0003:045E:0713.0013: input,hidraw0: USB HID vd.8b Joystick [HID 045e:0713] on usb-dummy_hcd.3-1/input0 [ 276.251894][ T1821] usb 4-1: USB disconnect, device number 10 [ 276.504218][ T5885] wacom 0003:056A:0331.0014: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 276.551137][T10249] sd 0:0:1:0: PR command failed: 1026 [ 276.556754][T10249] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 276.564341][T10249] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 276.625373][T10243] fido_id[10243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 276.751183][ T1821] usb 1-1: USB disconnect, device number 10 [ 277.093642][T10252] fido_id[10252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 277.254716][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 277.369168][T10265] misc userio: Can't change port extra on an already running userio instance [ 277.412451][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 277.418467][ T980] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 277.429419][ T980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.439886][ T980] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 277.449976][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.468355][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.468414][ T980] usb 5-1: Product: syz [ 277.468461][ T980] usb 5-1: Manufacturer: syz [ 277.468496][ T980] usb 5-1: SerialNumber: syz [ 277.496082][ T980] usb 5-1: config 0 descriptor?? [ 277.707050][T10270] loop1: detected capacity change from 0 to 16 [ 277.778395][T10270] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 277.778696][T10270] erofs (device loop1): mounted with root inode @ nid 36. [ 277.863821][T10270] syz.1.1687: attempt to access beyond end of device [ 277.863821][T10270] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 277.922096][T10270] erofs (device loop1): read error -5 @ 0 of nid 36 [ 277.938031][ T980] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 277.949243][T10275] syz.1.1687: attempt to access beyond end of device [ 277.949243][T10275] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 277.954382][T10275] erofs (device loop1): read error -5 @ 0 of nid 36 [ 278.148598][ T980] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 278.170798][ T980] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 278.385187][ T5776] usb 5-1: USB disconnect, device number 9 [ 279.695555][T10297] loop2: detected capacity change from 0 to 131072 [ 279.705554][ T980] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 279.713219][T10297] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 279.713265][T10297] F2FS-fs (loop2): Test dummy encryption mode enabled [ 279.730118][T10297] F2FS-fs (loop2): invalid crc value [ 279.808330][T10297] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 279.809023][T10297] loop2: lost filesystem error report for type 5 error -117 [ 279.824966][ T5776] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.861478][T10297] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 279.873600][T10297] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 279.873633][T10297] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 279.873699][T10297] F2FS-fs (loop2): Start checkpoint disabled! [ 279.896984][T10297] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 279.904008][T10297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 279.921750][ T980] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 279.935979][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.944086][ T980] usb 1-1: Product: syz [ 279.948337][ T980] usb 1-1: Manufacturer: syz [ 279.948363][ T980] usb 1-1: SerialNumber: syz [ 279.967701][ T980] usb 1-1: config 0 descriptor?? [ 279.974574][T10308] Falling back ldisc for ttyS3. [ 280.001098][ T980] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 280.007667][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 280.013687][ T5776] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.024346][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 280.024437][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.055119][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.063255][ T5776] usb 4-1: Product: syz [ 280.067510][ T5776] usb 4-1: Manufacturer: syz [ 280.072195][ T5776] usb 4-1: SerialNumber: syz [ 280.083572][ T5776] usb 4-1: config 0 descriptor?? [ 280.126733][T10297] fscrypt: AES-256-XTS using blk-crypto-fallback [ 280.149098][ T5776] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.162028][ T5776] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 280.672437][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 280.776961][ T5776] em28xx 4-1:0.0: chip ID is em2710/2820 [ 280.832455][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 280.838332][ T30] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.849423][ T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 280.849934][ T5885] usb 1-1: USB disconnect, device number 11 [ 280.863899][ T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.873834][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.884300][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.895701][ T30] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.895765][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.994574][ T5776] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 281.002532][ T5776] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 281.002561][ T5776] em28xx 4-1:0.0: No AC97 audio processor [ 281.025751][ T5776] usb 4-1: USB disconnect, device number 11 [ 281.035541][ T5776] em28xx 4-1:0.0: Disconnecting em28xx [ 281.048741][ T5776] em28xx: Freeing device [ 281.248908][ T30] usb 2-1: GET_CAPABILITIES returned 0 [ 281.248989][ T30] usbtmc 2-1:16.0: can't read capabilities [ 281.502171][ T30] usb 2-1: USB disconnect, device number 11 [ 282.293800][T10332] loop2: detected capacity change from 0 to 131072 [ 282.301430][T10332] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 282.301464][T10332] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.313817][T10332] F2FS-fs (loop2): invalid crc value [ 282.423410][T10332] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 282.437358][T10332] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 282.437390][T10332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 282.629382][T10332] F2FS-fs (loop2): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 284.318447][T10374] loop1: detected capacity change from 0 to 512 [ 284.350125][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.367801][T10374] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.425849][T10374] EXT4-fs (loop1): shut down requested (0) [ 284.640548][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.879534][T10390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1737'. [ 287.004528][T10450] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 287.017951][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.0.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.018012][T10450] Tainted: [L]=SOFTLOCKUP [ 287.018027][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 287.018051][T10450] Call Trace: [ 287.018063][T10450] [ 287.018078][T10450] dump_stack_lvl+0x100/0x190 [ 287.018138][T10450] sysfs_warn_dup.cold+0x1c/0x28 [ 287.018206][T10450] sysfs_create_dir_ns+0x24b/0x2b0 [ 287.018247][T10450] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 287.018287][T10450] ? find_held_lock+0x2b/0x80 [ 287.018338][T10450] ? kobject_add_internal+0x25f/0x930 [ 287.018382][T10450] ? kobject_add_internal+0x25f/0x930 [ 287.018428][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.018477][T10450] ? class_dir_child_ns_type+0xd/0x60 [ 287.018540][T10450] kobject_add_internal+0x2c8/0x930 [ 287.018590][T10450] kobject_add+0x16a/0x1e0 [ 287.018633][T10450] ? __pfx_kobject_add+0x10/0x10 [ 287.018678][T10450] ? get_device_parent+0x1b3/0x4c0 [ 287.018727][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.018777][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.018824][T10450] ? kobject_put+0xb9/0x640 [ 287.018876][T10450] device_add+0x294/0x1970 [ 287.018934][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.018983][T10450] ? lockdep_init_map_type+0x5c/0x250 [ 287.019024][T10450] ? __pfx_device_add+0x10/0x10 [ 287.019078][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019128][T10450] ? lockdep_init_map_type+0x5c/0x250 [ 287.019169][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019222][T10450] ? __init_waitqueue_head+0xca/0x150 [ 287.019266][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019317][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019372][T10450] tty_register_device_attr+0x388/0x7f0 [ 287.019424][T10450] ? lockdep_init_map_type+0x5c/0x250 [ 287.019462][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019512][T10450] ? __pfx_tty_register_device_attr+0x10/0x10 [ 287.019573][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019621][T10450] ? tty_port_init+0x156/0x1c0 [ 287.019671][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.019726][T10450] gsm_activate_mux+0x155/0x2a0 [ 287.019780][T10450] gsmld_ioctl+0xbbc/0x15c0 [ 287.019848][T10450] ? kasan_quarantine_put+0x104/0x240 [ 287.019907][T10450] ? __pfx_gsmld_ioctl+0x10/0x10 [ 287.019972][T10450] ? tomoyo_path_number_perm+0x28f/0x580 [ 287.020027][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.020101][T10450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.020170][T10450] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 287.020222][T10450] ? __pfx_gsmld_ioctl+0x10/0x10 [ 287.020278][T10450] tty_ioctl+0x11b4/0x1640 [ 287.020330][T10450] ? __pfx_tty_ioctl+0x10/0x10 [ 287.020389][T10450] ? __fget_files+0x34/0x3d0 [ 287.020453][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.020501][T10450] ? find_held_lock+0x2b/0x80 [ 287.020551][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.020599][T10450] ? hook_file_ioctl_common+0x140/0x440 [ 287.020668][T10450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.020717][T10450] ? __fget_files+0x21f/0x3d0 [ 287.020788][T10450] ? __pfx_tty_ioctl+0x10/0x10 [ 287.020841][T10450] __x64_sys_ioctl+0x18e/0x210 [ 287.020900][T10450] do_syscall_64+0x123/0x790 [ 287.020964][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.021006][T10450] RIP: 0033:0x7fb10e39e159 [ 287.021036][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.021075][T10450] RSP: 002b:00007fb10f2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.021113][T10450] RAX: ffffffffffffffda RBX: 00007fb10e626090 RCX: 00007fb10e39e159 [ 287.021140][T10450] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 287.021167][T10450] RBP: 00007fb10e43503b R08: 0000000000000000 R09: 0000000000000000 [ 287.021198][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.021223][T10450] R13: 00007fb10e626128 R14: 00007fb10e626090 R15: 00007ffe3e8dc3a8 [ 287.021275][T10450] [ 287.315718][T10450] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 288.030930][ T10] kernel read not supported for file /rfkill (pid: 10 comm: kworker/0:1) [ 288.206025][T10470] loop5: detected capacity change from 0 to 256 [ 288.259040][T10470] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 288.345340][T10475] netlink: 'syz.2.1767': attribute type 13 has an invalid length. [ 288.627276][T10484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1771'. [ 288.672825][ T980] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 288.821058][T10487] veth1_macvtap: left promiscuous mode [ 288.821119][T10487] macsec0: entered promiscuous mode [ 288.832772][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 288.835274][ T980] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.836704][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 288.836754][ T980] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.836812][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.836863][ T980] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.836909][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.836957][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.837007][ T980] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.837057][ T980] usb 4-1: config 168 interface 0 has no altsetting 0 [ 288.838336][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 288.838384][ T980] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.838443][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.838496][ T980] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.838544][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.838593][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.838642][ T980] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.838698][ T980] usb 4-1: config 168 interface 0 has no altsetting 0 [ 288.847152][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 288.847212][ T980] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.847272][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.847322][ T980] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.847368][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.847416][ T980] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.847465][ T980] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.847518][ T980] usb 4-1: config 168 interface 0 has no altsetting 0 [ 288.860544][ T980] usb 4-1: string descriptor 0 read error: -22 [ 288.860704][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.967442][ T980] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 289.111791][T10488] veth1_macvtap: entered promiscuous mode [ 289.112164][T10488] macsec0: left promiscuous mode [ 289.187958][ T980] usb 4-1: USB disconnect, device number 12 [ 289.258479][T10466] loop1: detected capacity change from 0 to 32768 [ 289.334617][T10466] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 289.908820][ T5626] ocfs2: Unmounting device (7,1) on (node local) [ 290.656693][T10528] loop1: detected capacity change from 0 to 512 [ 290.669087][T10528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.695400][T10528] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1782: bad orphan inode 131083 [ 290.695459][T10528] loop1: lost filesystem error report for type 5 error -117 [ 290.705963][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 290.705993][ C0] EXT4-fs (loop1): initial error at time 1788934908: ext4_orphan_get:1429 [ 290.706028][ C0] EXT4-fs (loop1): last error at time 1788934908: ext4_orphan_get:1429 [ 290.750571][T10528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.777822][T10533] loop2: detected capacity change from 0 to 8 [ 290.859842][T10534] loop4: detected capacity change from 0 to 16 [ 290.896281][T10534] erofs (device loop4): mounted with root inode @ nid 36. [ 290.968679][T10516] loop5: detected capacity change from 0 to 32768 [ 291.003780][T10516] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 291.078268][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.124304][T10516] XFS (loop5): Ending clean mount [ 291.160279][ T5627] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 291.186390][T10509] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 291.186542][T10509] erofs (device loop4): read error -117 @ 1 of nid 89 [ 291.186866][ T31] audit: type=1800 audit(1788934909.445:48): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1780" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 291.231416][T10548] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 291.231473][T10548] CPU: 0 UID: 0 PID: 10548 Comm: syz.3.