last executing test programs: 3m53.332115977s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x70) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="a8c76f6febeecf56d2e56ad4dda3f59739b5ac71f9229a1427d53452e6fb7d7896ef92d86175", 0x26) 3m52.051053187s ago: executing program 2 (id=197): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) fallocate(r0, 0x14, 0xa7, 0x4db) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10) r1 = semget$private(0x0, 0x4, 0x381) semctl$GETVAL(r1, 0x1, 0xc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\n', 0x2) close(r3) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 3m49.322416503s ago: executing program 2 (id=201): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) r4 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) sendto$packet(r4, 0x0, 0x0, 0x20000085, &(0x7f0000000180)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @local}, 0x14) 3m48.953983702s ago: executing program 2 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x1c}}, 0x0) 3m48.840417764s ago: executing program 2 (id=207): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x406}}}, 0x7) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x80000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r3, 0xb01}, 0x14}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') 3m47.928745796s ago: executing program 2 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m32.447231056s ago: executing program 32 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m2.23353369s ago: executing program 3 (id=348): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0xfffffffa) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, 0x0, 0x2010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES16, @ANYRESOCT=r4, @ANYBLOB="9e94f1924150c802b3ef7ea73646f1d7b2ffa0b9ebc10b28db0cbb4e5a055687f6", @ANYRES16=r2, @ANYRESDEC=r4], 0x50) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000006240)=0x1, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000062c0), r0) 3m1.075751778s ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x4, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x4, r1}, 0x10) 3m0.715601755s ago: executing program 3 (id=351): r0 = openat(0xffffffffffffff9c, 0x0, 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r5, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r4, &(0x7f0000000100), 0xb) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0xc, 0x0, &(0x7f00000004c0)) 2m59.71640154s ago: executing program 3 (id=352): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x914d, 0x0, 0x2, 0x3b5}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x67a1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x8000, 0x20fe, 0x39c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd9f, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x119}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m56.78069902s ago: executing program 3 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x4, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x4, r1}, 0x10) 2m56.262723153s ago: executing program 3 (id=362): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2m54.319612489s ago: executing program 33 (id=362): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 14.007251055s ago: executing program 0 (id=767): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x138, 0x24, 0x208, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x56ea}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xad7a47ef}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffff352}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xfff9, 0x4, 0x2, 0x2, 0x2, 0x8}}, {0x14, 0x2, [0x4, 0x4, 0x5, 0x4, 0x9, 0x8, 0xf880, 0x81]}}, {{0x1c, 0x1, {0x4, 0x81, 0x180, 0xbefd, 0x2, 0x100, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xa2e]}}, {{0x1c, 0x1, {0xea, 0x4, 0xbb6, 0x800, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x400, 0x1]}}, {{0x1c, 0x1, {0x2, 0xf4, 0x6, 0x3, 0x1, 0x3, 0x8000, 0x7}}, {0x12, 0x2, [0x3817, 0xc, 0x200, 0x0, 0xbadd, 0x7fff, 0x100]}}]}]}, 0x138}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000180)='nfs4\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdir(&(0x7f0000000000)='./cgroup\x00', 0x1fa) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11.847302107s ago: executing program 5 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100)) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]}) 8.578515135s ago: executing program 0 (id=774): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 8.559460195s ago: executing program 4 (id=775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.347352031s ago: executing program 0 (id=777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='loop', 0x4) close(r4) symlinkat(&(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r5, &(0x7f0000000580)='transport=loop,nqn=testsubsys', 0x1d) close(r5) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/nvme/nvme0/rescan_controller\x00', 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) 8.336486181s ago: executing program 1 (id=778): gettid() ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x4c, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.115334856s ago: executing program 1 (id=779): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8.006395319s ago: executing program 5 (id=780): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') 7.741743525s ago: executing program 5 (id=781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x2, 0x5, 0xfc00, 0x2, 0x8, 0x71d6}, 0x14) 7.688567946s ago: executing program 0 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, 0x0, &(0x7f0000000440)=""/130}, 0x1c) 7.581127789s ago: executing program 5 (id=783): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x138, 0x24, 0x208, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x56ea}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xad7a47ef}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffff352}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xfff9, 0x4, 0x2, 0x2, 0x2, 0x8}}, {0x14, 0x2, [0x4, 0x4, 0x5, 0x4, 0x9, 0x8, 0xf880, 0x81]}}, {{0x1c, 0x1, {0x4, 0x81, 0x180, 0xbefd, 0x2, 0x100, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xa2e]}}, {{0x1c, 0x1, {0xea, 0x4, 0xbb6, 0x800, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x400, 0x1]}}, {{0x1c, 0x1, {0x2, 0xf4, 0x6, 0x3, 0x1, 0x3, 0x8000, 0x7}}, {0x12, 0x2, [0x3817, 0xc, 0x200, 0x0, 0xbadd, 0x7fff, 0x100]}}]}]}, 0x138}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000180)='nfs4\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdir(&(0x7f0000000000)='./cgroup\x00', 