last executing test programs: 4m2.25221319s ago: executing program 4 (id=293): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000340)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000480)) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000700)={0x2, 0x0, 0x1c}) ioctl(r5, 0x400452c8, &(0x7f0000000580)='\x00'/16) 3m58.432768402s ago: executing program 4 (id=298): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x1c4, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd, 0x3}, {}, {0x0, 0x4, 0x3}, 0x70bd25, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "03ff00004137b192fb8e5e7f447874748563bab2c89a19dd1016fe153742ae1eadb71f875a55462594512efa7aa6403aff00afa206c194ec05960e8c34b772a4c0"}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) rseq(0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e0000002000000000000000002000600000000000200"], 0x60}, 0x1, 0x7}, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000100), 0x0}) openat2(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204032, 0xffffffffffffffff, 0xec776000) 3m56.810355059s ago: executing program 4 (id=300): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 3m56.441252896s ago: executing program 4 (id=304): socket$inet6(0xa, 0x3, 0xff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xf7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xe, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x4000000) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)={0x20, 0x6, 0x1f, {0x1f, 0x8, "83efb930f01891f0478fa20961a54207b723a9e400359cd69a62462b64"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 3m50.511064205s ago: executing program 4 (id=314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tracefs\x00', &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='p:s/p ./file0:0x0\n', 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/s/p/enable\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x80, 0x7f0000800000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000300)="$eJzs3M9vFFUcAPDvbHdpAdGKiIIoBTQ2JrZQUDh4wcTEgyZGPMixaStBFjC0ByFESmK4k3g0MR6NN0286tF48g/AgwcTQ0IMF8DTmtmdabfb2W23P6n7+STbfW9+vfedmTf7dl53AuhZQ+mfJOKJiLgTEU81sgsXGGq8Pbx/feLR/esTMVurnfknqS/3IM1n8vV2ZpnhUkTpy6Rlgw3TV69dGK9Wp65k+dGZi5+NTl+99vr5i+Pnps5NXRo7derE8WMn3xx7o/ugCspL43qw/4vLB/a9e/b2+xPlfPpA9t4cR1vl7qox1GHeK91t6rG3qymdLN5PNza0MizbQHZaV9L2f716+Gx3qxe0NGCrqNVqtf72s2drrW4umgJsWUlsdg2AzZF/0Kfff/PXBnU9Hgv3Tje+AKVxP8xejTnlKGXLVFq+366loYj4ePbfb9JXdLoP8Wd8sE5VAAB6zC+n855ga/+vFHublnsyG0MZjIinI2J3RDwTEXsi4tmI+rLPRcTzrQUkEbUO5e9pyc+X/2M2ilC6u+ogO0j7f29lY1sL+3957y8G+7Lcroi8wzx1NNsnw1Hp/+R8depYm+1vW6L85v5f+krLz/uCWT3ulltu0E2Oz4yvLNrF7t2M2F9ujT8ppwcuH8ZJImJfROzvYruDTenzr313YC5Tyd6/brwtHX9drXCgocvxuCK1byNebRz/2Vhw/OdLTDqPT44ORHXq6Gh6FhwtLOO332+17bsvGf9Pf7Wu8s7Jn8+sNuw56fHf0XT+Rz5+Ox//YBKRzI3XTkfU+ror49Yf7VdY6fm/Lfmons7b1+fjMzNXjkVsS95bPH1sft08ny+fxj98pLj9787WSffECxGRnsQvRsRLEXEwq/uhiDgcEUc6xP/r2y9/uvL411ca/2Th9W/B8Z8fr19mIl85ndJ34dCdR20uHss7/ifqqeFsSvH1L1lwiVhuTVe39wAAAGBrKEX9f/9LI3PpUmlkpHEPaE/sKFUvT88cjIhLk43fCAxGpZTf6WrcD64k+f3Pwab8WEv+eHbf+Ku+7fX8yMTl6uRmBw89bme9zSeL2n/q7y7v8wJb0BqMowFb1FLtf+/tDaoIsOF8/gMRMVs41eMb4H/L5z/0rqL2fyO+7/jbBdcM2Ppq2jL0NO0felc5PpxL13/27LGe0DN8/kNP6vZ3/d0lav3Fswai4IkBA+tTje0FZW1KIu1ZreEGKxGxvIW3r6SIvAvY/gkPpe422B+LZ/VFp7WSLp7jkCfSvbLkwuf2rvnJnz8TZa1Pmx/m22ml6ViUlzo6q09s+KUIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgXfwXAAD//1Sz0lI=") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40001a2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000a40)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282f, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x800000, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000b00)=0x4, 0x8112) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000b40)) 3m49.873330531s ago: executing program 4 (id=318): socketpair(0x1, 0x1, 0x0, &(0x7f0000002cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d40)={{r1, 0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{r2, 0xffffffffffffffff}, &(0x7f0000002e40), 0x0}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ec0)={{r3}, &(0x7f0000002f00), &(0x7f0000002f40)=r4}, 0x20) 3m33.622611328s ago: executing program 32 (id=318): socketpair(0x1, 0x1, 0x0, &(0x7f0000002cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d40)={{r1, 0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{r2, 0xffffffffffffffff}, &(0x7f0000002e40), 0x0}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ec0)={{r3}, &(0x7f0000002f00), &(0x7f0000002f40)=r4}, 0x20) 1m38.740751357s ago: executing program 3 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000194c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000019500)=@filename='127.0.0.1:file0\x00', &(0x7f0000019540)='./mnt\x00', &(0x7f0000019580)='nfs4\x00', 0x0, &(0x7f00000195c0)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 1m37.410944393s ago: executing program 3 (id=722): setregid(0xee00, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="5766b1b827f6003300", 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x0) 1m30.258303607s ago: executing program 3 (id=745): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x10, 0x5, 0x77}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0x2, 0x4e22, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x5, 0x8000, 0x100078}, {@remote, 0x4e20, 0x2000, 0x800000}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x2, 0x4e22, 0x0, @local}, 0x80, 0x0}, 0x4044) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m29.906495334s ago: executing program 3 (id=748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x38, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}}, 0x0) 1m29.632299422s ago: executing program 3 (id=751): socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000019900)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000340)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) 1m28.560954912s ago: executing program 3 (id=753): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)="39afabf445b93dc11880518260bb4f8db20c78a639c566", 0x17}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) writev(r1, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x11, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x3}, 0x94) close(r2) r3 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000b00)={0xf0f003, 0x1}) 1m13.335087414s ago: executing program 33 (id=753): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)="39afabf445b93dc11880518260bb4f8db20c78a639c566", 0x17}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) writev(r1, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x11, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x3}, 0x94) close(r2) r3 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000b00)={0xf0f003, 0x1}) 16.948707321s ago: executing program 6 (id=1035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000080)="0b0003000100", 0x6) 16.784606927s ago: executing program 6 (id=1037): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a2401"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x158}}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 13.616806972s ago: executing program 6 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13.376421797s ago: executing program 6 (id=1044): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e0000002000000000000000002000600000000"], 0x60}, 0x1, 0x7}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000100), 0x0}) openat2(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204032, 0xffffffffffffffff, 0xec776000) 12.982397008s ago: executing program 6 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) syz_clone3(&(0x7f0000000c00)={0x8690b000, &(0x7f0000000c80), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.8892099s ago: executing program 6 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x10, 0x5, 0x77}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x5, 0x8000, 0x100078}, {@remote, 0x4e20, 0x2000, 0x800000}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x2, 0x4e22, 0x0, @local}, 0x80, 0x0}, 0x4044) r4 = syz_open_dev$sndctrl(0x0, 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.5445218s ago: executing program 1 (id=1052): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 9.321676223s ago: executing program 1 (id=1053): r0 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000019000100fdffffff0000000080201400000400050010000018000200e0000002"], 0x24}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) r2 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x2, 0x101201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000140)=0x20004) r3 = syz_usb_connect(0x0, 0x45, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.644606473s ago: executing program 0 (id=1058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000280)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f00), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x93d, 0x7, 0x12, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x75, r3}, 0x38) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 8.228784785s ago: executing program 0 (id=1060): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getcwd(0x0, 0x0) 8.027413376s ago: executing program 2 (id=1061): r0 = syz_open_dev$evdev(0x0, 0x2, 0x862a01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(r0, &(0x7f0000000180)="e2", 0x2250) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='none\x00', &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000740)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='cpu1', 0x4) write(r5, &(0x7f00000007c0)='cpu0\n', 0x5) 7.972607902s ago: executing program 0 (id=1062): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000340)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000480)) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000700)={0x2, 0x0, 0x1c}) ioctl(r6, 0x400452c8, &(0x7f0000000580)='\x00'/16) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open$dir(0x0, 0x40000, 0x235) write(r5, &(0x7f00000005c0)='traceon', 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) lseek(r6, 0x4, 0x2) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 5.852996109s ago: executing program 2 (id=1064): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='loop', 0x4) close(r2) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r3, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 5.634515122s ago: executing program 5 (id=1065): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='loop', 0x4) close(r2) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r3, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d) 5.408676215s ago: executing program 1 (id=1066): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200) close(0x3) 5.302579695s ago: executing program 0 (id=1067): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') lseek(r0, 0x289e0cb5, 0x0) 5.021098014s ago: executing program 0 (id=1068): mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/157) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000001d80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000001ae00)={0x11, 0x0, 0x0, &(0x7f000001af80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000001afc0)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f000001b000), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f000001b040), &(0x7f000001b0c0)=0x68) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0d4) 4.936460203s ago: executing program 2 (id=1069): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000040)="9090909090909090909090", 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='p:s/p ./file0:0x0\n', 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/s/p/enable\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x80, 0x7f0000800000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40001a2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000a40)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282f, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x800000, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000b00)=0x4, 0x8112) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000b40)) 3.89704222s ago: executing program 5 (id=1070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000280)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f00), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x75}, 0x38) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 3.40901437s ago: executing program 5 (id=1071): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0xb1, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000340)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000380), &(0x7f0000000400)=0x30) fcntl$dupfd(r3, 0x406, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0xcac) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x4a) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xf, 0x3, 0x4, 0xa, 0x7, 0x5, 0x9}) 3.060734926s ago: executing program 5 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/thread-self/fail-nth\x00', 0x101002, 0x8) write(r0, &(0x7f00000006c0)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c7) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 2.940711218s ago: executing program 1 (id=1073): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x7fff, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000064c0)='./file0\x00', 0x2c41, 0x0) lseek(r2, 0x8, 0x3) 2.850987937s ago: executing program 5 (id=1074): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862a01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(r0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='none\x00', &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000740)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='cpu1', 0x4) write(r5, &(0x7f00000007c0)='cpu0\n', 0x5) 1.985698386s ago: executing program 1 (id=1075): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.867766378s ago: executing program 0 (id=1076): openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000600)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) 1.75258169s ago: executing program 5 (id=1077): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000340)=0x1, 0x4) shutdown(r4, 0x1) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000480)) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000700)={0x2, 0x0, 0x1c}) ioctl(r6, 0x400452c8, &(0x7f0000000580)='\x00'/16) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open$dir(0x0, 0x40000, 0x235) write(r5, &(0x7f00000005c0)='traceon', 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) lseek(r6, 0x4, 0x2) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 1.65788953s ago: executing program 1 (id=1078): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff00000007"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "9a8c3bb62355d580f49858afd1678433caec023650a7100b350213372089140f"}}}, 0x0) 1.428010083s ago: executing program 2 (id=1079): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f00000006c0)='loop', 0x4) close(r1) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r2, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 684.774789ms ago: executing program 2 (id=1080): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='loop', 0x4) close(r2) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r3, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d) 0s ago: executing program 