Extracting prog: 14m41.688029938s Minimizing prog: 24m4.474678762s Simplifying prog options: 0s Extracting C: 56.187223427s Simplifying C: 8m54.126357916s extracting reproducer from 11 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b9066140000001020001090255000201008032090400000100000000070581031000010904010000000000090401010300000000070587024000000705070240000007058103100001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_usb_disconnect(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-syz_usb_connect-nanosleep-openat-write-close-nanosleep-openat-write-close detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_af9005_5\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys_af9005_5\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_af9005_5/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) close(r0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_af9005_5/bus/usb/drivers/usb/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='5-1', 0x3) close(r1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_af9005_5/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='5-1:1.0', 0x7) close(r2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-nanosleep detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040dd04319000000102030109025c00010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301000100090583030800080000090581020002000000090502020002000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-syz_open_dev$char_usb detailed listing: executing program 0: syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e204101401000102030109022e0002010080fa090400000002020100052406000109040100020a0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash single: failed to extract reproducer bisect: bisecting 11 programs with base timeout 30s testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 23, 8, 3, 16, 5, 11, 3, 3, 14, 3] detailed listing: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000402505a1a4000001020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add 1-1\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1-1\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1-1\x00', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000550)='./sys/bus/usb/devices/1-1/usbip_debug\x00', 0x1, 0x0) write(r3, &(0x7f0000000560)='ffffffff\n\x00', 0x9) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/usbip_sockfd\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='4\n\x00', 0x2) close(r5) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) write(r4, &(0x7f0000000700)="00000001000000010001000200000000000000000000000000000000000000000000000000000000010b000000000000", 0x30) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bDeviceClass\x00', 0x0, 0x0) read(r0, &(0x7f0000000300), 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/bDeviceClass\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x100) executing program 0: syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e204101401000102030109022e0002010080fa090400000002020100052406000109040100020a0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='stm32g0-typec 0x35\n', 0x13) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='stm32g0-typec 0x35\n', 0x13) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='freeze\n0000000000000000', 0x7) close(r3) executing program 3: syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000150)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='mtdblock0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/dir0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/dir0\x00', 0x200) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/drivers/hso/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0af0 6711\n', 0xa) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102030109022a0001010080fa0904000003ff000000033000070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket(0x11, 0x3, 0x300) ioctl(r1, 0x8914, &(0x7f0000000100)="68736f3000000000000000000000000001000000") ioctl(r1, 0x8933, &(0x7f0000000100)="68736f3000000000000000001100030000000000010000060011223344550000") sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c00000000401176c301010101010101020001000100080000", 0x2a, 0x0, &(0x7f000000010c), 0x14) nanosleep(&(0x7f0000000300)={0x1}, 0x0) executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x3, 0x57e, 0x306, 0x0, 0x0, "0501"}}, 0x100) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, 0x0) executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040dd04319000000102030109025c00010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301000100090583030800080000090581020002000000090502020002000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_af9005_5\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys_af9005_5\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_af9005_5/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) close(r0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_af9005_5/bus/usb/drivers/usb/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='5-1', 0x3) close(r1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_af9005_5/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='5-1:1.0', 0x7) close(r2) executing program 3: r0 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b9066140000001020001090255000201008032090400000100000000070581031000010904010000000000090401010300000000070587024000000705070240000007058103100001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_usb_disconnect(r0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-syz_usb_disconnect detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040b9066140000001020001090255000201008032090400000100000000070581031000010904010000000000090401010300000000070587024000000705070240000007058103100001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_usb_disconnect(r0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-syz_usb_connect-nanosleep-openat-write-close-nanosleep-openat-write-close detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_af9005_5\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys_af9005_5\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_af9005_5/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) close(r0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_af9005_5/bus/usb/drivers/usb/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='5-1', 0x3) close(r1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_af9005_5/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='5-1:1.0', 0x7) close(r2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ecm-syz_usb_control_io$cdc_ecm-nanosleep detailed listing: executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040dd04319000000102030109025c00010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301000100090583030800080000090581020002000000090502020002000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-syz_open_dev$char_usb detailed listing: executing program 0: syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e204101401000102030109022e0002010080fa090400000002020100052406000109040100020a0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program crashed: WARNING in ct_kernel_exit single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write detailed listing: executing program 0: mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program crashed: WARNING in ct_kernel_exit testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write program crashed: WARNING in ct_kernel_exit testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program crashed: WARNING in ct_kernel_exit validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program crashed: WARNING in ct_kernel_exit validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='mem\n\n\n\n\n', 0x4) program crashed: WARNING in ct_kernel_exit validation run: crashed=true reproducing took 53m3.858862869s repro crashed as (corrupted=false): vhci_hcd vhci_hcd.1: suspend vhci_hcd vhci_hcd vhci_hcd.0: suspend vhci_hcd Disabling non-boot CPUs ... psci: CPU1 killed (polled 0 ms) ------------[ cut here ]------------ WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118, CPU#0: syz.1.84/5022 Modules linked in: CPU: 0 UID: 0 PID: 5022 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118 lr : instrument_atomic_read include/linux/instrumented.h:82 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : ct_rcu_watching include/linux/context_tracking_state.h:91 [inline] lr : ct_kernel_exit+0x13c/0x1f4 kernel/context_tracking.c:119 sp : ffff8000955f75f0 x29: ffff8000955f75f0 x28: dfff800000000000 x27: ffff8000955f7660 x26: 00000000000000c0 x25: ffff700012abeecc x24: ffff800088af0998 x23: ffff800088b3b6a0 x22: ffff0001a5dc8998 x21: ffff0001a5dc8998 x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff x17: ffff80008a7d6000 x16: 0000000000000005 x15: ffff80008a35fda0 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600034bb9135 x9 : dfff800000000000 x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff800086911db8 x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118 (P) ct_idle_enter+0x20/0x34 kernel/context_tracking.c:299 ct_cpuidle_enter include/linux/cpuidle.h:134 [inline] cpu_suspend+0x264/0x474 arch/arm64/kernel/suspend.c:136 psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 suspend_enter kernel/power/suspend.c:468 [inline] suspend_devices_and_enter+0x88c/0xd0c kernel/power/suspend.c:533 enter_state kernel/power/suspend.c:618 [inline] pm_suspend+0x498/0x698 kernel/power/suspend.c:644 state_store+0x14c/0x1fc kernel/power/main.c:819 kobj_attr_store+0x6c/0x90 lib/kobject.c:840 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 57456 hardirqs last enabled at (57455): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:187 [inline] hardirqs last enabled at (57455): [] _raw_spin_unlock_irq+0x30/0x80 kernel/locking/spinlock.c:206 hardirqs last disabled at (57456): [] arch_suspend_disable_irqs+0x34/0x4c kernel/power/suspend.c:403 softirqs last enabled at (56142): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (56142): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (56137): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150, CPU#0: syz.1.84/5022 Modules linked in: CPU: 0 UID: 0 PID: 5022 Comm: syz.1.84 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150 lr : instrument_atomic_read include/linux/instrumented.h:82 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : ct_rcu_watching include/linux/context_tracking_state.h:91 [inline] lr : ct_kernel_enter+0xc8/0x170 kernel/context_tracking.c:164 sp : ffff8000955f75e0 x29: ffff8000955f75e0 x28: dfff800000000000 x27: ffff8000955f7660 x26: 00000000000000c0 x25: ffff700012abeecc x24: 0000000100000000 x23: ffff800088b3b6a0 x22: ffff800088af0998 x21: ffff0001a5dc8998 x20: ffff0001a5dc8998 x19: 0000000000000000 x18: 00000000ffffffff x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 x14: ffff0000d7e7ba80 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600034bb9135 x9 : dfff800000000000 x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800086911f80 x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150 (P) ct_idle_exit+0x24/0x48 kernel/context_tracking.c:317 ct_cpuidle_exit