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.231525][T10548] Tainted: [L]=SOFTLOCKUP [ 291.231538][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.231560][T10548] Call Trace: [ 291.231572][T10548] [ 291.231585][T10548] dump_stack_lvl+0x100/0x190 [ 291.231640][T10548] sysfs_warn_dup.cold+0x1c/0x28 [ 291.231695][T10548] sysfs_create_dir_ns+0x24b/0x2b0 [ 291.231734][T10548] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 291.231768][T10548] ? find_held_lock+0x2b/0x80 [ 291.231815][T10548] ? kobject_add_internal+0x25f/0x930 [ 291.231854][T10548] ? kobject_add_internal+0x25f/0x930 [ 291.231895][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.231939][T10548] ? class_dir_child_ns_type+0xd/0x60 [ 291.231994][T10548] kobject_add_internal+0x2c8/0x930 [ 291.232041][T10548] kobject_add+0x16a/0x1e0 [ 291.232079][T10548] ? __pfx_kobject_add+0x10/0x10 [ 291.232119][T10548] ? get_device_parent+0x1b3/0x4c0 [ 291.232165][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232214][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232256][T10548] ? kobject_put+0xb9/0x640 [ 291.232303][T10548] device_add+0x294/0x1970 [ 291.232354][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232397][T10548] ? lockdep_init_map_type+0x5c/0x250 [ 291.232433][T10548] ? __pfx_device_add+0x10/0x10 [ 291.232481][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232523][T10548] ? lockdep_init_map_type+0x5c/0x250 [ 291.232559][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232602][T10548] ? __init_waitqueue_head+0xca/0x150 [ 291.232640][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232686][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232735][T10548] tty_register_device_attr+0x388/0x7f0 [ 291.232782][T10548] ? lockdep_init_map_type+0x5c/0x250 [ 291.232816][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232860][T10548] ? __pfx_tty_register_device_attr+0x10/0x10 [ 291.232915][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.232957][T10548] ? tty_port_init+0x156/0x1c0 [ 291.233002][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.233052][T10548] gsm_activate_mux+0x155/0x2a0 [ 291.233099][T10548] gsmld_ioctl+0xbbc/0x15c0 [ 291.233160][T10548] ? kasan_quarantine_put+0x104/0x240 [ 291.233218][T10548] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.233276][T10548] ? tomoyo_path_number_perm+0x28f/0x580 [ 291.233325][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.233392][T10548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.233454][T10548] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 291.233496][T10548] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.233546][T10548] tty_ioctl+0x11b4/0x1640 [ 291.233592][T10548] ? __pfx_tty_ioctl+0x10/0x10 [ 291.233645][T10548] ? __fget_files+0x34/0x3d0 [ 291.233702][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.233744][T10548] ? find_held_lock+0x2b/0x80 [ 291.233788][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.233831][T10548] ? hook_file_ioctl_common+0x140/0x440 [ 291.233892][T10548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.233934][T10548] ? __fget_files+0x21f/0x3d0 [ 291.233996][T10548] ? __pfx_tty_ioctl+0x10/0x10 [ 291.234042][T10548] __x64_sys_ioctl+0x18e/0x210 [ 291.234095][T10548] do_syscall_64+0x123/0x790 [ 291.234152][T10548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.234193][T10548] RIP: 0033:0x7f034cf9e159 [ 291.234221][T10548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.234256][T10548] RSP: 002b:00007f034dd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.234291][T10548] RAX: ffffffffffffffda RBX: 00007f034d226090 RCX: 00007f034cf9e159 [ 291.234315][T10548] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 291.234338][T10548] RBP: 00007f034d03503b R08: 0000000000000000 R09: 0000000000000000 [ 291.234360][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.234383][T10548] R13: 00007f034d226128 R14: 00007f034d226090 R15: 00007fffba5c3d88 [ 291.234431][T10548] [ 291.313401][T10548] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 291.855493][T10516] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 291.855591][T10516] XFS (loop5): Unmount and run xfs_repair [ 291.855633][T10516] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 291.855673][T10516] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 291.855710][T10516] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 291.855745][T10516] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 291.855781][T10516] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 291.855817][T10516] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 291.855853][T10516] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.855889][T10516] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.855925][T10516] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.864922][T10516] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 291.923763][T10516] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c5/0x8b0 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 291.923861][T10516] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 292.185586][ T5620] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 292.615766][T10564] input: syz1 as /devices/virtual/input/input32 [ 293.782489][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 293.957135][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 293.958321][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.966485][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 293.966546][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.966583][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.966622][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.966662][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.966720][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.140288][ T980] kernel write not supported for file /uinput (pid: 980 comm: kworker/1:2) [ 294.206263][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 294.206345][ T10] usbtmc 6-1:16.0: can't read capabilities [ 294.500645][ T5885] usb 6-1: USB disconnect, device number 15 [ 295.204001][ T980] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.365565][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 295.375548][ T980] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.398442][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 295.398512][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.426942][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.427003][ T980] usb 2-1: Product: syz [ 295.427048][ T980] usb 2-1: Manufacturer: syz [ 295.427083][ T980] usb 2-1: SerialNumber: syz [ 295.458364][ T980] usb 2-1: config 0 descriptor?? [ 295.477086][ T980] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.486618][ T980] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 295.845761][T10626] loop4: detected capacity change from 0 to 32768 [ 295.857705][T10626] xfs: Deprecated parameter 'noattr2' [ 295.869728][T10626] XFS: noattr2 mount option is deprecated. [ 295.911145][T10626] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.985531][T10626] XFS (loop4): Ending clean mount [ 296.091278][ T980] em28xx 2-1:0.0: chip ID is em2710/2820 [ 296.165928][ T5625] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.291192][ T980] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 296.298521][ T980] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 296.298567][ T980] em28xx 2-1:0.0: No AC97 audio processor [ 296.320969][ T980] usb 2-1: USB disconnect, device number 12 [ 296.330553][ T980] em28xx 2-1:0.0: Disconnecting em28xx [ 296.362144][ T980] em28xx: Freeing device [ 296.928753][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 296.937920][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'. [ 297.076003][T10671] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 297.076064][T10671] CPU: 1 UID: 0 PID: 10671 Comm: syz.1.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.076124][T10671] Tainted: [L]=SOFTLOCKUP [ 297.076138][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 297.076162][T10671] Call Trace: [ 297.076174][T10671] [ 297.076206][T10671] dump_stack_lvl+0x100/0x190 [ 297.076267][T10671] sysfs_warn_dup.cold+0x1c/0x28 [ 297.076330][T10671] sysfs_create_dir_ns+0x24b/0x2b0 [ 297.076371][T10671] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 297.076411][T10671] ? find_held_lock+0x2b/0x80 [ 297.076461][T10671] ? kobject_add_internal+0x25f/0x930 [ 297.076503][T10671] ? kobject_add_internal+0x25f/0x930 [ 297.076549][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.076598][T10671] ? class_dir_child_ns_type+0xd/0x60 [ 297.076659][T10671] kobject_add_internal+0x2c8/0x930 [ 297.076710][T10671] kobject_add+0x16a/0x1e0 [ 297.076758][T10671] ? __pfx_kobject_add+0x10/0x10 [ 297.076805][T10671] ? get_device_parent+0x1b3/0x4c0 [ 297.076854][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.076902][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.076947][T10671] ? kobject_put+0xb9/0x640 [ 297.076998][T10671] device_add+0x294/0x1970 [ 297.077053][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077100][T10671] ? lockdep_init_map_type+0x5c/0x250 [ 297.077142][T10671] ? __pfx_device_add+0x10/0x10 [ 297.077196][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077244][T10671] ? lockdep_init_map_type+0x5c/0x250 [ 297.077282][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077328][T10671] ? __init_waitqueue_head+0xca/0x150 [ 297.077371][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077421][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077476][T10671] tty_register_device_attr+0x388/0x7f0 [ 297.077528][T10671] ? lockdep_init_map_type+0x5c/0x250 [ 297.077568][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077628][T10671] ? __pfx_tty_register_device_attr+0x10/0x10 [ 297.077701][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077762][T10671] ? tty_port_init+0x156/0x1c0 [ 297.077813][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.077864][T10671] gsm_activate_mux+0x155/0x2a0 [ 297.077913][T10671] gsmld_ioctl+0xbbc/0x15c0 [ 297.077976][T10671] ? kasan_quarantine_put+0x104/0x240 [ 297.078031][T10671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 297.078091][T10671] ? tomoyo_path_number_perm+0x28f/0x580 [ 297.078141][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.078210][T10671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.078274][T10671] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 297.078317][T10671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 297.078369][T10671] tty_ioctl+0x11b4/0x1640 [ 297.078417][T10671] ? __pfx_tty_ioctl+0x10/0x10 [ 297.078472][T10671] ? __fget_files+0x34/0x3d0 [ 297.078530][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.078574][T10671] ? find_held_lock+0x2b/0x80 [ 297.078619][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.078663][T10671] ? hook_file_ioctl_common+0x140/0x440 [ 297.078731][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.078775][T10671] ? __fget_files+0x21f/0x3d0 [ 297.078841][T10671] ? __pfx_tty_ioctl+0x10/0x10 [ 297.078888][T10671] __x64_sys_ioctl+0x18e/0x210 [ 297.078943][T10671] do_syscall_64+0x123/0x790 [ 297.079002][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.079040][T10671] RIP: 0033:0x7f6a0779e159 [ 297.079069][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.079105][T10671] RSP: 002b:00007f6a0862c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.079140][T10671] RAX: ffffffffffffffda RBX: 00007f6a07a26090 RCX: 00007f6a0779e159 [ 297.079164][T10671] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 297.079188][T10671] RBP: 00007f6a0783503b R08: 0000000000000000 R09: 0000000000000000 [ 297.079211][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.079233][T10671] R13: 00007f6a07a26128 R14: 00007f6a07a26090 R15: 00007ffd3d3e5c18 [ 297.079281][T10671] [ 297.236808][T10671] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.334605][ T980] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 297.464866][T10673] veth1_macvtap: left promiscuous mode [ 297.464902][T10673] macsec0: entered promiscuous mode [ 297.511018][ T980] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.545161][T10673] veth1_macvtap: entered promiscuous mode [ 297.551811][T10673] macsec0: left promiscuous mode [ 297.561104][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.569306][ T980] usb 1-1: Product: syz [ 297.573625][ T980] usb 1-1: Manufacturer: syz [ 297.573653][ T980] usb 1-1: SerialNumber: syz [ 297.636053][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 297.648265][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 297.691679][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 297.691768][T10677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 297.777527][ T5776] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.893730][T10676] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 298.370388][T10676] bond1 (unregistering): Released all slaves [ 298.652031][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.655569][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.883527][ T5776] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 298.890846][ T5776] ath9k_htc: Failed to initialize the device [ 299.072137][ T5776] usb 1-1: ath9k_htc: USB layer deinitialized [ 299.107964][ T1821] usb 1-1: USB disconnect, device number 12 [ 299.475030][T10708] loop2: detected capacity change from 0 to 4096 [ 299.518823][T10708] NILFS (loop2): invalid segment: Checksum error in segment payload [ 299.518877][T10708] NILFS (loop2): trying rollback from an earlier position [ 299.542994][T10710] loop4: detected capacity change from 0 to 1024 [ 299.555211][T10710] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.555269][T10710] EXT4-fs: Ignoring removed oldalloc option [ 299.617649][T10708] NILFS (loop2): recovery complete [ 299.624852][T10716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.651620][T10710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.651763][T10710] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.724500][T10708] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 300.044213][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 300.188828][ T5776] kernel write not supported for file /input/event2 (pid: 5776 comm: kworker/1:7) [ 300.395279][T10727] loop4: detected capacity change from 0 to 512 [ 300.488211][T10727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.501134][T10727] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.598508][T10727] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 3: comm syz.4.1848: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 300.604185][T10727] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 12: comm syz.4.1848: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 300.613353][T10727] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 13: comm syz.4.1848: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 300.637419][T10727] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 18: comm syz.4.1848: lblock 23 mapped to illegal pblock 18 (length 1) [ 300.866728][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.689650][ T31] audit: type=1400 audit(1788934919.945:49): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10757 comm="syz.5.1862" name="unknown" offset=28 [ 301.820025][ T31] audit: type=1326 audit(1788934920.075:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10741 comm="syz.4.1855" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9166d9e159 code=0x7fc00000 [ 302.150101][T10770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 302.274118][ T5617] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.436530][ T5617] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.443705][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.443742][ T5617] usb 4-1: Product: syz [ 302.443766][ T5617] usb 4-1: Manufacturer: syz [ 302.443790][ T5617] usb 4-1: SerialNumber: syz [ 302.890029][ T5617] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 302.890128][ T5617] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 302.900973][T10794] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 302.939076][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 303.108672][ T5617] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 303.108774][ T5617] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.135741][ T5617] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.164020][ T5617] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 303.208497][ T5617] usb 4-1: USB disconnect, device number 13 [ 304.323834][T10800] loop2: detected capacity change from 0 to 32768 [ 304.336102][T10800] xfs: Deprecated parameter 'noattr2' [ 304.348169][T10800] XFS: noattr2 mount option is deprecated. [ 304.399775][T10800] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.451677][T10802] loop1: detected capacity change from 0 to 131072 [ 304.455305][T10802] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 304.455333][T10802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 304.456515][T10802] F2FS-fs (loop1): invalid crc value [ 304.589953][T10802] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 304.605822][T10802] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.605873][T10802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 304.628609][T10800] XFS (loop2): Ending clean mount [ 304.767090][ C1] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 304.880988][ T5636] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.964104][ T5627] Bluetooth: hci6: command 0x1003 tx timeout [ 304.964618][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 305.459713][T10834] netlink: 'syz.0.1891': attribute type 13 has an invalid length. [ 305.722535][T10840] loop5: detected capacity change from 0 to 2048 [ 305.734698][T10840] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 305.855714][T10845] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.056790][ T31] audit: type=1800 audit(1788934924.315:51): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1893" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 306.425519][T10850] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 306.642505][ T5776] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 306.731666][T10850] bond1 (unregistering): Released all slaves [ 306.793429][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 306.795897][ T5776] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 306.799245][ T5776] usb 3-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.799296][ T5776] usb 3-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 2023, setting to 1024 [ 306.799344][ T5776] usb 3-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 306.800295][ T5776] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.800346][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.819099][ T5776] usb 3-1: config 0 descriptor?? [ 306.820848][T10855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.217911][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 307.335680][ T5776] apple 0003:05AC:8102.0015: unknown main item tag 0x2 [ 307.384617][ T5776] apple 0003:05AC:8102.0015: hidraw0: USB HID v7f.fe Device [HID 05ac:8102] on usb-dummy_hcd.2-1/input0 [ 307.568536][ T10] usb 3-1: USB disconnect, device number 9 [ 307.786462][T10868] fido_id[10868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 308.089351][T10880] ªªªªªª: renamed from vlan0 (while UP) [ 308.516639][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 309.034065][T10915] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 309.045159][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.3.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.045216][T10915] Tainted: [L]=SOFTLOCKUP [ 309.045230][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 309.045251][T10915] Call Trace: [ 309.045263][T10915] [ 309.045276][T10915] dump_stack_lvl+0x100/0x190 [ 309.045334][T10915] sysfs_warn_dup.cold+0x1c/0x28 [ 309.045391][T10915] sysfs_create_dir_ns+0x24b/0x2b0 [ 309.045431][T10915] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 309.045466][T10915] ? find_held_lock+0x2b/0x80 [ 309.045513][T10915] ? kobject_add_internal+0x25f/0x930 [ 309.045553][T10915] ? kobject_add_internal+0x25f/0x930 [ 309.045595][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.045639][T10915] ? class_dir_child_ns_type+0xd/0x60 [ 309.045697][T10915] kobject_add_internal+0x2c8/0x930 [ 309.045744][T10915] kobject_add+0x16a/0x1e0 [ 309.045782][T10915] ? __pfx_kobject_add+0x10/0x10 [ 309.045825][T10915] ? get_device_parent+0x1b3/0x4c0 [ 309.045869][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.045915][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.045959][T10915] ? kobject_put+0xb9/0x640 [ 309.046007][T10915] device_add+0x294/0x1970 [ 309.046059][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046103][T10915] ? lockdep_init_map_type+0x5c/0x250 [ 309.046140][T10915] ? __pfx_device_add+0x10/0x10 [ 309.046190][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046237][T10915] ? lockdep_init_map_type+0x5c/0x250 [ 309.046275][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046319][T10915] ? __init_waitqueue_head+0xca/0x150 [ 309.046359][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046406][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046457][T10915] tty_register_device_attr+0x388/0x7f0 [ 309.046504][T10915] ? lockdep_init_map_type+0x5c/0x250 [ 309.046538][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046584][T10915] ? __pfx_tty_register_device_attr+0x10/0x10 [ 309.046650][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046705][T10915] ? tty_port_init+0x156/0x1c0 [ 309.046764][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.046823][T10915] gsm_activate_mux+0x155/0x2a0 [ 309.046877][T10915] gsmld_ioctl+0xbbc/0x15c0 [ 309.046945][T10915] ? kasan_quarantine_put+0x104/0x240 [ 309.047004][T10915] ? __pfx_gsmld_ioctl+0x10/0x10 [ 309.047069][T10915] ? tomoyo_path_number_perm+0x28f/0x580 [ 309.047124][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.047198][T10915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.047273][T10915] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 309.047319][T10915] ? __pfx_gsmld_ioctl+0x10/0x10 [ 309.047377][T10915] tty_ioctl+0x11b4/0x1640 [ 309.047428][T10915] ? __pfx_tty_ioctl+0x10/0x10 [ 309.047487][T10915] ? __fget_files+0x34/0x3d0 [ 309.047550][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.047598][T10915] ? find_held_lock+0x2b/0x80 [ 309.047647][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.047694][T10915] ? hook_file_ioctl_common+0x140/0x440 [ 309.047762][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.047809][T10915] ? __fget_files+0x21f/0x3d0 [ 309.047880][T10915] ? __pfx_tty_ioctl+0x10/0x10 [ 309.047931][T10915] __x64_sys_ioctl+0x18e/0x210 [ 309.047990][T10915] do_syscall_64+0x123/0x790 [ 309.048057][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.048106][T10915] RIP: 0033:0x7f034cf9e159 [ 309.048142][T10915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.048189][T10915] RSP: 002b:00007f034dd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.048237][T10915] RAX: ffffffffffffffda RBX: 00007f034d226090 RCX: 00007f034cf9e159 [ 309.048266][T10915] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 309.048291][T10915] RBP: 00007f034d03503b R08: 0000000000000000 R09: 0000000000000000 [ 309.048314][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.048337][T10915] R13: 00007f034d226128 R14: 00007f034d226090 R15: 00007fffba5c3d88 [ 309.048385][T10915] [ 309.250146][T10915] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 310.062048][T10914] loop2: detected capacity change from 0 to 131072 [ 310.063782][T10914] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 310.063810][T10914] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 310.064563][T10914] F2FS-fs (loop2): invalid crc value [ 310.165273][T10914] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 310.178152][T10914] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 310.178202][T10914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 310.334327][ C0] F2FS-fs (loop2): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 311.022498][ T5776] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 311.051858][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1932'. [ 311.056630][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1932'. [ 311.176303][ T5776] usb 1-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 311.178327][ T5776] usb 1-1: config 0 has no interfaces? [ 311.178370][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.229074][ T5776] usb 1-1: config 0 descriptor?? [ 311.470378][ T10] usb 1-1: USB disconnect, device number 13 [ 311.684282][T10949] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1937'. [ 311.684337][T10949] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 311.848216][T10948] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 312.087398][T10948] bond1 (unregistering): Released all slaves [ 312.752692][T10973] ip6gre1: entered allmulticast mode [ 312.779722][ T3374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.322936][T10988] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1952'. [ 313.805733][T11008] jffs2: notice: (11008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 313.980068][T11012] loop2: detected capacity change from 0 to 512 [ 314.052159][T11012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.107022][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.702985][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 315.790756][T11062] loop5: detected capacity change from 0 to 512 [ 315.852279][T11062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.869358][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.881142][T11062] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.892563][ T10] usb 5-1: config 0 has no interfaces? [ 315.906611][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.906669][ T10] usb 5-1: Product: syz [ 315.906720][ T10] usb 5-1: Manufacturer: syz [ 315.906755][ T10] usb 5-1: SerialNumber: syz [ 315.940558][ T10] usb 5-1: config 0 descriptor?? [ 316.136027][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.158056][ T10] usb 5-1: USB disconnect, device number 10 [ 316.409929][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.722556][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.962251][T11095] loop1: detected capacity change from 0 to 512 [ 316.985836][T11095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 317.039113][T11095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 317.039287][T11095] System zones: 1-12 [ 317.039566][T11095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 317.065337][T11095] EXT4-fs error (device loop1): ext4_validate_block_bitmap:444: comm syz.1.1981: bg 0: block 361: padding at end of block bitmap is not set [ 317.065409][T11095] loop1: lost filesystem error report for type 5 error -117 [ 317.082382][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 317.082753][ C1] EXT4-fs (loop1): initial error at time 1788934935: ext4_validate_block_bitmap:444 [ 317.083486][ C1] EXT4-fs (loop1): last error at time 1788934935: ext4_validate_block_bitmap:444 [ 317.105415][T11095] EXT4-fs (loop1): Remounting filesystem read-only [ 317.105708][T11095] EXT4-fs (loop1): 1 truncate cleaned up [ 317.130566][T11095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 317.311543][T11095] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1981: error -EUCLEAN reading directory block [ 317.616890][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 317.870038][T11112] loop1: detected capacity change from 0 to 512 [ 317.942552][T11112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.739273][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.858885][T11132] tun0: tun_chr_ioctl cmd 1074025672 [ 318.858938][T11132] tun0: ignored: set checksum disabled [ 319.066356][T11140] ip6gre1: entered allmulticast mode [ 319.077974][ T1170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.472301][T11152] loop5: detected capacity change from 0 to 4096 [ 319.498688][T11152] NILFS (loop5): invalid segment: Checksum error in segment payload [ 319.507156][T11152] NILFS (loop5): trying rollback from an earlier position [ 319.557768][T11152] NILFS (loop5): recovery complete [ 319.569847][T11159] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.636029][T11152] NILFS (loop5): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 319.733020][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 319.885354][ T30] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 319.887383][ T30] usb 5-1: config 0 has no interfaces? [ 319.887423][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.900819][ T30] usb 5-1: config 0 descriptor?? [ 320.159368][ T1821] usb 5-1: USB disconnect, device number 11 [ 320.963575][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 321.112556][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 321.113565][ T30] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 321.117735][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.117781][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.117839][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.146129][ T30] usb 1-1: config 0 descriptor?? [ 321.212685][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 321.363185][ T5885] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 321.383864][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.383950][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.407552][ T5885] usb 3-1: config 0 descriptor?? [ 321.796405][ T30] sony 0003:1345:3008.0016: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 321.815220][T11207] loop5: detected capacity change from 0 to 32768 [ 321.826651][T11207] xfs: Deprecated parameter 'noattr2' [ 321.832901][ T30] sony 0003:1345:3008.0016: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 321.832976][ T30] sony 0003:1345:3008.0016: failed to claim input [ 321.855597][ T30] usb 1-1: USB disconnect, device number 14 [ 321.857994][T11207] XFS: noattr2 mount option is deprecated. [ 321.898532][T11207] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.924358][ T5617] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 322.005485][T11207] XFS (loop5): Ending clean mount [ 322.072809][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 322.075765][ T5617] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 322.082688][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.098111][ T5885] ath6kl: mismatched byte count 0 vs. expected 12 [ 322.106229][ T5885] ath6kl: Failed to init ath6kl core: -22 [ 322.119304][ T5617] usb 4-1: config 0 descriptor?? [ 322.124827][ T5885] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 322.207894][ T5617] as10x_usb: device has been detected [ 322.208790][ T5617] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 322.257099][ T5617] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 322.322109][ T5620] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.376032][ T5885] usb 3-1: USB disconnect, device number 10 [ 322.439001][T11227] fido_id[11227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 322.554488][ T5617] as10x_usb: error during firmware upload part1 [ 322.555135][ T5617] Registered device nBox DVB-T Dongle [ 322.588625][ T5617] usb 4-1: USB disconnect, device number 14 [ 322.793212][ T5617] Unregistered device nBox DVB-T Dongle [ 322.800243][ T5617] as10x_usb: device has been disconnected [ 323.006117][T11245] device-mapper: ioctl: name not supplied when creating device [ 323.282557][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.324467][T11257] bond0: no command found in slaves file - use +ifname or -ifname [ 323.377481][T11259] loop1: detected capacity change from 0 to 512 [ 323.420806][T11259] EXT4-fs (loop1): 1 truncate cleaned up [ 323.436783][T11259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.525384][ T31] audit: type=1800 audit(1788934941.785:52): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2051" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 323.586855][T11259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:444: comm syz.1.2051: bg 0: block 465: padding at end of block bitmap is not set [ 323.615947][T11259] EXT4-fs (loop1): Remounting filesystem read-only [ 323.829193][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.869599][T11269] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 324.076904][T11269] bond1 (unregistering): Released all slaves [ 324.542472][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 324.654926][T11301] loop1: detected capacity change from 0 to 4096 [ 324.695590][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 324.698348][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.698413][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.721407][ T10] usb 1-1: config 0 descriptor?? [ 324.722618][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.789065][T11301] NILFS (loop1): invalid segment: Checksum error in segment payload [ 324.789145][T11301] NILFS (loop1): trying rollback from an earlier position [ 324.849626][T11301] NILFS (loop1): recovery complete [ 324.863684][T11308] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.958970][T11301] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 325.365683][ T10] ath6kl: mismatched byte count 0 vs. expected 12 [ 325.378970][ T10] ath6kl: Failed to init ath6kl core: -22 [ 325.379453][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 325.627097][ T980] usb 1-1: USB disconnect, device number 15 [ 325.916923][T11322] jffs2: notice: (11322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 326.097443][T11331] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 326.175761][T11331] bond1 (unregistering): Released all slaves [ 326.401381][T11339] overlayfs: invalid origin (0000) [ 326.757081][T11343] loop4: detected capacity change from 0 to 4096 [ 326.823856][T11343] NILFS (loop4): invalid segment: Checksum error in segment payload [ 326.823916][T11343] NILFS (loop4): trying rollback from an earlier position [ 326.907664][T11343] NILFS (loop4): recovery complete [ 326.915422][T11351] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.026839][T11343] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 329.145794][T11379] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 329.373608][T11379] bond1 (unregistering): Released all slaves [ 329.574133][T11390] loop5: detected capacity change from 0 to 512 [ 329.625755][T11390] EXT4-fs (loop5): 1 truncate cleaned up [ 329.649429][T11390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.675091][ T31] audit: type=1800 audit(1788934947.925:53): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2102" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 329.700238][T11390] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.2102: bg 0: block 465: padding at end of block bitmap is not set [ 329.719956][T11390] EXT4-fs (loop5): Remounting filesystem read-only [ 329.805485][ T5617] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 329.950304][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.964035][ T5617] usb 1-1: Using ep0 maxpacket: 16 [ 329.967069][ T5617] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 329.977487][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.977522][ T5617] usb 1-1: Product: syz [ 329.977546][ T5617] usb 1-1: Manufacturer: syz [ 329.977570][ T5617] usb 1-1: SerialNumber: syz [ 330.269607][ T5617] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 330.308540][ T5617] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.309012][ T5617] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 330.309067][ T5617] usb 1-1: media controller created [ 330.448915][ T5617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.594151][ T5617] zl10353_read_register: readreg error (reg=127, ret==-71) [ 330.776202][ T5617] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 330.822879][ T5617] usb 1-1: USB disconnect, device number 16 [ 331.323439][ T5617] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 331.486810][ T5617] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 331.489764][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.489823][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.503757][ T5617] usb 4-1: config 0 descriptor?? [ 332.086494][T11458] loop4: detected capacity change from 0 to 4096 [ 332.200594][T11458] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 332.206493][ T5617] ath6kl: mismatched byte count 0 vs. expected 12 [ 332.207878][ T5617] ath6kl: Failed to init ath6kl core: -22 [ 332.208383][ T5617] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 332.402572][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.439526][T11469] nfsd: exp_rootfh path not found \ [ 332.465943][ T5617] usb 4-1: USB disconnect, device number 15 [ 332.564800][T11475] ntfs3(loop4): failed to convert "256c" to koi8-ru [ 332.566519][T11474] overlayfs: invalid origin (0000) [ 333.617283][T11501] loop1: detected capacity change from 0 to 4096 [ 333.632972][T11501] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 333.957595][T11510] nfsd: exp_rootfh path not found \ [ 333.978745][T11508] loop4: detected capacity change from 0 to 1024 [ 333.997190][T11508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.031478][T11508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2042c018, mo2=0102] [ 334.031637][T11508] System zones: 0-1, 3-12 [ 334.054853][T11508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.229349][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.358122][T11519] overlayfs: invalid origin (0000) [ 334.383630][ T1821] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 334.543081][ T1821] usb 4-1: Using ep0 maxpacket: 8 [ 334.550259][ T1821] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 334.561829][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.561922][ T1821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.562009][ T1821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.607810][ T1821] usb 4-1: config 0 descriptor?? [ 334.811693][ T31] audit: type=1400 audit(1788934953.065:54): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=11527 comm="syz.4.2149" name="p" offset=59 [ 335.044847][T11531] loop4: detected capacity change from 0 to 256 [ 335.054811][T11531] exfat: Deprecated parameter 'namecase' [ 335.054906][T11531] exfat: Deprecated parameter 'utf8' [ 335.138300][T11531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 335.277141][ T1821] sony 0003:1345:3008.0017: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 335.302443][ T1821] sony 0003:1345:3008.0017: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 335.315125][ T1821] sony 0003:1345:3008.0017: failed to claim input [ 335.380204][ T1821] usb 4-1: USB disconnect, device number 16 [ 335.721188][T11537] ip6gretap1: entered allmulticast mode [ 335.734570][T11537] batman_adv: batadv0: Adding interface: ip6gretap1 [ 335.741453][T11537] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.768143][T11537] batman_adv: batadv0: Interface activated: ip6gretap1 [ 335.780894][T11538] fido_id[11538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 335.805798][T11542] loop5: detected capacity change from 0 to 256 [ 335.902956][T11542] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 336.135027][T11546] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 336.262984][T11557] loop4: detected capacity change from 0 to 512 [ 336.350769][T11557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.139592][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.796091][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 337.823231][ T1821] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 337.984092][ T1821] usb 6-1: Using