last executing test programs: 5.219110938s ago: executing program 2 (id=843): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="577d0390101180b486c39cbc2871d38c8e4eaf6f7b42fd1314496644fd78dcaac99d689ddd90a0a407970d93c6e86b2cbcffd002826b316c1727d2074c", 0x3d}, {&(0x7f0000000080)="4274ca6f2d1462939766b7408a08121fa01ad87031135f65fd5765e962ab0684ad807f420b28d3d6e9abf399ccca9c9909bee546ad672c6af592b7d40d1fb61fac880c987790872da36175c92a43e9971c8d08c8f28421137dd34d93c4b5e6b1808438e0b5", 0x65}, {&(0x7f0000000280)="9faf8679f047e32b8e32bb6aae900e85da7aeb8c292149b978eab121b75f7338774c7a4b8f9bc85c8188061447f2e08f6255621357338054c321b94150b12a0ebe25af4f16c884a996f7da543371e439424397ac69c6593c076c2c383b50934a75a1e13e5cfcecbfcb3a3ca150cb927067fc814b91ea9fe96b5e611a225ef94bd066a2dfec3d36c2640e2e536b5bc15c55e81bb02aa6d2e3b48e5d9c4936c38eaa1f313ef23590ed6d79dbd488ba39b8bb54859d031681edbf5ea2dfdc4b8e8c17fadee2edfd9869f9e6f0231ddbcc9f6a7aa7239ae674235c9e58d52c368c998092e17e434f38029178b194e710d5a822d7ae76ee8bf2859742ac111cd6e1d28bc2a0b243945305f86b1794a8a23935acce06a15251109524b26218bc8d2c6c9085b9a9539c1d538c5cc74baa8c013ac0836c7edc9a524a87de21da8372b5f8d8056c3d88717a13b8ab6eea6e6f9b6791f938984170b3932ee21647cbb289b693f47dc832c463ffd40b6d56aa17f8cc6fc2e32cd5e385311c28ed6a94becc48bef05e3b9286f74ee08aaa4ffe20178ebbcde33d4e05f49d40bddaf06e55ef15a9fc1b5aba4fad49e64f7c64a80c8abccbe25b1d577d73e76b7009ebe5086fc07c5810ae0fd7a3103b6fce1d21d95ea2d57d3f444f4269abb9a2e5cdb4be80d336770d6d0c051230232ca1da415da2a34d539a2d830fb57b775be8dea94aa46c0ed917397f00ab939f70b2dd257b3cde29f1ac025d4a19018578ad23bc7c7923e19f68d26cefea1a5309f8107fe8f821fe475ac6c80abbc9dc99f53edb32b9a49b354c97c1c5316ed790a6145fa48532cc269930f26f22fa97f08b249a86903b16177328df259b42c6ea4dc4d8d93764317f81a6ea7b7ddbe9862c25b51d4f6f18ea0e73c89d3f07ba223d355d75492e9e2103b66e12dbba7099cbfb00292ed5b46a1cf906d2af8a941a120d62528f325841a88520148bb5b61287b8b43b56005eac20c5c5443c3e22a7125ab67879d6bcfda4a298aec10e6e9d89f17b1b252e09785d2b818504cdbae7f55129761ad5bb52283714dfe9c6be80c8ea1104ec4dc37e918d6314fd22f452307098e3025fc193771b4f01ed6bf2414f8f28b30853d970c712c140655349769ccbff881be39d89c302b9e01246b8abdf24470b0d78b4e0c69d16010d4d428d03000000dafc7b4aac3b23", 0x355}, {&(0x7f00000006c0)="89c721e56715701b74a575f2140cedad26e2b2ef5e16c1a35a5b6322730ac9b33b96f175e0b24281f169a0e4384dcbe0102d49207fb83e17fb7a8433e58b4a2f9715e4d3a623ec642d20a5d18fc74238b49a2a2941880dd1a76f1ef64292a6f91e170da32cab0df318e3c33319457789662dbd0464bf8a3571f1d7b10099fc58554c62132f38fc37e9bb0931f53fbb3e7e5de371bfd4551a594d4ba71cfdc4635af68736951ed7687321b2fcdd35432ce37fd44de7ac4d", 0xb7}, {&(0x7f0000000140)="877eff5844d9808e9c47a77a6ef3e4f095f2be097064a8e8bb9e83156a45d5755dd7fe09163f8cdffe787bb1c987efd79dd93101c3b79d96decfbcaaa25b540488e4742db6f992349c411f21b14cc421b36c44aa091c82d303743b0a39d12bf4b1d5519ab23e4836076c20c4d6f52857a959cc0d43a11cb1bf0077467ce3", 0x7e}, {&(0x7f0000000780)="705d19fd5cefcc9c351f8ebee6b4ddfe40c9d8fd95b613ff7064081fbd0e27a3084d25766e2850ebd6172e9e70760d0990e0d5d7cbe2f92ec26144c190b7fff23703ea069ac2dd7eaee228f151d86515a5ba99e86fa4d5fa40191ffc8c97431f83d66c7f42705fad11ad6ac2dd86366a39dbdcd4a14090bdcd74070000001d03e3105bdf6a0400000000000000505f4e5f486471c4e969be420000000000000000000000007c3fc48f88cd49d6d439118146b5e4c0315ce751b4f77df0a5f980397e7de7747e0475f646d7b2221418993cc90d8e1600867b2f403632b605e5709ffd7a41c670", 0xe6}, {&(0x7f0000000880)="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", 0x103}, {&(0x7f0000001ac0)="5a91dc036950a633184152bb41a60707aa3059926b5a5bea537cec7fb5c5aa49690f8e884e5e56eb3d19004cb505f494967186a315ab737396674078cbc121d2095664b1ef2d892e96976e6f9615926d982e5328d33c7bae4898064b81b6f8efa90a43f5f307a0c8c7a9ce93655479ff9aa6940e21a568b79bad8b67280c18f9267a182aa91a94986963f0bd43ef08f84e940acbd392488a893c79fc036cfbdea63841267ba1d8966c2defb8bf36115f58d423ab2fedd97c6ad7c09a5502a2a7d1b585583448ef5de694bc51af8bdcfb6e29", 0xd2}], 0x8}}], 0x1, 0x20004010) 5.091902498s ago: executing program 2 (id=844): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x4c) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000180)={0x0, 0x5c, "a5e434ca4e11b4dc37f5a005f4016e8be4c8836e45e246426fd1bc46268e39db46f483e69a523f6e6fd32a63c680d0aeced88273f7d67d203a1f3ef4590305811a0caa3882bed9355faf1ceee2e2ba52ae781277202e69423a3b4c3f"}) fsmount(r0, 0x0, 0x0) tkill(0x0, 0xb) syz_usb_ep_write(0xffffffffffffffff, 0x9, 0x16, &(0x7f0000000000)="035cbdfb48af4de47f7ed3a2387fff0f27b07958ea03") io_setup(0x4, &(0x7f0000000140)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4.343966512s ago: executing program 3 (id=853): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="577d0390101180b486c39cbc2871d38c8e4eaf6f7b42fd1314496644fd78dcaac99d689ddd90a0a407970d93c6e86b2cbcffd002826b316c1727d2074c", 0x3d}, {&(0x7f0000000080)="4274ca6f2d1462939766b7408a08121fa01ad87031135f65fd5765e962ab0684ad807f420b28d3d6e9abf399ccca9c9909bee546ad672c6af592b7d40d1fb61fac880c987790872da36175c92a43e9971c8d08c8f28421137dd34d93c4b5e6b1808438e0b5", 0x65}, {&(0x7f0000000280)="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", 0x355}, {&(0x7f00000006c0)="89c721e56715701b74a575f2140cedad26e2b2ef5e16c1a35a5b6322730ac9b33b96f175e0b24281f169a0e4384dcbe0102d49207fb83e17fb7a8433e58b4a2f9715e4d3a623ec642d20a5d18fc74238b49a2a2941880dd1a76f1ef64292a6f91e170da32cab0df318e3c33319457789662dbd0464bf8a3571f1d7b10099fc58554c62132f38fc37e9bb0931f53fbb3e7e5de371bfd4551a594d4ba71cfdc4635af68736951ed7687321b2fcdd35432ce37fd44de7ac4d", 0xb7}, {&(0x7f0000000140)="877eff5844d9808e9c47a77a6ef3e4f095f2be097064a8e8bb9e83156a45d5755dd7fe09163f8cdffe787bb1c987efd79dd93101c3b79d96decfbcaaa25b540488e4742db6f992349c411f21b14cc421b36c44aa091c82d303743b0a39d12bf4b1d5519ab23e4836076c20c4d6f52857a959cc0d43a11cb1bf0077467ce3", 0x7e}, {&(0x7f0000000780)="705d19fd5cefcc9c351f8ebee6b4ddfe40c9d8fd95b613ff7064081fbd0e27a3084d25766e2850ebd6172e9e70760d0990e0d5d7cbe2f92ec26144c190b7fff23703ea069ac2dd7eaee228f151d86515a5ba99e86fa4d5fa40191ffc8c97431f83d66c7f42705fad11ad6ac2dd86366a39dbdcd4a14090bdcd74070000001d03e3105bdf6a0400000000000000505f4e5f486471c4e969be420000000000000000000000007c3fc48f88cd49d6d439118146b5e4c0315ce751b4f77df0a5f980397e7de7747e0475f646d7b2221418993cc90d8e1600867b2f403632b605e5709ffd7a41c670", 0xe6}, {&(0x7f0000000880)="a1b31549acce9c2d3fcba82c9b3d02660efa93faeaea3b982cc7df823cb33f2a31536119a6d4297bf7a12ebafcbfa30747040ab9745137e9973b1fdeee2f1050e9332a2549bc10188e292bbcaf12eb7642900a4fdd3ef9a857dcfad3852101994cada44a0b2657a6db4ef7549f37dde1baae1a8585d4e2d198bb1498297a7db4fc3f3364234e59953a9a3333cf5479902bac7f790c2c8c27044e4034d5bcda680ff8227082621e794328d8569085f909d8a33c74f0acc6d25e975ff70265bd23b3c9fdb9820f977146c61d526724fe950afd7a259081ada3627f9a34909b28f26afcd590e5654a0a5efd2da2967910dc2731e12e39e7ecc3050f099f2256802794fd67", 0x103}, {&(0x7f0000001ac0)="5a91dc036950a633184152bb41a60707aa3059926b5a5bea537cec7fb5c5aa49690f8e884e5e56eb3d19004cb505f494967186a315ab737396674078cbc121d2095664b1ef2d892e96976e6f9615926d982e5328d33c7bae4898064b81b6f8efa90a43f5f307a0c8c7a9ce93655479ff9aa6940e21a568b79bad8b67280c18f9267a182aa91a94986963f0bd43ef08f84e940acbd392488a893c79fc036cfbdea63841267ba1d8966c2defb8bf36115f58d423ab2fedd97c6ad7c09a5502a2a7d1b585583448ef5de694bc51af8bdcfb6e29", 0xd2}], 0x8}}], 0x1, 0x20004010) 4.222963516s ago: executing program 3 (id=856): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x1004400, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x1004400, 0x0) (async) 4.045079073s ago: executing program 3 (id=857): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 3.522980948s ago: executing program 2 (id=860): socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x24c1, 0x0) write$binfmt_aout(r1, 0x0, 0xff5f) ioctl$TCSETS(r1, 0x40045431, 0x0) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x26) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.937075667s ago: executing program 3 (id=861): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) 2.736955112s ago: executing program 0 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x87) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x60, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.644915999s ago: executing program 3 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003100)={0x0, 0x8, 0x2}, &(0x7f0000003140)=0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xd8fa35cb99073b91, 0x2f, 0x1, 0x4, 0xc, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x20000010) read$FUSE(r1, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 2.507184938s ago: executing program 0 (id=865): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="577d0390101180b486c39cbc2871d38c8e4eaf6f7b42fd1314496644fd78dcaac99d689ddd90a0a407970d93c6e86b2cbcffd002826b316c1727d2074c", 0x3d}, {&(0x7f0000000080)="4274ca6f2d1462939766b7408a08121fa01ad87031135f65fd5765e962ab0684ad807f420b28d3d6e9abf399ccca9c9909bee546ad672c6af592b7d40d1fb61fac880c987790872da36175c92a43e9971c8d08c8f28421137dd34d93c4b5e6b1808438e0b5", 0x65}, {&(0x7f0000000280)="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", 0x355}, {&(0x7f00000006c0)="89c721e56715701b74a575f2140cedad26e2b2ef5e16c1a35a5b6322730ac9b33b96f175e0b24281f169a0e4384dcbe0102d49207fb83e17fb7a8433e58b4a2f9715e4d3a623ec642d20a5d18fc74238b49a2a2941880dd1a76f1ef64292a6f91e170da32cab0df318e3c33319457789662dbd0464bf8a3571f1d7b10099fc58554c62132f38fc37e9bb0931f53fbb3e7e5de371bfd4551a594d4ba71cfdc4635af68736951ed7687321b2fcdd35432ce37fd44de7ac4d", 0xb7}, {&(0x7f0000000140)="877eff5844d9808e9c47a77a6ef3e4f095f2be097064a8e8bb9e83156a45d5755dd7fe09163f8cdffe787bb1c987efd79dd93101c3b79d96decfbcaaa25b540488e4742db6f992349c411f21b14cc421b36c44aa091c82d303743b0a39d12bf4b1d5519ab23e4836076c20c4d6f52857a959cc0d43a11cb1bf0077467ce3", 0x7e}, {&(0x7f0000000780)="705d19fd5cefcc9c351f8ebee6b4ddfe40c9d8fd95b613ff7064081fbd0e27a3084d25766e2850ebd6172e9e70760d0990e0d5d7cbe2f92ec26144c190b7fff23703ea069ac2dd7eaee228f151d86515a5ba99e86fa4d5fa40191ffc8c97431f83d66c7f42705fad11ad6ac2dd86366a39dbdcd4a14090bdcd74070000001d03e3105bdf6a0400000000000000505f4e5f486471c4e969be420000000000000000000000007c3fc48f88cd49d6d439118146b5e4c0315ce751b4f77df0a5f980397e7de7747e0475f646d7b2221418993cc90d8e1600867b2f403632b605e5709ffd7a41c670", 0xe6}, {&(0x7f0000000880)="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", 0x103}, {&(0x7f0000001ac0)="5a91dc036950a633184152bb41a60707aa3059926b5a5bea537cec7fb5c5aa49690f8e884e5e56eb3d19004cb505f494967186a315ab737396674078cbc121d2095664b1ef2d892e96976e6f9615926d982e5328d33c7bae4898064b81b6f8efa90a43f5f307a0c8c7a9ce93655479ff9aa6940e21a568b79bad8b67280c18f9267a182aa91a94986963f0bd43ef08f84e940acbd392488a893c79fc036cfbdea63841267ba1d8966c2defb8bf36115f58d423ab2fedd97c6ad7c09a5502a2a7d1b585583448ef5de694bc51af8bdcfb6e29d37b934034582a", 0xd9}], 0x8}}], 0x1, 0x20004010) 2.423036687s ago: executing program 3 (id=867): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 2.335991495s ago: executing program 0 (id=868): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x4c) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000180)={0x0, 0x5c, "a5e434ca4e11b4dc37f5a005f4016e8be4c8836e45e246426fd1bc46268e39db46f483e69a523f6e6fd32a63c680d0aeced88273f7d67d203a1f3ef4590305811a0caa3882bed9355faf1ceee2e2ba52ae781277202e69423a3b4c3f"}) fsmount(r0, 0x0, 0x0) tkill(0x0, 0xb) syz_usb_ep_write(0xffffffffffffffff, 0x9, 0x16, &(0x7f0000000000)="035cbdfb48af4de47f7ed3a2387fff0f27b07958ea03") io_setup(0x4, &(0x7f0000000140)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.988598745s ago: executing program 2 (id=870): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1.803436761s ago: executing program 2 (id=871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="d0aee6"], 0x8) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 1.580948909s ago: executing program 2 (id=874): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x82c00) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) accept$ax25(r1, &(0x7f0000000240)={{}, [@rose, @default, @bcast, @null, @remote, @remote, @default, @default]}, &(0x7f00000001c0)=0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 973.750785ms ago: executing program 1 (id=875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x284b01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0x78, 0x0, r2, [{0x0, 0x7f, 0x2, 0xffffffff, ')^'}, {0x1, 0x59, 0xd, 0x1, '/dev/rnullb0\x00'}, {0x4, 0x0, 0x1, 0x6, '{'}]}, 0x78) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 886.306887ms ago: executing program 1 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003100)={0x0, 0x8, 0x2}, &(0x7f0000003140)=0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xd8fa35cb99073b91, 0x2f, 0x1, 0x4, 0xc, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x20000010) read$FUSE(r1, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 801.665628ms ago: executing program 1 (id=877): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="577d0390101180b486c39cbc2871d38c8e4eaf6f7b42fd1314496644fd78dcaac99d689ddd90a0a407970d93c6e86b2cbcffd002826b316c1727d2074c", 0x3d}, {&(0x7f0000000080)="4274ca6f2d1462939766b7408a08121fa01ad87031135f65fd5765e962ab0684ad807f420b28d3d6e9abf399ccca9c9909bee546ad672c6af592b7d40d1fb61fac880c987790872da36175c92a43e9971c8d08c8f28421137dd34d93c4b5e6b1808438e0b5", 0x65}, {&(0x7f0000000280)="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", 0x355}, {&(0x7f00000006c0)="89c721e56715701b74a575f2140cedad26e2b2ef5e16c1a35a5b6322730ac9b33b96f175e0b24281f169a0e4384dcbe0102d49207fb83e17fb7a8433e58b4a2f9715e4d3a623ec642d20a5d18fc74238b49a2a2941880dd1a76f1ef64292a6f91e170da32cab0df318e3c33319457789662dbd0464bf8a3571f1d7b10099fc58554c62132f38fc37e9bb0931f53fbb3e7e5de371bfd4551a594d4ba71cfdc4635af68736951ed7687321b2fcdd35432ce37fd44de7ac4d", 0xb7}, {&(0x7f0000000140)="877eff5844d9808e9c47a77a6ef3e4f095f2be097064a8e8bb9e83156a45d5755dd7fe09163f8cdffe787bb1c987efd79dd93101c3b79d96decfbcaaa25b540488e4742db6f992349c411f21b14cc421b36c44aa091c82d303743b0a39d12bf4b1d5519ab23e4836076c20c4d6f52857a959cc0d43a11cb1bf0077467ce3", 0x7e}, {&(0x7f0000000780)="705d19fd5cefcc9c351f8ebee6b4ddfe40c9d8fd95b613ff7064081fbd0e27a3084d25766e2850ebd6172e9e70760d0990e0d5d7cbe2f92ec26144c190b7fff23703ea069ac2dd7eaee228f151d86515a5ba99e86fa4d5fa40191ffc8c97431f83d66c7f42705fad11ad6ac2dd86366a39dbdcd4a14090bdcd74070000001d03e3105bdf6a0400000000000000505f4e5f486471c4e969be420000000000000000000000007c3fc48f88cd49d6d439118146b5e4c0315ce751b4f77df0a5f980397e7de7747e0475f646d7b2221418993cc90d8e1600867b2f403632b605e5709ffd7a41c670", 0xe6}, {&(0x7f0000000880)="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", 0x103}, {&(0x7f0000001ac0)="5a91dc036950a633184152bb41a60707aa3059926b5a5bea537cec7fb5c5aa49690f8e884e5e56eb3d19004cb505f494967186a315ab737396674078cbc121d2095664b1ef2d892e96976e6f9615926d982e5328d33c7bae4898064b81b6f8efa90a43f5f307a0c8c7a9ce93655479ff9aa6940e21a568b79bad8b67280c18f9267a182aa91a94986963f0bd43ef08f84e940acbd392488a893c79fc036cfbdea63841267ba1d8966c2defb8bf36115f58d423ab2fedd97c6ad7c09a5502a2a7d1b585583448ef5de694bc51af8bdcfb6e29d37b934034582a", 0xd9}], 0x8}}], 0x1, 0x20004010) 789.872289ms ago: executing program 0 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x729) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 677.949227ms ago: executing program 1 (id=879): socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x24c1, 0x0) write$binfmt_aout(r1, 0x0, 0xff5f) ioctl$TCSETS(r1, 0x40045431, 0x0) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x26) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 636.087505ms ago: executing program 0 (id=880): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 476.88045ms ago: executing program 0 (id=881): socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB='\x00\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x24c1, 0x0) write$binfmt_aout(r1, 0x0, 0xff5f) ioctl$TCSETS(r1, 0x40045431, 0x0) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x26) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 50.156601ms ago: executing program 1 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x1a6}, {&(0x7f0000000cc0)="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", 0x14c}, {&(0x7f0000000700)="15c846ee4e707112974cbce8f5be42ec02ad93161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37990c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff5ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0ad0000000000000400000000000000", 0xa5}], 0x5}, 0x200048c0) 0s ago: executing program 1 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (fail_nth: 13) kernel console output (not intermixed with test programs): ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.433292][ T6374] vfs_read+0x200/0x980 [ 101.433316][ T6374] ? __pfx___mutex_lock+0x10/0x10 [ 101.433337][ T6374] ? __pfx_vfs_read+0x10/0x10 [ 101.433357][ T6374] ? __fget_files+0x2a/0x420 [ 101.433386][ T6374] ? __fget_files+0x3a0/0x420 [ 101.433406][ T6374] ? __fget_files+0x2a/0x420 [ 101.433435][ T6374] ksys_read+0x145/0x250 [ 101.433456][ T6374] ? __pfx_ksys_read+0x10/0x10 [ 101.433481][ T6374] ? do_syscall_64+0xbe/0x3b0 [ 101.433506][ T6374] do_syscall_64+0xfa/0x3b0 [ 101.433524][ T6374] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.433543][ T6374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.433558][ T6374] ? clear_bhb_loop+0x60/0xb0 [ 101.433578][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.433594][ T6374] RIP: 0033:0x7fa86af8d33c [ 101.433609][ T6374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.433622][ T6374] RSP: 002b:00007fa86bde7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.433639][ T6374] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8d33c [ 101.433651][ T6374] RDX: 000000000000000f RSI: 00007fa86bde70a0 RDI: 0000000000000004 [ 101.433661][ T6374] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.433670][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.433679][ T6374] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 101.433706][ T6374] [ 