include/linux/cpuidle.h:144 [inline] cpu_suspend+0x2dc/0x474 arch/arm64/kernel/suspend.c:154 psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 suspend_enter kernel/power/suspend.c:468 [inline] suspend_devices_and_enter+0x88c/0xd0c kernel/power/suspend.c:533 enter_state kernel/power/suspend.c:618 [inline] pm_suspend+0x498/0x698 kernel/power/suspend.c:644 state_store+0x14c/0x1fc kernel/power/main.c:819 kobj_attr_store+0x6c/0x90 lib/kobject.c:840 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 57458 hardirqs last enabled at (57457): [] psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 hardirqs last disabled at (57458): [] psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 softirqs last enabled at (56142): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (56142): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (56137): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- Enabling non-boot CPUs ... CPU1 is up OOM killer enabled. Restarting tasks: Starting Restarting tasks: Done random: crng reseeded on system resumption PM: suspend exit final repro crashed as (corrupted=false): vhci_hcd vhci_hcd.1: suspend vhci_hcd vhci_hcd vhci_hcd.0: suspend vhci_hcd Disabling non-boot CPUs ... psci: CPU1 killed (polled 0 ms) ------------[ cut here ]------------ WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118, CPU#0: syz.1.84/5022 Modules linked in: CPU: 0 UID: 0 PID: 5022 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118 lr : instrument_atomic_read include/linux/instrumented.h:82 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : ct_rcu_watching include/linux/context_tracking_state.h:91 [inline] lr : ct_kernel_exit+0x13c/0x1f4 kernel/context_tracking.c:119 sp : ffff8000955f75f0 x29: ffff8000955f75f0 x28: dfff800000000000 x27: ffff8000955f7660 x26: 00000000000000c0 x25: ffff700012abeecc x24: ffff800088af0998 x23: ffff800088b3b6a0 x22: ffff0001a5dc8998 x21: ffff0001a5dc8998 x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff x17: ffff80008a7d6000 x16: 0000000000000005 x15: ffff80008a35fda0 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600034bb9135 x9 : dfff800000000000 x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff800086911db8 x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: ct_kernel_exit+0x1b4/0x1f4 kernel/context_tracking.c:118 (P) ct_idle_enter+0x20/0x34 kernel/context_tracking.c:299 ct_cpuidle_enter include/linux/cpuidle.h:134 [inline] cpu_suspend+0x264/0x474 arch/arm64/kernel/suspend.c:136 psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 suspend_enter kernel/power/suspend.c:468 [inline] suspend_devices_and_enter+0x88c/0xd0c kernel/power/suspend.c:533 enter_state kernel/power/suspend.c:618 [inline] pm_suspend+0x498/0x698 kernel/power/suspend.c:644 state_store+0x14c/0x1fc kernel/power/main.c:819 kobj_attr_store+0x6c/0x90 lib/kobject.c:840 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 57456 hardirqs last enabled at (57455): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:187 [inline] hardirqs last enabled at (57455): [] _raw_spin_unlock_irq+0x30/0x80 kernel/locking/spinlock.c:206 hardirqs last disabled at (57456): [] arch_suspend_disable_irqs+0x34/0x4c kernel/power/suspend.c:403 softirqs last enabled at (56142): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (56142): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (56137): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150, CPU#0: syz.1.84/5022 Modules linked in: CPU: 0 UID: 0 PID: 5022 Comm: syz.1.84 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150 lr : instrument_atomic_read include/linux/instrumented.h:82 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : ct_rcu_watching include/linux/context_tracking_state.h:91 [inline] lr : ct_kernel_enter+0xc8/0x170 kernel/context_tracking.c:164 sp : ffff8000955f75e0 x29: ffff8000955f75e0 x28: dfff800000000000 x27: ffff8000955f7660 x26: 00000000000000c0 x25: ffff700012abeecc x24: 0000000100000000 x23: ffff800088b3b6a0 x22: ffff800088af0998 x21: ffff0001a5dc8998 x20: ffff0001a5dc8998 x19: 0000000000000000 x18: 00000000ffffffff x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 x14: ffff0000d7e7ba80 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600034bb9135 x9 : dfff800000000000 x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800086911f80 x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: ct_kernel_enter+0x138/0x170 kernel/context_tracking.c:150 (P) ct_idle_exit+0x24/0x48 kernel/context_tracking.c:317 ct_cpuidle_exit include/linux/cpuidle.h:144 [inline] cpu_suspend+0x2dc/0x474 arch/arm64/kernel/suspend.c:154 psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 suspend_enter kernel/power/suspend.c:468 [inline] suspend_devices_and_enter+0x88c/0xd0c kernel/power/suspend.c:533 enter_state kernel/power/suspend.c:618 [inline] pm_suspend+0x498/0x698 kernel/power/suspend.c:644 state_store+0x14c/0x1fc kernel/power/main.c:819 kobj_attr_store+0x6c/0x90 lib/kobject.c:840 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 57458 hardirqs last enabled at (57457): [] psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 hardirqs last disabled at (57458): [] psci_system_suspend_enter+0x4c/0x80 drivers/firmware/psci/psci.c:544 softirqs last enabled at (56142): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (56142): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (56137): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- Enabling non-boot CPUs ... CPU1 is up OOM killer enabled. Restarting tasks: Starting Restarting tasks: Done random: crng reseeded on system resumption PM: suspend exit