0x1fa) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7.580300619s ago: executing program 4 (id=784): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 7.508967181s ago: executing program 0 (id=785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @local, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2}) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xcffb, 0xe, "0062ba7d0400"}) syz_open_pts(r4, 0xa0200) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x102, 0x0) 6.587603653s ago: executing program 4 (id=786): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 5.803751352s ago: executing program 4 (id=787): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000900), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.987466675s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100)) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]}) 3.983639015s ago: executing program 0 (id=789): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x140) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000300)='p:_est/-vent1 ./file0:0', 0x17) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 3.839325828s ago: executing program 1 (id=790): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') 723.338673ms ago: executing program 1 (id=791): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) 498.444708ms ago: executing program 1 (id=792): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x10000000001780}, {0x10, 0x0, 0x8}]}) 497.536558ms ago: executing program 5 (id=793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 294.648743ms ago: executing program 1 (id=794): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0xfdef, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x4044000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sync() syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) open(0x0, 0x44ac42, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x200008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 183.155986ms ago: executing program 5 (id=795): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vim2m(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) unshare(0xa000200) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) close(0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) keyctl$read(0xb, r5, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 4 (id=796): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') kernel console output (not intermixed with test programs): 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.054826][ T6590] RSP: 002b:00007f458358dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 156.063314][ T6590] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f458279e1d9 [ 156.071498][ T6590] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 156.079592][ T6590] RBP: 00007f4582835888 R08: 0000000000000000 R09: 0000000000000000 [ 156.087665][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.095672][ T6590] R13: 00007f4582a26038 R14: 00007f4582a25fa0 R15: 00007ffe7449e958 [ 156.103989][ T6590] [ 156.458908][ T6607] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 156.519306][ T6607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.667231][ T6617] netlink: 84 bytes leftover after parsing attributes in process `syz.0.214'. [ 160.393834][ T6643] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 160.475979][ T6643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.533646][ T6646] NILFS (nbd1): device size too small [ 161.203124][ T6662] bond1: Unable to set up delay as MII monitoring is disabled [ 161.228497][ T6662] bond1 (unregistering): Released all slaves [ 162.699204][ T6679] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 162.750042][ T6679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.894251][ T6685] NILFS (nbd1): device size too small [ 167.409487][ T6722] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 167.627767][ T6722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.947627][ T6737] sd 0:0:1:0: PR command failed: 1026 [ 167.963244][ T6737] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 167.975697][ T6737] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.120639][ T6740] NILFS (nbd3): device size too small [ 171.073051][ T6760] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 171.130645][ T6760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.236221][ T6766] NILFS (nbd0): device size too small [ 172.598396][ T6779] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 172.967619][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.977872][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.987240][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.996753][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.004592][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.033053][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.053438][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.060925][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.070750][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.118280][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.162729][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.172687][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.975644][ T6792] NILFS (nbd0): device size too small [ 174.261542][ T6799] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 174.347092][ T6799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.421898][ T6783] chnl_net:caif_netlink_parms(): no params data found [ 174.588740][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.613234][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.642350][ T6783] bridge_slave_0: entered allmulticast mode [ 174.670173][ T6783] bridge_slave_0: entered promiscuous mode [ 174.695051][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.707279][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.715246][ T6783] bridge_slave_1: entered allmulticast mode [ 174.725912][ T6783] bridge_slave_1: entered promiscuous mode [ 174.803868][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.830057][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.477087][ T5786] Bluetooth: hci4: command tx timeout [ 176.782669][ T6783] team0: Port device team_slave_0 added [ 176.795488][ T6783] team0: Port device team_slave_1 added [ 176.898536][ T6823] NILFS (nbd3): device size too small [ 