ep0 maxpacket: 32 [ 337.991652][ T1821] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 338.002092][ T1821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.002481][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 338.027309][ T1821] usb 6-1: config 0 descriptor?? [ 338.063700][ T1821] as10x_usb: device has been detected [ 338.070102][ T1821] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 338.099291][ T1821] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 338.152914][ T1821] as10x_usb: error during firmware upload part1 [ 338.163597][ T1821] Registered device nBox DVB-T Dongle [ 338.172673][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 338.183797][ T9] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 338.199399][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.199485][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.199581][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.202226][T11596] input: syz1 as /devices/virtual/input/input35 [ 338.274701][ T9] usb 5-1: config 0 descriptor?? [ 338.349010][ T5617] usb 6-1: USB disconnect, device number 16 [ 338.500851][ T5617] Unregistered device nBox DVB-T Dongle [ 338.512067][ T5617] as10x_usb: device has been disconnected [ 338.593894][T11598] loop1: detected capacity change from 0 to 256 [ 338.608240][T11598] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 338.631536][T11598] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 338.889938][T11603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2190'. [ 338.931477][ T9] sony 0003:1345:3008.0018: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 338.957662][ T9] sony 0003:1345:3008.0018: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 338.969925][ T9] sony 0003:1345:3008.0018: failed to claim input [ 339.002702][ T9] usb 5-1: USB disconnect, device number 12 [ 339.299878][ T31] audit: type=1326 audit(1788934957.555:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz.5.2181" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17759e159 code=0x0 [ 339.310147][T11606] fido_id[11606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 339.823668][T11608] loop1: detected capacity change from 0 to 32768 [ 339.834798][T11608] xfs: Deprecated parameter 'noattr2' [ 339.834843][T11608] XFS: noattr2 mount option is deprecated. [ 339.888688][T11608] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.011719][T11608] XFS (loop1): Ending clean mount [ 340.244320][T11633] loop4: detected capacity change from 0 to 2048 [ 340.318445][T11633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.439280][ T5626] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.497028][T11633] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 340.535679][T11633] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 340.556027][T11633] EXT4-fs (loop4): This should not happen!! Data will be lost [ 340.556027][T11633] [ 340.568022][T11633] EXT4-fs (loop4): Total free blocks count 0 [ 340.574662][T11633] EXT4-fs (loop4): Free/Dirty block details [ 340.574694][T11633] EXT4-fs (loop4): free_blocks=4096 [ 340.574724][T11633] EXT4-fs (loop4): dirty_blocks=32 [ 340.574751][T11633] EXT4-fs (loop4): Block reservation details [ 340.574773][T11633] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 340.693985][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 340.850201][ T1117] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 340.867992][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 340.876755][ T5885] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 340.893321][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.893377][ T5885] usb 4-1: Product: syz [ 340.893419][ T5885] usb 4-1: Manufacturer: syz [ 340.893451][ T5885] usb 4-1: SerialNumber: syz [ 341.103885][T11652] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[11652] [ 341.192509][ T5885] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 341.227834][ T5885] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.243810][ T5885] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 341.243883][ T5885] usb 4-1: media controller created [ 341.287277][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.314209][ T980] kernel read not supported for file /media6 (pid: 980 comm: kworker/1:2) [ 341.362627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.545125][ T5885] zl10353_read_register: readreg error (reg=127, ret==-110) [ 341.599186][ T5885] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 341.614691][ T5885] usb 4-1: USB disconnect, device number 17 [ 342.668102][T11689] loop4: detected capacity change from 0 to 256 [ 342.742552][T11695] loop5: detected capacity change from 0 to 512 [ 342.795457][T11695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.307466][T11708] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x20000010c pfn:0x480c7 [ 343.319249][T11708] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 343.324765][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.336596][T11708] raw: 00fff00000000001 ffffea0001ae4f48 ffffea00011a2588 0000000000000000 [ 343.345572][T11708] raw: 000000020000010c ffff8880344b673b 00000001ffffffff 0000000000000000 [ 343.362159][T11708] page dumped because: unmovable page [ 343.368281][T11708] page_owner tracks the page as allocated [ 343.414160][T11708] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 11684, tgid 11683 (syz.3.2214), ts 342691850825 [ 343.414251][T11708] post_alloc_hook+0xfd/0x120 [ 343.414296][T11708] get_page_from_freelist+0x110d/0x35d0 [ 343.414342][T11708] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 343.414388][T11708] alloc_pages_mpol+0x201/0x550 [ 343.414420][T11708] folio_alloc_mpol_noprof+0x36/0x260 [ 343.414460][T11708] vma_alloc_folio_noprof+0xed/0x1d0 [ 343.414500][T11708] do_anonymous_page+0xac9/0x2050 [ 343.414537][T11708] __handle_mm_fault+0x1ff3/0x2f60 [ 343.414574][T11708] handle_mm_fault+0x363/0xa20 [ 343.414610][T11708] __get_user_pages+0x8ae/0x2c30 [ 343.414660][T11708] populate_vma_page_range+0x267/0x3f0 [ 343.414715][T11708] __mm_populate+0x107/0x3a0 [ 343.414773][T11708] do_mlock+0x3f0/0x800 [ 343.414811][T11708] __x64_sys_mlock+0xce/0x120 [ 343.414853][T11708] do_syscall_64+0x123/0x790 [ 343.419209][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.419252][T11708] page last free pid 11699 tgid 11683 ts 342430863751 stack trace: [ 343.419279][T11708] __free_frozen_pages+0x79f/0x10f0 [ 343.419318][T11708] __folio_put+0x3b4/0x5f0 [ 343.419355][T11708] collapse_huge_page+0x23af/0x39f0 [ 343.419398][T11708] collapse_single_pmd+0x300d/0x41b0 [ 343.420684][T11708] madvise_collapse+0x329/0x750 [ 343.420732][T11708] madvise_vma_behavior+0x112f/0x2350 [ 343.420777][T11708] madvise_walk_vmas+0x30e/0xc50 [ 343.420815][T11708] madvise_do_behavior+0x1ea/0x510 [ 343.420854][T11708] do_madvise+0x238/0x290 [ 343.420890][T11708] __x64_sys_madvise+0xa9/0x110 [ 343.420929][T11708] do_syscall_64+0x123/0x790 [ 343.420983][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.421022][T11708] page has been migrated, last migrate reason: mempolicy_mbind [ 343.723858][T11713] loop5: detected capacity change from 0 to 1024 [ 343.880452][T11713] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 343.880568][T11713] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 343.880620][T11713] EXT4-fs error (device loop5): ext4_acquire_dquot:7067: comm syz.5.2222: Failed to acquire dquot type 0 [ 343.880666][T11713] loop5: lost filesystem error report for type 5 error -5 [ 343.902381][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 343.902408][ C1] EXT4-fs (loop5): initial error at time 1788934962: ext4_acquire_dquot:7067 [ 343.902443][ C1] EXT4-fs (loop5): last error at time 1788934962: ext4_acquire_dquot:7067 [ 343.955389][T11713] EXT4-fs (loop5): 1 truncate cleaned up [ 343.978137][T11713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.117187][T11730] input: syz0 as /devices/virtual/input/input37 [ 344.125971][T11731] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 344.126091][T11731] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 344.126154][T11731] EXT4-fs error (device loop5): ext4_acquire_dquot:7067: comm syz.5.2222: Failed to acquire dquot type 0 [ 344.308467][T11735] overlayfs: failed to clone lowerpath [ 344.621000][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.782472][ T5885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 344.812491][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 344.934176][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 344.940823][ T5885] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 344.951842][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.951935][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.952015][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.979281][ T5885] usb 3-1: config 0 descriptor?? [ 344.993091][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.995766][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.017799][ T9] usb 4-1: config 0 descriptor?? [ 345.054221][T11750] loop1: detected capacity change from 0 to 2048 [ 345.062623][ T9] cp210x 4-1:0.0: cp210x converter detected [ 345.147270][T11750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.169991][T11750] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 345.174884][T11750] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 345.174925][T11750] EXT4-fs (loop1): This should not happen!! Data will be lost [ 345.174925][T11750] [ 345.174949][T11750] EXT4-fs (loop1): Total free blocks count 0 [ 345.174972][T11750] EXT4-fs (loop1): Free/Dirty block details [ 345.175026][T11750] EXT4-fs (loop1): free_blocks=4096 [ 345.175051][T11750] EXT4-fs (loop1): dirty_blocks=32 [ 345.175072][T11750] EXT4-fs (loop1): Block reservation details [ 345.175092][T11750] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 345.342946][ T140] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 345.641113][ T5885] sony 0003:1345:3008.0019: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 345.689115][ T5885] sony 0003:1345:3008.0019: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 345.689213][ T5885] sony 0003:1345:3008.0019: failed to claim input [ 345.723887][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 345.723979][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 345.769646][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 345.787771][ T9] usb 4-1: USB disconnect, device number 18 [ 345.790576][ T5885] usb 3-1: USB disconnect, device number 11 [ 345.824854][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 345.825494][ T9] cp210x 4-1:0.0: device disconnected [ 345.927365][T11770] loop4: detected capacity change from 0 to 64 [ 345.942552][ T1187] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 345.988765][T11771] fido_id[11771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 346.094372][ T1187] usb 2-1: Using ep0 maxpacket: 8 [ 346.099855][ T1187] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 346.103742][ T1187] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 346.103778][ T1187] usb 2-1: config 0 has no interface number 0 [ 346.111121][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.111157][ T1187] usb 2-1: Product: syz [ 346.111181][ T1187] usb 2-1: Manufacturer: syz [ 346.111233][ T1187] usb 2-1: SerialNumber: syz [ 346.129756][ T1187] usb 2-1: config 0 descriptor?? [ 346.373821][ T1187] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 346.400083][ T1187] usb 2-1: USB disconnect, device number 13 [ 346.532521][ T980] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 346.536873][T11785] jffs2: notice: (11785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 346.703496][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 346.709482][ T980] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 346.728688][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.739066][ T980] usb 6-1: Product: syz [ 346.739095][ T980] usb 6-1: Manufacturer: syz [ 346.739123][ T980] usb 6-1: SerialNumber: syz [ 346.756887][ T980] usb 6-1: config 0 descriptor?? [ 346.783045][ T980] gspca_main: se401-2.14.0 probing 047d:5003 [ 347.419639][ T980] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 347.646606][ T980] usb 6-1: USB disconnect, device number 17 [ 347.843193][ T1187] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 347.981492][T11835] input: syz1 as /devices/virtual/input/input40 [ 347.995093][ T1187] usb 2-1: Using ep0 maxpacket: 8 [ 347.998908][ T1187] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 348.001883][ T1187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.001929][ T1187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.001987][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.030683][ T1187] usb 2-1: config 0 descriptor?? [ 348.282033][T11843] loop4: detected capacity change from 0 to 8 [ 348.670026][T11851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 348.692276][ T1187] sony 0003:1345:3008.001A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 348.738129][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 348.797119][ T1187] sony 0003:1345:3008.001A: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 348.797202][ T1187] sony 0003:1345:3008.001A: failed to claim input [ 348.874927][ T1187] usb 2-1: USB disconnect, device number 14 [ 349.101458][T11860] fido_id[11860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 349.194623][T11864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.194748][T11864] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 349.357124][T11864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.357256][T11864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 349.405413][T11864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.405507][T11864] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 