101.667896][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.154333][ T6372] syz.2.162 (6372): drop_caches: 2 [ 102.313040][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.476414][ T5922] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.495212][ T5922] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 102.529497][ T5922] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 102.561256][ T5922] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.591574][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.617725][ T6381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.632437][ T5922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.662530][ T5922] usb 1-1: invalid MIDI in EP 0 [ 102.760428][ T6392] syz.1.169 (6392): drop_caches: 2 [ 102.806321][ T6396] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 102.867503][ T5922] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 103.318213][ T24] usb 1-1: USB disconnect, device number 4 [ 103.916120][ T6412] FAULT_INJECTION: forcing a failure. [ 103.916120][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 103.973043][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.0.176 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 103.973066][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.973075][ T6412] Call Trace: [ 103.973081][ T6412] [ 103.973088][ T6412] dump_stack_lvl+0x189/0x250 [ 103.973111][ T6412] ? __pfx____ratelimit+0x10/0x10 [ 103.973128][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.973144][ T6412] ? __pfx__printk+0x10/0x10 [ 103.973166][ T6412] ? ref_tracker_alloc+0x318/0x460 [ 103.973186][ T6412] should_fail_ex+0x414/0x560 [ 103.973212][ T6412] should_failslab+0xa8/0x100 [ 103.973233][ T6412] kmem_cache_alloc_noprof+0x73/0x3c0 [ 103.973248][ T6412] ? skb_clone+0x212/0x3a0 [ 103.973269][ T6412] skb_clone+0x212/0x3a0 [ 103.973287][ T6412] __netlink_deliver_tap+0x404/0x850 [ 103.973320][ T6412] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.973342][ T6412] netlink_deliver_tap+0x19c/0x1b0 [ 103.973363][ T6412] netlink_unicast+0x72f/0x8d0 [ 103.973393][ T6412] netlink_sendmsg+0x805/0xb30 [ 103.973422][ T6412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.973446][ T6412] ? aa_sock_msg_perm+0xf1/0x1d0 [ 103.973463][ T6412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.973480][ T6412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.973498][ T6412] __sock_sendmsg+0x219/0x270 [ 103.973516][ T6412] ____sys_sendmsg+0x505/0x830 [ 103.973533][ T6412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.973553][ T6412] ? import_iovec+0x74/0xa0 [ 103.973568][ T6412] ___sys_sendmsg+0x21f/0x2a0 [ 103.973583][ T6412] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.973626][ T6412] ? __fget_files+0x2a/0x420 [ 103.973642][ T6412] ? __fget_files+0x3a0/0x420 [ 103.973666][ T6412] __x64_sys_sendmsg+0x19b/0x260 [ 103.973681][ T6412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.973701][ T6412] ? __pfx_ksys_write+0x10/0x10 [ 103.973714][ T6412] ? rcu_is_watching+0x15/0xb0 [ 103.973731][ T6412] ? do_syscall_64+0xbe/0x3b0 [ 103.973750][ T6412] do_syscall_64+0xfa/0x3b0 [ 103.973765][ T6412] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.973779][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.973792][ T6412] ? clear_bhb_loop+0x60/0xb0 [ 103.973807][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.973819][ T6412] RIP: 0033:0x7fbe2638e929 [ 103.973838][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.973848][ T6412] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.973863][ T6412] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 103.973872][ T6412] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 103.973880][ T6412] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 103.973887][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.973894][ T6412] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 103.973916][ T6412] [ 104.773205][ T6419] syz.3.178 (6419): drop_caches: 2 [ 105.655318][ T6437] syz.2.184 (6437): drop_caches: 2 [ 105.987235][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.163057][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 106.187906][ T5902] IPVS: starting estimator thread 0... [ 106.201002][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 106.220533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.238975][ T10] usb 1-1: Product: syz [ 106.249283][ T10] usb 1-1: Manufacturer: syz [ 106.263029][ T10] usb 1-1: SerialNumber: syz [ 106.294848][ T10] usb 1-1: config 0 descriptor?? [ 106.303138][ T6458] IPVS: using max 28 ests per chain, 67200 per kthread [ 106.315287][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 106.628921][ T6469] syz.3.194 (6469): drop_caches: 2 [ 106.714912][ T10] gspca_se401: ExtraFeatures: 99 [ 106.719891][ T10] gspca_se401: Too many frame sizes [ 106.929471][ T6448] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 106.937837][ T6448] VFS: Can't find a romfs filesystem on dev rnullb0. [ 106.937837][ T6448] [ 106.970978][ T10] usb 1-1: USB disconnect, device number 5 [ 107.412021][ T6477] nfs: Unknown parameter '/dev/rnullb0' [ 107.933725][ T6493] ======================================================= [ 107.933725][ T6493] WARNING: The mand mount option has been deprecated and [ 107.933725][ T6493] and is ignored by this kernel. Remove the mand [ 107.933725][ T6493] option from the mount to silence this warning. [ 107.933725][ T6493] ======================================================= [ 107.983270][ T6479] syz.1.201 (6479): drop_caches: 2 [ 107.989299][ T6493] warning: `syz.3.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.135754][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.305367][ T43] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 108.322943][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.399754][ T43] usb 3-1: config 0 descriptor?? [ 108.411037][ T43] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 108.421096][ T43] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 108.428788][ T6501] syz.1.209 (6501): drop_caches: 2 [ 108.461728][ T6503] mmap: syz.0.211 (6503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.873766][ T43] usb 3-1: USB disconnect, device number 4 [ 109.631119][ T6529] syz.1.219 (6529): drop_caches: 2 [ 109.751312][ T6533] syz.2.221 (6533): drop_caches: 2 [ 110.118701][ T6553] random: crng reseeded on system resumption [ 110.193348][ T5922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.228500][ T6555] syz.0.230 (6555): drop_caches: 2 [ 110.332199][ T6559] afs: Unknown parameter 'éÜíÏL½YNÔn' [ 110.346836][ T6559] omfs: Invalid superblock (0) [ 110.368608][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.382474][ T5922] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 110.405921][ T5922] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 1 [ 110.420371][ T5922] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 110.431818][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.450307][ T5922] usb 4-1: Product: syz [ 110.456819][ T5922] usb 4-1: Manufacturer: syz [ 110.465987][ T5922] usb 4-1: SerialNumber: syz [ 110.525825][ T6563] syz.0.234 (6563): drop_caches: 2 [ 110.686790][ T6544] overlayfs: failed to resolve './file0': -2 [ 110.705856][ T5922] usb 4-1: USB disconnect, device number 6 [ 111.011942][ T6576] syz.2.240 (6576): drop_caches: 2 [ 111.073177][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.234795][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 111.256808][ T43] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 111.271590][ T43] usb 1-1: config 0 has no interface number 0 [ 111.300614][ T43] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 111.316479][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.324879][ T43] usb 1-1: Product: syz [ 111.329090][ T43] usb 1-1: Manufacturer: syz [ 111.337157][ T43] usb 1-1: SerialNumber: syz [ 111.354320][ T43] usb 1-1: config 0 descriptor?? [ 111.372365][ T43] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 111.498466][ T6584] FAULT_INJECTION: forcing a failure. [ 111.498466][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 111.535731][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.3.243 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 111.535756][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.535765][ T6584] Call Trace: [ 111.535772][ T6584] [ 111.535779][ T6584] dump_stack_lvl+0x189/0x250 [ 111.535803][ T6584] ? __pfx____ratelimit+0x10/0x10 [ 111.535824][ T6584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.535841][ T6584] ? __pfx__printk+0x10/0x10 [ 111.535866][ T6584] ? ref_tracker_alloc+0x318/0x460 [ 111.535887][ T6584] should_fail_ex+0x414/0x560 [ 111.535916][ T6584] should_failslab+0xa8/0x100 [ 111.535937][ T6584] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.535955][ T6584] ? skb_clone+0x212/0x3a0 [ 111.535976][ T6584] skb_clone+0x212/0x3a0 [ 111.535997][ T6584] __netlink_deliver_tap+0x404/0x850 [ 111.536029][ T6584] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.536051][ T6584] netlink_deliver_tap+0x19c/0x1b0 [ 111.536073][ T6584] netlink_unicast+0x72f/0x8d0 [ 111.536104][ T6584] netlink_sendmsg+0x805/0xb30 [ 111.536135][ T6584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.536159][ T6584] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.536180][ T6584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.536201][ T6584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.536223][ T6584] __sock_sendmsg+0x219/0x270 [ 111.536247][ T6584] ____sys_sendmsg+0x505/0x830 [ 111.536277][ T6584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.536303][ T6584] ? import_iovec+0x74/0xa0 [ 111.536323][ T6584] ___sys_sendmsg+0x21f/0x2a0 [ 111.536341][ T6584] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.536394][ T6584] ? __fget_files+0x2a/0x420 [ 111.536414][ T6584] ? __fget_files+0x3a0/0x420 [ 111.536446][ T6584] __x64_sys_sendmsg+0x19b/0x260 [ 111.536465][ T6584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.536491][ T6584] ? __pfx_ksys_write+0x10/0x10 [ 111.536507][ T6584] ? rcu_is_watching+0x15/0xb0 [ 111.536529][ T6584] ? do_syscall_64+0xbe/0x3b0 [ 111.536553][ T6584] do_syscall_64+0xfa/0x3b0 [ 111.536572][ T6584] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.536591][ T6584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.536607][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 111.536625][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.536640][ T6584] RIP: 0033:0x7fa86af8e929 [ 111.536655][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.536668][ T6584] RSP: 002b:00007fa86bde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.536686][ T6584] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8e929 [ 111.536698][ T6584] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 111.536707][ T6584] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.536717][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.536726][ T6584] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 111.536754][ T6584] [ 111.610888][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.614300][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.732102][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 111.772858][ T6586] syz.1.244 (6586): drop_caches: 2 [ 112.006277][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 112.124382][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.153913][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.246367][ T6590] netlink: 192 bytes leftover after parsing attributes in process `syz.0.239'. [ 112.428688][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 112.442995][ T43] usb 1-1: USB disconnect, device number 6 [ 112.459829][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.478378][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.498900][ T43] quatech2 1-1:0.51: device disconnected [ 113.396708][ T6606] syz.0.250 (6606): drop_caches: 2 [ 113.430394][ T5840] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.575840][ T5840] usb 4-1: device descriptor read/64, error -71 [ 113.807919][ T6626] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.814675][ T6626] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.826746][ T6624] syz.1.255 (6624): drop_caches: 2 [ 113.835308][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.893148][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 113.972987][ T5840] usb 4-1: device descriptor read/64, error -71 [ 114.105181][ T5840] usb usb4-port1: attempt power cycle [ 114.449382][ T6637] syz.1.260 (6637): drop_caches: 2 [ 114.923007][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.943739][ T5840] usb 4-1: device descriptor read/8, error -71 [ 115.220718][ T5840] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.243638][ T5840] usb 4-1: device descriptor read/8, error -71 [ 115.363442][ T5840] usb usb4-port1: unable to enumerate USB device [ 115.788257][ T6646] syz.2.266 (6646): drop_caches: 2 [ 116.232342][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 116.290858][ T6655] syz.0.269 (6655): drop_caches: 2 [ 116.539420][ T6669] netlink: 84 bytes leftover after parsing attributes in process `syz.0.274'. [ 117.871985][ T6686] FAULT_INJECTION: forcing a failure. [ 117.871985][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.942277][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.3.279 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 117.942301][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.942311][ T6686] Call Trace: [ 117.942317][ T6686] [ 117.942324][ T6686] dump_stack_lvl+0x189/0x250 [ 117.942347][ T6686] ? __pfx____ratelimit+0x10/0x10 [ 117.942368][ T6686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.942386][ T6686] ? __pfx__printk+0x10/0x10 [ 117.942415][ T6686] should_fail_ex+0x414/0x560 [ 117.942444][ T6686] strncpy_from_user+0x36/0x290 [ 117.942477][ T6686] getname_flags+0xf3/0x540 [ 117.942502][ T6686] user_path_at+0x24/0x60 [ 117.942520][ T6686] __se_sys_mount+0x2d3/0x410 [ 117.942548][ T6686] ? __pfx___se_sys_mount+0x10/0x10 [ 117.942567][ T6686] ? rcu_is_watching+0x15/0xb0 [ 117.942586][ T6686] ? do_syscall_64+0xbe/0x3b0 [ 117.942605][ T6686] ? __x64_sys_mount+0x20/0xc0 [ 117.942628][ T6686] do_syscall_64+0xfa/0x3b0 [ 117.942646][ T6686] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.942664][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.942680][ T6686] ? clear_bhb_loop+0x60/0xb0 [ 117.942700][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.942716][ T6686] RIP: 0033:0x7fa86af8e929 [ 117.942731][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.942744][ T6686] RSP: 002b:00007fa86bde7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.942761][ T6686] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8e929 [ 117.942773][ T6686] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 117.942784][ T6686] RBP: 00007fa86bde7090 R08: 0000200000000400 R09: 0000000000000000 [ 117.942794][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.942804][ T6686] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 117.942844][ T6686] [ 118.153881][ T6689] syz.2.277 (6689): drop_caches: 2 [ 118.613748][ T5839] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 118.927815][ T6696] syz.3.283 (6696): drop_caches: 2 [ 119.013021][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.172972][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 119.180721][ T5840] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 119.199181][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.220303][ T5840] usb 2-1: config 0 has no interface number 0 [ 119.229455][ T5840] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 119.241000][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.249361][ T5840] usb 2-1: Product: syz [ 119.255045][ T5840] usb 2-1: Manufacturer: syz [ 119.260438][ T5840] usb 2-1: SerialNumber: syz [ 119.269255][ T5840] usb 2-1: config 0 descriptor?? [ 119.433081][ T5874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.477223][ T5840] usb 2-1: Found UVC 0.00 device syz (0408:4034) [ 119.499901][ T5840] usb 2-1: No valid video chain found. [ 119.575752][ T5874] usb 1-1: device descriptor read/64, error -71 [ 119.704908][ T6720] syz.2.292 (6720): drop_caches: 2 [ 119.723164][ T5840] usb 2-1: USB disconnect, device number 2 [ 119.813154][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.963022][ T5874] usb 1-1: device descriptor read/64, error -71 [ 120.073916][ T5874] usb usb1-port1: attempt power cycle [ 120.113121][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.277087][ T43] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 120.305871][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.317405][ T43] usb 3-1: config 0 has no interface number 0 [ 120.326435][ T43] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.339710][ T43] usb 3-1: config 0 interface 25 has no altsetting 0 [ 120.348906][ T43] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 120.360570][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.369865][ T43] usb 3-1: Product: syz [ 120.380009][ T43] usb 3-1: Manufacturer: syz [ 120.386372][ T43] usb 3-1: SerialNumber: syz [ 120.394253][ T43] usb 3-1: config 0 descriptor?? [ 120.423288][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.457602][ T5874] usb 1-1: device descriptor read/8, error -71 [ 120.519062][ T6731] program syz.1.