2 (id=1081): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000009c0)='./file0\x00', 0x2010030, &(0x7f0000000180)=ANY=[], 0x4, 0x700, &(0x7f0000000280)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x280000, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000a00)='./file1\x00', 0x43, 0x1) inotify_init1(0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000e00), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./trace\x00', 0x1ff) mount(&(0x7f0000001100)=@sg0, &(0x7f0000001140)='./trace\x00', &(0x7f0000001180)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000001240), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000001280)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs/custom0\x00', 0x6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001300)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(r7, &(0x7f0000001400)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) kernel console output (not intermixed with test programs): T4195] usb 2-1: config 183 has no interface number 0 [ 159.474384][ T4195] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 159.644695][ T4195] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 160.858197][ T4195] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 161.100307][ T4195] usb 2-1: config 183 interface 124 has no altsetting 0 [ 161.327897][ T4195] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 161.359278][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.373870][ T5338] loop3: detected capacity change from 0 to 1024 [ 161.390599][ T4195] usb 2-1: Product: syz [ 161.402705][ T4195] usb 2-1: Manufacturer: syz [ 161.421364][ T4195] usb 2-1: SerialNumber: syz [ 164.196836][ T4195] sierra 2-1:183.124: Sierra USB modem converter detected [ 164.281708][ T4195] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 164.346925][ T4195] usb 2-1: USB disconnect, device number 5 [ 164.406777][ T4195] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 164.569612][ T4195] sierra 2-1:183.124: device disconnected [ 166.148130][ T13] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 166.227325][ T5369] loop1: detected capacity change from 0 to 512 [ 166.284219][ T5369] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 166.347436][ T5369] EXT4-fs (loop1): 1 truncate cleaned up [ 166.353135][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 166.546297][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 166.593743][ T26] audit: type=1800 audit(1792755753.539:28): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 166.638832][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 166.701257][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 166.752150][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.805311][ T13] usb 5-1: config 0 descriptor?? [ 167.528632][ T5385] loop0: detected capacity change from 0 to 1024 [ 169.217537][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 169.271067][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 169.331872][ T13] usb 5-1: USB disconnect, device number 3 [ 169.520518][ T5396] loop2: detected capacity change from 0 to 8 [ 169.610390][ T5392] event trace: Could not enable event p [ 169.856031][ T4266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.466051][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 171.748631][ T4266] usb 3-1: config 183 has an invalid interface number: 124 but max is 0 [ 171.789041][ T4266] usb 3-1: config 183 has no interface number 0 [ 171.795353][ T4266] usb 3-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 171.879782][ T4266] usb 3-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 171.950801][ T4266] usb 3-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 172.011026][ T4266] usb 3-1: config 183 interface 124 has no altsetting 0 [ 172.216356][ T4266] usb 3-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 172.261645][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.393489][ T4266] usb 3-1: Product: syz [ 172.418103][ T4266] usb 3-1: Manufacturer: syz [ 172.453152][ T4266] usb 3-1: SerialNumber: syz [ 172.506576][ T4266] usb 3-1: can't set config #183, error -71 [ 172.529946][ T4266] usb 3-1: USB disconnect, device number 5 [ 172.654630][ T5426] loop2: detected capacity change from 0 to 1024 [ 173.840012][ T4195] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 174.229322][ T4266] Bluetooth: hci1: command 0x0c24 tx timeout [ 174.487005][ T5438] loop2: detected capacity change from 0 to 512 [ 174.539274][ T5438] EXT4-fs (loop2): Ignoring removed nobh option [ 174.546933][ T4195] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 174.713120][ T4195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 175.854132][ T5438] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.328: invalid indirect mapped block 256 (level 2) [ 176.115431][ T4195] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 176.157387][ T5438] EXT4-fs (loop2): 2 truncates cleaned up [ 176.165189][ T4195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.190966][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 176.291705][ T4195] usb 4-1: config 0 descriptor?? [ 176.331432][ T4195] usb 4-1: can't set config #0, error -71 [ 176.499512][ T4195] usb 4-1: USB disconnect, device number 4 [ 176.860655][ T5455] loop1: detected capacity change from 0 to 512 [ 176.986916][ T5455] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 177.058011][ T5455] EXT4-fs (loop1): 1 truncate cleaned up [ 177.102069][ T5455] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 177.376765][ T26] audit: type=1800 audit(1792755764.329:29): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.334" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 178.019354][ T5461] loop0: detected capacity change from 0 to 8 [ 178.368189][ T4266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.646019][ T4266] usb 1-1: Using ep0 maxpacket: 32 [ 178.786193][ T4266] usb 1-1: config 183 has an invalid interface number: 124 but max is 0 [ 178.814867][ T4266] usb 1-1: config 183 has no interface number 0 [ 178.865464][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 178.881285][ T5467] loop2: detected capacity change from 0 to 1024 [ 178.931229][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 180.360143][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 180.422231][ T4266] usb 1-1: config 183 interface 124 has no altsetting 0 [ 180.616267][ T4266] usb 1-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 180.649638][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.706281][ T4266] usb 1-1: Product: syz [ 180.725494][ T4266] usb 1-1: Manufacturer: syz [ 180.754332][ T4266] usb 1-1: SerialNumber: syz [ 181.217970][ T4266] usb 1-1: can't set config #183, error -71 [ 181.254604][ T4266] usb 1-1: USB disconnect, device number 3 [ 183.156096][ T4266] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 184.396293][ T4266] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 184.403941][ T4266] usb 1-1: can't read configurations, error -71 [ 184.454250][ T5500] loop0: detected capacity change from 0 to 1024 [ 186.157569][ T4195] Bluetooth: hci4: command 0x0406 tx timeout [ 186.525247][ T5507] loop3: detected capacity change from 0 to 8 [ 186.565649][ T4195] Bluetooth: hci3: command 0x0406 tx timeout [ 186.603904][ T4195] Bluetooth: hci2: command 0x0406 tx timeout [ 186.639366][ T4195] Bluetooth: hci1: command 0x0406 tx timeout [ 186.665720][ T4195] Bluetooth: hci0: command 0x0406 tx timeout [ 187.556077][ T5511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.354'. [ 188.386333][ T4195] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.601997][ T5512] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.005095][ T4195] usb 4-1: Using ep0 maxpacket: 32 [ 189.216169][ T4195] usb 4-1: unable to read config index 0 descriptor/all [ 189.240837][ T4195] usb 4-1: can't read configurations, error -71 [ 189.548903][ T156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.211413][ T156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.343282][ T156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.464781][ T156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.476677][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 190.762641][ T5512] chnl_net:caif_netlink_parms(): no params data found [ 190.769668][ T7] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 190.828669][ T5540] loop1: detected capacity change from 0 to 1024 [ 193.293727][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.301068][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 193.391622][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 193.405138][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.430784][ T5512] device bridge_slave_0 entered promiscuous mode [ 193.469529][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 193.501519][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.520571][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.538905][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.582011][ T7] usb 1-1: config 0 descriptor?? [ 193.597469][ T5512] device bridge_slave_1 entered promiscuous mode [ 193.615863][ T4269] Bluetooth: hci5: command 0x041b tx timeout [ 193.627062][ T7] usb 1-1: can't set config #0, error -71 [ 193.666177][ T7] usb 1-1: USB disconnect, device number 6 [ 193.729220][ T5512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.995537][ T5512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.177525][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183835][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.334693][ T5512] team0: Port device team_slave_0 added [ 194.427175][ T5512] team0: Port device team_slave_1 added [ 195.760309][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 196.544971][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.564658][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.620203][ T5512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.667411][ T4269] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 196.722123][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.744883][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.804563][ T5597] loop1: detected capacity change from 0 to 512 [ 197.618095][ T5597] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 197.739211][ T5597] EXT4-fs (loop1): 1 truncate cleaned up [ 197.749805][ T4269] usb 1-1: device descriptor read/all, error -71 [ 197.759707][ T5512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.790143][ T5597] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 197.982542][ T5512] device hsr_slave_0 entered promiscuous mode [ 197.996130][ T4195] Bluetooth: hci5: command 0x0419 tx timeout [ 198.043000][ T5512] device hsr_slave_1 entered promiscuous mode [ 198.090350][ T26] audit: type=1800 audit(1792755785.039:30): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 198.126935][ T5512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.134519][ T5512] Cannot create hsr debugfs directory [ 198.730625][ T5617] FAULT_INJECTION: forcing a failure. [ 198.730625][ T5617] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 198.866098][ T5617] CPU: 0 PID: 5617 Comm: syz.0.385 Not tainted syzkaller #0 [ 198.873426][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.883480][ T5617] Call Trace: [ 198.886756][ T5617] [ 198.889687][ T5617] dump_stack_lvl+0x188/0x250 [ 198.894405][ T5617] ? show_regs_print_info+0x20/0x20 [ 198.899612][ T5617] ? load_image+0x410/0x410 [ 198.904122][ T5617] ? __lock_acquire+0x7d40/0x7d40 [ 198.909292][ T5617] ? mark_lock+0x94/0x320 [ 198.913657][ T5617] should_fail+0x383/0x4b0 [ 198.918254][ T5617] prepare_alloc_pages+0x1e3/0x5b0 [ 198.923388][ T5617] __alloc_pages+0x11b/0x480 [ 198.928143][ T5617] ? zone_statistics+0x170/0x170 [ 198.933109][ T5617] alloc_pages_vma+0x2bc/0x790 [ 198.938052][ T5617] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 198.943871][ T5617] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 198.949522][ T5617] ? shmem_swapin_page+0x22f0/0x22f0 [ 198.954957][ T5617] ? __lock_acquire+0x7d40/0x7d40 [ 198.959995][ T5617] ? xas_descend+0x210/0x3b0 [ 198.964599][ T5617] ? xas_load+0x127/0x140 [ 198.968946][ T5617] ? pagecache_get_page+0xc32/0xf20 [ 198.974342][ T5617] ? page_cache_prev_miss+0x380/0x380 [ 198.979838][ T5617] ? _raw_spin_lock_irq+0xb7/0xf0 [ 198.984906][ T5617] ? _raw_spin_lock_irqsave+0x100/0x100 [ 198.990659][ T5617] ? _raw_spin_unlock_irq+0x1f/0x40 [ 198.995871][ T5617] ? lockdep_hardirqs_on+0x94/0x140 [ 199.001102][ T5617] shmem_getpage_gfp+0x14be/0x2c10 [ 199.006250][ T5617] shmem_read_mapping_page_gfp+0x96/0x100 [ 199.011980][ T5617] udmabuf_create+0xaa9/0x15b0 [ 199.016757][ T5617] ? udmabuf_ioctl+0x300/0x300 [ 199.021530][ T5617] ? __might_fault+0xb3/0x110 [ 199.026214][ T5617] ? _copy_from_user+0x111/0x170 [ 199.031272][ T5617] udmabuf_ioctl+0x1f3/0x300 [ 199.036060][ T5617] ? sync_print_fence+0x4b0/0x4b0 [ 199.041286][ T5617] ? bpf_lsm_file_ioctl+0x5/0x10 [ 199.046237][ T5617] ? security_file_ioctl+0x7c/0xa0 [ 199.051393][ T5617] ? sync_print_fence+0x4b0/0x4b0 [ 199.056587][ T5617] __se_sys_ioctl+0xfa/0x170 [ 199.061217][ T5617] do_syscall_64+0x4c/0xa0 [ 199.065653][ T5617] ? clear_bhb_loop+0x30/0x80 [ 199.070344][ T5617] ? clear_bhb_loop+0x30/0x80 [ 199.075031][ T5617] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.080932][ T5617] RIP: 0033:0x7f289e234559 [ 199.085348][ T5617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.104948][ T5617] RSP: 002b:00007f289c48b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.113357][ T5617] RAX: ffffffffffffffda RBX: 00007f289e4bafa0 RCX: 00007f289e234559 [ 199.121330][ T5617] RDX: 0000200000000340 RSI: 0000000040187542 RDI: 0000000000000004 [ 199.129298][ T5617] RBP: 00007f289e2cbb20 R08: 0000000000000000 R09: 0000000000000000 [ 199.137287][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.145257][ T5617] R13: 00007f289e4bb038 R14: 00007f289e4bafa0 R15: 00007ffeccd00208 [ 199.153237][ T5617] [ 199.539654][ T5512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.617942][ T5512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.675337][ T156] device hsr_slave_0 left promiscuous mode [ 199.700672][ T156] device hsr_slave_1 left promiscuous mode [ 199.781113][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.824798][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.877060][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.884494][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.950250][ T156] device bridge_slave_1 left promiscuous mode [ 199.982035][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.031997][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.142233][ T156] device veth1_macvtap left promiscuous mode [ 200.175763][ T156] device veth0_macvtap left promiscuous mode [ 200.194985][ T156] device veth1_vlan left promiscuous mode [ 200.346955][ T156] device veth0_vlan left promiscuous mode [ 202.365041][ T26] audit: type=1800 audit(1792755789.309:31): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 202.541815][ T26] audit: type=1800 audit(1792755789.489:32): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="attr_allow_any_host" dev="configfs" ino=37848 res=0 errno=0 [ 202.625638][ T26] audit: type=1800 audit(1792755789.529:33): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="addr_trtype" dev="configfs" ino=37854 