349.441216][T11864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.441329][T11864] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 349.469803][T11864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.470645][T11864] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 349.522653][T11864] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 349.522829][T11864] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 349.579410][T11872] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2292'. [ 349.683259][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.723365][T11878] input: syz1 as /devices/virtual/input/input42 [ 350.318405][T11894] jffs2: notice: (11894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.199462][T11909] [ 351.202473][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 351.362805][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 351.442779][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 351.451031][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 351.470206][T11918] netlink: 'syz.4.2314': attribute type 1 has an invalid length. [ 351.479827][ T980] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 351.500725][T11918] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2314'. [ 351.500791][T11918] netlink: 'syz.4.2314': attribute type 1 has an invalid length. [ 351.500824][T11918] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2314'. [ 351.522804][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 351.605115][ T5616] Bluetooth: hci5: command 0x0405 tx timeout [ 351.642428][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 351.648211][ T980] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 351.659370][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.659434][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.659512][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.698533][ T980] usb 6-1: config 0 descriptor?? [ 384.262579][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.662539][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.012343][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 457.034143][ C1] rcu: 0-...!: (1 GPs behind) idle=47c4/1/0x4000000000000000 softirq=54502/54504 fqs=4 [ 457.043871][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11929/1:b..l [ 457.051871][ C1] rcu: (detected by 1, t=10505 jiffies, g=62385, q=263 ncpus=2) [ 457.059586][ C1] Sending NMI from CPU 1 to CPUs 0: [ 457.064791][ C0] NMI backtrace for cpu 0 [ 457.064821][ C0] CPU: 0 UID: 0 PID: 11927 Comm: syz.1.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.064876][ C0] Tainted: [L]=SOFTLOCKUP [ 457.064888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 457.064905][ C0] RIP: 0010:__hrtimer_run_queues+0x1ba/0x9c0 [ 457.064952][ C0] Code: e1 4d 0f 40 0f 92 c5 31 ff 89 ee e8 30 87 14 00 40 84 ed 0f 85 49 05 00 00 e8 12 8d 14 00 48 8b 3c 24 e8 f9 03 db 09 44 89 ee 01 00 00 00 e8 6c 87 14 00 41 83 fd 01 0f 84 d4 04 00 00 e8 ed [ 457.064982][ C0] RSP: 0018:ffffc90000007e90 EFLAGS: 00000096 [ 457.065006][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81e77cb8 [ 457.065026][ C0] RDX: 1ffff110170850a2 RSI: 0000000000000001 RDI: ffffc90000007e20 [ 457.065046][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff52000000fc4 [ 457.065065][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888034b95300 [ 457.065085][ C0] R13: 0000000000000001 R14: ffff8880b8428640 R15: ffff8880b8428690 [ 457.065107][ C0] FS: 0000555565bcb500(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 457.065134][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.065155][ C0] CR2: 0000200000000040 CR3: 0000000075c1d000 CR4: 0000000000350ef0 [ 457.065174][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.065193][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 457.065213][ C0] Call Trace: [ 457.065222][ C0] [ 457.065242][ C0] hrtimer_interrupt+0x441/0xaa0 [ 457.065298][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 457.065336][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 457.065380][ C0] [ 457.065390][ C0] [ 457.065400][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.065435][ C0] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 457.065472][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 e9 39 13 92 fe 66 66 2e 0f 1f 84 00 00 00 00 00 0f [ 457.065501][ C0] RSP: 0018:ffffc9000494fa10 EFLAGS: 00000282 [ 457.065525][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 457.065543][ C0] RDX: 0000000000000000 RSI: ffffffff8bd0b1da RDI: fffffbfff1d95864 [ 457.065563][ C0] RBP: ffffffff8ecac320 R08: 0000000000000001 R09: 0000000000000000 [ 457.065582][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bd0b1da [ 457.065602][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 457.065622][ C0] ? schedule+0x17a/0x2c0 [ 457.065664][ C0] ? schedule+0x17a/0x2c0 [ 457.065704][ C0] __kasan_check_byte+0x13/0x50 [ 457.065755][ C0] lock_acquire+0x132/0x380 [ 457.065783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.065820][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 457.065866][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.065903][ C0] ? hrtimer_start_range_ns_user+0x170/0x720 [ 457.065950][ C0] schedule+0x17a/0x2c0 [ 457.065986][ C0] ? schedule+0x15b/0x2c0 [ 457.066024][ C0] futex_do_wait+0x88/0x180 [ 457.066068][ C0] __futex_wait+0x1c4/0x300 [ 457.066115][ C0] ? __pfx___futex_wait+0x10/0x10 [ 457.066165][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 457.066213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066250][ C0] ? __hrtimer_setup+0x208/0x330 [ 457.066288][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066325][ C0] ? ktime_add_safe+0x60/0x70 [ 457.066362][ C0] futex_wait+0xe6/0x370 [ 457.066406][ C0] ? __pfx_futex_wait+0x10/0x10 [ 457.066450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066491][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 457.066536][ C0] do_futex+0x265/0x440 [ 457.066574][ C0] ? __pfx_do_futex+0x10/0x10 [ 457.066611][ C0] ? ktime_get+0x22c/0x320 [ 457.066638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066674][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 457.066717][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066757][ C0] __x64_sys_futex+0x34f/0x4d0 [ 457.066799][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 457.066842][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.066887][ C0] do_syscall_64+0x123/0x790 [ 457.066934][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.066965][ C0] RIP: 0033:0x7f6a0779e159 [ 457.066989][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.067018][ C0] RSP: 002b:00007ffd3d3e5d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 457.067046][ C0] RAX: ffffffffffffffda RBX: 0000000000055e84 RCX: 00007f6a0779e159 [ 457.067066][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a07a25fac [ 457.067085][ C0] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 457.067104][ C0] R10: 00007ffd3d3e5e80 R11: 0000000000000246 R12: 00007ffd3d3e5ea0 [ 457.067124][ C0] R13: 00007f6a07a25fac R14: 0000000000055eb6 R15: 00007ffd3d3e5e80 [ 457.067157][ C0] [ 457.552685][ C1] task:syz.4.2319 state:R running task stack:27104 pid:11929 tgid:11929 ppid:5625 task_flags:0x400040 flags:0x00080000 [ 457.566230][ C1] Call Trace: [ 457.569499][ C1] [ 457.572429][ C1] __schedule+0x1259/0x6920 [ 457.576947][ C1] ? unwind_next_frame+0xbd/0x2090 [ 457.582090][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.587731][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 457.592947][ C1] ? __pfx___schedule+0x10/0x10 [ 457.597807][ C1] ? __kernel_text_address+0xd/0x30 [ 457.603029][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.608671][ C1] ? rcu_is_watching+0x13/0xc0 [ 457.613469][ C1] preempt_schedule_irq+0x4e/0x90 [ 457.618511][ C1] irqentry_exit+0x205/0xa10 [ 457.623135][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.628789][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.634775][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 457.640427][ C1] Code: ff ff ff ff 65 0f c1 15 81 36 bd 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 87 d0 40 f5 e9 82 d0 40 f5 31 c0 [ 457.660035][ C1] RSP: 0018:ffffc9000205ef48 EFLAGS: 00000286 [ 457.666101][ C1] RAX: 0000000000000001 RBX: ffffffff8edec2e0 RCX: 0000000000000001 [ 457.674067][ C1] RDX: 0000000000000046 RSI: ffffffff8e3cc68d RDI: ffffffff8c622680 [ 457.682039][ C1] RBP: ffff8880300d8000 R08: 0000000000000006 R09: 0000000000001000 [ 457.690006][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 457.697973][ C1] R13: 0000000000000246 R14: ffff8880300d8bb0 R15: 0000000000000000 [ 457.705966][ C1] lookup_page_ext+0x6e/0x100 [ 457.710667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.716313][ C1] __update_page_owner_handle+0x111/0x530 [ 457.722062][ C1] __set_page_owner+0x11f/0x540 [ 457.726917][ C1] ? __free_one_page+0x1000/0x1070 [ 457.732035][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 457.737409][ C1] ? bad_range+0x257/0x3f0 [ 457.741844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.747487][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 457.752702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.758343][ C1] ? get_page_from_freelist+0x10e6/0x35d0 [ 457.764084][ C1] post_alloc_hook+0xfd/0x120 [ 457.768772][ C1] get_page_from_freelist+0x110d/0x35d0 [ 457.774333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.780004][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 457.785911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.791553][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 457.796861][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 457.802068][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 457.807993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.813636][ C1] ? stack_trace_save+0x8e/0xc0 [ 457.818505][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 457.823896][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.830070][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.836411][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 457.841613][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.847259][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.852899][ C1] ? kasan_save_stack+0x3f/0x50 [ 457.857769][ C1] ? kasan_save_stack+0x30/0x50 [ 457.862637][ C1] ? kasan_save_track+0x14/0x30 [ 457.867507][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 457.872553][ C1] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 457.878636][ C1] ? alloc_vmap_area+0x1814/0x2bb0 [ 457.883765][ C1] ? __get_vm_area_node+0x1ed/0x350 [ 457.888982][ C1] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 457.895051][ C1] ? __vmalloc_node_noprof+0xad/0xf0 [ 457.900334][ C1] ? copy_process+0x803/0x8370 [ 457.905103][ C1] ? kernel_clone+0x176/0x9d0 [ 457.909780][ C1] ? __do_sys_clone3+0x214/0x290 [ 457.914719][ C1] ? do_syscall_64+0x123/0x790 [ 457.919500][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.925593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.931242][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.937164][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.942803][ C1] ? policy_nodemask+0xed/0x4f0 [ 457.947661][ C1] alloc_pages_mpol+0x201/0x550 [ 457.952519][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 457.957905][ C1] alloc_pages_noprof+0x1a/0x160 [ 457.962855][ C1] get_free_pages_noprof+0x10/0xb0 [ 457.967984][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.973625][ C1] __kasan_populate_vmalloc+0xa0/0x210 [ 457.979112][ C1] alloc_vmap_area+0x95d/0x2bb0 [ 457.983996][ C1] ? kasan_save_track+0x14/0x30 [ 457.988865][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.994506][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 457.999287][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 458.004593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.010237][ C1] ? __get_vm_area_node+0x124/0x350 [ 458.015465][ C1] __get_vm_area_node+0x1ed/0x350 [ 458.020523][ C1] __vmalloc_node_range_noprof+0x268/0x1420 [ 458.026422][ C1] ? kernel_clone+0x176/0x9d0 [ 458.031099][ C1] ? lock_acquire+0x1d1/0x380 [ 458.035777][ C1] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 458.041597][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.047238][ C1] ? find_held_lock+0x2b/0x80 [ 458.051927][ C1] ? rcu_read_unlock+0x17/0x60 [ 458.056700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.062346][ C1] ? kernel_clone+0x176/0x9d0 [ 458.067035][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.073372][ C1] ? rcu_is_watching+0x13/0xc0 [ 458.078146][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.083786][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 458.089254][ C1] ? kernel_clone+0x176/0x9d0 [ 458.093930][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 458.099046][ C1] ? kernel_clone+0x176/0x9d0 [ 458.103730][ C1] copy_process+0x803/0x8370 [ 458.108323][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.113968][ C1] ? __page_table_check_ptes_set+0x1d5/0x530 [ 458.119955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.125594][ C1] ? find_held_lock+0x2b/0x80 [ 458.130289][ C1] ? lock_acquire+0x191/0x380 [ 458.134972][ C1] ? __pfx_copy_process+0x10/0x10 [ 458.140009][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.145652][ C1] ? _copy_from_user+0x59/0xd0 [ 458.150427][ C1] kernel_clone+0x176/0x9d0 [ 458.154933][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.160314][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 458.165358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.171000][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 458.175943][ C1] __do_sys_clone3+0x214/0x290 [ 458.180709][ C1] ? __pfx___do_sys_clone3+0x10/0x10 [ 458.185995][ C1] ? __might_fault+0xc5/0x140 [ 458.190700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.196342][ C1] ? _copy_to_user+0xaf/0xd0 [ 458.200971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.206619][ C1] do_syscall_64+0x123/0x790 [ 458.211234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.217129][ C1] RIP: 0033:0x7f9166d9ef49 [ 458.221540][ C1] RSP: 002b:00007ffce0189458 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 458.229952][ C1] RAX: ffffffffffffffda RBX: 00007f9166d5a4e0 RCX: 00007f9166d9ef49 [ 458.237919][ C1] RDX: 00007f9166d5a4e0 RSI: 0000000000000058 RDI: 00007ffce01894b0 [ 458.245886][ C1] RBP: 00007f9167bc76c0 R08: 00007f9167bc76c0 R09: 00007ffce0189597 [ 458.253850][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 458.261815][ C1] R13: 000000000000000b R14: 00007ffce01894b0 R15: 00007ffce0189598 [ 458.269803][ C1] [ 458.272812][ C1] rcu: rcu_preempt kthread starved for 10485 jiffies! g62385 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 458.283830][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 458.293787][ C1] rcu: RCU grace-period kthread stack dump: [ 458.299659][ C1] task:rcu_preempt state:R running task stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 458.313200][ C1] Call Trace: [ 458.316465][ C1] [ 458.319392][ C1] __schedule+0x1259/0x6920 [ 458.323906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.329546][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 458.334502][ C1] ? lock_acquire+0x1d1/0x380 [ 458.339180][ C1] ? __pfx___schedule+0x10/0x10 [ 458.344038][ C1] ? find_held_lock+0x2b/0x80 [ 458.348730][ C1] ? schedule+0x225/0x2c0 [ 458.353068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.358719][ C1] schedule+0xdd/0x2c0 [ 458.362799][ C1] schedule_timeout+0x127/0x280 [ 458.367659][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 458.373039][ C1] ? __pfx_process_timeout+0x10/0x10 [ 458.378348][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.383993][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 458.389812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.395454][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 458.400941][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 458.405726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.411369][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 458.416682][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 458.421639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.427286][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 458.432506][ C1] ? rcu_is_watching+0x13/0xc0 [ 458.437279][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 458.443105][ C1] rcu_gp_kthread+0x17a/0x220 [ 458.447805][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.453023][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 458.458843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.464488][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.470128][ C1] ? __kthread_parkme+0x18f/0x230 [ 458.475165][ C1] ? kthread+0x13a/0x450 [ 458.479416][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.484634][ C1] kthread+0x373/0x450 [ 458.488716][ C1] ? __pfx_kthread+0x10/0x10 [ 458.493323][ C1] ret_from_fork+0x730/0xd60 [ 458.497920][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 458.503036][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.508677][ C1] ? __switch_to+0x800/0x10f0 [ 458.513368][ C1] ? __switch_to_asm+0x39/0x70 [ 458.518131][ C1] ? __pfx_kthread+0x10/0x10 [ 458.522735][ C1] ret_from_fork_asm+0x1a/0x30 [ 458.527521][ C1] [ 458.530531][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 458.536848][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 458.547882][ C1] Tainted: [L]=SOFTLOCKUP [ 458.552201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 458.562246][ C1] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 [ 458.568924][ C1] Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 [ 458.588536][ C1] RSP: 0018:ffffc9000410f578 EFLAGS: 00000293 [ 458.594600][ C1] RAX: 0000000000000000 RBX: ffff8880b8443c80 RCX: 0000000000000001 [ 458.602565][ C1] RDX: ffff8880772b8000 RSI: ffffffff81ff2ce5 RDI: ffff8880772b8000 [ 458.610533][ C1] RBP: ffff8880b8443c88 R08: 0000000000000005 R09: 0000000000000000 [ 458.618497][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 458.626463][ C1] R13: ffffed1017088791 R14: 0000000000000001 R15: 0000000000000000 [ 458.634430][ C1] FS: 00005555665b4500(0000) GS:ffff888123c5a000(0000) knlGS:0000000000000000 [ 458.643359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.649939][ C1] CR2: 00007fb10f1556c8 CR3: 000000005a395000 CR4: 0000000000350ef0 [ 458.657905][ C1] Call Trace: [ 458.661172][ C1] [ 458.664100][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 458.669303][ C1] ? ldt_dup_context+0x45/0x300 [ 458.674166][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 458.680501][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.686140][ C1] ? rcu_is_watching+0x13/0xc0 [ 458.690914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.696553][ C1] ? trace_tlb_flush+0x14b/0x1a0 [ 458.701518][ C1] flush_tlb_mm_range+0x3c9/0x1360 [ 458.706634][ C1] ? ldt_dup_context+0x1a4/0x300 [ 458.711577][ C1] ? ldt_dup_context+0x1a4/0x300 [ 458.716520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.722168][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 458.727726][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.733735][ C1] ? dup_mmap+0x1560/0x2370 [ 458.738237][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.743883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.749525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.755165][ C1] ? up_write+0x2dc/0x5b0 [ 458.759503][ C1] dup_mmap+0x157b/0x2370 [ 458.763851][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 458.768528][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 458.774345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.779992][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.785633][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 458.791452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.797096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.802739][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 458.807700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.813349][ C1] ? lock_acquire+0x1d1/0x380 [ 458.818030][ C1] ? copy_process+0x4806/0x8370 [ 458.822888][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.828540][ C1] copy_process+0x4811/0x8370 [ 458.833244][ C1] ? __pfx_copy_process+0x10/0x10 [ 458.838268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.843914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.849559][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.854950][ C1] kernel_clone+0x176/0x9d0 [ 458.859460][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 458.864497][ C1] ? __might_fault+0xc5/0x140 [ 458.869181][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.874820][ C1] ? find_held_lock+0x2b/0x80 [ 458.879508][ C1] ? __might_fault+0xc5/0x140 [ 458.884199][ C1] __do_sys_clone+0xd9/0x120 [ 458.888792][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 458.894020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 458.899667][ C1] do_syscall_64+0x123/0x790 [ 458.904281][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.910176][ C1] RIP: 0033:0x7fb10e3c6bd2 [ 458.914585][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 458.934195][ C1] RSP: 002b:00007ffe3e8dc5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 458.942607][ C1] RAX: ffffffffffffffda RBX: 00007ffe3e8dc5c0 RCX: 00007fb10e3c6bd2 [ 458.950575][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 458.958538][ C1] RBP: 00007ffe3e8dc74c R08: 0000000000000000 R09: 0000000000000001 [ 458.966502][ C1] R10: 00005555665b47d0 R11: 0000000000000246 R12: 0000000000000001 [ 458.974468][ C1] R13: 00000000000927c0 R14: 0000000000055e5d R15: 00007ffe3e8dc7a0 [ 458.982456][ C1] [ 587.772528][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.812161][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [syz-executor:5614] [ 595.812195][ C1] Modules linked in: [ 595.812213][ C1] irq event stamp: 21938471 [ 595.836386][ C1] hardirqs last enabled at (21938470): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 595.847081][ C1] hardirqs last disabled at (21938471): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 595.857688][ C1] softirqs last enabled at (21938462): [] __irq_exit_rcu+0x16a/0x210 [ 595.867433][ C1] softirqs last disabled at (21938465): [] __irq_exit_rcu+0x16a/0x210 [ 595.877191][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 595.877241][ C1] Tainted: [L]=SOFTLOCKUP [ 595.877254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 595.877275][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 595.877326][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 bd 14 f6 48 89 df e8 fe 13 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 09 04 f6 65 48 83 3d 74 f4 b9 08 00 74 16 5b [ 595.877360][ C1] RSP: 0018:ffffc90000a18c40 EFLAGS: 00000246 [ 595.877387][ C1] RAX: 0000000000000002 RBX: ffff88802aee4000 RCX: 0000000000000004 [ 595.877410][ C1] RDX: 0000000000000102 RSI: ffffffff8e3f2a8e RDI: ffffffff8c622680 [ 595.877434][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 595.877455][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 595.877477][ C1] R13: ffff88802aee4000 R14: ffff88802b3fc4a3 R15: ffff88802b3fc410 [ 595.877507][ C1] FS: 00005555665b4500(0000) GS:ffff888123c5a000(0000) knlGS:0000000000000000 [ 595.877538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.877562][ C1] CR2: 00007fb10f1556c8 CR3: 000000005a395000 CR4: 0000000000350ef0 [ 595.877586][ C1] Call Trace: [ 595.877597][ C1] [ 595.877611][ C1] dummy_timer+0x1d89/0x3700 [ 595.877657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.877705][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.877761][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.877802][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 595.877863][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 595.877901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.877943][ C1] ? mark_held_locks+0x40/0x70 [ 595.878001][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 595.878050][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 595.878088][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 595.878150][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 595.878204][ C1] handle_softirqs+0x1e6/0x9d0 [ 595.878270][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 595.878327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.878369][ C1] ? _raw_spin_unlock+0x28/0x50 [ 595.878411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.878453][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 595.878513][ C1] __irq_exit_rcu+0x16a/0x210 [ 595.878571][ C1] irq_exit_rcu+0x9/0x30 [ 595.878601][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 595.878650][ C1] [ 595.878662][ C1] [ 595.878675][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 595.878715][ C1] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 [ 595.878753][ C1] Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 [ 595.878788][ C1] RSP: 0018:ffffc9000410f578 EFLAGS: 00000293 [ 595.878814][ C1] RAX: 0000000000000000 RBX: ffff8880b8443c80 RCX: 0000000000000001 [ 595.878837][ C1] RDX: ffff8880772b8000 RSI: ffffffff81ff2ce5 RDI: ffff8880772b8000 [ 595.878861][ C1] RBP: ffff8880b8443c88 R08: 0000000000000005 R09: 0000000000000000 [ 595.878884][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 595.878905][ C1] R13: ffffed1017088791 R14: 0000000000000001 R15: 0000000000000000 [ 595.878940][ C1] ? smp_call_function_many_cond+0x575/0x18c0 [ 595.878982][ C1] ? smp_call_function_many_cond+0x575/0x18c0 [ 595.879026][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 595.879067][ C1] ? ldt_dup_context+0x45/0x300 [ 595.879110][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 595.879150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879193][ C1] ? rcu_is_watching+0x13/0xc0 [ 595.879236][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879279][ C1] ? trace_tlb_flush+0x14b/0x1a0 [ 595.879341][ C1] flush_tlb_mm_range+0x3c9/0x1360 [ 595.879379][ C1] ? ldt_dup_context+0x1a4/0x300 [ 595.879419][ C1] ? ldt_dup_context+0x1a4/0x300 [ 595.879457][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879511][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 595.879555][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.879617][ C1] ? dup_mmap+0x1560/0x2370 [ 595.879648][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879739][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879782][ C1] ? up_write+0x2dc/0x5b0 [ 595.879825][ C1] dup_mmap+0x157b/0x2370 [ 595.879875][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 595.879907][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 595.879954][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.879997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880039][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 595.880086][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880133][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880175][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 595.880224][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880266][ C1] ? lock_acquire+0x1d1/0x380 [ 595.880296][ C1] ? copy_process+0x4806/0x8370 [ 595.880336][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880389][ C1] copy_process+0x4811/0x8370 [ 595.880449][ C1] ? __pfx_copy_process+0x10/0x10 [ 595.880481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880530][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880576][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 595.880629][ C1] kernel_clone+0x176/0x9d0 [ 595.880668][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 595.880714][ C1] ? __might_fault+0xc5/0x140 [ 595.880755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.880797][ C1] ? find_held_lock+0x2b/0x80 [ 595.880842][ C1] ? __might_fault+0xc5/0x140 [ 595.880888][ C1] __do_sys_clone+0xd9/0x120 [ 595.880924][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 595.880988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.881038][ C1] do_syscall_64+0x123/0x790 [ 595.881093][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.881129][ C1] RIP: 0033:0x7fb10e3c6bd2 [ 595.881157][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 595.881192][ C1] RSP: 002b:00007ffe3e8dc5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 595.881223][ C1] RAX: ffffffffffffffda RBX: 00007ffe3e8dc5c0 RCX: 00007fb10e3c6bd2 [ 595.881248][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 595.881270][ C1] RBP: 00007ffe3e8dc74c R08: 0000000000000000 R09: 0000000000000001 [ 595.881292][ C1] R10: 00005555665b47d0 R11: 0000000000000246 R12: 0000000000000001 [ 595.881315][ C1] R13: 00000000000927c0 R14: 0000000000055e5d R15: 00007ffe3e8dc7a0 [ 595.881360][ C1] [ 595.881374][ C1] Sending NMI from CPU 1 to CPUs 0: [ 595.881406][ C0] NMI backtrace for cpu 0 [ 595.881426][ C0] CPU: 0 UID: 0 PID: 11927 Comm: syz.1.