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.632225][ T43] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 120.641251][ T43] usb 3-1: No valid video chain found. [ 120.655413][ T43] usb 3-1: USB disconnect, device number 5 [ 120.713131][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.746791][ T5874] usb 1-1: device descriptor read/8, error -71 [ 120.873937][ T5874] usb usb1-port1: unable to enumerate USB device [ 121.069774][ T6740] syz.1.300 (6740): drop_caches: 2 [ 121.219587][ T6746] vxfs: WRONG superblock magic 00000000 at 1 [ 121.226676][ T6746] vxfs: WRONG superblock magic 00000000 at 8 [ 121.233728][ T6746] vxfs: can't find superblock. [ 121.543093][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 121.620395][ T6751] syz.1.304 (6751): drop_caches: 2 [ 121.716265][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.725001][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 121.734369][ T43] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 121.743128][ T43] usb 3-1: config 129 has no interface number 0 [ 121.753446][ T43] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 121.783046][ T43] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 121.801047][ T43] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.823546][ T43] usb 3-1: config 129 interface 28 has no altsetting 0 [ 121.834395][ T43] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 121.853021][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.870640][ T43] usb 3-1: Product: syz [ 121.875124][ T43] usb 3-1: Manufacturer: syz [ 121.885261][ T43] usb 3-1: SerialNumber: syz [ 121.899101][ T6746] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.153370][ T43] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 122.184233][ T43] etas_es58x 3-1:129.28: could not retrieve the product info string [ 122.245535][ T43] usb 3-1: USB disconnect, device number 6 [ 122.259916][ T43] etas_es58x 3-1:129.28: Disconnecting syz syz [ 122.742245][ T6776] syz.1.311 (6776): drop_caches: 2 [ 123.183258][ T6790] binder: 6789:6790 ioctl c0306201 200000000080 returned -22 [ 123.288066][ T6794] binder: 6789:6794 ioctl c08c5336 200000000680 returned -22 [ 123.307826][ T6784] syz.3.314 (6784): drop_caches: 2 [ 123.318847][ T6794] fuse: Bad value for 'fd' [ 123.773019][ T5874] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.923175][ T5874] usb 2-1: device descriptor read/64, error -71 [ 124.127975][ T6806] vxfs: WRONG superblock magic 00000000 at 1 [ 124.165424][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.177416][ T6806] vxfs: WRONG superblock magic 00000000 at 8 [ 124.209217][ T6806] vxfs: can't find superblock. [ 124.282137][ T43] IPVS: starting estimator thread 0... [ 124.327423][ T5874] usb 2-1: device descriptor read/64, error -71 [ 124.389247][ T6812] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.453267][ T5874] usb usb2-port1: attempt power cycle [ 124.504650][ T5902] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 124.669369][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.686844][ T5902] usb 1-1: not running at top speed; connect to a high speed hub [ 124.699270][ T5902] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 124.713023][ T5902] usb 1-1: config 129 has no interface number 0 [ 124.723030][ T5902] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 124.752964][ T5902] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 124.774696][ T5902] usb 1-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.813069][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.831020][ T5902] usb 1-1: config 129 interface 28 has no altsetting 0 [ 124.854220][ T5902] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 124.873972][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.884129][ T5874] usb 2-1: device descriptor read/8, error -71 [ 124.902392][ T5902] usb 1-1: Product: syz [ 124.908187][ T5902] usb 1-1: Manufacturer: syz [ 124.917082][ T5902] usb 1-1: SerialNumber: syz [ 124.934808][ T6806] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.962816][ T6823] syz.3.329 (6823): drop_caches: 2 [ 124.971498][ T6822] syz.2.326 (6822): drop_caches: 2 [ 125.123095][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.173656][ T5902] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 125.194499][ T5874] usb 2-1: device descriptor read/8, error -71 [ 125.212400][ T5902] etas_es58x 1-1:129.28: could not retrieve the product info string [ 125.269822][ T5902] usb 1-1: USB disconnect, device number 11 [ 125.277864][ T5902] etas_es58x 1-1:129.28: Disconnecting syz syz [ 125.305518][ T5874] usb usb2-port1: unable to enumerate USB device [ 126.564410][ T6843] syz.3.338 (6843): drop_caches: 2 [ 126.868698][ T6855] vxfs: WRONG superblock magic 00000000 at 1 [ 126.891312][ T6852] syz.1.339 (6852): drop_caches: 2 [ 126.895610][ T6855] vxfs: WRONG superblock magic 00000000 at 8 [ 126.902466][ T6855] vxfs: can't find superblock. [ 127.232996][ T5922] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 127.405119][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.408969][ T6862] syz.2.344 (6862): drop_caches: 2 [ 127.433180][ T5922] usb 4-1: not running at top speed; connect to a high speed hub [ 127.445096][ T5922] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 127.464644][ T5922] usb 4-1: config 129 has no interface number 0 [ 127.471008][ T5922] usb 4-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 127.510870][ T5922] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 127.533018][ T5922] usb 4-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.564277][ T5922] usb 4-1: config 129 interface 28 has no altsetting 0 [ 127.575479][ T5922] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 127.592989][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.601066][ T5922] usb 4-1: Product: syz [ 127.613258][ T5922] usb 4-1: Manufacturer: syz [ 127.617889][ T5922] usb 4-1: SerialNumber: syz [ 127.635913][ T6855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.853472][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.872389][ T5922] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 127.892496][ T5922] etas_es58x 4-1:129.28: could not retrieve the product info string [ 127.984636][ T5922] usb 4-1: USB disconnect, device number 11 [ 128.005017][ T5922] etas_es58x 4-1:129.28: Disconnecting syz syz [ 128.033888][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 128.058297][ T5902] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 128.086132][ T5902] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.117857][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.141797][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.161371][ T5902] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.183071][ T5902] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.192149][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.272258][ T6874] syz.1.350 (6874): drop_caches: 2 [ 128.442965][ T5902] usb 3-1: usb_control_msg returned -32 [ 128.453024][ T5902] usbtmc 3-1:16.0: can't read capabilities [ 128.766718][ T6879] syz.1.352 (6879): drop_caches: 2 [ 129.763181][ T5902] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.912547][ T5902] usb 4-1: device descriptor read/64, error -71 [ 130.153627][ T5902] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.303431][ T5902] usb 4-1: device descriptor read/64, error -71 [ 130.400495][ T6897] syz.0.357 (6897): drop_caches: 2 [ 130.413588][ T5902] usb usb4-port1: attempt power cycle [ 130.643503][ T43] usb 3-1: USB disconnect, device number 7 [ 130.766241][ T5902] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 130.803872][ T5902] usb 4-1: device descriptor read/8, error -71 [ 130.867931][ T6906] syz.0.360 (6906): drop_caches: 2 [ 131.053132][ T5902] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 131.087150][ T5902] usb 4-1: device descriptor read/8, error -71 [ 131.205317][ T5902] usb usb4-port1: unable to enumerate USB device [ 131.331081][ T6917] syz.0.364 (6917): drop_caches: 2 [ 131.379020][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 131.390528][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 131.663706][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 131.669802][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 132.193678][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 132.199781][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 132.683474][ T6919] ceph: No mds server is up or the cluster is laggy [ 132.868436][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.885342][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.895975][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 132.905871][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 133.092989][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 133.148403][ T6933] syz.1.370 (6933): drop_caches: 2 [ 133.173455][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 133.181772][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 133.253152][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 133.264658][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.283113][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.314063][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.332997][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.353006][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.382988][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.415143][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.467228][ T6946] syz.2.373 (6946): drop_caches: 2 [ 133.649954][ T43] usb 4-1: usb_control_msg returned -32 [ 133.663055][ T43] usbtmc 4-1:16.0: can't read capabilities [ 133.714085][ T43] libceph: connect (1)[c::]:6789 error -101 [ 133.727575][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 133.823797][ T6953] syz.2.375 (6953): drop_caches: 2 [ 134.187956][ T6938] ceph: No mds server is up or the cluster is laggy [ 134.536499][ T6967] FAULT_INJECTION: forcing a failure. [ 134.536499][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 134.556345][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.0.381 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 134.556371][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.556382][ T6967] Call Trace: [ 134.556389][ T6967] [ 134.556396][ T6967] dump_stack_lvl+0x189/0x250 [ 134.556427][ T6967] ? __pfx____ratelimit+0x10/0x10 [ 134.556448][ T6967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.556465][ T6967] ? __pfx__printk+0x10/0x10 [ 134.556489][ T6967] ? __pfx___might_resched+0x10/0x10 [ 134.556504][ T6967] ? fs_reclaim_acquire+0x7d/0x100 [ 134.556529][ T6967] should_fail_ex+0x414/0x560 [ 134.556558][ T6967] should_failslab+0xa8/0x100 [ 134.556586][ T6967] __kmalloc_noprof+0xcb/0x4f0 [ 134.556601][ T6967] ? kfree+0x4d/0x440 [ 134.556615][ T6967] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 134.556639][ T6967] tomoyo_realpath_from_path+0xe3/0x5d0 [ 134.556659][ T6967] ? tomoyo_domain+0xd9/0x130 [ 134.556683][ T6967] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 134.556706][ T6967] tomoyo_path_number_perm+0x1e8/0x5a0 [ 134.556733][ T6967] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.556772][ T6967] ? __lock_acquire+0xab9/0xd20 [ 134.556814][ T6967] ? __fget_files+0x2a/0x420 [ 134.556837][ T6967] ? __fget_files+0x2a/0x420 [ 134.556855][ T6967] ? __fget_files+0x3a0/0x420 [ 134.556874][ T6967] ? __fget_files+0x2a/0x420 [ 134.556898][ T6967] security_file_ioctl+0xcb/0x2d0 [ 134.556923][ T6967] __se_sys_ioctl+0x47/0x170 [ 134.556944][ T6967] do_syscall_64+0xfa/0x3b0 [ 134.556963][ T6967] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.556982][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.556998][ T6967] ? clear_bhb_loop+0x60/0xb0 [ 134.557018][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.557033][ T6967] RIP: 0033:0x7fbe2638e929 [ 134.557053][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.557066][ T6967] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.557090][ T6967] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 134.557101][ T6967] RDX: 0000200000000000 RSI: 0000000040405515 RDI: 0000000000000003 [ 134.557112][ T6967] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 134.557121][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.557130][ T6967] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 134.557158][ T6967] [ 134.557165][ T6967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.970428][ T6973] Bluetooth: MGMT ver 1.23 [ 135.301479][ T10] libceph: connect (1)[c::]:6789 error -101 [ 135.307764][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 135.375044][ T6976] syz.0.385 (6976): drop_caches: 2 [ 135.583390][ T10] libceph: connect (1)[c::]:6789 error -101 [ 135.589492][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 135.602321][ T6984] syz.1.387 (6984): drop_caches: 2 [ 135.878255][ T5922] usb 4-1: USB disconnect, device number 16 [ 136.007584][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 136.114164][ T10] libceph: connect (1)[c::]:6789 error -101 [ 136.120261][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 136.606533][ T6978] ceph: No mds server is up or the cluster is laggy [ 137.193934][ T7018] syz.1.397 (7018): drop_caches: 2 [ 137.240069][ T7013] syz.2.398 (7013): drop_caches: 2 [ 137.333945][ T5922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.514889][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 137.531028][ T5922] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 137.540904][ T7029] FAULT_INJECTION: forcing a failure. [ 137.540904][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.563056][ T5922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.572824][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.586361][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.2.405 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 137.586383][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.586392][ T7029] Call Trace: [ 137.586399][ T7029] [ 137.586406][ T7029] dump_stack_lvl+0x189/0x250 [ 137.586430][ T7029] ? __pfx____ratelimit+0x10/0x10 [ 137.586452][ T7029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.586470][ T7029] ? __pfx__printk+0x10/0x10 [ 137.586488][ T7029] ? __might_fault+0xb0/0x130 [ 137.586517][ T7029] should_fail_ex+0x414/0x560 [ 137.586546][ T7029] _copy_from_user+0x2d/0xb0 [ 137.586563][ T7029] ___sys_sendmsg+0x158/0x2a0 [ 137.586583][ T7029] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.586632][ T7029] ? __fget_files+0x2a/0x420 [ 137.586652][ T7029] ? __fget_files+0x3a0/0x420 [ 137.586683][ T7029] __x64_sys_sendmsg+0x19b/0x260 [ 137.586702][ T7029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.586727][ T7029] ? __pfx_ksys_write+0x10/0x10 [ 137.586743][ T7029] ? rcu_is_watching+0x15/0xb0 [ 137.586765][ T7029] ? do_syscall_64+0xbe/0x3b0 [ 137.586789][ T7029] do_syscall_64+0xfa/0x3b0 [ 137.586807][ T7029] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.586826][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.586842][ T7029] ? clear_bhb_loop+0x60/0xb0 [ 137.586862][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.586877][ T7029] RIP: 0033:0x7f39cb78e929 [ 137.586891][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.586905][ T7029] RSP: 002b:00007f39c95f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.586922][ T7029] RAX: ffffffffffffffda RBX: 00007f39cb9b5fa0 RCX: 00007f39cb78e929 [ 137.586934][ T7029] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 137.586944][ T7029] RBP: 00007f39c95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.586954][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.586963][ T7029] R13: 0000000000000000 R14: 00007f39cb9b5fa0 R15: 00007ffe02d14e88 [ 137.586990][ T7029] [ 137.835623][ T10] libceph: connect (1)[c::]:6789 error -101 [ 137.842462][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 137.973185][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.987696][ T5922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.003129][ T5922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.012186][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.103377][ T10] libceph: connect (1)[c::]:6789 error -101 [ 138.109459][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 138.261852][ T5922] usb 1-1: usb_control_msg returned -32 [ 138.267905][ T5922] usbtmc 1-1:16.0: can't read capabilities [ 138.633332][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 138.639436][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 138.977527][ T7051] syz.1.412 (7051): drop_caches: 2 [ 138.984865][ T5839] Bluetooth: Frame is too long (len 16, expected len 6) [ 139.163616][ T7032] ceph: No mds server is up or the cluster is laggy [ 139.546925][ T7064] syz.2.414 (7064): drop_caches: 2 [ 139.922698][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 139.929398][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 139.954548][ T5839] Bluetooth: Frame is too long (len 16, expected len 6) [ 140.115792][ T5902] usb 1-1: USB disconnect, device number 12 [ 140.154501][ T7088] FAULT_INJECTION: forcing a failure. [ 140.154501][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.189154][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.0.426 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 140.189180][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.189190][ T7088] Call Trace: [ 140.189196][ T7088] [ 140.189204][ T7088] dump_stack_lvl+0x189/0x250 [ 140.189227][ T7088] ? __pfx____ratelimit+0x10/0x10 [ 140.189249][ T7088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.189266][ T7088] ? __pfx__printk+0x10/0x10 [ 140.189284][ T7088] ? __might_fault+0xb0/0x130 [ 140.189312][ T7088] should_fail_ex+0x414/0x560 [ 140.189342][ T7088] _copy_from_user+0x2d/0xb0 [ 140.189359][ T7088] __sys_sendto+0x25c/0x520 [ 140.189384][ T7088] ? __pfx___sys_sendto+0x10/0x10 [ 140.189403][ T7088] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 140.189436][ T7088] ? __fget_files+0x3a0/0x420 [ 140.189468][ T7088] ? ksys_write+0x22a/0x250 [ 140.189489][ T7088] ? __pfx_ksys_write+0x10/0x10 [ 140.189504][ T7088] ? rcu_is_watching+0x15/0xb0 [ 140.189525][ T7088] __x64_sys_sendto+0xde/0x100 [ 140.189551][ T7088] do_syscall_64+0xfa/0x3b0 [ 140.189570][ T7088] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.189589][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.189604][ T7088] ? clear_bhb_loop+0x60/0xb0 [ 140.189624][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.189639][ T7088] RIP: 0033:0x7fbe2638e929 [ 140.189654][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.189667][ T7088] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.189684][ T7088] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 140.189696][ T7088] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 140.189706][ T7088] RBP: 00007fbe27220090 R08: 0000200000000040 R09: 000000000000001c [ 140.189716][ T7088] R10: 00000000040008d0 R11: 0000000000000246 R12: 0000000000000001 [ 140.189726][ T7088] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 140.189752][ T7088] [ 140.507621][ T7089] syz.3.425 (7089): drop_caches: 2 [ 140.527248][ T7091] NILFS (rnullb0): couldn't find nilfs on the device [ 140.650960][ T43] libceph: connect (1)[c::]:6789 error -101 [ 140.667074][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 141.141601][ T7106] XFS (rnullb0): Invalid superblock magic number [ 141.158513][ T7113] FAULT_INJECTION: forcing a failure. [ 141.158513][ T7113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.173385][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.0.435 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 141.173410][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.173428][ T7113] Call Trace: [ 141.173434][ T7113] [ 141.173441][ T7113] dump_stack_lvl+0x189/0x250 [ 141.173464][ T7113] ? __pfx____ratelimit+0x10/0x10 [ 141.173486][ T7113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.173504][ T7113] ? __pfx__printk+0x10/0x10 [ 141.173535][ T7113] should_fail_ex+0x414/0x560 [ 141.173562][ T7113] _copy_to_user+0x31/0xb0 [ 141.173580][ T7113] simple_read_from_buffer+0xe1/0x170 [ 141.173606][ T7113] proc_fail_nth_read+0x1df/0x250 [ 141.173622][ T7113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.173640][ T7113] ? rw_verify_area+0x258/0x650 [ 141.173656][ T7113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.173672][ T7113] vfs_read+0x200/0x980 [ 141.173694][ T7113] ? __pfx___mutex_lock+0x10/0x10 [ 141.173713][ T7113] ? __pfx_vfs_read+0x10/0x10 [ 141.173732][ T7113] ? __fget_files+0x2a/0x420 [ 141.173753][ T7113] ? __fget_files+0x3a0/0x420 [ 141.173771][ T7113] ? __fget_files+0x2a/0x420 [ 141.173796][ T7113] ksys_read+0x145/0x250 [ 141.173812][ T7113] ? __fget_files+0x3a0/0x420 [ 141.173832][ T7113] ? __pfx_ksys_read+0x10/0x10 [ 141.173853][ T7113] ? do_syscall_64+0xbe/0x3b0 [ 141.173876][ T7113] do_syscall_64+0xfa/0x3b0 [ 141.173892][ T7113] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.173910][ T7113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.173924][ T7113] ? clear_bhb_loop+0x60/0xb0 [ 141.173943][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.173957][ T7113] RIP: 0033:0x7fbe2638d33c [ 141.173972][ T7113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.173985][ T7113] RSP: 002b:00007fbe27220030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.174000][ T7113] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638d33c [ 141.174012][ T7113] RDX: 000000000000000f RSI: 00007fbe272200a0 RDI: 0000000000000003 [ 141.174020][ T7113] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 141.174030][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.174038][ T7113] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 141.174064][ T7113] [ 141.243647][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 141.244540][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.249665][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 141.265221][ T7080] ceph: No mds server is up or the cluster is laggy [ 141.457112][ T7116] syz.1.430 (7116): drop_caches: 2 [ 141.469676][ T7114] XFS (rnullb0): Invalid superblock magic number [ 141.838374][ T7132] hfs: can't find a HFS filesystem on dev rnullb0 [ 142.077122][ T7142] FAULT_INJECTION: forcing a failure. [ 142.077122][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.133231][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.1.445 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 142.133255][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.133266][ T7142] Call Trace: [ 142.133272][ T7142] [ 142.133278][ T7142] dump_stack_lvl+0x189/0x250 [ 142.133301][ T7142] ? __pfx____ratelimit+0x10/0x10 [ 142.133321][ T7142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.133337][ T7142] ? __pfx__printk+0x10/0x10 [ 142.133357][ T7142] ? __might_fault+0xb0/0x130 [ 142.133386][ T7142] should_fail_ex+0x414/0x560 [ 142.133415][ T7142] _copy_from_user+0x2d/0xb0 [ 142.133433][ T7142] ___sys_sendmsg+0x158/0x2a0 [ 142.133451][ T7142] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.133502][ T7142] ? __fget_files+0x2a/0x420 [ 142.133523][ T7142] ? __fget_files+0x3a0/0x420 [ 142.133553][ T7142] __x64_sys_sendmsg+0x19b/0x260 [ 142.133572][ T7142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.133598][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 142.133615][ T7142] ? rcu_is_watching+0x15/0xb0 [ 142.133636][ T7142] ? do_syscall_64+0xbe/0x3b0 [ 142.133661][ T7142] do_syscall_64+0xfa/0x3b0 [ 142.133679][ T7142] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.133698][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.133713][ T7142] ? clear_bhb_loop+0x60/0xb0 [ 142.133733][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.133747][ T7142] RIP: 0033:0x7f5609f8e929 [ 142.133761][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.133773][ T7142] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.133791][ T7142] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 142.133802][ T7142] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 142.133812][ T7142] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 142.133822][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.133831][ T7142] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 142.133859][ T7142] [ 142.367902][ T7145] syz.2.441 (7145): drop_caches: 2 [ 142.460822][ T43] libceph: connect (1)[c::]:6789 error -101 [ 142.477624][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 142.633020][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.753396][ T43] libceph: connect (1)[c::]:6789 error -101 [ 142.759512][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 142.785477][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.799396][ T5874] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.828348][ T5874] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 142.841361][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.850769][ T5874] usb 1-1: Product: syz [ 142.862538][ T5874] usb 1-1: Manufacturer: syz [ 142.871205][ T5874] usb 1-1: SerialNumber: syz [ 142.883439][ T5874] usb 1-1: config 0 descriptor?? [ 142.989417][ T7156] syz.3.449 (7156): drop_caches: 2 [ 143.007370][ T7165] FAULT_INJECTION: forcing a failure. [ 143.007370][ T7165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.049029][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.2.453 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 143.049054][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.049064][ T7165] Call Trace: [ 143.049071][ T7165] [ 143.049078][ T7165] dump_stack_lvl+0x189/0x250 [ 143.049102][ T7165] ? __pfx____ratelimit+0x10/0x10 [ 143.049123][ T7165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.049141][ T7165] ? __pfx__printk+0x10/0x10 [ 143.049159][ T7165] ? __might_fault+0xb0/0x130 [ 143.049190][ T7165] should_fail_ex+0x414/0x560 [ 143.049220][ T7165] _copy_from_user+0x2d/0xb0 [ 143.049237][ T7165] tls_setsockopt+0x4f4/0x1340 [ 143.049265][ T7165] ? __pfx_tls_setsockopt+0x10/0x10 [ 143.049283][ T7165] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.049304][ T7165] ? aa_sock_opt_perm+0xff/0x1b0 [ 143.049324][ T7165] ? sock_common_setsockopt+0x36/0xc0 [ 143.049344][ T7165] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.049366][ T7165] do_sock_setsockopt+0x25a/0x3e0 [ 143.049393][ T7165] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.049421][ T7165] ? __fget_files+0x2a/0x420 [ 143.049451][ T7165] __x64_sys_setsockopt+0x18b/0x220 [ 143.049481][ T7165] do_syscall_64+0xfa/0x3b0 [ 143.049500][ T7165] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.049519][ T7165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.049535][ T7165] ? clear_bhb_loop+0x60/0xb0 [ 143.049554][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.049569][ T7165] RIP: 0033:0x7f39cb78e929 [ 143.049584][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.049598][ T7165] RSP: 002b:00007f39c95f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.049615][ T7165] RAX: ffffffffffffffda RBX: 00007f39cb9b5fa0 RCX: 00007f39cb78e929 [ 143.049627][ T7165] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 143.049636][ T7165] RBP: 00007f39c95f6090 R08: 0000000000000004 R09: 0000000000000000 [ 143.049646][ T7165] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 143.049656][ T7165] R13: 0000000000000000 R14: 00007f39cb9b5fa0 R15: 00007ffe02d14e88 [ 143.049683][ T7165] [ 143.303330][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 143.309704][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 143.358526][ T30] audit: type=1800 audit(1751600838.067:3): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 143.788603][ T7169] fuse: Bad value for 'fd' [ 143.859251][ T7148] ceph: No mds server is up or the cluster is laggy [ 143.903893][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.069849][ T5902] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.079385][ T5902] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.116318][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.127422][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 144.143862][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 144.162748][ T5902] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.172063][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.190225][ T5902] usb 3-1: Product: syz [ 144.194783][ T5902] usb 3-1: Manufacturer: syz [ 144.207053][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 144.212298][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 144.220925][ T5902] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 144.228766][ T5902] cdc_wdm 3-1:1.0: Unknown control protocol [ 144.435516][ T7167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.454'. [ 144.451463][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.460941][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.634965][ T5874] usb 3-1: USB disconnect, device number 8 [ 145.169798][ T7180] syz.1.459 (7180): drop_caches: 2 [ 145.234314][ T5902] usb 1-1: USB disconnect, device number 13 [ 145.369506][ T7190] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 145.476612][ T43] libceph: connect (1)[c::]:6789 error -101 [ 145.482709][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 145.571398][ T7203] fuse: Bad value for 'fd' [ 145.699963][ T7205] syz.0.464 (7205): drop_caches: 2 [ 145.796124][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 145.805273][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 145.844985][ T7212] FAULT_INJECTION: forcing a failure. [ 145.844985][ T7212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.893192][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.3.470 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 145.893216][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.893226][ T7212] Call Trace: [ 145.893233][ T7212] [ 145.893240][ T7212] dump_stack_lvl+0x189/0x250 [ 145.893264][ T7212] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.893285][ T7212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.893303][ T7212] ? __pfx__printk+0x10/0x10 [ 145.893338][ T7212] should_fail_ex+0x414/0x560 [ 145.893367][ T7212] prepare_alloc_pages+0x213/0x610 [ 145.893397][ T7212] __alloc_frozen_pages_noprof+0x123/0x370 [ 145.893422][ T7212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.893453][ T7212] ? policy_nodemask+0x27c/0x720 [ 145.893477][ T7212] alloc_pages_mpol+0x232/0x4a0 [ 145.893501][ T7212] alloc_pages_noprof+0xa9/0x190 [ 145.893521][ T7212] get_free_pages_noprof+0xf/0x80 [ 145.893542][ T7212] vcs_read+0x5b/0xdb0 [ 145.893556][ T7212] ? __asan_memset+0x22/0x50 [ 145.893575][ T7212] ? end_current_label_crit_section+0x152/0x180 [ 145.893594][ T7212] ? common_file_perm+0x199/0x200 [ 145.893614][ T7212] ? bpf_lsm_file_permission+0x9/0x20 [ 145.893628][ T7212] ? security_file_permission+0x75/0x290 [ 145.893649][ T7212] ? rw_verify_area+0x258/0x650 [ 145.893669][ T7212] vfs_readv+0x5aa/0x850 [ 145.893689][ T7212] ? __pfx_vcs_read+0x10/0x10 [ 145.893706][ T7212] ? __pfx_vfs_readv+0x10/0x10 [ 145.893738][ T7212] ? __fget_files+0x2a/0x420 [ 145.893762][ T7212] ? __fget_files+0x3a0/0x420 [ 145.893779][ T7212] ? __fget_files+0x2a/0x420 [ 145.893807][ T7212] do_readv+0x14d/0x2d0 [ 145.893831][ T7212] ? __pfx_do_readv+0x10/0x10 [ 145.893850][ T7212] ? rcu_is_watching+0x15/0xb0 [ 145.893872][ T7212] ? do_syscall_64+0xbe/0x3b0 [ 145.893903][ T7212] do_syscall_64+0xfa/0x3b0 [ 145.893921][ T7212] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.893939][ T7212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.893955][ T7212] ? clear_bhb_loop+0x60/0xb0 [ 145.893974][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.893988][ T7212] RIP: 0033:0x7fa86af8e929 [ 145.894003][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.894016][ T7212] RSP: 002b:00007fa86bde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 145.894033][ T7212] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8e929 [ 145.894045][ T7212] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000003 [ 145.894055][ T7212] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.894065][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.894074][ T7212] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 145.894101][ T7212] [ 146.244353][ T7216] NILFS (rnullb0): couldn't find nilfs on the device [ 146.313475][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 146.319603][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 146.433681][ T7218] netlink: 'syz.0.473': attribute type 4 has an invalid length. [ 146.505203][ T7223] netlink: 'syz.0.473': attribute type 4 has an invalid length. [ 146.558477][ T7227] fuse: Bad value for 'fd' [ 146.794264][ T7196] ceph: No mds server is up or the cluster is laggy [ 147.251652][ T7234] syz.1.480 (7234): drop_caches: 2 [ 147.299343][ T7256] FAULT_INJECTION: forcing a failure. [ 147.299343][ T7256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.349363][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.3.487 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 147.349388][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.349397][ T7256] Call Trace: [ 147.349404][ T7256] [ 147.349411][ T7256] dump_stack_lvl+0x189/0x250 [ 147.349435][ T7256] ? __pfx____ratelimit+0x10/0x10 [ 147.349457][ T7256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.349482][ T7256] ? __pfx__printk+0x10/0x10 [ 147.349500][ T7256] ? fs_reclaim_acquire+0x7d/0x100 [ 147.349527][ T7256] should_fail_ex+0x414/0x560 [ 147.349555][ T7256] prepare_alloc_pages+0x213/0x610 [ 147.349580][ T7256] __alloc_frozen_pages_noprof+0x123/0x370 [ 147.349607][ T7256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.349636][ T7256] ? policy_nodemask+0x27c/0x720 [ 147.349652][ T7256] ? __lock_acquire+0xab9/0xd20 [ 147.349675][ T7256] alloc_pages_mpol+0x232/0x4a0 [ 147.349698][ T7256] vma_alloc_folio_noprof+0xe4/0x200 [ 147.349720][ T7256] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 147.349751][ T7256] folio_prealloc+0x30/0x180 [ 147.349772][ T7256] __handle_mm_fault+0x2ab9/0x5440 [ 147.349787][ T7256] ? __lock_acquire+0xab9/0xd20 [ 147.349823][ T7256] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.349854][ T7256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.349873][ T7256] ? lock_vma_under_rcu+0xe0/0x410 [ 147.349891][ T7256] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 147.349917][ T7256] handle_mm_fault+0x40a/0x8e0 [ 147.349944][ T7256] do_user_addr_fault+0xa81/0x1390 [ 147.349974][ T7256] ? rcu_is_watching+0x15/0xb0 [ 147.349987][ T7256] ? trace_page_fault_user+0x84/0x1e0 [ 147.350009][ T7256] exc_page_fault+0x76/0xf0 [ 147.350029][ T7256] asm_exc_page_fault+0x26/0x30 [ 147.350042][ T7256] RIP: 0033:0x7fa86ae5a33b [ 147.350055][ T7256] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 147.350067][ T7256] RSP: 002b:00007fa86bde5fb0 EFLAGS: 00010202 [ 147.350081][ T7256] RAX: 0000000000000000 RBX: 00007fa86b1b5fa0 RCX: 0000000000000000 [ 147.350090][ T7256] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000180 [ 147.350099][ T7256] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.350108][ T7256] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 147.350116][ T7256] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 147.350141][ T7256] [ 147.351708][ T7256] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 147.786517][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 147.796524][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 148.054833][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 148.071964][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 148.296072][ T7281] syzkaller1: entered promiscuous mode [ 148.303429][ T7281] syzkaller1: entered allmulticast mode [ 148.603504][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 148.626281][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 148.699584][ T7290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.118735][ T7270] ceph: No mds server is up or the cluster is laggy [ 149.144177][ T5839] Bluetooth: Frame is too long (len 16, expected len 6) [ 149.462653][ T7307] FAULT_INJECTION: forcing a failure. [ 149.462653][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.502053][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.0.504 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 149.502078][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.502087][ T7307] Call Trace: [ 149.502094][ T7307] [ 149.502102][ T7307] dump_stack_lvl+0x189/0x250 [ 149.502125][ T7307] ? __pfx____ratelimit+0x10/0x10 [ 149.502146][ T7307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.502164][ T7307] ? __pfx__printk+0x10/0x10 [ 149.502183][ T7307] ? __might_fault+0xb0/0x130 [ 149.502213][ T7307] should_fail_ex+0x414/0x560 [ 149.502243][ T7307] _copy_from_user+0x2d/0xb0 [ 149.502261][ T7307] ___sys_sendmsg+0x158/0x2a0 [ 149.502281][ T7307] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.502332][ T7307] ? __fget_files+0x2a/0x420 [ 149.502353][ T7307] ? __fget_files+0x3a0/0x420 [ 149.502384][ T7307] __x64_sys_sendmsg+0x19b/0x260 [ 149.502401][ T7307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.502425][ T7307] ? __pfx_ksys_write+0x10/0x10 [ 149.502441][ T7307] ? rcu_is_watching+0x15/0xb0 [ 149.502461][ T7307] ? do_syscall_64+0xbe/0x3b0 [ 149.502485][ T7307] do_syscall_64+0xfa/0x3b0 [ 149.502504][ T7307] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.502523][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.502546][ T7307] ? clear_bhb_loop+0x60/0xb0 [ 149.502564][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.502579][ T7307] RIP: 0033:0x7fbe2638e929 [ 149.502594][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.502606][ T7307] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.502624][ T7307] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 149.502636][ T7307] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.502647][ T7307] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 149.502657][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.502666][ T7307] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 149.502693][ T7307] [ 150.063450][ T5839] Bluetooth: hci3: link tx timeout [ 150.070692][ T5839] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.471266][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 150.477485][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 150.579084][ T7329] input: syz0 as /devices/virtual/input/input12 [ 150.759556][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 150.773206][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 151.118311][ T7338] syz.3.516 (7338): drop_caches: 2 [ 151.197844][ T7332] syz.2.513 (7332): drop_caches: 2 [ 151.305484][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 151.322130][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 151.385413][ T5840] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 151.534617][ T5840] usb 1-1: device descriptor read/64, error -71 [ 151.539863][ T7343] syz.3.518 (7343): drop_caches: 2 [ 151.771893][ T7324] ceph: No mds server is up or the cluster is laggy [ 151.782996][ T5840] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.943127][ T5840] usb 1-1: device descriptor read/64, error -71 [ 152.038828][ T7354] FAULT_INJECTION: forcing a failure. [ 152.038828][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.062443][ T7351] syz.3.521 (7351): drop_caches: 2 [ 152.064479][ T5840] usb usb1-port1: attempt power cycle [ 152.087309][ T7354] CPU: 1 UID: 0 PID: 7354 Comm: syz.1.522 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 152.087333][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.087342][ T7354] Call Trace: [ 152.087349][ T7354] [ 152.087356][ T7354] dump_stack_lvl+0x189/0x250 [ 152.087380][ T7354] ? __pfx____ratelimit+0x10/0x10 [ 152.087409][ T7354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.087427][ T7354] ? __pfx__printk+0x10/0x10 [ 152.087458][ T7354] should_fail_ex+0x414/0x560 [ 152.087488][ T7354] _copy_to_user+0x31/0xb0 [ 152.087507][ T7354] simple_read_from_buffer+0xe1/0x170 [ 152.087534][ T7354] proc_fail_nth_read+0x1df/0x250 [ 152.087554][ T7354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.087573][ T7354] ? rw_verify_area+0x258/0x650 [ 152.087591][ T7354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.087609][ T7354] vfs_read+0x200/0x980 [ 152.087632][ T7354] ? __pfx___mutex_lock+0x10/0x10 [ 152.087653][ T7354] ? __pfx_vfs_read+0x10/0x10 [ 152.087673][ T7354] ? __fget_files+0x2a/0x420 [ 152.087699][ T7354] ? __fget_files+0x3a0/0x420 [ 152.087718][ T7354] ? __fget_files+0x2a/0x420 [ 152.087749][ T7354] ksys_read+0x145/0x250 [ 152.087771][ T7354] ? __pfx_ksys_read+0x10/0x10 [ 152.087795][ T7354] ? do_syscall_64+0xbe/0x3b0 [ 152.087820][ T7354] do_syscall_64+0xfa/0x3b0 [ 152.087838][ T7354] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.087857][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.087872][ T7354] ? clear_bhb_loop+0x60/0xb0 [ 152.087892][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.087908][ T7354] RIP: 0033:0x7f5609f8d33c [ 152.087923][ T7354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.087936][ T7354] RSP: 002b:00007f560ade0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.087954][ T7354] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8d33c [ 152.087966][ T7354] RDX: 000000000000000f RSI: 00007f560ade00a0 RDI: 0000000000000006 [ 152.087976][ T7354] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 152.087986][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.087995][ T7354] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 152.088022][ T7354] [ 152.317909][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 152.604052][ T5840] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.623449][ T5840] usb 1-1: device descriptor read/8, error -71 [ 152.703455][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.864728][ T5840] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 152.864847][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 152.895139][ T5840] usb 1-1: device descriptor read/8, error -71 [ 152.902826][ T5902] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 152.912303][ T5902] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.936017][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.960473][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.986393][ T5902] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.008835][ T5840] usb usb1-port1: unable to enumerate USB device [ 153.023639][ T5902] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.049358][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.270272][ T5902] usb 3-1: usb_control_msg returned -32 [ 153.282575][ T5902] usbtmc 3-1:16.0: can't read capabilities [ 153.785634][ T7364] syz.1.527 (7364): drop_caches: 2 [ 153.968876][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 153.981105][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 154.255589][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 154.261695][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 154.788050][ T10] libceph: connect (1)[c::]:6789 error -101 [ 154.795595][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 155.277326][ T7372] ceph: No mds server is up or the cluster is laggy [ 155.473435][ T5902] usb 3-1: USB disconnect, device number 9 [ 155.835357][ T7405] FAULT_INJECTION: forcing a failure. [ 155.835357][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 155.866857][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.0.542 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 155.866883][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.866893][ T7405] Call Trace: [ 155.866900][ T7405] [ 155.866908][ T7405] dump_stack_lvl+0x189/0x250 [ 155.866932][ T7405] ? __pfx____ratelimit+0x10/0x10 [ 155.866953][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.866971][ T7405] ? __pfx__printk+0x10/0x10 [ 155.866994][ T7405] ? __pfx___might_resched+0x10/0x10 [ 155.867010][ T7405] ? fs_reclaim_acquire+0x7d/0x100 [ 155.867035][ T7405] should_fail_ex+0x414/0x560 [ 155.867065][ T7405] should_failslab+0xa8/0x100 [ 155.867086][ T7405] __kmalloc_noprof+0xcb/0x4f0 [ 155.867102][ T7405] ? kfree+0x4d/0x440 [ 155.867116][ T7405] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.867139][ T7405] tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.867160][ T7405] ? tomoyo_domain+0xd9/0x130 [ 155.867184][ T7405] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.867208][ T7405] tomoyo_path_number_perm+0x1e8/0x5a0 [ 155.867234][ T7405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.867273][ T7405] ? __lock_acquire+0xab9/0xd20 [ 155.867316][ T7405] ? __fget_files+0x2a/0x420 [ 155.867340][ T7405] ? __fget_files+0x2a/0x420 [ 155.867359][ T7405] ? __fget_files+0x3a0/0x420 [ 155.867378][ T7405] ? __fget_files+0x2a/0x420 [ 155.867402][ T7405] security_file_ioctl+0xcb/0x2d0 [ 155.867427][ T7405] __se_sys_ioctl+0x47/0x170 [ 155.867448][ T7405] do_syscall_64+0xfa/0x3b0 [ 155.867467][ T7405] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.867486][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.867502][ T7405] ? clear_bhb_loop+0x60/0xb0 [ 155.867521][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.867536][ T7405] RIP: 0033:0x7fbe2638e929 [ 155.867552][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.867565][ T7405] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.867582][ T7405] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 155.867594][ T7405] RDX: 0000200000000040 RSI: 000000004020ae76 RDI: 0000000000000004 [ 155.867604][ T7405] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 155.867613][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.867623][ T7405] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 155.867650][ T7405] [ 155.867658][ T7405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.198320][ T7396] syz.2.539 (7396): drop_caches: 2 [ 156.518856][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 156.553637][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 156.823413][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 156.829500][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 157.078933][ T7442] FAULT_INJECTION: forcing a failure. [ 157.078933][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 157.102379][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.0.556 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 157.102404][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.102413][ T7442] Call Trace: [ 157.102421][ T7442] [ 157.102427][ T7442] dump_stack_lvl+0x189/0x250 [ 157.102451][ T7442] ? __pfx____ratelimit+0x10/0x10 [ 157.102472][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.102489][ T7442] ? __pfx__printk+0x10/0x10 [ 157.102510][ T7442] ? __pfx___might_resched+0x10/0x10 [ 157.102527][ T7442] ? fs_reclaim_acquire+0x7d/0x100 [ 157.102553][ T7442] should_fail_ex+0x414/0x560 [ 157.102581][ T7442] should_failslab+0xa8/0x100 [ 157.102603][ T7442] kmem_cache_alloc_noprof+0x73/0x3c0 [ 157.102621][ T7442] ? ima_inode_get+0xeb/0x4e0 [ 157.102644][ T7442] ima_inode_get+0xeb/0x4e0 [ 157.102668][ T7442] process_measurement+0x3f1/0x1a40 [ 157.102705][ T7442] ? __pfx_process_measurement+0x10/0x10 [ 157.102765][ T7442] ? rcu_read_lock_any_held+0xb3/0x120 [ 157.102798][ T7442] ? end_current_label_crit_section+0x152/0x180 [ 157.102821][ T7442] ima_file_mmap+0x1a2/0x1f0 [ 157.102841][ T7442] ? __pfx_ima_file_mmap+0x10/0x10 [ 157.102860][ T7442] ? end_current_label_crit_section+0x152/0x180 [ 157.102880][ T7442] ? common_file_perm+0x199/0x200 [ 157.102903][ T7442] security_mmap_file+0x7a4/0xa60 [ 157.102924][ T7442] vm_mmap_pgoff+0x12c/0x4c0 [ 157.102950][ T7442] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.102974][ T7442] ? __fget_files+0x2a/0x420 [ 157.102997][ T7442] ? __fget_files+0x3a0/0x420 [ 157.103014][ T7442] ? __fget_files+0x2a/0x420 [ 157.103037][ T7442] ksys_mmap_pgoff+0x51f/0x760 [ 157.103062][ T7442] do_syscall_64+0xfa/0x3b0 [ 157.103080][ T7442] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.103098][ T7442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.103114][ T7442] ? clear_bhb_loop+0x60/0xb0 [ 157.103134][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.103149][ T7442] RIP: 0033:0x7fbe2638e929 [ 157.103165][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.103178][ T7442] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.103196][ T7442] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 157.103208][ T7442] RDX: 00000000027fffff RSI: 0000000000600000 RDI: 0000200000000000 [ 157.103219][ T7442] RBP: 00007fbe27220090 R08: 0000000000000003 R09: 0000000000000000 [ 157.103229][ T7442] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000001 [ 157.103239][ T7442] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 157.103264][ T7442] [ 157.378408][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 157.384530][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 157.450389][ T7444] syz.2.557 (7444): drop_caches: 2 [ 157.783104][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.831242][ T7454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.896609][ T7414] ceph: No mds server is up or the cluster is laggy [ 157.944105][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 157.956560][ T5902] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 157.976429][ T5902] usb 1-1: config 0 has no interface number 0 [ 158.004853][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.033267][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.061807][ T5902] usb 1-1: Product: syz [ 158.067260][ T5902] usb 1-1: Manufacturer: syz [ 158.079132][ T5902] usb 1-1: SerialNumber: syz [ 158.084201][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.122166][ T5902] usb 1-1: config 0 descriptor?? [ 158.139490][ T5902] smsc95xx v2.0.0 [ 158.243172][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 158.256195][ T5874] usb 3-1: config index 0 descriptor too short (expected 59154, got 18) [ 158.283094][ T5874] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 158.311684][ T5874] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 158.330961][ T5874] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 158.347125][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 158.363080][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.379475][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.390362][ T5874] usb 3-1: Product: syz [ 158.394767][ T5874] usb 3-1: Manufacturer: syz [ 158.399491][ T5874] usb 3-1: SerialNumber: syz [ 158.400589][ T7472] FAULT_INJECTION: forcing a failure. [ 158.400589][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 158.404737][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 158.431939][ T5902] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 158.447749][ T5874] usb 3-1: config 0 descriptor?? [ 158.453044][ T7472] CPU: 1 UID: 0 PID: 7472 Comm: syz.1.566 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 158.453066][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.453075][ T7472] Call Trace: [ 158.453082][ T7472] [ 158.453089][ T7472] dump_stack_lvl+0x189/0x250 [ 158.453114][ T7472] ? __pfx____ratelimit+0x10/0x10 [ 158.453135][ T7472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.453153][ T7472] ? __pfx__printk+0x10/0x10 [ 158.453175][ T7472] ? __pfx___might_resched+0x10/0x10 [ 158.453190][ T7472] ? fs_reclaim_acquire+0x7d/0x100 [ 158.453214][ T7472] should_fail_ex+0x414/0x560 [ 158.453241][ T7472] should_failslab+0xa8/0x100 [ 158.453259][ T7472] __kmalloc_noprof+0xcb/0x4f0 [ 158.453274][ T7472] ? kfree+0x4d/0x440 [ 158.453286][ T7472] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.453307][ T7472] tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.453326][ T7472] ? tomoyo_domain+0xd9/0x130 [ 158.453348][ T7472] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 158.453371][ T7472] tomoyo_path_number_perm+0x1e8/0x5a0 [ 158.453396][ T7472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.453433][ T7472] ? __lock_acquire+0xab9/0xd20 [ 158.453473][ T7472] ? __fget_files+0x2a/0x420 [ 158.453496][ T7472] ? __fget_files+0x2a/0x420 [ 158.453513][ T7472] ? __fget_files+0x3a0/0x420 [ 158.453531][ T7472] ? __fget_files+0x2a/0x420 [ 158.453556][ T7472] security_file_ioctl+0xcb/0x2d0 [ 158.453580][ T7472] __se_sys_ioctl+0x47/0x170 [ 158.453599][ T7472] do_syscall_64+0xfa/0x3b0 [ 158.453617][ T7472] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.453635][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.453649][ T7472] ? clear_bhb_loop+0x60/0xb0 [ 158.453668][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.453683][ T7472] RIP: 0033:0x7f5609f8e929 [ 158.453697][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.453710][ T7472] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.453728][ T7472] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 158.453739][ T7472] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000004 [ 158.453749][ T7472] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.453759][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.453768][ T7472] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 158.453795][ T7472] [ 158.454289][ T7472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.479715][ T5874] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 158.724713][ T5902] usb 1-1: USB disconnect, device number 18 [ 159.077628][ T7483] syz.3.568 (7483): drop_caches: 2 [ 159.147963][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 159.157205][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 159.433514][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 159.439600][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 159.548408][ T5874] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 159.571902][ T5874] usb 3-1: USB disconnect, device number 10 [ 159.954927][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 159.958314][ T7514] FAULT_INJECTION: forcing a failure. [ 159.958314][ T7514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.961049][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 159.975201][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.3.581 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 159.975228][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.975238][ T7514] Call Trace: [ 159.975244][ T7514] [ 159.975250][ T7514] dump_stack_lvl+0x189/0x250 [ 159.975275][ T7514] ? __pfx____ratelimit+0x10/0x10 [ 159.975296][ T7514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.975313][ T7514] ? __pfx__printk+0x10/0x10 [ 159.975331][ T7514] ? __might_fault+0xb0/0x130 [ 159.975364][ T7514] should_fail_ex+0x414/0x560 [ 159.975393][ T7514] _copy_from_user+0x2d/0xb0 [ 159.975410][ T7514] ___sys_sendmsg+0x158/0x2a0 [ 159.975429][ T7514] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.975484][ T7514] ? __fget_files+0x2a/0x420 [ 159.975504][ T7514] ? __fget_files+0x3a0/0x420 [ 159.975534][ T7514] __x64_sys_sendmsg+0x19b/0x260 [ 159.975553][ T7514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.975578][ T7514] ? __pfx_ksys_write+0x10/0x10 [ 159.975594][ T7514] ? rcu_is_watching+0x15/0xb0 [ 159.975615][ T7514] ? do_syscall_64+0xbe/0x3b0 [ 159.975639][ T7514] do_syscall_64+0xfa/0x3b0 [ 159.975657][ T7514] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.975676][ T7514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.975691][ T7514] ? clear_bhb_loop+0x60/0xb0 [ 159.975710][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.975725][ T7514] RIP: 0033:0x7fa86af8e929 [ 159.975741][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.975755][ T7514] RSP: 002b:00007fa86bde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.975772][ T7514] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8e929 [ 159.975790][ T7514] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 159.975800][ T7514] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.975813][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.975822][ T7514] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 159.975849][ T7514] [ 160.359683][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 160.487764][ T7488] ceph: No mds server is up or the cluster is laggy [ 160.598166][ T7526] syz.1.582 (7526): drop_caches: 2 [ 160.639826][ T7532] FAULT_INJECTION: forcing a failure. [ 160.639826][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.656000][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.2.588 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 160.656025][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.656036][ T7532] Call Trace: [ 160.656043][ T7532] [ 160.656051][ T7532] dump_stack_lvl+0x189/0x250 [ 160.656075][ T7532] ? __pfx____ratelimit+0x10/0x10 [ 160.656096][ T7532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.656114][ T7532] ? __pfx__printk+0x10/0x10 [ 160.656132][ T7532] ? __might_fault+0xb0/0x130 [ 160.656162][ T7532] should_fail_ex+0x414/0x560 [ 160.656191][ T7532] _copy_from_user+0x2d/0xb0 [ 160.656209][ T7532] ___sys_sendmsg+0x158/0x2a0 [ 160.656227][ T7532] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.656279][ T7532] ? __fget_files+0x2a/0x420 [ 160.656300][ T7532] ? __fget_files+0x3a0/0x420 [ 160.656331][ T7532] __x64_sys_sendmsg+0x19b/0x260 [ 160.656350][ T7532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.656376][ T7532] ? __pfx_ksys_write+0x10/0x10 [ 160.656393][ T7532] ? rcu_is_watching+0x15/0xb0 [ 160.656414][ T7532] ? do_syscall_64+0xbe/0x3b0 [ 160.656439][ T7532] do_syscall_64+0xfa/0x3b0 [ 160.656459][ T7532] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.656486][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.656501][ T7532] ? clear_bhb_loop+0x60/0xb0 [ 160.656522][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.656538][ T7532] RIP: 0033:0x7f39cb78e929 [ 160.656553][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.656567][ T7532] RSP: 002b:00007f39c95f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.656586][ T7532] RAX: ffffffffffffffda RBX: 00007f39cb9b5fa0 RCX: 00007f39cb78e929 [ 160.656598][ T7532] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 160.656608][ T7532] RBP: 00007f39c95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.656619][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.656629][ T7532] R13: 0000000000000000 R14: 00007f39cb9b5fa0 R15: 00007ffe02d14e88 [ 160.656657][ T7532] [ 160.928653][ T7535] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 161.170420][ T7548] syz.1.595: attempt to access beyond end of device [ 161.170420][ T7548] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 161.394253][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 161.404843][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 161.422632][ T5874] kernel write not supported for file /dsp1 (pid: 5874 comm: kworker/0:3) [ 161.675694][ T43] libceph: connect (1)[c::]:6789 error -101 [ 161.685868][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 161.758927][ T7568] syz.1.598 (7568): drop_caches: 2 [ 161.828938][ T30] audit: type=1326 audit(1751600856.537:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.3.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86af8e929 code=0x0 [ 162.193538][ T43] libceph: connect (1)[c::]:6789 error -101 [ 162.199901][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 162.710557][ T7557] ceph: No mds server is up or the cluster is laggy [ 162.969168][ T7594] FAULT_INJECTION: forcing a failure. [ 162.969168][ T7594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.995839][ T7591] hfs: can't find a HFS filesystem on dev rnullb0 [ 163.015797][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.0.612 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 163.015822][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.015831][ T7594] Call Trace: [ 163.015838][ T7594] [ 163.015845][ T7594] dump_stack_lvl+0x189/0x250 [ 163.015869][ T7594] ? __pfx____ratelimit+0x10/0x10 [ 163.015890][ T7594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.015907][ T7594] ? __pfx__printk+0x10/0x10 [ 163.015925][ T7594] ? __might_fault+0xb0/0x130 [ 163.015952][ T7594] should_fail_ex+0x414/0x560 [ 163.015981][ T7594] _copy_from_user+0x2d/0xb0 [ 163.015999][ T7594] ___sys_sendmsg+0x158/0x2a0 [ 163.016018][ T7594] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.016069][ T7594] ? __fget_files+0x2a/0x420 [ 163.016089][ T7594] ? __fget_files+0x3a0/0x420 [ 163.016119][ T7594] __x64_sys_sendmsg+0x19b/0x260 [ 163.016138][ T7594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.016163][ T7594] ? __pfx_ksys_write+0x10/0x10 [ 163.016179][ T7594] ? rcu_is_watching+0x15/0xb0 [ 163.016200][ T7594] ? do_syscall_64+0xbe/0x3b0 [ 163.016225][ T7594] do_syscall_64+0xfa/0x3b0 [ 163.016244][ T7594] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.016263][ T7594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.016278][ T7594] ? clear_bhb_loop+0x60/0xb0 [ 163.016299][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.016314][ T7594] RIP: 0033:0x7fbe2638e929 [ 163.016329][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.016343][ T7594] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.016361][ T7594] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 163.016374][ T7594] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 163.016384][ T7594] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 163.016395][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.016403][ T7594] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 163.016430][ T7594] [ 163.623888][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 163.630095][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 163.893453][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 163.899684][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 163.915282][ T7618] syz.0.615 (7618): drop_caches: 2 [ 164.437856][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 164.456285][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 164.848796][ T7636] FAULT_INJECTION: forcing a failure. [ 164.848796][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 164.888534][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.3.628 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 164.888560][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.888570][ T7636] Call Trace: [ 164.888577][ T7636] [ 164.888583][ T7636] dump_stack_lvl+0x189/0x250 [ 164.888606][ T7636] ? __pfx____ratelimit+0x10/0x10 [ 164.888626][ T7636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.888644][ T7636] ? __pfx__printk+0x10/0x10 [ 164.888667][ T7636] ? __pfx___might_resched+0x10/0x10 [ 164.888683][ T7636] ? fs_reclaim_acquire+0x7d/0x100 [ 164.888709][ T7636] should_fail_ex+0x414/0x560 [ 164.888740][ T7636] should_failslab+0xa8/0x100 [ 164.888761][ T7636] __kmalloc_cache_noprof+0x70/0x3d0 [ 164.888780][ T7636] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 164.888804][ T7636] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 164.888830][ T7636] ? __pfx___mutex_trylock_common+0x10/0x10 [ 164.888853][ T7636] ? rcu_is_watching+0x15/0xb0 [ 164.888870][ T7636] ? trace_contention_end+0x39/0x120 [ 164.888888][ T7636] ? __mutex_lock+0x330/0xe80 [ 164.888915][ T7636] ? aa_file_perm+0x13e/0x11b0 [ 164.888934][ T7636] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 164.888951][ T7636] ? snd_pcm_oss_write+0x28f/0x11a0 [ 164.888970][ T7636] ? __pfx___mutex_lock+0x10/0x10 [ 164.888999][ T7636] ? __lock_acquire+0xab9/0xd20 [ 164.889023][ T7636] ? __pfx_aa_file_perm+0x10/0x10 [ 164.889046][ T7636] snd_pcm_oss_write+0x2fb/0x11a0 [ 164.889063][ T7636] ? get_pid_task+0x20/0x1f0 [ 164.889099][ T7636] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 164.889118][ T7636] ? bpf_lsm_file_permission+0x9/0x20 [ 164.889133][ T7636] ? security_file_permission+0x75/0x290 [ 164.889156][ T7636] ? rw_verify_area+0x258/0x650 [ 164.889174][ T7636] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 164.889192][ T7636] vfs_write+0x27e/0xa90 [ 164.889220][ T7636] ? __pfx_vfs_write+0x10/0x10 [ 164.889240][ T7636] ? __fget_files+0x2a/0x420 [ 164.889271][ T7636] ? __fget_files+0x2a/0x420 [ 164.889291][ T7636] ? __fget_files+0x3a0/0x420 [ 164.889310][ T7636] ? __fget_files+0x2a/0x420 [ 164.889341][ T7636] ksys_write+0x145/0x250 [ 164.889362][ T7636] ? __pfx_ksys_write+0x10/0x10 [ 164.889379][ T7636] ? rcu_is_watching+0x15/0xb0 [ 164.889399][ T7636] ? do_syscall_64+0xbe/0x3b0 [ 164.889424][ T7636] do_syscall_64+0xfa/0x3b0 [ 164.889444][ T7636] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.889464][ T7636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.889479][ T7636] ? clear_bhb_loop+0x60/0xb0 [ 164.889500][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.889514][ T7636] RIP: 0033:0x7fa86af8e929 [ 164.889530][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.889544][ T7636] RSP: 002b:00007fa86bdc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.889566][ T7636] RAX: ffffffffffffffda RBX: 00007fa86b1b6080 RCX: 00007fa86af8e929 [ 164.889578][ T7636] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 164.889589][ T7636] RBP: 00007fa86bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.889599][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.889608][ T7636] R13: 0000000000000001 R14: 00007fa86b1b6080 R15: 00007ffc26b16d58 [ 164.889637][ T7636] [ 164.891384][ T7609] ceph: No mds server is up or the cluster is laggy [ 165.226766][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 165.285586][ T7638] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 165.302412][ T7638] netlink: 220 bytes leftover after parsing attributes in process `syz.0.629'. [ 165.870888][ T7650] FAULT_INJECTION: forcing a failure. [ 165.870888][ T7650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.913158][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.3.634 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 165.913184][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.913194][ T7650] Call Trace: [ 165.913201][ T7650] [ 165.913208][ T7650] dump_stack_lvl+0x189/0x250 [ 165.913232][ T7650] ? __pfx____ratelimit+0x10/0x10 [ 165.913251][ T7650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.913269][ T7650] ? __pfx__printk+0x10/0x10 [ 165.913298][ T7650] should_fail_ex+0x414/0x560 [ 165.913332][ T7650] _copy_to_user+0x31/0xb0 [ 165.913352][ T7650] simple_read_from_buffer+0xe1/0x170 [ 165.913378][ T7650] proc_fail_nth_read+0x1df/0x250 [ 165.913398][ T7650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.913417][ T7650] ? rw_verify_area+0x258/0x650 [ 165.913435][ T7650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.913453][ T7650] vfs_read+0x200/0x980 [ 165.913476][ T7650] ? __pfx___mutex_lock+0x10/0x10 [ 165.913498][ T7650] ? __pfx_vfs_read+0x10/0x10 [ 165.913518][ T7650] ? __fget_files+0x2a/0x420 [ 165.913543][ T7650] ? __fget_files+0x3a0/0x420 [ 165.913563][ T7650] ? __fget_files+0x2a/0x420 [ 165.913592][ T7650] ksys_read+0x145/0x250 [ 165.913609][ T7650] ? __fget_files+0x3a0/0x420 [ 165.913630][ T7650] ? __pfx_ksys_read+0x10/0x10 [ 165.913655][ T7650] ? do_syscall_64+0xbe/0x3b0 [ 165.913680][ T7650] do_syscall_64+0xfa/0x3b0 [ 165.913699][ T7650] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.913718][ T7650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.913735][ T7650] ? clear_bhb_loop+0x60/0xb0 [ 165.913755][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.913770][ T7650] RIP: 0033:0x7fa86af8d33c [ 165.913786][ T7650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.913800][ T7650] RSP: 002b:00007fa86bde7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.913818][ T7650] RAX: ffffffffffffffda RBX: 00007fa86b1b5fa0 RCX: 00007fa86af8d33c [ 165.913830][ T7650] RDX: 000000000000000f RSI: 00007fa86bde70a0 RDI: 0000000000000003 [ 165.913840][ T7650] RBP: 00007fa86bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.913850][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.913860][ T7650] R13: 0000000000000000 R14: 00007fa86b1b5fa0 R15: 00007ffc26b16d58 [ 165.913889][ T7650] [ 166.451422][ T7651] syz.0.632 (7651): drop_caches: 2 [ 166.658745][ T7657] openvswitch: netlink: Key 6 has unexpected len 119 expected 2 [ 167.162799][ T7661] syz.2.640 (7661): drop_caches: 2 [ 167.460251][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 167.473258][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 167.756681][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 167.762775][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 168.034337][ T7689] syz.0.649 (7689): drop_caches: 2 [ 168.283851][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 168.290265][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 168.746349][ T7668] ceph: No mds server is up or the cluster is laggy [ 168.760041][ T7699] syz.2.651 (7699): drop_caches: 2 [ 169.680854][ T7718] syz.1.659 (7718): drop_caches: 2 [ 170.302244][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 170.315002][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 170.573512][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 170.583374][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 170.865418][ T7736] syz.1.663 (7736): drop_caches: 2 [ 171.095532][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 171.115312][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 171.619189][ T7724] ceph: No mds server is up or the cluster is laggy [ 171.647855][ T7749] syz.1.669 (7749): drop_caches: 2 [ 172.313766][ T7776] syz.2.674 (7776): drop_caches: 2 [ 173.046064][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 173.055200][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 173.334573][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 173.344436][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 173.400987][ T7795] syz.0.684 (7795): drop_caches: 2 [ 173.726706][ T7810] syz.1.690 (7810): drop_caches: 2 [ 173.863466][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 173.871903][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 174.348489][ T7789] ceph: No mds server is up or the cluster is laggy [ 174.348784][ T7831] FAULT_INJECTION: forcing a failure. [ 174.348784][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 174.373989][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.0.698 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 174.374013][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.374023][ T7831] Call Trace: [ 174.374030][ T7831] [ 174.374037][ T7831] dump_stack_lvl+0x189/0x250 [ 174.374061][ T7831] ? __pfx____ratelimit+0x10/0x10 [ 174.374083][ T7831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.374102][ T7831] ? __pfx__printk+0x10/0x10 [ 174.374126][ T7831] ? __pfx___might_resched+0x10/0x10 [ 174.374142][ T7831] ? fs_reclaim_acquire+0x7d/0x100 [ 174.374167][ T7831] should_fail_ex+0x414/0x560 [ 174.374197][ T7831] should_failslab+0xa8/0x100 [ 174.374218][ T7831] __kmalloc_noprof+0xcb/0x4f0 [ 174.374235][ T7831] ? kfree+0x4d/0x440 [ 174.374248][ T7831] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.374272][ T7831] tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.374294][ T7831] ? tomoyo_domain+0xd9/0x130 [ 174.374317][ T7831] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 174.374340][ T7831] tomoyo_path_number_perm+0x1e8/0x5a0 [ 174.374365][ T7831] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.374406][ T7831] ? __lock_acquire+0xab9/0xd20 [ 174.374450][ T7831] ? __fget_files+0x2a/0x420 [ 174.374474][ T7831] ? __fget_files+0x2a/0x420 [ 174.374494][ T7831] ? __fget_files+0x3a0/0x420 [ 174.374511][ T7831] ? __fget_files+0x2a/0x420 [ 174.374540][ T7831] security_file_ioctl+0xcb/0x2d0 [ 174.374565][ T7831] __se_sys_ioctl+0x47/0x170 [ 174.374586][ T7831] do_syscall_64+0xfa/0x3b0 [ 174.374606][ T7831] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.374625][ T7831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.374642][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 174.374662][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.374678][ T7831] RIP: 0033:0x7fbe2638e929 [ 174.374693][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.374708][ T7831] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.374725][ T7831] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 174.374738][ T7831] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000003 [ 174.374749][ T7831] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 174.374760][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.374770][ T7831] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 174.374797][ T7831] [ 174.374804][ T7831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.121571][ T7837] syz.2.700 (7837): drop_caches: 2 [ 175.153640][ T7852] syz.0.701 (7852): drop_caches: 2 [ 