res=0 errno=0 [ 202.700786][ T7] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 202.771744][ T5642] nvme nvme0: creating 1 I/O queues. [ 202.801748][ T5642] nvme nvme0: new ctrl: "testsubsys" [ 202.814993][ T156] team0 (unregistering): Port device team_slave_1 removed [ 202.893896][ T156] team0 (unregistering): Port device team_slave_0 removed [ 202.948102][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.002225][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.899677][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 204.079593][ T156] bond0 (unregistering): Released all slaves [ 204.150527][ T5512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.347085][ T5512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.448384][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 204.510196][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 204.597470][ T7] usb 2-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 204.667929][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.678631][ T5512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.723940][ T7] usb 2-1: config 0 descriptor?? [ 204.735320][ T5512] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.800531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.848989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.923260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.974900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.146784][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.154002][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.442773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.494961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.396426][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 206.402829][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 206.419901][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.427064][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.475903][ T7] usb 2-1: USB disconnect, device number 6 [ 206.647807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.693784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.737455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.184255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.295485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.361334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.404962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.508835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.527677][ T5689] Zero length message leads to an empty skb [ 208.540645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.604564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.647108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.685062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.561065][ T5693] loop2: detected capacity change from 0 to 512 [ 209.572094][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.753524][ T5693] EXT4-fs (loop2): Ignoring removed nobh option [ 209.976744][ T5693] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.395: invalid indirect mapped block 256 (level 2) [ 210.294727][ T5693] EXT4-fs (loop2): 2 truncates cleaned up [ 210.348827][ T5693] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 210.916968][ T5512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.999839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.060851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.076376][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.126327][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.148928][ T5512] device veth0_vlan entered promiscuous mode [ 212.223776][ T5512] device veth1_vlan entered promiscuous mode [ 212.330105][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.351296][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.420517][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.497602][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.556508][ T5704] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 212.573056][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.616573][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.697430][ T4269] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.729607][ T5512] device veth0_macvtap entered promiscuous mode [ 212.780341][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.840193][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.891156][ T5512] device veth1_macvtap entered promiscuous mode [ 212.941112][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.948723][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 212.985593][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.075607][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.089693][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 213.176192][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.269300][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.397573][ T5749] loop1: detected capacity change from 0 to 8 [ 213.404185][ T4269] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.453275][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.469548][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.499775][ T4269] usb 1-1: Product: syz [ 213.503980][ T4269] usb 1-1: Manufacturer: syz [ 213.526017][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.546829][ T4269] usb 1-1: SerialNumber: syz [ 213.587167][ T4269] usb 1-1: config 0 descriptor?? [ 213.601331][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.646025][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.706483][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.770144][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.887859][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.957322][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.046634][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.091291][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.145759][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.176071][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.206107][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.250078][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.285973][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.306042][ T4269] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 214.313584][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.344831][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.390691][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.407993][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.429678][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.447319][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 214.454480][ T5766] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 214.481465][ T5512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.510969][ T5512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.547442][ T5512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.576197][ T7] usb 2-1: config 183 has an invalid interface number: 124 but max is 0 [ 214.596391][ T7] usb 2-1: config 183 has no interface number 0 [ 214.602696][ T7] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 214.624128][ T5512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.687611][ T4269] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 214.711725][ T7] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 214.738225][ T4269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 214.763601][ T7] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 214.794204][ T4269] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 214.809330][ T7] usb 2-1: config 183 interface 124 has no altsetting 0 [ 214.847377][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.885505][ T4269] usb 3-1: config 0 descriptor?? [ 215.006189][ T7] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 215.802188][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.907441][ T7] usb 2-1: Product: syz [ 215.911633][ T7] usb 2-1: Manufacturer: syz [ 215.966050][ T7] usb 2-1: SerialNumber: syz [ 216.066243][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.242334][ T5776] usb 1-1: USB disconnect, device number 9 [ 216.248618][ T4269] usbhid 3-1:0.0: can't add hid device: -71 [ 216.487867][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.497493][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.504997][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.516881][ T7] sierra 2-1:183.124: Sierra USB modem converter detected [ 216.530853][ T4269] usbhid: probe of 3-1:0.0 failed with error -71 [ 216.547800][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.581049][ T7] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 216.605672][ T4269] usb 3-1: USB disconnect, device number 6 [ 216.622441][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.659058][ T7] usb 2-1: USB disconnect, device number 7 [ 216.730824][ T7] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 216.764544][ T7] sierra 2-1:183.124: device disconnected [ 217.172309][ T5797] loop2: detected capacity change from 0 to 512 [ 217.281391][ T5797] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 217.399038][ T5797] EXT4-fs (loop2): 1 truncate cleaned up [ 217.444629][ T5797] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 217.693973][ T5815] Bluetooth: hci0: unsupported parameter 255 [ 217.978083][ T26] audit: type=1800 audit(1792755804.909:34): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 218.036635][ T5815] Bluetooth: hci0: unsupported parameter 255 [ 218.979690][ T5834] loop0: detected capacity change from 0 to 8 [ 219.336541][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.626078][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 219.766264][ T13] usb 1-1: config 183 has an invalid interface number: 124 but max is 0 [ 219.830805][ T13] usb 1-1: config 183 has no interface number 0 [ 219.871575][ T13] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 219.963833][ T13] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 220.048388][ T13] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 220.061391][ T5862] Bluetooth: hci0: unsupported parameter 255 [ 220.089218][ T5862] Bluetooth: hci0: unsupported parameter 255 [ 220.119499][ T13] usb 1-1: config 183 interface 124 has no altsetting 0 [ 220.308264][ T5869] loop2: detected capacity change from 0 to 512 [ 220.317254][ T13] usb 1-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 220.358284][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.429552][ T13] usb 1-1: Product: syz [ 220.433762][ T13] usb 1-1: Manufacturer: syz [ 220.490179][ T13] usb 1-1: SerialNumber: syz [ 220.533150][ T5869] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 220.598707][ T5869] EXT4-fs (loop2): 1 truncate cleaned up [ 220.629101][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 222.170517][ T13] sierra 1-1:183.124: Sierra USB modem converter detected [ 222.233174][ T13] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 222.488079][ T13] usb 1-1: USB disconnect, device number 10 [ 222.495209][ T26] audit: type=1800 audit(1792755809.439:35): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.438" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 222.575596][ T13] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 222.638795][ T13] sierra 1-1:183.124: device disconnected [ 227.651202][ T5960] device syzkaller1 entered promiscuous mode [ 227.757492][ T5902] block2mtd: error: cannot open device /dev/ [ 229.558295][ T5974] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.963728][ T5993] loop5: detected capacity change from 0 to 512 [ 230.098378][ T5993] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 230.193147][ T5993] EXT4-fs (loop5): 1 truncate cleaned up [ 230.226928][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 230.776894][ T6017] loop3: detected capacity change from 0 to 8 [ 232.147509][ T26] audit: type=1800 audit(1792755819.099:36): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.473" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 232.285546][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.988341][ T6039] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.307982][ T6071] fuse: Bad value for 'user_id' [ 238.656970][ T6101] loop0: detected capacity change from 0 to 8 [ 240.076130][ T4266] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.313416][ T6119] fuse: Bad value for 'user_id' [ 240.457167][ T4266] usb 1-1: Using ep0 maxpacket: 32 [ 240.586245][ T4266] usb 1-1: config 183 has an invalid interface number: 124 but max is 0 [ 240.594690][ T4266] usb 1-1: config 183 has no interface number 0 [ 240.621367][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 240.673185][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 240.724500][ T4266] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 240.761425][ T4266] usb 1-1: config 183 interface 124 has no altsetting 0 [ 240.927229][ T4266] usb 1-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 241.026013][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.060630][ T4266] usb 1-1: Product: syz [ 241.082744][ T4266] usb 1-1: Manufacturer: syz [ 241.100481][ T4266] usb 1-1: SerialNumber: syz [ 242.757815][ T4266] sierra 1-1:183.124: Sierra USB modem converter detected [ 242.820036][ T4266] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 242.966819][ T4266] usb 1-1: USB disconnect, device number 11 [ 243.023815][ T4266] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 243.075836][ T4266] sierra 1-1:183.124: device disconnected [ 243.574395][ T4267] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 244.177244][ T4267] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 244.213107][ T4267] usb 3-1: config 1 has no interface number 0 [ 244.466266][ T4267] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 244.506265][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.559799][ T4267] usb 3-1: Product: syz [ 244.696047][ T4267] usb 3-1: Manufacturer: syz [ 244.721155][ T4267] usb 3-1: SerialNumber: syz [ 244.803020][ T6193] loop1: detected capacity change from 0 to 512 [ 244.865113][ T6193] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 244.906128][ T5776] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 244.945674][ T6193] EXT4-fs (loop1): 1 truncate cleaned up [ 244.978336][ T6193] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 245.004086][ T6162] udc-core: couldn't find an available UDC or it's busy [ 245.024954][ T6202] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.039899][ T6162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 245.156329][ T4267] usb 3-1: 3:0 : does not exist [ 245.175114][ T4267] usb 3-1: 3:0 : does not exist [ 245.231439][ T26] audit: type=1800 audit(1792755832.179:37): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 245.286165][ T5776] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 245.348842][ T4267] usb 3-1: USB disconnect, device number 7 [ 245.363754][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 245.655661][ T5776] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 247.048863][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.170328][ T5776] usb 1-1: config 0 descriptor?? [ 247.473749][ T6229] comedi comedi1: Minor 4 specified more than once! [ 247.976112][ T5776] usbhid 