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.881469][ C0] Tainted: [L]=SOFTLOCKUP [ 595.881479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 595.881497][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x43/0x60 [ 595.881537][ C0] Code: e8 b2 6d 04 f6 ff 74 24 10 48 8d 7b 18 45 31 c9 31 c9 41 b8 01 00 00 00 31 d2 31 f6 e8 f6 bb 14 f6 48 89 df e8 0e 14 15 f6 58 <48> 89 e8 5b 5d e9 7e d9 3d f5 e8 1e dd 41 f6 eb c0 66 66 2e 0f 1f [ 595.881567][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000092 [ 595.881590][ C0] RAX: ffffffff85339084 RBX: ffffffff9bc31970 RCX: ffffffff81e77cb8 [ 595.881611][ C0] RDX: 1ffffffff3786330 RSI: 0000000000000004 RDI: ffffc90000007cd0 [ 595.881631][ C0] RBP: 0000000000000012 R08: 0000000000000001 R09: fffff52000000f9a [ 595.881651][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 595.881670][ C0] R13: ffff888034b95300 R14: 0000000000000001 R15: 1ffff92000000fb0 [ 595.881693][ C0] FS: 0000555565bcb500(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 595.881720][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.881740][ C0] CR2: 0000200000000040 CR3: 0000000075c1d000 CR4: 0000000000350ef0 [ 595.881760][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.881779][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 595.881798][ C0] Call Trace: [ 595.881807][ C0] [ 595.881818][ C0] debug_object_activate+0x144/0x4b0 [ 595.881858][ C0] ? find_held_lock+0x2b/0x80 [ 595.881899][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 595.881943][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.881980][ C0] ? do_raw_spin_lock+0x128/0x260 [ 595.882018][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.882060][ C0] enqueue_hrtimer+0x75/0x2f0 [ 595.882100][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 595.882149][ C0] hrtimer_interrupt+0x441/0xaa0 [ 595.882203][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 595.882242][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 595.882285][ C0] [ 595.882294][ C0] [ 595.882306][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 595.882339][ C0] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 595.882376][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 e9 39 13 92 fe 66 66 2e 0f 1f 84 00 00 00 00 00 0f [ 595.882406][ C0] RSP: 0018:ffffc9000494fa10 EFLAGS: 00000282 [ 595.882429][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 595.882447][ C0] RDX: 0000000000000000 RSI: ffffffff8bd0b1da RDI: fffffbfff1d95864 [ 595.882467][ C0] RBP: ffffffff8ecac320 R08: 0000000000000001 R09: 0000000000000000 [ 595.882485][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bd0b1da [ 595.882504][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 595.882524][ C0] ? schedule+0x17a/0x2c0 [ 595.882565][ C0] ? schedule+0x17a/0x2c0 [ 595.882605][ C0] __kasan_check_byte+0x13/0x50 [ 595.882656][ C0] lock_acquire+0x132/0x380 [ 595.882682][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.882719][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 595.882759][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.882795][ C0] ? hrtimer_start_range_ns_user+0x170/0x720 [ 595.882841][ C0] schedule+0x17a/0x2c0 [ 595.882877][ C0] ? schedule+0x15b/0x2c0 [ 595.882914][ C0] futex_do_wait+0x88/0x180 [ 595.882959][ C0] __futex_wait+0x1c4/0x300 [ 595.883009][ C0] ? __pfx___futex_wait+0x10/0x10 [ 595.883058][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 595.883107][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883142][ C0] ? __hrtimer_setup+0x208/0x330 [ 595.883181][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883218][ C0] ? ktime_add_safe+0x60/0x70 [ 595.883255][ C0] futex_wait+0xe6/0x370 [ 595.883299][ C0] ? __pfx_futex_wait+0x10/0x10 [ 595.883343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883384][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 595.883429][ C0] do_futex+0x265/0x440 [ 595.883467][ C0] ? __pfx_do_futex+0x10/0x10 [ 595.883504][ C0] ? ktime_get+0x22c/0x320 [ 595.883531][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883567][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 595.883610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883650][ C0] __x64_sys_futex+0x34f/0x4d0 [ 595.883691][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 595.883734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.883775][ C0] do_syscall_64+0x123/0x790 [ 595.883821][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.883852][ C0] RIP: 0033:0x7f6a0779e159 [ 595.883876][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.883905][ C0] RSP: 002b:00007ffd3d3e5d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.883933][ C0] RAX: ffffffffffffffda RBX: 0000000000055e84 RCX: 00007f6a0779e159 [ 595.883952][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a07a25fac [ 595.883972][ C0] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 595.883990][ C0] R10: 00007ffd3d3e5e80 R11: 0000000000000246 R12: 00007ffd3d3e5ea0 [ 595.884014][ C0] R13: 00007f6a07a25fac R14: 0000000000055eb6 R15: 00007ffd3d3e5e80 [ 595.884047][ C0] [ 595.884403][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 597.073324][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 597.084358][ C1] Tainted: [L]=SOFTLOCKUP [ 597.088671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 597.098717][ C1] Call Trace: [ 597.101986][ C1] [ 597.104822][ C1] dump_stack_lvl+0x100/0x190 [ 597.109524][ C1] vpanic+0x553/0x970 [ 597.113512][ C1] ? __pfx_vpanic+0x10/0x10 [ 597.118018][ C1] ? console_srcu_read_unlock+0x41/0x60 [ 597.123575][ C1] ? console_srcu_read_unlock+0x41/0x60 [ 597.129127][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.134784][ C1] panic+0xd1/0xe0 [ 597.138509][ C1] ? __pfx_panic+0x10/0x10 [ 597.142927][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.148572][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 597.154309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.159957][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 597.164996][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 597.170296][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 597.175509][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 597.180978][ C1] __hrtimer_run_queues+0x13f/0x9c0 [ 597.186208][ C1] hrtimer_interrupt+0x441/0xaa0 [ 597.191186][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 597.197181][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 597.202834][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.208822][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 597.215256][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 bd 14 f6 48 89 df e8 fe 13 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 09 04 f6 65 48 83 3d 74 f4 b9 08 00 74 16 5b [ 597.234870][ C1] RSP: 0018:ffffc90000a18c40 EFLAGS: 00000246 [ 597.240937][ C1] RAX: 0000000000000002 RBX: ffff88802aee4000 RCX: 0000000000000004 [ 597.248904][ C1] RDX: 0000000000000102 RSI: ffffffff8e3f2a8e RDI: ffffffff8c622680 [ 597.256873][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 597.264841][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 597.272808][ C1] R13: ffff88802aee4000 R14: ffff88802b3fc4a3 R15: ffff88802b3fc410 [ 597.280803][ C1] dummy_timer+0x1d89/0x3700 [ 597.285414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.291062][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.296722][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.302366][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.308203][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 597.313148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.318795][ C1] ? mark_held_locks+0x40/0x70 [ 597.323587][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 597.329415][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 597.334363][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 597.339594][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 597.344728][ C1] handle_softirqs+0x1e6/0x9d0 [ 597.349529][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 597.354840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.360485][ C1] ? _raw_spin_unlock+0x28/0x50 [ 597.365350][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.370993][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 597.376653][ C1] __irq_exit_rcu+0x16a/0x210 [ 597.381357][ C1] irq_exit_rcu+0x9/0x30 [ 597.385600][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 597.391255][ C1] [ 597.394174][ C1] [ 597.397099][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.403087][ C1] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 [ 597.409770][ C1] Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 [ 597.429381][ C1] RSP: 0018:ffffc9000410f578 EFLAGS: 00000293 [ 597.435450][ C1] RAX: 0000000000000000 RBX: ffff8880b8443c80 RCX: 0000000000000001 [ 597.443420][ C1] RDX: ffff8880772b8000 RSI: ffffffff81ff2ce5 RDI: ffff8880772b8000 [ 597.451389][ C1] RBP: ffff8880b8443c88 R08: 0000000000000005 R09: 0000000000000000 [ 597.459357][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 597.467324][ C1] R13: ffffed1017088791 R14: 0000000000000001 R15: 0000000000000000 [ 597.475304][ C1] ? smp_call_function_many_cond+0x575/0x18c0 [ 597.481386][ C1] ? smp_call_function_many_cond+0x575/0x18c0 [ 597.487466][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 597.492677][ C1] ? ldt_dup_context+0x45/0x300 [ 597.497543][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 597.503878][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.509521][ C1] ? rcu_is_watching+0x13/0xc0 [ 597.514297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.519941][ C1] ? trace_tlb_flush+0x14b/0x1a0 [ 597.524913][ C1] flush_tlb_mm_range+0x3c9/0x1360 [ 597.530031][ C1] ? ldt_dup_context+0x1a4/0x300 [ 597.534979][ C1] ? ldt_dup_context+0x1a4/0x300 [ 597.539924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.545579][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 597.551139][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 597.557152][ C1] ? dup_mmap+0x1560/0x2370 [ 597.561658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.567308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.572954][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.578598][ C1] ? up_write+0x2dc/0x5b0 [ 597.582939][ C1] dup_mmap+0x157b/0x2370 [ 597.587292][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 597.591970][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 597.597791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.603437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.609084][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.614905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.620554][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.626197][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 597.631156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.636800][ C1] ? lock_acquire+0x1d1/0x380 [ 597.641477][ C1] ? copy_process+0x4806/0x8370 [ 597.646339][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.651995][ C1] copy_process+0x4811/0x8370 [ 597.656701][ C1] ? __pfx_copy_process+0x10/0x10 [ 597.661728][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.667376][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.673023][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.678419][ C1] kernel_clone+0x176/0x9d0 [ 597.682932][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 597.687973][ C1] ? __might_fault+0xc5/0x140 [ 597.692668][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.698313][ C1] ? find_held_lock+0x2b/0x80 [ 597.703003][ C1] ? __might_fault+0xc5/0x140 [ 597.707699][ C1] __do_sys_clone+0xd9/0x120 [ 597.712294][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 597.717529][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 597.723182][ C1] do_syscall_64+0x123/0x790 [ 597.727800][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.733697][ C1] RIP: 0033:0x7fb10e3c6bd2 [ 597.738112][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 597.757722][ C1] RSP: 002b:00007ffe3e8dc5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 597.766138][ C1] RAX: ffffffffffffffda RBX: 00007ffe3e8dc5c0 RCX: 00007fb10e3c6bd2 [ 597.774106][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 597.782072][ C1] RBP: 00007ffe3e8dc74c R08: 0000000000000000 R09: 0000000000000001 [ 597.790038][ C1] R10: 00005555665b47d0 R11: 0000000000000246 R12: 0000000000000001 [ 597.798006][ C1] R13: 00000000000927c0 R14: 0000000000055e5d R15: 00007ffe3e8dc7a0 [ 597.805997][ C1] [ 598.941142][ C1] Shutting down cpus with NMI [ 598.946541][ C1] Kernel Offset: disabled [ 598.950855][ C1] Rebooting in 86400 seconds..