175.732054][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 175.743258][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 175.743644][ T7870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.003685][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 176.059685][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 176.385243][ T7883] syz.1.715 (7883): drop_caches: 2 [ 176.594088][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 176.601370][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 176.743764][ T7887] syz.0.717 (7887): drop_caches: 2 [ 176.968124][ T7865] ceph: No mds server is up or the cluster is laggy [ 177.891008][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 177.893778][ T7927] syz.1.730 (7927): drop_caches: 2 [ 177.902720][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 178.164753][ T7948] syz.0.734 (7948): drop_caches: 2 [ 178.184574][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 178.190679][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 178.724172][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 178.732670][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 179.181177][ T7939] ceph: No mds server is up or the cluster is laggy [ 179.857720][ T7967] syz.0.745 (7967): drop_caches: 2 [ 179.918240][ T7977] syz.2.749 (7977): drop_caches: 2 [ 180.212591][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 180.221049][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 180.494034][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 180.506990][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 181.023616][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 181.049850][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 181.361529][ T8015] syz.3.763 (8015): drop_caches: 2 [ 181.472616][ T8017] syz.1.764 (8017): drop_caches: 2 [ 181.527632][ T7993] ceph: No mds server is up or the cluster is laggy [ 181.773076][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.933286][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 181.943275][ T5922] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.951825][ T5922] usb 3-1: config 179 has no interface number 0 [ 181.961633][ T5922] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 181.976389][ T5922] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 181.988708][ T5922] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 182.006452][ T5922] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 182.020844][ T5922] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.038761][ T5922] usb 3-1: config 179 interface 65 has no altsetting 0 [ 182.046481][ T5922] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 182.058970][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.083280][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 182.098550][ T5922] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 182.164131][ T5189] input input13: unable to receive magic message: -110 [ 182.185899][ T5189] input input13: unable to receive magic message: -32 [ 182.197361][ T5189] input input13: unable to receive magic message: -32 [ 182.210938][ T5189] input input13: unable to receive magic message: -32 [ 182.243212][ T43] usb 1-1: device descriptor read/64, error -71 [ 182.286569][ T8027] input input13: unable to receive magic message: -32 [ 182.295347][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.304665][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.318559][ T5922] usb 3-1: USB disconnect, device number 11 [ 182.324713][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 182.493241][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 182.569294][ T8041] netlink: 'syz.3.773': attribute type 33 has an invalid length. [ 182.578877][ T8041] netlink: 152 bytes leftover after parsing attributes in process `syz.3.773'. [ 182.633685][ T43] usb 1-1: device descriptor read/64, error -71 [ 182.762350][ T43] usb usb1-port1: attempt power cycle [ 182.960318][ T8050] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 183.096083][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 183.102183][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 183.127248][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 183.174162][ T43] usb 1-1: device descriptor read/8, error -71 [ 183.377515][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 183.395199][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 183.455527][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.498465][ T8061] syz.1.780 (8061): drop_caches: 2 [ 183.504707][ T43] usb 1-1: device descriptor read/8, error -71 [ 183.558440][ T8062] syz.2.779 (8062): drop_caches: 2 [ 183.633653][ T43] usb usb1-port1: unable to enumerate USB device [ 183.903814][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 183.912274][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 184.392062][ T8052] ceph: No mds server is up or the cluster is laggy [ 184.798059][ T8074] syz.3.785(8074): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 185.078941][ T43] libceph: connect (1)[c::]:6789 error -101 [ 185.085684][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 185.347154][ T43] libceph: connect (1)[c::]:6789 error -101 [ 185.360315][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 185.421705][ T8097] syz.0.789 (8097): drop_caches: 2 [ 185.625875][ T8098] syz.2.792 (8098): drop_caches: 2 [ 185.883923][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 185.890007][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 186.255021][ T8114] FAULT_INJECTION: forcing a failure. [ 186.255021][ T8114] name failslab, interval 1, probability 0, space 0, times 0 [ 186.270972][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.1.799 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 186.270998][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.271009][ T8114] Call Trace: [ 186.271016][ T8114] [ 186.271023][ T8114] dump_stack_lvl+0x189/0x250 [ 186.271048][ T8114] ? __pfx____ratelimit+0x10/0x10 [ 186.271070][ T8114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.271088][ T8114] ? __pfx__printk+0x10/0x10 [ 186.271112][ T8114] ? __pfx___might_resched+0x10/0x10 [ 186.271128][ T8114] ? fs_reclaim_acquire+0x7d/0x100 [ 186.271153][ T8114] should_fail_ex+0x414/0x560 [ 186.271183][ T8114] should_failslab+0xa8/0x100 [ 186.271205][ T8114] __kmalloc_noprof+0xcb/0x4f0 [ 186.271222][ T8114] ? kfree+0x4d/0x440 [ 186.271235][ T8114] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.271260][ T8114] tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.271280][ T8114] ? tomoyo_domain+0xd9/0x130 [ 186.271305][ T8114] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 186.271329][ T8114] tomoyo_path_number_perm+0x1e8/0x5a0 [ 186.271355][ T8114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.271391][ T8114] ? __lock_acquire+0xab9/0xd20 [ 186.271433][ T8114] ? __fget_files+0x2a/0x420 [ 186.271458][ T8114] ? __fget_files+0x2a/0x420 [ 186.271477][ T8114] ? __fget_files+0x3a0/0x420 [ 186.271496][ T8114] ? __fget_files+0x2a/0x420 [ 186.271521][ T8114] security_file_ioctl+0xcb/0x2d0 [ 186.271546][ T8114] __se_sys_ioctl+0x47/0x170 [ 186.271567][ T8114] do_syscall_64+0xfa/0x3b0 [ 186.271586][ T8114] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.271606][ T8114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.271621][ T8114] ? clear_bhb_loop+0x60/0xb0 [ 186.271641][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.271656][ T8114] RIP: 0033:0x7f5609f8e929 [ 186.271671][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.271686][ T8114] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.271704][ T8114] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 186.271716][ T8114] RDX: 0000200000000180 RSI: 00000000c0cc5616 RDI: 0000000000000007 [ 186.271727][ T8114] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 186.271737][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.271747][ T8114] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 186.271775][ T8114] [ 186.271789][ T8114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.453563][ T8089] ceph: No mds server is up or the cluster is laggy [ 187.101791][ T8121] syz.2.802 (8121): drop_caches: 2 [ 187.207564][ T8130] syz.0.803 (8130): drop_caches: 2 [ 187.495351][ T30] audit: type=1326 audit(1751600882.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.0.808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe2638e929 code=0x10000 [ 187.958295][ T43] libceph: connect (1)[c::]:6789 error -101 [ 187.973354][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 188.243434][ T43] libceph: connect (1)[c::]:6789 error -101 [ 188.249725][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 188.763379][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 188.772408][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 189.110232][ T8157] syz.1.815 (8157): drop_caches: 2 [ 189.283267][ T8147] ceph: No mds server is up or the cluster is laggy [ 189.431375][ T8164] syz.2.817 (8164): drop_caches: 2 [ 189.527374][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.554466][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.694258][ T8175] fuse: Bad value for 'fd' [ 190.436149][ T8187] syz.1.826 (8187): drop_caches: 2 [ 190.598735][ T8192] FAULT_INJECTION: forcing a failure. [ 190.598735][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 190.629307][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.0.827 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 190.629354][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.629369][ T8192] Call Trace: [ 190.629376][ T8192] [ 190.629384][ T8192] dump_stack_lvl+0x189/0x250 [ 190.629408][ T8192] ? __pfx____ratelimit+0x10/0x10 [ 190.629431][ T8192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.629449][ T8192] ? __pfx__printk+0x10/0x10 [ 190.629473][ T8192] ? __pfx___might_resched+0x10/0x10 [ 190.629489][ T8192] ? fs_reclaim_acquire+0x7d/0x100 [ 190.629516][ T8192] should_fail_ex+0x414/0x560 [ 190.629545][ T8192] should_failslab+0xa8/0x100 [ 190.629567][ T8192] __kmalloc_noprof+0xcb/0x4f0 [ 190.629582][ T8192] ? kfree+0x4d/0x440 [ 190.629596][ T8192] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.629629][ T8192] tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.629650][ T8192] ? tomoyo_domain+0xd9/0x130 [ 190.629674][ T8192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 190.629697][ T8192] tomoyo_path_number_perm+0x1e8/0x5a0 [ 190.629724][ T8192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.629764][ T8192] ? __lock_acquire+0xab9/0xd20 [ 190.629809][ T8192] ? __fget_files+0x2a/0x420 [ 190.629833][ T8192] ? __fget_files+0x2a/0x420 [ 190.629853][ T8192] ? __fget_files+0x3a0/0x420 [ 190.629872][ T8192] ? __fget_files+0x2a/0x420 [ 190.629897][ T8192] security_file_ioctl+0xcb/0x2d0 [ 190.629923][ T8192] __se_sys_ioctl+0x47/0x170 [ 190.629944][ T8192] do_syscall_64+0xfa/0x3b0 [ 190.629964][ T8192] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.629983][ T8192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.629999][ T8192] ? clear_bhb_loop+0x60/0xb0 [ 190.630019][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.630035][ T8192] RIP: 0033:0x7fbe2638e929 [ 190.630051][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.630065][ T8192] RSP: 002b:00007fbe27220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.630084][ T8192] RAX: ffffffffffffffda RBX: 00007fbe265b5fa0 RCX: 00007fbe2638e929 [ 190.630097][ T8192] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 190.630108][ T8192] RBP: 00007fbe27220090 R08: 0000000000000000 R09: 0000000000000000 [ 190.630118][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.630128][ T8192] R13: 0000000000000000 R14: 00007fbe265b5fa0 R15: 00007ffce75e8148 [ 190.630157][ T8192] [ 190.630164][ T8192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.924416][ T8197] fuse: Unknown parameter '¡' [ 191.071054][ T8202] fuse: Bad value for 'fd' [ 191.463635][ T8206] syz.1.833 (8206): drop_caches: 2 [ 192.018054][ T8229] fuse: Bad value for 'fd' [ 192.061377][ T8219] syz.1.838 (8219): drop_caches: 2 [ 192.253466][ T43] libceph: connect (1)[c::]:6789 error -101 [ 192.259573][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 192.360640][ T8240] pimreg: entered allmulticast mode [ 192.487234][ T8245] mmap: syz.3.848 (8245): VmData 37728256 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 192.526665][ T43] libceph: connect (1)[c::]:6789 error -101 [ 192.541629][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 192.682475][ T8243] syz.1.847 (8243): drop_caches: 2 [ 193.066837][ T43] libceph: connect (1)[c::]:6789 error -101 [ 193.088404][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 193.385927][ T8260] syz.1.854 (8260): drop_caches: 2 [ 193.557975][ T8233] ceph: No mds server is up or the cluster is laggy [ 193.751059][ T8273] FAULT_INJECTION: forcing a failure. [ 193.751059][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 193.764027][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.1.859 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 193.764052][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.764062][ T8273] Call Trace: [ 193.764069][ T8273] [ 193.764076][ T8273] dump_stack_lvl+0x189/0x250 [ 193.764099][ T8273] ? __pfx____ratelimit+0x10/0x10 [ 193.764121][ T8273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.764140][ T8273] ? __pfx__printk+0x10/0x10 [ 193.764162][ T8273] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 193.764197][ T8273] should_fail_ex+0x414/0x560 [ 193.764226][ T8273] should_failslab+0xa8/0x100 [ 193.764245][ T8273] ? __pfx_ip6_dst_gc+0x10/0x10 [ 193.764263][ T8273] kmem_cache_alloc_noprof+0x73/0x3c0 [ 193.764280][ T8273] ? dst_alloc+0x105/0x170 [ 193.764297][ T8273] ? __pfx_ip6_dst_gc+0x10/0x10 [ 193.764317][ T8273] dst_alloc+0x105/0x170 [ 193.764339][ T8273] ip6_pol_route+0xa21/0x1180 [ 193.764360][ T8273] ? ip6_pol_route+0x162/0x1180 [ 193.764390][ T8273] ? __pfx_ip6_pol_route+0x10/0x10 [ 193.764408][ T8273] ? __lock_acquire+0xab9/0xd20 [ 193.764437][ T8273] ? ip6t_do_table+0x1376/0x1560 [ 193.764463][ T8273] fib6_rule_lookup+0x52f/0x6f0 [ 193.764491][ T8273] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 193.764512][ T8273] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 193.764544][ T8273] ? ip6t_do_table+0x1db/0x1560 [ 193.764577][ T8273] ip6_route_input+0x6ce/0xa50 [ 193.764605][ T8273] ? __pfx_ip6_route_input+0x10/0x10 [ 193.764638][ T8273] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 193.764674][ T8273] ? ip6_rcv_finish_core+0x222/0x420 [ 193.764695][ T8273] ip6_rcv_finish+0x141/0x2d0 [ 193.764715][ T8273] NF_HOOK+0x30c/0x3a0 [ 193.764729][ T8273] ? skb_orphan+0x4f/0xd0 [ 193.764747][ T8273] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 193.764762][ T8273] ? NF_HOOK+0x9a/0x3a0 [ 193.764777][ T8273] ? __pfx_NF_HOOK+0x10/0x10 [ 193.764795][ T8273] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 193.764822][ T8273] __netif_receive_skb+0xd3/0x380 [ 193.764849][ T8273] ? netif_receive_skb+0x115/0x790 [ 193.764867][ T8273] netif_receive_skb+0x1cb/0x790 [ 193.764886][ T8273] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 193.764900][ T8273] ? _copy_from_iter+0x24c/0x16f0 [ 193.764922][ T8273] ? __pfx_netif_receive_skb+0x10/0x10 [ 193.764947][ T8273] ? tun_rx_batched+0x160/0x730 [ 193.764966][ T8273] tun_rx_batched+0x1b9/0x730 [ 193.764982][ T8273] ? __lock_acquire+0xab9/0xd20 [ 193.765007][ T8273] ? __pfx_tun_rx_batched+0x10/0x10 [ 193.765026][ T8273] ? tun_get_user+0x2549/0x3ce0 [ 193.765056][ T8273] tun_get_user+0x298e/0x3ce0 [ 193.765078][ T8273] ? tun_get_user+0x2549/0x3ce0 [ 193.765098][ T8273] ? aa_file_perm+0x13e/0x11b0 [ 193.765119][ T8273] ? aa_file_perm+0x13e/0x11b0 [ 193.765138][ T8273] ? aa_file_perm+0x3ed/0x11b0 [ 193.765160][ T8273] ? __pfx_tun_get_user+0x10/0x10 [ 193.765185][ T8273] ? __lock_acquire+0xab9/0xd20 [ 193.765217][ T8273] ? ref_tracker_alloc+0x318/0x460 [ 193.765232][ T8273] ? __lock_acquire+0xab9/0xd20 [ 193.765254][ T8273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.765278][ T8273] ? tun_get+0x1c/0x2f0 [ 193.765300][ T8273] ? tun_get+0x1c/0x2f0 [ 193.765316][ T8273] ? tun_get+0x1c/0x2f0 [ 193.765338][ T8273] tun_chr_write_iter+0x113/0x200 [ 193.765359][ T8273] vfs_write+0x54b/0xa90 [ 193.765384][ T8273] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 193.765402][ T8273] ? __pfx_vfs_write+0x10/0x10 [ 193.765433][ T8273] ? __fget_files+0x2a/0x420 [ 193.765464][ T8273] ksys_write+0x145/0x250 [ 193.765487][ T8273] ? __pfx_ksys_write+0x10/0x10 [ 193.765504][ T8273] ? rcu_is_watching+0x15/0xb0 [ 193.765527][ T8273] ? do_syscall_64+0xbe/0x3b0 [ 193.765553][ T8273] do_syscall_64+0xfa/0x3b0 [ 193.765572][ T8273] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.765592][ T8273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.765608][ T8273] ? clear_bhb_loop+0x60/0xb0 [ 193.765629][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.765645][ T8273] RIP: 0033:0x7f5609f8e929 [ 193.765661][ T8273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.765675][ T8273] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.765694][ T8273] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 193.765707][ T8273] RDX: 0000000000000046 RSI: 0000200000000480 RDI: 0000000000000004 [ 193.765717][ T8273] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 193.765728][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.765737][ T8273] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 193.765767][ T8273] [ 194.375112][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388049][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.895395][ T8288] No control pipe specified [ 195.010952][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 195.017506][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 195.054165][ T8279] syz.2.860 (8279): drop_caches: 2 [ 195.295022][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 195.301227][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 195.306600][ T8293] syz.1.869 (8293): drop_caches: 