1-1:0.0: can't add hid device: -71 [ 248.001970][ T5776] usbhid: probe of 1-1:0.0 failed with error -71 [ 248.052732][ T5776] usb 1-1: USB disconnect, device number 12 [ 248.213422][ T6249] loop3: detected capacity change from 0 to 512 [ 248.271630][ T6251] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.369578][ T6249] EXT4-fs (loop3): Ignoring removed nobh option [ 248.829847][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 248.839702][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 248.849368][ T6259] netlink: 17 bytes leftover after parsing attributes in process `syz.2.532'. [ 248.864607][ T6249] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.529: invalid indirect mapped block 256 (level 2) [ 249.063091][ T26] audit: type=1800 audit(1792755836.009:38): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.534" name="(" dev="sda1" ino=2051 res=0 errno=0 [ 250.523897][ T6249] EXT4-fs (loop3): 2 truncates cleaned up [ 250.730030][ T6249] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 252.349381][ T6281] FAULT_INJECTION: forcing a failure. [ 252.349381][ T6281] name failslab, interval 1, probability 0, space 0, times 0 [ 252.362433][ T6281] CPU: 0 PID: 6281 Comm: syz.5.538 Not tainted syzkaller #0 [ 252.369728][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.379801][ T6281] Call Trace: [ 252.383081][ T6281] [ 252.386019][ T6281] dump_stack_lvl+0x188/0x250 [ 252.390704][ T6281] ? show_regs_print_info+0x20/0x20 [ 252.395922][ T6281] ? load_image+0x410/0x410 [ 252.400431][ T6281] ? __might_sleep+0xf0/0xf0 [ 252.405024][ T6281] ? __lock_acquire+0x7d40/0x7d40 [ 252.410051][ T6281] should_fail+0x383/0x4b0 [ 252.414469][ T6281] should_failslab+0x5/0x20 [ 252.418964][ T6281] slab_pre_alloc_hook+0x51/0xc0 [ 252.423904][ T6281] kmem_cache_alloc_node+0x47/0x2c0 [ 252.429098][ T6281] ? alloc_vmap_area+0x668/0x1b30 [ 252.434132][ T6281] alloc_vmap_area+0x668/0x1b30 [ 252.439002][ T6281] ? vm_map_ram+0xba0/0xba0 [ 252.443511][ T6281] __get_vm_area_node+0x14f/0x2d0 [ 252.448561][ T6281] __vmalloc_node_range+0xef/0x8b0 [ 252.453678][ T6281] ? vb2_vmalloc_alloc+0xec/0x330 [ 252.458708][ T6281] vmalloc_user+0x70/0x80 [ 252.463043][ T6281] ? vb2_vmalloc_alloc+0xec/0x330 [ 252.468060][ T6281] vb2_vmalloc_alloc+0xec/0x330 [ 252.472917][ T6281] ? vb2_common_vm_close+0x140/0x140 [ 252.478211][ T6281] __vb2_queue_alloc+0x737/0x1390 [ 252.483249][ T6281] vb2_core_reqbufs+0x8e4/0xf30 [ 252.488109][ T6281] ? vb2_verify_memory_type+0x570/0x570 [ 252.493683][ T6281] __vb2_init_fileio+0x2c2/0xc50 [ 252.498619][ T6281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.504523][ T6281] ? _raw_spin_unlock+0x40/0x40 [ 252.509372][ T6281] vb2_core_poll+0x5a4/0x7a0 [ 252.513976][ T6281] vb2_fop_poll+0x14b/0x310 [ 252.518477][ T6281] ? vb2_fop_read+0x340/0x340 [ 252.523149][ T6281] v4l2_poll+0x13d/0x2b0 [ 252.527422][ T6281] ? v4l2_write+0x2b0/0x2b0 [ 252.531917][ T6281] do_sys_poll+0x944/0x11a0 [ 252.536438][ T6281] ? do_sys_poll+0x441/0x11a0 [ 252.541117][ T6281] ? poll_select_finish+0x5d0/0x5d0 [ 252.546331][ T6281] ? futex_wait_queue_me+0x16e/0x440 [ 252.551615][ T6281] ? __might_sleep+0xf0/0xf0 [ 252.556198][ T6281] ? poll_initwait+0x150/0x150 [ 252.560977][ T6281] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 252.567253][ T6281] ? verify_lock_unused+0x140/0x140 [ 252.572489][ T6281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.578473][ T6281] ? verify_lock_unused+0x140/0x140 [ 252.583688][ T6281] ? set_user_sigmask+0xca/0x1c0 [ 252.588625][ T6281] ? sigprocmask+0x190/0x190 [ 252.593215][ T6281] ? __context_tracking_exit+0x4c/0x80 [ 252.598677][ T6281] __se_sys_ppoll+0x206/0x2a0 [ 252.603369][ T6281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.609365][ T6281] ? __x64_sys_ppoll+0xc0/0xc0 [ 252.614134][ T6281] ? lockdep_hardirqs_on+0x94/0x140 [ 252.619332][ T6281] ? __x64_sys_ppoll+0x1c/0xc0 [ 252.624091][ T6281] do_syscall_64+0x4c/0xa0 [ 252.628537][ T6281] ? clear_bhb_loop+0x30/0x80 [ 252.633218][ T6281] ? clear_bhb_loop+0x30/0x80 [ 252.637895][ T6281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.643872][ T6281] RIP: 0033:0x7f3ab2ba1559 [ 252.648287][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.667900][ T6281] RSP: 002b:00007f3ab0df8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 252.676318][ T6281] RAX: ffffffffffffffda RBX: 00007f3ab2e27fa0 RCX: 00007f3ab2ba1559 [ 252.684295][ T6281] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000680 [ 252.692257][ T6281] RBP: 00007f3ab2c38b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.700228][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.708199][ T6281] R13: 00007f3ab2e28038 R14: 00007f3ab2e27fa0 R15: 00007ffe2599de08 [ 252.716177][ T6281] [ 252.796451][ T5776] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 252.806776][ T6200] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 253.531098][ T6299] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.556769][ T5776] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 253.603983][ T5776] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 253.668826][ T5776] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.738194][ T5776] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.967859][ T5776] usb 1-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 254.145629][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.241343][ T6314] loop2: detected capacity change from 0 to 8 [ 255.261747][ T5776] usb 1-1: config 0 descriptor?? [ 255.587153][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.595132][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.626073][ T5776] usb 1-1: can't set config #0, error -71 [ 255.683965][ T5776] usb 1-1: USB disconnect, device number 13 [ 256.406008][ T4269] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 258.013874][ T6336] loop5: detected capacity change from 0 to 512 [ 258.120552][ T4269] usb 3-1: Using ep0 maxpacket: 32 [ 258.174330][ T6336] EXT4-fs (loop5): Ignoring removed nobh option [ 258.245362][ T6336] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.552: invalid indirect mapped block 256 (level 2) [ 258.346679][ T6336] EXT4-fs (loop5): 2 truncates cleaned up [ 258.352501][ T6336] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 258.630605][ T6351] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.087081][ T26] audit: type=1800 audit(1792755846.039:39): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.558" name="(" dev="sda1" ino=2051 res=0 errno=0 [ 259.227379][ T6366] loop0: detected capacity change from 0 to 512 [ 260.980980][ T6366] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 261.077560][ T6366] EXT4-fs (loop0): 1 truncate cleaned up [ 261.134191][ T6366] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 262.149260][ T6380] binder: 6378:6380 ioctl c0306201 0 returned -14 [ 262.570128][ T6340] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 262.582753][ T26] audit: type=1800 audit(1792755849.499:40): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.557" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 264.217811][ T4269] usb 3-1: device descriptor read/all, error -71 [ 265.523711][ T6412] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.091901][ T6440] process 'syz.5.579' launched './file2' with NULL argv: empty string added [ 268.347232][ T6444] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.705634][ T6481] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.574495][ T26] audit: type=1800 audit(1792755859.519:41): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.597" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 272.732819][ T4206] Bluetooth: hci3: unexpected event for opcode 0x080b [ 275.020541][ T6517] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.073775][ T6520] capability: warning: `syz.2.607' uses deprecated v2 capabilities in a way that may be insecure [ 275.342344][ T6528] fuse: Invalid rootmode [ 275.833067][ T6538] atomic_op ffff888078e69198 conn xmit_atomic 0000000000000000 [ 277.225782][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 277.518359][ C0] net_ratelimit: 42 callbacks suppressed [ 277.705989][ T4267] usb 6-1: Using ep0 maxpacket: 16 [ 277.802900][ T6553] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.890208][ T4267] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.996290][ T4267] usb 6-1: config 5 has an invalid interface number: 237 but max is 0 [ 278.034913][ T4267] usb 6-1: config 5 has an invalid interface association descriptor of length 2, skipping [ 278.081367][ T4267] usb 6-1: config 5 has no interface number 0 [ 278.111460][ T4267] usb 6-1: config 5 interface 237 has no altsetting 0 [ 278.296272][ T4267] usb 6-1: New USB device found, idVendor=103e, idProduct=03e8, bcdDevice=b4.51 [ 278.360549][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.406061][ T6566] fuse: Invalid rootmode [ 278.415082][ T4267] usb 6-1: Product: syz [ 278.419469][ T4266] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.458373][ T4267] usb 6-1: Manufacturer: syz [ 278.463044][ T4267] usb 6-1: SerialNumber: syz [ 278.847272][ T4267] ftdi_sio 6-1:5.237: FTDI USB Serial Device converter detected [ 278.855646][ T4267] usb 6-1: Detected FT-X [ 278.866092][ T4266] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.911013][ T26] audit: type=1800 audit(1792755865.859:42): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.628" name="attr_allow_any_host" dev="configfs" ino=40930 res=0 errno=0 [ 279.081534][ T4266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.092150][ T4267] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 280.223406][ T4267] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 280.244598][ T4266] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.561021][ T26] audit: type=1800 audit(1792755865.899:43): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.628" name="addr_trtype" dev="configfs" ino=40932 res=0 errno=0 [ 280.582057][ T4267] ftdi_sio 6-1:5.237: GPIO initialisation failed: -71 [ 280.604395][ T4267] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 280.648885][ T4267] usb 6-1: USB disconnect, device number 2 [ 280.762990][ T4267] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 280.790178][ T4267] ftdi_sio 6-1:5.237: device disconnected [ 280.797580][ T4266] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 280.818993][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.850324][ T4266] usb 1-1: Product: syz [ 280.857960][ T4266] usb 1-1: Manufacturer: syz [ 280.862568][ T4266] usb 1-1: SerialNumber: syz [ 280.919918][ T4266] usb 1-1: selecting invalid altsetting 1 [ 280.948750][ T4266] usb 1-1: unit 6 not found! [ 281.441870][ T4266] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 281.536938][ T4266] usb 1-1: USB disconnect, device number 14 [ 281.573689][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.626279][ C0] net_ratelimit: 38 callbacks suppressed [ 282.767126][ T6599] fuse: Bad value for 'rootmode' [ 284.611553][ T6613] loop1: detected capacity change from 0 to 512 [ 284.678298][ T6613] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 284.825345][ T6613] EXT4-fs (loop1): 1 truncate cleaned up [ 284.862274][ T6613] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 285.691433][ T26] audit: type=1800 audit(1792755872.619:44): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.643" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 285.896011][ T5776] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 286.245951][ T5776] usb 1-1: Using ep0 maxpacket: 8 [ 286.316745][ T6635] fuse: Bad value for 'rootmode' [ 286.746247][ T5776] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 286.792494][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.853532][ T5776] usb 1-1: Product: 녗嗹飥㠙E▫ [ 286.862136][ T6648] FAULT_INJECTION: forcing a failure. [ 286.862136][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 286.889487][ T5776] usb 1-1: SerialNumber: syz [ 286.960275][ T6648] CPU: 0 PID: 6648 Comm: syz.5.638 Not tainted syzkaller #0 [ 286.967698][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.977766][ T6648] Call Trace: [ 286.981043][ T6648] [ 286.983974][ T6648] dump_stack_lvl+0x188/0x250 [ 286.988662][ T6648] ? show_regs_print_info+0x20/0x20 [ 286.993861][ T6648] ? load_image+0x410/0x410 [ 286.998366][ T6648] ? __lock_acquire+0x7d40/0x7d40 [ 287.003418][ T6648] should_fail+0x383/0x4b0 [ 287.007839][ T6648] should_failslab+0x5/0x20 [ 287.012338][ T6648] slab_pre_alloc_hook+0x51/0xc0 [ 287.017274][ T6648] ? getname_flags+0xb7/0x4f0 [ 287.021950][ T6648] kmem_cache_alloc+0x3d/0x280 [ 287.026715][ T6648] getname_flags+0xb7/0x4f0 [ 287.031222][ T6648] __x64_sys_symlink+0x6a/0x90 [ 287.035989][ T6648] do_syscall_64+0x4c/0xa0 [ 287.040403][ T6648] ? clear_bhb_loop+0x30/0x80 [ 287.045079][ T6648] ? clear_bhb_loop+0x30/0x80 [ 287.049752][ T6648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.055648][ T6648] RIP: 0033:0x7f3ab2ba1559 [ 287.060075][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.079976][ T6648] RSP: 002b:00007f3ab0df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 287.088395][ T6648] RAX: ffffffffffffffda RBX: 00007f3ab2e27fa0 RCX: 00007f3ab2ba1559 [ 287.096366][ T6648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 287.104363][ T6648] RBP: 00007f3ab2c38b20 R08: 0000000000000000 R09: 0000000000000000 [ 287.112330][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.120300][ T6648] R13: 00007f3ab2e28038 R14: 00007f3ab2e27fa0 R15: 00007ffe2599de08 [ 287.129061][ T6648] [ 288.257049][ C0] net_ratelimit: 52 callbacks suppressed [ 288.866283][ T5776] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 288.977443][ T5776] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 289.092466][ T5776] usb 1-1: USB disconnect, device number 15 [ 289.249547][ T6662] loop3: detected capacity change from 0 to 512 [ 289.372840][ T26] audit: type=1800 audit(1792755876.319:45): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.661" name="attr_allow_any_host" dev="configfs" ino=41193 res=0 errno=0 [ 289.403410][ T6662] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 289.415088][ T6664] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 289.497022][ T6662] EXT4-fs (loop3): 1 truncate cleaned up [ 289.518216][ T26] audit: type=1800 audit(1792755876.369:46): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.661" name="addr_trtype" dev="configfs" ino=41194 res=0 errno=0 [ 289.561965][ T6662] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 290.060831][ T26] audit: type=1800 audit(1792755876.989:47): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.660" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.986069][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.191804][ T26] audit: type=1800 audit(1792755884.141:48): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="attr_allow_any_host" dev="configfs" ino=41271 res=0 errno=0 [ 291.225061][ T6690] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 291.255975][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 291.325500][ T26] audit: type=1800 audit(1792755884.171:49): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="addr_trtype" dev="configfs" ino=41272 res=0 errno=0 [ 291.386393][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.442945][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 291.478630][ T6696] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 291.494360][ T26] audit: type=1800 audit(1792755884.431:50): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.671" name="addr_trtype" dev="configfs" ino=41298 res=0 errno=0 [ 291.519375][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.562818][ T7] usb 3-1: config 0 descriptor?? [ 291.589656][ T4267] nvmet: creating controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 291.629666][ T7] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 291.698606][ T6691] nvme nvme1: creating 1 I/O queues. [ 291.755349][ T6691] nvme nvme1: new ctrl: "testsubsys" [ 291.836229][ T3545] bcm5974 3-1:0.0: could not read from device [ 291.893922][ T7] usb 3-1: USB disconnect, device number 10 [ 291.902696][ T3545] bcm5974 3-1:0.0: could not read from device [ 291.979352][ T6705] loop3: detected capacity change from 0 to 512 [ 292.123004][ T6705] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 292.274110][ T6705] EXT4-fs (loop3): 1 truncate cleaned up [ 292.352962][ T6705] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 292.917533][ T26] audit: type=1800 audit(1792755885.851:51): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.675" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 293.066166][ T6722] loop5: detected capacity change from 0 to 512 [ 293.224957][ T6722] EXT4-fs (loop5): Ignoring removed nobh option [ 293.275941][ C0] net_ratelimit: 56 callbacks suppressed [ 293.310211][ T6722] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.681: invalid indirect mapped block 256 (level 2) [ 293.422494][ T6722] EXT4-fs (loop5): 2 truncates cleaned up [ 293.465085][ T6722] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 293.703621][ T6739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.726942][ T6738] loop2: detected capacity change from 0 to 1024 [ 294.102043][ T26] audit: type=1800 audit(1792755887.051:52): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="attr_allow_any_host" dev="configfs" ino=41443 res=0 errno=0 [ 294.138699][ T6744] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 295.107421][ T6712] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 295.216600][ T26] audit: type=1800 audit(1792755887.081:53): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="addr_trtype" dev="configfs" ino=41444 res=0 errno=0 [ 295.387822][ T4267] nvmet: creating controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 295.418958][ T26] audit: type=1800 audit(1792755888.251:54): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.690" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 295.501255][ T6744] nvme nvme2: creating 1 I/O queues. [ 295.538872][ T6754] fuse: Unknown parameter 'use00000000000000000000' [ 295.563759][ T6744] nvme nvme2: new ctrl: "testsubsys" [ 295.740192][ T26] audit: type=1800 audit(1792755888.691:55): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.693" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 296.017017][ T6761] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 5 (only 8 groups) [ 296.351347][ T6767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.722032][ T6774] loop3: detected capacity change from 0 to 1024 [ 298.661998][ C0] net_ratelimit: 48 callbacks suppressed [ 299.303594][ T6795] fuse: Unknown parameter 'use00000000000000000000' [ 299.374395][ T6797] loop2: detected capacity change from 0 to 512 [ 299.459825][ T6797] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 299.657720][ T6797] EXT4-fs (loop2): 1 truncate cleaned up [ 299.696561][ T6797] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 299.763300][ T26] audit: type=1800 audit(1792755892.711:56): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.708" name="attr_allow_any_host" dev="configfs" ino=41641 res=0 errno=0 [ 299.792568][ T6801] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 299.927977][ T26] audit: type=1800 audit(1792755892.741:57): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.708" name="addr_trtype" dev="configfs" ino=41642 res=0 errno=0 [ 300.348511][ T4267] nvmet: creating controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 300.459002][ T26] audit: type=1800 audit(1792755893.181:58): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.707" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 300.739150][ T6807] nvme nvme3: creating 1 I/O queues. [ 300.805518][ T6828] loop2: detected capacity change from 0 to 512 [ 300.843495][ T6827] WARNING! power/level is deprecated; use power/control instead [ 300.891767][ T6807] nvme nvme3: new ctrl: "testsubsys" [ 300.906254][ T6828] EXT4-fs (loop2): Ignoring removed nobh option [ 301.045522][ T6828] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.713: invalid indirect mapped block 256 (level 2) [ 302.107514][ T6828] EXT4-fs (loop2): 2 truncates cleaned up [ 302.159879][ T6828] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 302.509785][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.721'. [ 302.594360][ T6847] loop1: detected capacity change from 0 to 512 [ 302.661924][ T6847] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 302.789162][ T6847] EXT4-fs (loop1): 1 truncate cleaned up [ 302.831065][ T6847] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 303.007517][ T26] audit: type=1800 audit(1792755895.961:59): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.726" name="attr_allow_any_host" dev="configfs" ino=41795 res=0 errno=0 [ 303.056963][ T6854] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 303.454444][ T26] audit: type=1800 audit(1792755896.011:60): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.726" name="addr_trtype" dev="configfs" ino=41798 res=0 errno=0 [ 305.036286][ C0] net_ratelimit: 60 callbacks suppressed [ 305.113595][ T6803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 305.172341][ T4195] nvmet: creating controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 305.225776][ T26] audit: type=1800 audit(1792755896.311:61): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 305.636717][ T6854] nvme nvme4: creating 1 I/O queues. [ 305.660077][ T6854] nvme nvme4: new ctrl: "testsubsys" [ 305.856020][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 306.088275][ T26] audit: type=1326 audit(1792755899.041:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 306.256187][ T7] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.275453][ T26] audit: type=1326 audit(1792755899.071:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 306.325978][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.395219][ T7] usb 2-1: config 0 descriptor?? [ 306.488780][ T26] audit: type=1326 audit(1792755899.071:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.137024][ T26] audit: type=1326 audit(1792755899.071:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.287439][ T26] audit: type=1326 audit(1792755899.071:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.405918][ T26] audit: type=1326 audit(1792755899.071:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.469425][ T6894] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 308.578008][ T26] audit: type=1326 audit(1792755899.071:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.752170][ T7] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 308.799528][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.741'. [ 308.814734][ T7] [drm] Initialized udl on minor 2 [ 308.824169][ T26] audit: type=1326 audit(1792755899.091:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 308.883400][ T4269] nvmet: creating controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 308.936240][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.980726][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 309.006433][ T26] audit: type=1326 audit(1792755899.091:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.0.735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 309.073946][ T7] usb 2-1: USB disconnect, device number 8 [ 309.144204][ T5776] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 309.227529][ T5776] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 309.299964][ T5776] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 309.445059][ T6894] nvme nvme5: creating 1 I/O queues. [ 309.506304][ T6894] nvme nvme5: new ctrl: "testsubsys" [ 309.515974][ T5776] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.916381][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.995662][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.126250][ T5776] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 310.475936][ C0] net_ratelimit: 54 callbacks suppressed [ 311.141858][ T5776] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 311.190698][ T5776] usb 6-1: Manufacturer: syz [ 312.723313][ T5776] usb 6-1: config 0 descriptor?? [ 312.986859][ T5776] usb 6-1: can't set config #0, error -71 [ 313.027549][ T5776] usb 6-1: USB disconnect, device number 3 [ 313.127518][ T6930] netlink: 40 bytes leftover after parsing attributes in process `syz.5.754'. [ 314.700544][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 314.700554][ T26] audit: type=1800 audit(1792755907.651:93): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.757" name="attr_allow_any_host" dev="configfs" ino=42134 res=0 errno=0 [ 314.730308][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 314.810429][ T6935] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 315.002381][ T26] audit: type=1800 audit(1792755907.751:94): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.757" name="addr_trtype" dev="configfs" ino=42140 res=0 errno=0 [ 315.067269][ T5776] nvmet: creating controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 315.160337][ T6936] nvme nvme6: creating 1 I/O queues. [ 315.206521][ T6936] nvme nvme6: new ctrl: "testsubsys" [ 316.089117][ C0] net_ratelimit: 28 callbacks suppressed [ 317.823251][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.830342][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.113995][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 320.258928][ T26] audit: type=1800 audit(1792755913.211:95): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="attr_allow_any_host" dev="configfs" ino=42346 res=0 errno=0 [ 320.293480][ T6981] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 320.418437][ T26] audit: type=1800 audit(1792755913.231:96): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="addr_trtype" dev="configfs" ino=42349 res=0 errno=0 [ 320.512735][ T6990] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 322.090462][ C0] net_ratelimit: 69 callbacks suppressed [ 326.088691][ T7020] loop2: detected capacity change from 0 to 512 [ 326.355034][ T7020] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 326.471005][ T7020] EXT4-fs (loop2): 1 truncate cleaned up [ 326.515069][ T7020] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 327.078901][ T26] audit: type=1800 audit(1792755920.011:97): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.790" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 327.134839][ C0] net_ratelimit: 41 callbacks suppressed [ 329.403165][ T7045] rxe_eth0 speed is unknown, defaulting to 1000 [ 329.629641][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 329.846018][ T4195] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 329.974587][ T7071] capability: warning: `syz.5.806' uses 32-bit capabilities (legacy support in use) [ 330.115979][ T4195] usb 3-1: Using ep0 maxpacket: 8 [ 330.250788][ T7076] loop0: detected capacity change from 0 to 512 [ 330.257601][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.329391][ T4195] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 330.407076][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.479238][ T4195] usb 3-1: config 0 descriptor?? [ 330.515525][ T7076] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 330.598719][ T7076] EXT4-fs (loop0): 1 truncate cleaned up [ 330.662468][ T7076] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 330.769553][ T4195] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 330.917212][ T26] audit: type=1800 audit(1792755923.871:98): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.812" name="attr_allow_any_host" dev="configfs" ino=42821 res=0 errno=0 [ 331.402019][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 331.442103][ T26] audit: type=1800 audit(1792755924.171:99): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 331.756136][ T4195] Bluetooth: hci1: command 0x041b tx timeout [ 333.101329][ C0] net_ratelimit: 58 callbacks suppressed [ 333.282063][ T4269] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 333.346546][ T4266] usb 3-1: USB disconnect, device number 11 [ 333.716179][ T4269] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.778301][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.785387][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.797854][ T4269] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.909096][ T7045] device bridge_slave_0 entered promiscuous mode [ 333.976489][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.026502][ T4269] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 334.066218][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.088024][ T4269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.123015][ T7045] device bridge_slave_1 entered promiscuous mode [ 334.151812][ T4269] usb 6-1: Product: syz [ 334.173794][ T26] audit: type=1800 audit(1792755927.121:100): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.820" name="attr_allow_any_host" dev="configfs" ino=42902 res=0 errno=0 [ 334.213373][ T7113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 334.222546][ T4269] usb 6-1: Manufacturer: syz [ 334.256016][ T4269] usb 6-1: SerialNumber: syz [ 334.373862][ T26] audit: type=1800 audit(1792755927.161:101): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.820" name="addr_trtype" dev="configfs" ino=42903 res=0 errno=0 [ 334.429872][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.538876][ T4269] kaweth 6-1:1.0: Firmware present in device. [ 334.561835][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.596139][ T4269] kaweth 6-1:1.0: Error reading configuration (-71), no net device created [ 334.646526][ T4269] kaweth: probe of 6-1:1.0 failed with error -5 [ 334.708920][ T26] audit: type=1800 audit(1792755927.661:102): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.822" name="attr_allow_any_host" dev="configfs" ino=42991 res=0 errno=0 [ 334.747917][ T4269] usb 6-1: USB disconnect, device number 4 [ 334.855547][ T7124] fuse: Unknown parameter '0x0000000000000003' [ 334.927063][ T7045] team0: Port device team_slave_0 added [ 335.002352][ T7045] team0: Port device team_slave_1 added [ 336.619721][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 337.023137][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.030822][ T26] audit: type=1800 audit(1792755929.981:103): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="attr_allow_any_host" dev="configfs" ino=43087 res=0 errno=0 [ 337.068963][ T7143] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 337.116701][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.114761][ T4421] net_ratelimit: 61 callbacks suppressed [ 338.178352][ T26] audit: type=1800 