2 [ 195.681906][ T8311] FAULT_INJECTION: forcing a failure. [ 195.681906][ T8311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.700656][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.1.873 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 195.700683][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.700693][ T8311] Call Trace: [ 195.700700][ T8311] [ 195.700708][ T8311] dump_stack_lvl+0x189/0x250 [ 195.700731][ T8311] ? __pfx____ratelimit+0x10/0x10 [ 195.700752][ T8311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.700770][ T8311] ? __pfx__printk+0x10/0x10 [ 195.700788][ T8311] ? __might_fault+0xb0/0x130 [ 195.700817][ T8311] should_fail_ex+0x414/0x560 [ 195.700847][ T8311] _copy_from_user+0x2d/0xb0 [ 195.700864][ T8311] __sys_connect+0x123/0x440 [ 195.700887][ T8311] ? __fget_files+0x3a0/0x420 [ 195.700908][ T8311] ? __pfx___sys_connect+0x10/0x10 [ 195.700943][ T8311] ? __pfx_ksys_write+0x10/0x10 [ 195.700960][ T8311] ? rcu_is_watching+0x15/0xb0 [ 195.700983][ T8311] __x64_sys_connect+0x7a/0x90 [ 195.701006][ T8311] do_syscall_64+0xfa/0x3b0 [ 195.701025][ T8311] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.701045][ T8311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.701061][ T8311] ? clear_bhb_loop+0x60/0xb0 [ 195.701081][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.701095][ T8311] RIP: 0033:0x7f5609f8e929 [ 195.701110][ T8311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.701124][ T8311] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 195.701141][ T8311] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 195.701154][ T8311] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000004 [ 195.701164][ T8311] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.701174][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.701183][ T8311] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 195.701210][ T8311] [ 195.813687][ T10] libceph: connect (1)[c::]:6789 error -101 [ 195.906119][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 196.345959][ T8295] ceph: No mds server is up or the cluster is laggy [ 196.543589][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 196.543603][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.543637][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.565738][ T8320] No control pipe specified [ 197.094327][ T8324] syz.1.879 (8324): drop_caches: 2 [ 197.152027][ T8326] syz.0.881 (8326): drop_caches: 2 [ 197.304600][ T8332] FAULT_INJECTION: forcing a failure. [ 197.304600][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 197.318297][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.1.883 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 197.318322][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.318333][ T8332] Call Trace: [ 197.318340][ T8332] [ 197.318347][ T8332] dump_stack_lvl+0x189/0x250 [ 197.318371][ T8332] ? __pfx____ratelimit+0x10/0x10 [ 197.318393][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.318411][ T8332] ? __pfx__printk+0x10/0x10 [ 197.318436][ T8332] ? __pfx___might_resched+0x10/0x10 [ 197.318452][ T8332] ? fs_reclaim_acquire+0x7d/0x100 [ 197.318478][ T8332] should_fail_ex+0x414/0x560 [ 197.318508][ T8332] should_failslab+0xa8/0x100 [ 197.318529][ T8332] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.318548][ T8332] ? alloc_netdev_mqs+0xb90/0x1170 [ 197.318564][ T8332] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 197.318590][ T8332] alloc_netdev_mqs+0xb90/0x1170 [ 197.318616][ T8332] register_vlan_device+0x24f/0x4c0 [ 197.318644][ T8332] ? __pfx_register_vlan_device+0x10/0x10 [ 197.318666][ T8332] ? security_capable+0x7e/0x2e0 [ 197.318691][ T8332] vlan_ioctl_handler+0x281/0x650 [ 197.318714][ T8332] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 197.318733][ T8332] ? __lock_acquire+0xab9/0xd20 [ 197.318770][ T8332] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 197.318792][ T8332] sock_ioctl+0x60d/0x790 [ 197.318813][ T8332] ? __pfx_sock_ioctl+0x10/0x10 [ 197.318832][ T8332] ? __fget_files+0x2a/0x420 [ 197.318852][ T8332] ? __fget_files+0x3a0/0x420 [ 197.318871][ T8332] ? __fget_files+0x2a/0x420 [ 197.318896][ T8332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.318912][ T8332] ? __pfx_sock_ioctl+0x10/0x10 [ 197.318928][ T8332] __se_sys_ioctl+0xf9/0x170 [ 197.318949][ T8332] do_syscall_64+0xfa/0x3b0 [ 197.318968][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.318988][ T8332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.319003][ T8332] ? clear_bhb_loop+0x60/0xb0 [ 197.319022][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.319037][ T8332] RIP: 0033:0x7f5609f8e929 [ 197.319052][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.319066][ T8332] RSP: 002b:00007f560ade0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.319085][ T8332] RAX: ffffffffffffffda RBX: 00007f560a1b5fa0 RCX: 00007f5609f8e929 [ 197.319097][ T8332] RDX: 0000200000000300 RSI: 0000000000008983 RDI: 0000000000000004 [ 197.319108][ T8332] RBP: 00007f560ade0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.319119][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.319128][ T8332] R13: 0000000000000000 R14: 00007f560a1b5fa0 R15: 00007fff60ee23a8 [ 197.319157][ T8332] [ 197.585640][ C1] ================================================================== [ 197.593704][ C1] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 197.601356][ C1] Write of size 8 at addr ffff888023f514c0 by task swapper/1/0 [ 197.608904][ C1] [ 197.611241][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 197.611266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.611277][ C1] Call Trace: [ 197.611284][ C1] [ 197.611292][ C1] dump_stack_lvl+0x189/0x250 [ 197.611316][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 197.611335][ C1] ? rcu_is_watching+0x15/0xb0 [ 197.611352][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.611370][ C1] ? rcu_is_watching+0x15/0xb0 [ 197.611386][ C1] ? lock_release+0x4b/0x3e0 [ 197.611411][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 197.611430][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 197.611449][ C1] print_report+0xd2/0x2b0 [ 197.611472][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 197.611490][ C1] kasan_report+0x118/0x150 [ 197.611511][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 197.611533][ C1] kasan_check_range+0x2b0/0x2c0 [ 197.611554][ C1] flush_tlb_func+0x23d/0x6c0 [ 197.611575][ C1] ? sched_clock+0x3f/0x60 [ 197.611597][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 197.611618][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 197.611638][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 197.611656][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 197.611677][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 197.611700][ C1] sysvec_call_function_single+0x4f/0xc0 [ 197.611720][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 197.611738][ C1] RIP: 0010:handle_softirqs+0x1b0/0x870 [ 197.611756][ C1] Code: 89 64 24 30 0f b7 db 48 c7 c7 a0 99 89 8b e8 87 55 f1 09 65 66 c7 05 c5 4e 3e 11 00 00 e8 f8 55 42 00 fb 49 c7 c7 c0 c0 00 8e ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c [ 197.611770][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000286 [ 197.611787][ C1] RAX: 42ecc10ca48f6600 RBX: 0000000000000382 RCX: 42ecc10ca48f6600 [ 197.611799][ C1] RDX: 0000000000000000 RSI: ffffffff8da6993f RDI: ffffffff8be4b100 [ 197.611811][ C1] RBP: ffffc90000a08f50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 197.611823][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 000000000000000a [ 197.611834][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e00c0c0 [ 197.611853][ C1] ? lapic_next_event+0x11/0x20 [ 197.611869][ C1] ? clockevents_program_event+0x24d/0x360 [ 197.611890][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 197.611905][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 197.611922][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 197.611943][ C1] __irq_exit_rcu+0xca/0x1f0 [ 197.611958][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 197.611977][ C1] irq_exit_rcu+0x9/0x30 [ 197.611990][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 197.612010][ C1] [ 197.612015][ C1] [ 197.612022][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.612039][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 197.612060][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 86 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 197.612074][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 197.612088][ C1] RAX: 42ecc10ca48f6600 RBX: ffffffff81971188 RCX: 42ecc10ca48f6600 [ 197.612100][ C1] RDX: 0000000000000001 RSI: ffffffff8da6993f RDI: ffffffff8be4b100 [ 197.612112][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f1b R09: 1ffff110170e65e3 [ 197.612124][ C1] R10: dffffc0000000000 R11: ffffed10170e65e4 R12: ffffffff8fc29e30 [ 197.612137][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b40 [ 197.612160][ C1] ? do_idle+0x1e8/0x510 [ 197.612180][ C1] default_idle+0x13/0x20 [ 197.612202][ C1] default_idle_call+0x74/0xb0 [ 197.612224][ C1] do_idle+0x1e8/0x510 [ 197.612241][ C1] ? __pfx_do_idle+0x10/0x10 [ 197.612264][ C1] cpu_startup_entry+0x44/0x60 [ 197.612280][ C1] start_secondary+0x101/0x110 [ 197.612301][ C1] common_startup_64+0x13e/0x147 [ 197.612327][ C1] [ 197.612333][ C1] [ 197.991337][ C1] Allocated by task 5834: [ 197.995666][ C1] kasan_save_track+0x3e/0x80 [ 198.000347][ C1] __kasan_slab_alloc+0x6c/0x80 [ 198.005203][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 198.010673][ C1] copy_mm+0xdb/0x4b0 [ 198.014661][ C1] copy_process+0x1706/0x3c00 [ 198.019338][ C1] kernel_clone+0x21e/0x870 [ 198.023843][ C1] __x64_sys_clone+0x18b/0x1e0 [ 198.028611][ C1] do_syscall_64+0xfa/0x3b0 [ 198.033121][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.039023][ C1] [ 198.041344][ C1] Freed by task 8325: [ 198.045317][ C1] kasan_save_track+0x3e/0x80 [ 198.049997][ C1] kasan_save_free_info+0x46/0x50 [ 198.055033][ C1] __kasan_slab_free+0x62/0x70 [ 198.059801][ C1] kmem_cache_free+0x18f/0x400 [ 198.064572][ C1] exit_mm+0x1da/0x2c0 [ 198.068650][ C1] do_exit+0x648/0x2300 [ 198.072810][ C1] do_group_exit+0x21c/0x2d0 [ 198.077409][ C1] __x64_sys_exit_group+0x3f/0x40 [ 198.082439][ C1] x64_sys_call+0x21f7/0x2200 [ 198.087130][ C1] do_syscall_64+0xfa/0x3b0 [ 198.091651][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.097550][ C1] [ 198.099873][ C1] The buggy address belongs to the object at ffff888023f50ac0 [ 198.099873][ C1] which belongs to the cache mm_struct of size 2584 [ 198.113838][ C1] The buggy address is located 2560 bytes inside of [ 198.113838][ C1] freed 2584-byte region [ffff888023f50ac0, ffff888023f514d8) [ 198.127817][ C1] [ 198.130141][ C1] The buggy address belongs to the physical page: [ 198.136560][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023f55600 pfn:0x23f50 [ 198.146626][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 198.155129][ C1] memcg:ffff88807ea5ff81 [ 198.159369][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 198.167361][ C1] page_type: f5(slab) [ 198.171351][ C1] raw: 00fff00000000040 ffff88801a84bb40 0000000000000000 dead000000000001 [ 198.179945][ C1] raw: ffff888023f55600 00000000800b000a 00000000f5000000 ffff88807ea5ff81 [ 198.188537][ C1] head: 00fff00000000040 ffff88801a84bb40 0000000000000000 dead000000000001 [ 198.197217][ C1] head: ffff888023f55600 00000000800b000a 00000000f5000000 ffff88807ea5ff81 [ 198.205897][ C1] head: 00fff00000000003 ffffea00008fd401 00000000ffffffff 00000000ffffffff [ 198.214575][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 198.223244][ C1] page dumped because: kasan: bad access detected [ 198.229669][ C1] page_owner tracks the page as allocated [ 198.235385][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5605, tgid 5605 (dhcpcd-run-hook), ts 48145063731, free_ts 48136530844 [ 198.257014][ C1] post_alloc_hook+0x240/0x2a0 [ 198.261798][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 198.267358][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 198.273183][ C1] alloc_pages_mpol+0x232/0x4a0 [ 198.278048][ C1] allocate_slab+0x8a/0x370 [ 198.282573][ C1] ___slab_alloc+0xbeb/0x1410 [ 198.287262][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 198.292734][ C1] mm_alloc+0x23/0xd0 [ 198.296730][ C1] alloc_bprm+0x378/0x5b0 [ 198.301072][ C1] do_execveat_common+0x1b3/0x6a0 [ 198.306121][ C1] __x64_sys_execve+0x94/0xb0 [ 198.310811][ C1] do_syscall_64+0xfa/0x3b0 [ 198.315335][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.321292][ C1] page last free pid 5604 tgid 5604 stack trace: [ 198.327616][ C1] __free_frozen_pages+0xb80/0xd80 [ 198.332746][ C1] __put_partials+0x156/0x1a0 [ 198.337432][ C1] put_cpu_partial+0x17c/0x250 [ 198.342207][ C1] __slab_free+0x2d5/0x3c0 [ 198.346633][ C1] qlist_free_all+0x97/0x140 [ 198.351230][ C1] kasan_quarantine_reduce+0x148/0x160 [ 198.356695][ C1] __kasan_slab_alloc+0x22/0x80 [ 198.361556][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 198.367025][ C1] getname_flags+0xb8/0x540 [ 198.371547][ C1] do_sys_openat2+0xbc/0x1c0 [ 198.376143][ C1] __x64_sys_openat+0x138/0x170 [ 198.381000][ C1] do_syscall_64+0xfa/0x3b0 [ 198.385513][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.391416][ C1] [ 198.393740][ C1] Memory state around the buggy address: [ 198.399371][ C1] ffff888023f51380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.407435][ C1] ffff888023f51400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.415510][ C1] >ffff888023f51480: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 198.423570][ C1] ^ [ 198.429724][ C1] ffff888023f51500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 198.437790][ C1] ffff888023f51580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 198.445836][ C1] ================================================================== [ 198.453891][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.461069][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 198.472159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.482196][ C1] Call Trace: [ 198.485460][ C1] [ 198.488292][ C1] dump_stack_lvl+0x99/0x250 [ 198.492871][ C1] ? __asan_memcpy+0x40/0x70 [ 198.497442][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.502625][ C1] ? __pfx__printk+0x10/0x10 [ 198.507202][ C1] panic+0x2db/0x790 [ 198.511084][ C1] ? __pfx_panic+0x10/0x10 [ 198.515485][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 198.521365][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.527676][ C1] ? print_memory_metadata+0x314/0x400 [ 198.533126][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 198.537964][ C1] check_panic_on_warn+0x89/0xb0 [ 198.542892][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 198.547733][ C1] end_report+0x78/0x160 [ 198.551963][ C1] kasan_report+0x129/0x150 [ 198.556453][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 198.561304][ C1] kasan_check_range+0x2b0/0x2c0 [ 198.566227][ C1] flush_tlb_func+0x23d/0x6c0 [ 198.570891][ C1] ? sched_clock+0x3f/0x60 [ 198.575296][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 198.580479][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 198.585671][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 198.591829][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 198.597021][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 198.602909][ C1] sysvec_call_function_single+0x4f/0xc0 [ 198.608535][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 198.614496][ C1] RIP: 0010:handle_softirqs+0x1b0/0x870 [ 198.620025][ C1] Code: 89 64 24 30 0f b7 db 48 c7 c7 a0 99 89 8b e8 87 55 f1 09 65 66 c7 05 c5 4e 3e 11 00 00 e8 f8 55 42 00 fb 49 c7 c7 c0 c0 00 8e ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c [ 198.639618][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000286 [ 198.645675][ C1] RAX: 42ecc10ca48f6600 RBX: 0000000000000382 RCX: 42ecc10ca48f6600 [ 198.653631][ C1] RDX: 0000000000000000 RSI: ffffffff8da6993f RDI: ffffffff8be4b100 [ 198.661585][ C1] RBP: ffffc90000a08f50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 198.669541][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 000000000000000a [ 198.677495][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e00c0c0 [ 198.685453][ C1] ? lapic_next_event+0x11/0x20 [ 198.690289][ C1] ? clockevents_program_event+0x24d/0x360 [ 198.696079][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 198.700824][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 198.706091][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 198.711274][ C1] __irq_exit_rcu+0xca/0x1f0 [ 198.715844][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 198.721025][ C1] irq_exit_rcu+0x9/0x30 [ 198.725250][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 198.730870][ C1] [ 198.733788][ C1] [ 198.736706][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.742670][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 198.748372][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 86 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 198.767965][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 198.774019][ C1] RAX: 42ecc10ca48f6600 RBX: ffffffff81971188 RCX: 42ecc10ca48f6600 [ 198.782041][ C1] RDX: 0000000000000001 RSI: ffffffff8da6993f RDI: ffffffff8be4b100 [ 198.790013][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f1b R09: 1ffff110170e65e3 [ 198.797976][ C1] R10: dffffc0000000000 R11: ffffed10170e65e4 R12: ffffffff8fc29e30 [ 198.805932][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b40 [ 198.813889][ C1] ? do_idle+0x1e8/0x510 [ 198.818122][ C1] default_idle+0x13/0x20 [ 198.822443][ C1] default_idle_call+0x74/0xb0 [ 198.827204][ C1] do_idle+0x1e8/0x510 [ 198.831262][ C1] ? __pfx_do_idle+0x10/0x10 [ 198.835840][ C1] cpu_startup_entry+0x44/0x60 [ 198.840591][ C1] start_secondary+0x101/0x110 [ 198.845338][ C1] common_startup_64+0x13e/0x147 [ 198.850263][ C1] [ 198.853513][ C1] Kernel Offset: disabled [ 198.857817][ C1] Rebooting in 86400 seconds..