audit(1792755930.021:104): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="addr_trtype" dev="configfs" ino=43089 res=0 errno=0 [ 338.315683][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.421930][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.488317][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.514679][ T4195] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 338.704215][ T7158] device-mapper: ioctl: device has been removed from the dev hash table. [ 338.719907][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 338.733780][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.906239][ T4195] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.126142][ T4195] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 339.173451][ T7045] device hsr_slave_0 entered promiscuous mode [ 339.185323][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.228486][ T4195] usb 6-1: Product: syz [ 339.251619][ T4195] usb 6-1: Manufacturer: syz [ 339.280698][ T4195] usb 6-1: SerialNumber: syz [ 339.321993][ T4195] usb 6-1: config 0 descriptor?? [ 339.364969][ T7045] device hsr_slave_1 entered promiscuous mode [ 339.388386][ T4195] ati_remote_probe: Unexpected desc.bNumEndpoints [ 340.998692][ T4266] usb 6-1: USB disconnect, device number 5 [ 341.024050][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.051778][ T7045] Cannot create hsr debugfs directory [ 343.415295][ C0] net_ratelimit: 47 callbacks suppressed [ 343.803796][ T7199] udc dummy_udc.0: failed to start g1: -19 [ 343.909080][ T7045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.028972][ T7045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.097978][ T4195] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 344.220638][ T4195] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.244619][ T26] audit: type=1800 audit(1792755937.191:105): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.834" name="attr_allow_any_host" dev="configfs" ino=43506 res=0 errno=0 [ 344.382594][ T7045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.506290][ T7045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.091693][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.202744][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.376732][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.680479][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.667998][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.727325][ T26] audit: type=1800 audit(1792755939.681:106): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.867" name="attr_allow_any_host" dev="configfs" ino=43652 res=0 errno=0 [ 346.754057][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.820396][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.827519][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.950589][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.008776][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.086745][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.157975][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.165110][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.312665][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.515245][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.833168][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.921887][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.981099][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.051910][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.138492][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.591193][ C0] net_ratelimit: 82 callbacks suppressed [ 348.632928][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.703584][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.759352][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.788833][ T26] audit: type=1800 audit(1792755941.741:107): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.879" name="attr_allow_any_host" dev="configfs" ino=43776 res=0 errno=0 [ 348.838035][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.893933][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.014020][ T4269] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 349.124449][ T7268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.426168][ T4269] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.486749][ T4269] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.549196][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.588860][ T4269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.605521][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.650324][ T4269] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.668235][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.679169][ T7279] loop2: detected capacity change from 0 to 512 [ 349.823297][ T7279] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 349.876256][ T4269] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.928237][ T7279] EXT4-fs (loop2): 1 truncate cleaned up [ 349.942948][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.955341][ T7279] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 350.010338][ T4269] usb 2-1: Product: syz [ 350.045598][ T4269] usb 2-1: Manufacturer: syz [ 350.108082][ T4269] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 350.473966][ T26] audit: type=1800 audit(1792755943.401:108): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.868" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 350.521194][ T4269] usb 2-1: USB disconnect, device number 9 [ 350.902382][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.955216][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.010507][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'. [ 351.026182][ T7307] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 351.076920][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'. [ 351.189101][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.230000][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.569312][ T7045] device veth0_vlan entered promiscuous mode [ 351.588420][ T7316] fuse: Unknown parameter 'fd0x0000000000000003' [ 351.615709][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.644973][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.710146][ T7320] loop0: detected capacity change from 0 to 512 [ 351.728244][ T7045] device veth1_vlan entered promiscuous mode [ 351.824918][ T7320] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 351.904402][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.926325][ T7320] EXT4-fs (loop0): 1 truncate cleaned up [ 351.938710][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.954949][ T7320] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 351.990236][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.108831][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.123505][ T7330] FAULT_INJECTION: forcing a failure. [ 352.123505][ T7330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.138248][ T7330] CPU: 0 PID: 7330 Comm: syz.2.900 Not tainted syzkaller #0 [ 352.145687][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.156003][ T7330] Call Trace: [ 352.159301][ T7330] [ 352.162252][ T7330] dump_stack_lvl+0x188/0x250 [ 352.166946][ T7330] ? show_regs_print_info+0x20/0x20 [ 352.172145][ T7330] ? load_image+0x410/0x410 [ 352.176673][ T7330] ? uncharge_page+0x490/0x490 [ 352.181439][ T7330] should_fail+0x383/0x4b0 [ 352.185859][ T7330] prepare_alloc_pages+0x1e3/0x5b0 [ 352.190989][ T7330] __alloc_pages+0x11b/0x480 [ 352.195652][ T7330] ? zone_statistics+0x170/0x170 [ 352.200643][ T7330] ? rcu_lock_acquire+0x30/0x30 [ 352.205533][ T7330] ? alloc_pages+0x452/0x560 [ 352.210131][ T7330] __get_free_pages+0x8/0x30 [ 352.214724][ T7330] __tlb_remove_page_size+0x1f2/0x3f0 [ 352.220109][ T7330] unmap_page_range+0xfcf/0x2410 [ 352.225090][ T7330] unmap_vmas+0x131/0x250 [ 352.229423][ T7330] ? unmap_page_range+0x2410/0x2410 [ 352.234617][ T7330] ? __mutex_lock_common+0x435/0x2400 [ 352.239990][ T7330] ? exit_mm_release+0x16/0x30 [ 352.244776][ T7330] exit_mmap+0x3b9/0x640 [ 352.249024][ T7330] ? vm_brk+0x20/0x20 [ 352.253022][ T7330] ? uprobe_clear_state+0x2f6/0x460 [ 352.258228][ T7330] __mmput+0x115/0x390 [ 352.262418][ T7330] exit_mm+0x632/0x7b0 [ 352.266495][ T7330] ? perf_pmu_migrate_context+0xb70/0xb70 [ 352.272221][ T7330] ? do_exit+0x2110/0x2110 [ 352.276656][ T7330] ? __ia32_sys_timer_delete+0x40/0x40 [ 352.282118][ T7330] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 352.287600][ T7330] ? tty_audit_exit+0x149/0x1f0 [ 352.292457][ T7330] do_exit+0x5b8/0x2110 [ 352.296618][ T7330] ? put_task_struct+0x80/0x80 [ 352.301388][ T7330] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 352.307373][ T7330] ? _raw_spin_lock_irq+0xb7/0xf0 [ 352.312399][ T7330] do_group_exit+0x12c/0x2f0 [ 352.317005][ T7330] ? lockdep_hardirqs_on+0x94/0x140 [ 352.322212][ T7330] get_signal+0x7eb/0x12e0 [ 352.326666][ T7330] arch_do_signal_or_restart+0xe6/0x12a0 [ 352.332337][ T7330] ? futex_exit_release+0x1c0/0x1c0 [ 352.337551][ T7330] ? get_sigframe_size+0x10/0x10 [ 352.342496][ T7330] ? __context_tracking_exit+0x4c/0x80 [ 352.347961][ T7330] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 352.354160][ T7330] ? exit_to_user_mode_loop+0x3b/0x130 [ 352.359678][ T7330] exit_to_user_mode_loop+0x9e/0x130 [ 352.364984][ T7330] exit_to_user_mode_prepare+0xee/0x180 [ 352.370535][ T7330] syscall_exit_to_user_mode+0x16/0x40 [ 352.376013][ T7330] do_syscall_64+0x58/0xa0 [ 352.380456][ T7330] ? clear_bhb_loop+0x30/0x80 [ 352.385137][ T7330] ? clear_bhb_loop+0x30/0x80 [ 352.389987][ T7330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.395899][ T7330] RIP: 0033:0x7efd41b8f559 [ 352.400324][ T7330] Code: Unable to access opcode bytes at RIP 0x7efd41b8f52f. [ 352.407683][ T7330] RSP: 002b:00007efd3fde60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.416109][ T7330] RAX: fffffffffffffe00 RBX: 00007efd41e15fa8 RCX: 00007efd41b8f559 [ 352.424085][ T7330] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd41e15fa8 [ 352.432050][ T7330] RBP: 00007efd41e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 352.440023][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.447992][ T7330] R13: 00007efd41e16038 R14: 00007ffed66ce2d0 R15: 00007ffed66ce3b8 [ 352.455970][ T7330] [ 352.525467][ T7045] device veth0_macvtap entered promiscuous mode [ 352.583715][ T7045] device veth1_macvtap entered promiscuous mode [ 352.940147][ T26] audit: type=1800 audit(1792755945.871:109): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.897" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 352.981625][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.675969][ C0] net_ratelimit: 59 callbacks suppressed [ 354.659898][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.771707][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.829927][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.894612][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.957325][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.025299][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.060782][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.085762][ T7354] fuse: Unknown parameter 'fd0x0000000000000003' [ 355.093574][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.115563][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.161765][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.204557][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.314504][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.372199][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.417742][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.459503][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.481141][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.495970][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.510203][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.521151][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.538399][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.554566][ T7365] loop0: detected capacity change from 0 to 512 [ 355.580057][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.604601][ T7365] EXT4-fs (loop0): Ignoring removed nobh option [ 355.628626][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.659616][ T7365] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.912: invalid indirect mapped block 256 (level 2) [ 355.680145][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.701703][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.718663][ T7365] EXT4-fs (loop0): 2 truncates cleaned up [ 355.742169][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.910'. [ 355.773781][ T7365] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 355.791717][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.825128][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.877585][ T7045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.048975][ T7045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.088294][ T7045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.125244][ T7045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.568449][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.623902][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.677938][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.807451][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.848611][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.915252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.961283][ T7390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.040937][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.113634][ T7393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 357.403672][ T26] audit: type=1800 audit(1792755950.351:110): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.924" name="attr_allow_any_host" dev="configfs" ino=44547 res=0 errno=0 [ 357.564359][ T4269] nvmet: creating controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 357.658524][ T7397] nvme nvme7: creating 1 I/O queues. [ 357.697647][ T7397] nvme nvme7: new ctrl: "testsubsys" [ 358.886789][ C0] net_ratelimit: 99 callbacks suppressed [ 359.531864][ T7367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 359.750915][ T7404] input: syz0 as /devices/virtual/input/input7 [ 359.906601][ T26] audit: type=1800 audit(1792755952.861:111): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.936" name="attr_allow_any_host" dev="configfs" ino=44657 res=0 errno=0 [ 360.125698][ T4266] nvmet: creating controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 360.127159][ T7428] nvme nvme8: creating 1 I/O queues. [ 360.128626][ T7428] nvme nvme8: new ctrl: "testsubsys" [ 361.803212][ T26] audit: type=1800 audit(1792755954.751:112): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.943" name="attr_allow_any_host" dev="configfs" ino=44755 res=0 errno=0 [ 361.833064][ T7457] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 361.984403][ T26] audit: type=1800 audit(1792755954.781:113): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.943" name="addr_trtype" dev="configfs" ino=44756 res=0 errno=0 [ 362.107625][ T7466] FAULT_INJECTION: forcing a failure. [ 362.107625][ T7466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.120992][ T7466] CPU: 0 PID: 7466 Comm: syz.0.948 Not tainted syzkaller #0 [ 362.128276][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.138326][ T7466] Call Trace: [ 362.141620][ T7466] [ 362.144552][ T7466] dump_stack_lvl+0x188/0x250 [ 362.149255][ T7466] ? show_regs_print_info+0x20/0x20 [ 362.154461][ T7466] ? load_image+0x410/0x410 [ 362.158970][ T7466] ? mark_lock+0x94/0x320 [ 362.163301][ T7466] should_fail+0x383/0x4b0 [ 362.167731][ T7466] prepare_alloc_pages+0x1e3/0x5b0 [ 362.172848][ T7466] __alloc_pages+0x11b/0x480 [ 362.177442][ T7466] ? zone_statistics+0x170/0x170 [ 362.182385][ T7466] ? rcu_lock_acquire+0x30/0x30 [ 362.187295][ T7466] ? alloc_pages+0x452/0x560 [ 362.191888][ T7466] __get_free_pages+0x8/0x30 [ 362.196567][ T7466] __tlb_remove_page_size+0x1f2/0x3f0 [ 362.201963][ T7466] unmap_page_range+0xfcf/0x2410 [ 362.206923][ T7466] unmap_vmas+0x131/0x250 [ 362.211345][ T7466] ? unmap_page_range+0x2410/0x2410 [ 362.216626][ T7466] ? __mutex_lock_common+0x435/0x2400 [ 362.222005][ T7466] ? exit_mm_release+0x16/0x30 [ 362.226775][ T7466] exit_mmap+0x3b9/0x640 [ 362.231024][ T7466] ? vm_brk+0x20/0x20 [ 362.235034][ T7466] ? uprobe_clear_state+0x2f6/0x460 [ 362.240264][ T7466] __mmput+0x115/0x390 [ 362.244334][ T7466] exit_mm+0x632/0x7b0 [ 362.248401][ T7466] ? perf_pmu_migrate_context+0xb70/0xb70 [ 362.254130][ T7466] ? do_exit+0x2110/0x2110 [ 362.258555][ T7466] ? __ia32_sys_timer_delete+0x40/0x40 [ 362.264030][ T7466] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 362.269509][ T7466] ? tty_audit_exit+0x149/0x1f0 [ 362.274364][ T7466] do_exit+0x5b8/0x2110 [ 362.278542][ T7466] ? put_task_struct+0x80/0x80 [ 362.283304][ T7466] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 362.289288][ T7466] ? _raw_spin_lock_irq+0xb7/0xf0 [ 362.294331][ T7466] do_group_exit+0x12c/0x2f0 [ 362.298921][ T7466] ? lockdep_hardirqs_on+0x94/0x140 [ 362.304118][ T7466] get_signal+0x7eb/0x12e0 [ 362.308564][ T7466] arch_do_signal_or_restart+0xe6/0x12a0 [ 362.314206][ T7466] ? futex_exit_release+0x1c0/0x1c0 [ 362.319406][ T7466] ? get_sigframe_size+0x10/0x10 [ 362.324360][ T7466] ? __context_tracking_exit+0x4c/0x80 [ 362.329827][ T7466] ? exit_to_user_mode_loop+0x3b/0x130 [ 362.335282][ T7466] exit_to_user_mode_loop+0x9e/0x130 [ 362.340563][ T7466] exit_to_user_mode_prepare+0xee/0x180 [ 362.346107][ T7466] syscall_exit_to_user_mode+0x16/0x40 [ 362.351737][ T7466] do_syscall_64+0x58/0xa0 [ 362.356147][ T7466] ? clear_bhb_loop+0x30/0x80 [ 362.360952][ T7466] ? clear_bhb_loop+0x30/0x80 [ 362.365652][ T7466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.371664][ T7466] RIP: 0033:0x7f289e234559 [ 362.376089][ T7466] Code: Unable to access opcode bytes at RIP 0x7f289e23452f. [ 362.383450][ T7466] RSP: 002b:00007f289c48b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 362.391866][ T7466] RAX: 0000000000000001 RBX: 00007f289e4bafa8 RCX: 00007f289e234559 [ 362.399841][ T7466] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f289e4bafac [ 362.407837][ T7466] RBP: 00007f289e4bafa0 R08: 0003560f3be93ccc R09: 0000000000000000 [ 362.415830][ T7466] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 362.423803][ T7466] R13: 00007f289e4bb038 R14: 00007ffeccd00120 R15: 00007ffeccd00208 [ 362.431883][ T7466] [ 362.472892][ T4195] nvmet: creating controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 362.567032][ T7457] nvme nvme9: creating 1 I/O queues. [ 362.614054][ T7457] nvme nvme9: new ctrl: "testsubsys" [ 362.829365][ T26] audit: type=1800 audit(1792755955.781:114): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.950" name="attr_allow_any_host" dev="configfs" ino=44840 res=0 errno=0 [ 362.858068][ T7476] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 363.005769][ T26] audit: type=1800 audit(1792755955.811:115): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.950" name="addr_trtype" dev="configfs" ino=44841 res=0 errno=0 [ 363.265256][ T4195] nvmet: creating controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 363.643161][ T7493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.651215][ T7493] IPv6: NLM_F_CREATE should be set when creating new route [ 363.658531][ T7493] IPv6: NLM_F_CREATE should be set when creating new route [ 363.693122][ T7476] nvme nvme10: creating 1 I/O queues. [ 363.725418][ T7476] nvme nvme10: new ctrl: "testsubsys" [ 363.995918][ C0] net_ratelimit: 90 callbacks suppressed [ 364.623527][ T26] audit: type=1800 audit(1792755957.571:116): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.960" name="attr_allow_any_host" dev="configfs" ino=44956 res=0 errno=0 [ 364.650108][ T7505] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 364.851218][ T26] audit: type=1800 audit(1792755957.601:117): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.960" name="addr_trtype" dev="configfs" ino=44957 res=0 errno=0 [ 364.938189][ T4269] nvmet: creating controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 364.957800][ T5776] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 365.014271][ T7505] nvme nvme11: creating 1 I/O queues. [ 365.033571][ T7505] nvme nvme11: new ctrl: "testsubsys" [ 365.338604][ T5776] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.385120][ T5776] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 365.400758][ T26] audit: type=1800 audit(1792755958.351:118): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.967" name="attr_allow_any_host" dev="configfs" ino=45040 res=0 errno=0 [ 365.426789][ T7525] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 365.460536][ T5776] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 365.499099][ T26] audit: type=1800 audit(1792755958.381:119): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.967" name="addr_trtype" dev="configfs" ino=45042 res=0 errno=0 [ 365.534817][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.652707][ T4195] nvmet: creating controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 366.616221][ T5776] dvbdev: DVB: registering new adapter (DEC2000-t) [ 366.701570][ T5776] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 367.224872][ T7525] nvme nvme12: creating 1 I/O queues. [ 367.241777][ T5776] ttusb_dec_send_command: command bulk message failed: error -71 [ 367.315185][ T5776] usb 7-1: USB disconnect, device number 2 [ 368.347170][ T7525] nvme nvme12: new ctrl: "testsubsys" [ 368.933255][ T7555] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 369.103835][ T7559] FAULT_INJECTION: forcing a failure. [ 369.103835][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 369.947410][ C0] net_ratelimit: 74 callbacks suppressed [ 371.094077][ T7559] CPU: 0 PID: 7559 Comm: syz.6.980 Not tainted syzkaller #0 [ 371.101405][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.111462][ T7559] Call Trace: [ 371.114745][ T7559] [ 371.117678][ T7559] dump_stack_lvl+0x188/0x250 [ 371.122394][ T7559] ? show_regs_print_info+0x20/0x20 [ 371.127594][ T7559] ? load_image+0x410/0x410 [ 371.132097][ T7559] ? __might_sleep+0xf0/0xf0 [ 371.136690][ T7559] ? __lock_acquire+0x7d40/0x7d40 [ 371.141714][ T7559] ? rcu_is_watching+0x11/0xa0 [ 371.146483][ T7559] should_fail+0x383/0x4b0 [ 371.150905][ T7559] should_failslab+0x5/0x20 [ 371.155424][ T7559] slab_pre_alloc_hook+0x51/0xc0 [ 371.160539][ T7559] kmem_cache_alloc_trace+0x47/0x290 [ 371.165822][ T7559] ? __se_sys_io_uring_setup+0x2096/0x2900 [ 371.171634][ T7559] __se_sys_io_uring_setup+0x2096/0x2900 [ 371.177279][ T7559] ? __x64_sys_io_uring_setup+0x60/0x60 [ 371.182835][ T7559] ? lockdep_hardirqs_on+0x94/0x140 [ 371.188053][ T7559] do_syscall_64+0x4c/0xa0 [ 371.192466][ T7559] ? clear_bhb_loop+0x30/0x80 [ 371.197145][ T7559] ? clear_bhb_loop+0x30/0x80 [ 371.201887][ T7559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.207804][ T7559] RIP: 0033:0x7f9b4567d559 [ 371.212231][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.231957][ T7559] RSP: 002b:00007f9b438d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 371.240372][ T7559] RAX: ffffffffffffffda RBX: 00007f9b45903fa0 RCX: 00007f9b4567d559 [ 371.248344][ T7559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000002bd2 [ 371.256330][ T7559] RBP: 00007f9b45714b20 R08: 0000000000000000 R09: 0000000000000000 [ 371.264306][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.272281][ T7559] R13: 00007f9b45904038 R14: 00007f9b45903fa0 R15: 00007ffe98ee5528 [ 371.280296][ T7559] [ 372.455797][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 373.618328][ T26] audit: type=1800 audit(1792755966.571:120): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.973" name="attr_allow_any_host" dev="configfs" ino=45276 res=0 errno=0 [ 373.666389][ T7593] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 373.781135][ T26] audit: type=1800 audit(1792755966.611:121): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.973" name="addr_trtype" dev="configfs" ino=45281 res=0 errno=0 [ 373.887401][ T4195] nvmet: creating controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 373.930528][ T7602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 373.937771][ T7602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.116647][ T7593] nvme nvme13: creating 1 I/O queues. [ 374.138703][ T7593] nvme nvme13: new ctrl: "testsubsys" [ 374.418574][ T7602] vhci_hcd vhci_hcd.0: Device attached [ 374.461237][ T7603] vhci_hcd: connection closed [ 374.488811][ T4422] vhci_hcd: stop threads [ 374.536823][ T4422] vhci_hcd: release socket [ 374.587493][ T4422] vhci_hcd: disconnect device [ 375.195904][ C0] net_ratelimit: 60 callbacks suppressed [ 377.011228][ T26] audit: type=1800 audit(1792755969.961:122): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1005" name="attr_allow_any_host" dev="configfs" ino=45463 res=0 errno=0 [ 377.054753][ T7638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 377.158731][ T7642] FAULT_INJECTION: forcing a failure. [ 377.158731][ T7642] name failslab, interval 1, probability 0, space 0, times 0 [ 377.203578][ T26] audit: type=1800 audit(1792755970.001:123): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1005" name="addr_trtype" dev="configfs" ino=45469 res=0 errno=0 [ 377.303936][ T7642] CPU: 0 PID: 7642 Comm: syz.5.1006 Not tainted syzkaller #0 [ 377.311358][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.321762][ T7642] Call Trace: [ 377.325047][ T7642] [ 377.327989][ T7642] dump_stack_lvl+0x188/0x250 [ 377.332680][ T7642] ? show_regs_print_info+0x20/0x20 [ 377.337882][ T7642] ? load_image+0x410/0x410 [ 377.342388][ T7642] ? __might_sleep+0xf0/0xf0 [ 377.347012][ T7642] ? __lock_acquire+0x7d40/0x7d40 [ 377.352071][ T7642] should_fail+0x383/0x4b0 [ 377.356497][ T7642] should_failslab+0x5/0x20 [ 377.361007][ T7642] slab_pre_alloc_hook+0x51/0xc0 [ 377.365950][ T7642] __kmalloc+0x6b/0x340 [ 377.370125][ T7642] ? get_callchain_buffers+0xd2/0x360 [ 377.375517][ T7642] get_callchain_buffers+0xd2/0x360 [ 377.380730][ T7642] stack_map_alloc+0x384/0x550 [ 377.385510][ T7642] map_create+0x481/0x2330 [ 377.389932][ T7642] ? bpf_lsm_bpf+0x5/0x10 [ 377.394264][ T7642] __sys_bpf+0x30a/0x6f0 [ 377.398507][ T7642] ? bpf_link_show_fdinfo+0x380/0x380 [ 377.403893][ T7642] __x64_sys_bpf+0x78/0x90 [ 377.408321][ T7642] do_syscall_64+0x4c/0xa0 [ 377.412907][ T7642] ? clear_bhb_loop+0x30/0x80 [ 377.417628][ T7642] ? clear_bhb_loop+0x30/0x80 [ 377.422337][ T7642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.428232][ T7642] RIP: 0033:0x7f3ab2ba1559 [ 377.432648][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.452264][ T7642] RSP: 002b:00007f3ab0df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.460693][ T7642] RAX: ffffffffffffffda RBX: 00007f3ab2e27fa0 RCX: 00007f3ab2ba1559 [ 377.468716][ T7642] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 377.476704][ T7642] RBP: 00007f3ab2c38b20 R08: 0000000000000000 R09: 0000000000000000 [ 377.484718][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.492706][ T7642] R13: 00007f3ab2e28038 R14: 00007f3ab2e27fa0 R15: 00007ffe2599de08 [ 377.500785][ T7642] [ 377.542358][ T4267] nvmet: creating controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 377.698750][ T7638] nvme nvme14: creating 1 I/O queues. [ 377.741871][ T7638] nvme nvme14: new ctrl: "testsubsys" [ 378.021454][ T7651] device syzkaller0 entered promiscuous mode [ 378.078045][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 378.398853][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.405165][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.746153][ T7678] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 380.235918][ C0] net_ratelimit: 91 callbacks suppressed [ 380.539985][ T26] audit: type=1800 audit(1792755973.491:124): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1022" name="addr_trtype" dev="configfs" ino=45771 res=0 errno=0 [ 380.577426][ T7690] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 380.822345][ T4195] nvmet: creating controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 380.954010][ T7690] nvme nvme15: creating 1 I/O queues. [ 381.008936][ T7690] nvme nvme15: new ctrl: "testsubsys" [ 381.656000][ T5776] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 382.756165][ T5776] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.821632][ T5776] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.912832][ T5776] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.964517][ T26] audit: type=1326 audit(1792755975.911:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 383.012830][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.086246][ T7712] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 383.155683][ T26] audit: type=1326 audit(1792755975.961:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 383.414135][ T26] audit: type=1326 audit(1792755975.961:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 383.471477][ T7733] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 383.519341][ T5776] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 383.637623][ T26] audit: type=1326 audit(1792755975.961:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 383.719875][ T4267] nvmet: creating controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 383.772390][ T7733] nvme nvme16: creating 1 I/O queues. [ 383.792307][ T7733] nvme nvme16: new ctrl: "testsubsys" [ 383.810100][ T26] audit: type=1326 audit(1792755975.961:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 383.946409][ T5776] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 383.970204][ T26] audit: type=1326 audit(1792755975.961:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 384.004523][ T5776] usb 7-1: config 1 has no interface number 0 [ 384.033572][ T7740] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1041' resets device [ 384.109499][ T26] audit: type=1326 audit(1792755975.961:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 385.592152][ C0] net_ratelimit: 47 callbacks suppressed [ 385.761291][ T5776] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 385.849149][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.893207][ T26] audit: type=1326 audit(1792755975.961:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 385.932962][ T5776] usb 7-1: Product: syz [ 385.981715][ T5776] usb 7-1: Manufacturer: syz [ 386.013415][ T5776] usb 7-1: SerialNumber: syz [ 386.022923][ T7747] loop2: detected capacity change from 0 to 512 [ 386.071144][ T4266] usb 2-1: USB disconnect, device number 10 [ 386.092640][ T5776] usb 7-1: can't set config #1, error -71 [ 386.167007][ T5776] usb 7-1: USB disconnect, device number 3 [ 386.176558][ T26] audit: type=1326 audit(1792755975.961:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 386.215121][ T7747] EXT4-fs (loop2): Ignoring removed nobh option [ 386.332142][ T7747] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1042: invalid indirect mapped block 256 (level 2) [ 386.444988][ T26] audit: type=1326 audit(1792755975.961:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 386.497298][ T7747] EXT4-fs (loop2): 2 truncates cleaned up [ 386.504797][ T7747] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 386.892231][ T26] audit: type=1326 audit(1792755975.961:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 387.088869][ T26] audit: type=1326 audit(1792755975.961:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 387.195969][ T7751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 387.705929][ T26] audit: type=1326 audit(1792755975.961:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 387.955529][ T26] audit: type=1326 audit(1792755975.961:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 388.128258][ T26] audit: type=1326 audit(1792755975.961:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 388.462786][ T26] audit: type=1326 audit(1792755975.961:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.1036" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd41b8f559 code=0x7ffc0000 [ 389.895741][ T7777] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 390.022311][ T26] audit: type=1800 audit(1792755976.401:141): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1040" name="attr_allow_any_host" dev="configfs" ino=45950 res=0 errno=0 [ 390.137625][ T4266] nvmet: creating controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 390.224483][ T7777] nvme nvme17: creating 1 I/O queues. [ 390.267066][ T7777] nvme nvme17: new ctrl: "testsubsys" [ 390.435416][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 390.776040][ T4266] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 390.955962][ C0] net_ratelimit: 79 callbacks suppressed [ 391.166629][ T4266] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 391.203204][ T4266] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.249310][ T4266] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.446372][ T4266] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 391.459216][ T7802] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 391.500544][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.534071][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 391.534081][ T26] audit: type=1326 audit(1792755984.481:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 391.573168][ T4266] usb 2-1: Product: syz [ 391.596146][ T4266] usb 2-1: Manufacturer: syz [ 391.619610][ T4266] usb 2-1: SerialNumber: syz [ 391.741859][ T26] audit: type=1326 audit(1792755984.521:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 393.786632][ T4266] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 393.902278][ T7818] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 393.973931][ T26] audit: type=1326 audit(1792755984.521:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 394.007102][ T4266] usb 2-1: USB disconnect, device number 11 [ 394.159944][ T7823] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 394.208759][ T26] audit: type=1326 audit(1792755984.521:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 394.235249][ T5776] nvmet: creating controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 394.467174][ T26] audit: type=1326 audit(1792755984.521:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 394.559233][ T7818] nvme nvme18: creating 1 I/O queues. [ 394.581243][ T7818] nvme nvme18: new ctrl: "testsubsys" [ 394.612119][ T26] audit: type=1326 audit(1792755984.531:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 394.705982][ T5776] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 394.805071][ T4266] nvmet: creating controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 394.833501][ T26] audit: type=1326 audit(1792755984.531:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 394.941832][ T7835] loop2: detected capacity change from 0 to 512 [ 394.976056][ T26] audit: type=1326 audit(1792755984.521:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289e234559 code=0x7ffc0000 [ 395.000482][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 395.034975][ T7835] EXT4-fs (loop2): Ignoring removed nobh option [ 395.116731][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.148530][ T7835] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1069: invalid indirect mapped block 256 (level 2) [ 395.165413][ T5776] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 395.185553][ T26] audit: type=1800 audit(1792755986.841:153): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1064" name="attr_allow_any_host" dev="configfs" ino=46246 res=0 errno=0 [ 395.226274][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.234686][ T7835] EXT4-fs (loop2): 2 truncates cleaned up [ 395.264849][ T7835] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 395.297088][ T5776] usb 2-1: config 0 descriptor?? [ 395.316143][ T26] audit: type=1800 audit(1792755986.851:154): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1064" name="addr_trtype" dev="configfs" ino=46251 res=0 errno=0 [ 395.509215][ T5776] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 395.607663][ T7823] nvme nvme19: creating 1 I/O queues. [ 395.637036][ T7823] nvme nvme19: new ctrl: "testsubsys" [ 395.767439][ T3545] bcm5974 2-1:0.0: could not read from device [ 395.867446][ T7826] bcm5974 2-1:0.0: could not read from device [ 395.874483][ T5776] usb 2-1: USB disconnect, device number 12 [ 396.079557][ C0] net_ratelimit: 56 callbacks suppressed [ 397.835089][ T7860] Bluetooth: hci0: unsupported parameter 255 [ 397.880985][ T7860] Bluetooth: hci0: unsupported parameter 255 [ 398.356038][ T5776] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 398.474097][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 398.474106][ T26] audit: type=1800 audit(1792755991.421:156): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1079" name="attr_allow_any_host" dev="configfs" ino=46434 res=0 errno=0 [ 398.526322][ T7868] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 398.641200][ T26] audit: type=1800 audit(1792755991.471:157): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1079" name="addr_trtype" dev="configfs" ino=46435 res=0 errno=0 [ 398.701955][ T4267] nvmet: creating controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 398.736422][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.775490][ T5776] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.840997][ T7868] nvme nvme20: creating 1 I/O queues. [ 398.872557][ T7868] nvme nvme20: new ctrl: "testsubsys" [ 398.986198][ T5776] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 399.025723][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.066360][ T5776] usb 2-1: Product: syz [ 399.070582][ T5776] usb 2-1: Manufacturer: syz [ 399.110217][ T5776] usb 2-1: SerialNumber: syz [ 399.242105][ T26] audit: type=1800 audit(1792755992.191:158): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="attr_allow_any_host" dev="configfs" ino=46468 res=0 errno=0 [ 399.275019][ T7875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 399.370874][ T26] audit: type=1800 audit(1792755992.221:159): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="addr_trtype" dev="configfs" ino=46469 res=0 errno=0 [ 399.452118][ T5774] nvmet: creating controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:026bd488-00dc-49e7-98ef-0d91b4bf64f6. [ 399.544632][ T7875] nvme nvme21: creating 1 I/O queues. [ 399.570251][ T7875] nvme nvme21: new ctrl: "testsubsys" [ 399.766068][ T5776] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 399.796157][ T7880] loop2: detected capacity change from 0 to 1024 [ 399.810761][ T5776] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 399.870066][ T5776] speedtch: probe of 2-1:1.0 failed with error -71 [ 400.194091][ T7881] ------------[ cut here ]------------ [ 400.202023][ T7881] WARNING: CPU: 0 PID: 7881 at kernel/trace/ring_buffer.c:3485 check_buffer+0x7d7/0x880 [ 400.212115][ T7881] Modules linked in: [ 400.216051][ T7881] CPU: 0 PID: 7881 Comm: syz.2.1081 Not tainted syzkaller #0 [ 400.223421][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.234276][ T7881] RIP: 0010:check_buffer+0x7d7/0x880 [ 400.239692][ T7881] Code: 74 24 18 e8 5b 12 42 08 48 c7 c7 60 6e 19 97 be 04 00 00 00 e8 6a 4f 42 00 f0 ff 0d c3 53 9d 15 e9 a9 fe ff ff e8 b9 08 fd ff <0f> 0b e9 fa fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 f8 ff [ 400.260906][ T7881] RSP: 0018:ffffc9000335f7e0 EFLAGS: 00010287 [ 400.267020][ T7881] RAX: ffffffff817c1aa7 RBX: 000000244c78293e RCX: 0000000000080000 [ 400.274996][ T7881] RDX: ffffc9000f9df000 RSI: 0000000000000094 RDI: 0000000000000095 [ 400.283003][ T7881] RBP: 0000000000000002 R08: ffff888017878807 R09: 1ffff11002f0f100 [ 400.291004][ T7881] R10: dffffc0000000000 R11: ffffed1002f0f101 R12: ffff888017878800 [ 400.299052][ T7881] R13: dffffc0000000000 R14: ffffc9000335f9a0 R15: dffffc0000000000 [ 400.307055][ T7881] FS: 00007efd3fdc56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 400.316410][ T7881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.323096][ T7881] CR2: 000000110c36a201 CR3: 0000000075ee4000 CR4: 00000000003506f0 [ 400.331166][ T7881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.339216][ T7881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.347263][ T7881] Call Trace: [ 400.350566][ T7881] [ 400.353518][ T7881] __rb_reserve_next+0x4d9/0xd00 [ 400.358521][ T7881] ring_buffer_lock_reserve+0xadd/0xed0 [ 400.364094][ T7881] trace_event_buffer_lock_reserve+0xd4/0x6a0 [ 400.370206][ T7881] trace_event_buffer_reserve+0x2a8/0x3d0 [ 400.375954][ T7881] ? trace_event_ignore_this_pid+0x130/0x130 [ 400.381967][ T7881] event_inject_write+0x17e4/0x1c10 [ 400.387248][ T7881] ? event_inject_read+0x10/0x10 [ 400.392482][ T7881] ? rcu_read_lock_any_held+0xb0/0x130 [ 400.398321][ T7881] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 400.403809][ T7881] ? end_current_label_crit_section+0x14b/0x170 [ 400.410125][ T7881] ? common_file_perm+0x171/0x1c0 [ 400.415178][ T7881] ? event_inject_read+0x10/0x10 [ 400.420480][ T7881] vfs_write+0x304/0xd70 [ 400.426476][ T7881] ? file_end_write+0x250/0x250 [ 400.431358][ T7881] ? mutex_lock_nested+0x17/0x20 [ 400.436365][ T7881] ? __fdget_pos+0x2bf/0x370 [ 400.441192][ T7881] ? ksys_write+0x70/0x260 [ 400.445627][ T7881] ksys_write+0x153/0x260 [ 400.450002][ T7881] ? __ia32_sys_read+0x80/0x80 [ 400.454799][ T7881] ? lockdep_hardirqs_on+0x94/0x140 [ 400.460538][ T7881] do_syscall_64+0x4c/0xa0 [ 400.464967][ T7881] ? clear_bhb_loop+0x30/0x80 [ 400.469688][ T7881] ? clear_bhb_loop+0x30/0x80 [ 400.474570][ T7881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.480532][ T7881] RIP: 0033:0x7efd41b8f559 [ 400.484956][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.504747][ T7881] RSP: 002b:00007efd3fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.513219][ T7881] RAX: ffffffffffffffda RBX: 00007efd41e16090 RCX: 00007efd41b8f559 [ 400.521466][ T7881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 400.529548][ T7881] RBP: 00007efd41c26b20 R08: 0000000000000000 R09: 0000000000000000 [ 400.537860][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.545875][ T7881] R13: 00007efd41e16128 R14: 00007efd41e16090 R15: 00007ffed66ce3b8 [ 400.553867][ T7881] [ 400.556941][ T7881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.564320][ T7881] CPU: 0 PID: 7881 Comm: syz.2.1081 Not tainted syzkaller #0 [ 400.571798][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.581878][ T7881] Call Trace: [ 400.585308][ T7881] [ 400.588267][ T7881] dump_stack_lvl+0x188/0x250 [ 400.593425][ T7881] ? show_regs_print_info+0x20/0x20 [ 400.598644][ T7881] ? load_image+0x410/0x410 [ 400.603289][ T7881] panic+0x2f8/0x850 [ 400.608479][ T7881] ? bpf_jit_dump+0xd0/0xd0 [ 400.613281][ T7881] ? check_buffer+0x7d7/0x880 [ 400.619916][ T7881] __warn+0x248/0x2b0 [ 400.623922][ T7881] ? check_buffer+0x7d7/0x880 [ 400.628607][ T7881] report_bug+0x1b9/0x2e0 [ 400.632954][ T7881] handle_bug+0x3a/0x70 [ 400.637129][ T7881] exc_invalid_op+0x16/0x40 [ 400.641670][ T7881] asm_exc_invalid_op+0x16/0x20 [ 400.646533][ T7881] RIP: 0010:check_buffer+0x7d7/0x880 [ 400.651823][ T7881] Code: 74 24 18 e8 5b 12 42 08 48 c7 c7 60 6e 19 97 be 04 00 00 00 e8 6a 4f 42 00 f0 ff 0d c3 53 9d 15 e9 a9 fe ff ff e8 b9 08 fd ff <0f> 0b e9 fa fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 f8 ff [ 400.671440][ T7881] RSP: 0018:ffffc9000335f7e0 EFLAGS: 00010287 [ 400.677513][ T7881] RAX: ffffffff817c1aa7 RBX: 000000244c78293e RCX: 0000000000080000 [ 400.685491][ T7881] RDX: ffffc9000f9df000 RSI: 0000000000000094 RDI: 0000000000000095 [ 400.693558][ T7881] RBP: 0000000000000002 R08: ffff888017878807 R09: 1ffff11002f0f100 [ 400.701527][ T7881] R10: dffffc0000000000 R11: ffffed1002f0f101 R12: ffff888017878800 [ 400.709572][ T7881] R13: dffffc0000000000 R14: ffffc9000335f9a0 R15: dffffc0000000000 [ 400.717735][ T7881] ? check_buffer+0x7d7/0x880 [ 400.722430][ T7881] __rb_reserve_next+0x4d9/0xd00 [ 400.727398][ T7881] ring_buffer_lock_reserve+0xadd/0xed0 [ 400.732964][ T7881] trace_event_buffer_lock_reserve+0xd4/0x6a0 [ 400.739053][ T7881] trace_event_buffer_reserve+0x2a8/0x3d0 [ 400.744808][ T7881] ? trace_event_ignore_this_pid+0x130/0x130 [ 400.751019][ T7881] event_inject_write+0x17e4/0x1c10 [ 400.756243][ T7881] ? event_inject_read+0x10/0x10 [ 400.761189][ T7881] ? rcu_read_lock_any_held+0xb0/0x130 [ 400.766654][ T7881] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 400.771946][ T7881] ? end_current_label_crit_section+0x14b/0x170 [ 400.778187][ T7881] ? common_file_perm+0x171/0x1c0 [ 400.783216][ T7881] ? event_inject_read+0x10/0x10 [ 400.788241][ T7881] vfs_write+0x304/0xd70 [ 400.792511][ T7881] ? file_end_write+0x250/0x250 [ 400.797372][ T7881] ? mutex_lock_nested+0x17/0x20 [ 400.802317][ T7881] ? __fdget_pos+0x2bf/0x370 [ 400.806901][ T7881] ? ksys_write+0x70/0x260 [ 400.811403][ T7881] ksys_write+0x153/0x260 [ 400.815744][ T7881] ? __ia32_sys_read+0x80/0x80 [ 400.820506][ T7881] ? lockdep_hardirqs_on+0x94/0x140 [ 400.825706][ T7881] do_syscall_64+0x4c/0xa0 [ 400.830135][ T7881] ? clear_bhb_loop+0x30/0x80 [ 400.834812][ T7881] ? clear_bhb_loop+0x30/0x80 [ 400.839504][ T7881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.845394][ T7881] RIP: 0033:0x7efd41b8f559 [ 400.849812][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.869437][ T7881] RSP: 002b:00007efd3fdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.877868][ T7881] RAX: ffffffffffffffda RBX: 00007efd41e16090 RCX: 00007efd41b8f559 [ 400.885839][ T7881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 400.893803][ T7881] RBP: 00007efd41c26b20 R08: 0000000000000000 R09: 0000000000000000 [ 400.901791][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.909902][ T7881] R13: 00007efd41e16128 R14: 00007efd41e16090 R15: 00007ffed66ce3b8 [ 400.917900][ T7881] [ 400.921006][ T7881] Kernel Offset: disabled [ 400.925823][ T7881] Rebooting in 86400 seconds..