176.907120][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.914164][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.952362][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.966474][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.973577][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.000816][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.088864][ T6783] hsr_slave_0: entered promiscuous mode [ 177.095564][ T6783] hsr_slave_1: entered promiscuous mode [ 177.106780][ T6783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.116769][ T6783] Cannot create hsr debugfs directory [ 177.271820][ T6783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.287513][ T6783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.299881][ T6783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.317027][ T6783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.362091][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.448093][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.490140][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.520680][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.544583][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.562611][ T5786] Bluetooth: hci4: command tx timeout [ 177.582786][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.589942][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.624698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.631920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.707119][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.953444][ T6835] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 178.047788][ T6835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.150477][ T49] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.234942][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.563673][ T6859] NILFS (nbd3): device size too small [ 179.651944][ T5786] Bluetooth: hci4: command tx timeout [ 181.112769][ T5789] ffs_data_put(): freeing [ 181.778429][ T49] bond1: (slave gretap1): Releasing active interface [ 181.834724][ T5786] Bluetooth: hci4: command tx timeout [ 181.909390][ T6897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.290'. [ 182.031207][ T6893] device-mapper: table: 248:0: too large device [ 182.062854][ T6893] device-mapper: ioctl: error adding target to table [ 182.105208][ T6783] veth0_vlan: entered promiscuous mode [ 182.321261][ T6783] veth1_vlan: entered promiscuous mode [ 182.486567][ T6783] veth0_macvtap: entered promiscuous mode [ 182.557285][ T6783] veth1_macvtap: entered promiscuous mode [ 182.691604][ T49] hsr_slave_0: left promiscuous mode [ 182.723640][ T49] hsr_slave_1: left promiscuous mode [ 182.738354][ T49] bridge_slave_1: left allmulticast mode [ 182.751594][ T49] bridge_slave_1: left promiscuous mode [ 182.768521][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.791733][ T6921] NILFS (nbd3): device size too small [ 182.826502][ T49] bridge_slave_0: left allmulticast mode [ 182.849041][ T49] bridge_slave_0: left promiscuous mode [ 182.858687][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.926519][ T49] veth1_macvtap: left promiscuous mode [ 182.936289][ T49] veth0_macvtap: left promiscuous mode [ 182.951911][ T49] veth1_vlan: left promiscuous mode [ 182.959963][ T49] veth0_vlan: left promiscuous mode [ 183.307191][ T6914] loop1: detected capacity change from 0 to 32768 [ 183.341647][ T6914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.292 (6914) [ 183.494404][ T6914] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.507530][ T49] bond5 (unregistering): Released all slaves [ 183.532391][ T6914] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.571549][ T6914] BTRFS info (device loop1): using free space tree [ 183.767776][ T6914] BTRFS info (device loop1): enabling ssd optimizations [ 183.775546][ T6914] BTRFS info (device loop1): auto enabling async discard [ 183.846183][ T49] bond4 (unregistering): Released all slaves [ 184.094878][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.166835][ T49] bond3 (unregistering): Released all slaves [ 184.356996][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 184.487991][ T49] bond2 (unregistering): Released all slaves [ 184.569221][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 184.577939][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 184.589109][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.608360][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 184.616587][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 184.627630][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.640346][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 184.647972][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 184.659063][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.681580][ T23] usb 1-1: string descriptor 0 read error: -22 [ 184.688217][ T23] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 184.698076][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.714031][ T23] adutux 1-1:168.0: interrupt endpoints not found [ 184.725316][ T49] bond1 (unregistering): Released all slaves [ 184.990923][ T9] usb 1-1: USB disconnect, device number 2 [ 185.280250][ T49] team0 (unregistering): Port device team_slave_1 removed [ 185.335461][ T49] team0 (unregistering): Port device team_slave_0 removed [ 185.376912][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.423962][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.519263][ T49] bond0 (unregistering): Released all slaves [ 186.623755][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.648682][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.660515][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.809099][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.871511][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.937726][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.099128][ T28] audit: type=1800 audit(1791516838.266:5): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.303" name="file0" dev="overlay" ino=407 res=0 errno=0 [ 187.870061][ T6783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.879209][ T6783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.888595][ T6783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.897783][ T6783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.217114][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.274964][ T49] IPVS: stop unused estimator thread 0... [ 188.281732][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.401871][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.409913][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.477786][ T6998] NILFS (nbd0): device size too small [ 191.633143][ T7021] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.707962][ T6997] kvm: pic: level sensitive irq not supported [ 191.708322][ T6997] kvm: pic: non byte read [ 191.725135][ T6997] kvm: pic: level sensitive irq not supported [ 191.725277][ T6997] kvm: pic: non byte read [ 191.756076][ T6997] kvm: pic: level sensitive irq not supported [ 191.756151][ T6997] kvm: pic: non byte read [ 193.877788][ T7051] NILFS (nbd4): device size too small [ 194.616753][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.911088][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.073245][ T7064] bond0: option slaves: interface -b does not exist! [ 195.110287][ T7068] TCP: TCP_TX_DELAY enabled [ 197.536026][ T7095] NILFS (nbd4): device size too small [ 198.164106][ T5786] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 198.174628][ T5786] Bluetooth: hci4: Injecting HCI hardware error event [ 198.183216][ T5786] Bluetooth: hci4: hardware error 0x00 [ 198.651991][ T7109] binder: 7108:7109 ioctl c00c6211 0 returned -14 [ 200.282361][ T5786] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 201.074470][ T5780] ffs_data_put(): freeing [ 202.571522][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.795130][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.913870][ T5837] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 203.064420][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.389243][ T5837] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 203.435797][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 203.461825][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 203.538651][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 203.587824][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 203.634436][ T5837] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 203.683085][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 203.723642][ T5837] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 203.755578][ T5837] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 204.941798][ T5780] ffs_data_put(): freeing [ 205.276227][ T7191] ======================================================= [ 205.276227][ T7191] WARNING: The mand mount option has been deprecated and [ 205.276227][ T7191] and is ignored by this kernel. Remove the mand [ 205.276227][ T7191] option from the mount to silence this warning. [ 205.276227][ T7191] ======================================================= [ 205.386422][ T7191] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 205.433819][ T789] usb 1-1: USB disconnect, device number 3 [ 205.502140][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 205.525630][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 205.552117][ T789] keyspan 1-1:1.0: device disconnected [ 205.627439][ T7191] overlayfs: failed to look up (tracing) for ino (-66) [ 206.207609][ T28] audit: type=1326 audit(1791516857.376:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.040165][ T28] audit: type=1326 audit(1791516857.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.064348][ T28] audit: type=1326 audit(1791516857.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.094790][ T28] audit: type=1326 audit(1791516857.436:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.126824][ T28] audit: type=1326 audit(1791516858.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.161333][ T28] audit: type=1326 audit(1791516858.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.195345][ T28] audit: type=1326 audit(1791516858.296:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.223497][ T28] audit: type=1326 audit(1791516858.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.248544][ T28] audit: type=1326 audit(1791516858.326:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 207.275127][ T28] audit: type=1326 audit(1791516858.326:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 209.719689][ T5790] ffs_data_put(): freeing [ 209.794578][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.092909][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.297032][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.505867][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.544130][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 211.583617][ T7260] jffs2: notice: (7260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.681140][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.698584][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.714228][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.722900][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.741638][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.755558][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.940414][ T7241] loop4: detected capacity change from 0 to 32768 [ 212.005370][ T7241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.365 (7241) [ 212.086183][ T7241] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.108277][ T7241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 212.145916][ T7241] BTRFS info (device loop4): using free space tree [ 212.384481][ T7241] BTRFS info (device loop4): enabling ssd optimizations [ 212.441402][ T7241] BTRFS info (device loop4): auto enabling async discard [ 213.499983][ T5789] ffs_data_put(): freeing [ 213.505365][ T6783] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.756639][ T70] bond1: (slave gretap1): Releasing active interface [ 213.801782][ T5786] Bluetooth: hci0: command tx timeout [ 213.958828][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 214.533432][ T70] hsr_slave_0: left promiscuous mode [ 214.543132][ T70] hsr_slave_1: left promiscuous mode [ 214.553659][ T70] bridge_slave_1: left allmulticast mode [ 214.559372][ T70] bridge_slave_1: left promiscuous mode [ 214.697622][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.834967][ T70] bridge_slave_0: left allmulticast mode [ 214.913893][ T70] bridge_slave_0: left promiscuous mode [ 214.977223][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.850617][ T70] veth1_macvtap: left promiscuous mode [ 215.881529][ T5786] Bluetooth: hci0: command tx timeout [ 215.927834][ T70] veth0_macvtap: left promiscuous mode [ 216.001012][ T70] veth1_vlan: left promiscuous mode [ 216.071505][ T70] veth0_vlan: left promiscuous mode [ 217.970521][ T5786] Bluetooth: hci0: command tx timeout [ 218.313821][ T70] bond2 (unregistering): Released all slaves [ 218.703832][ T70] bond1 (unregistering): Released all slaves [ 219.881374][ C0] net_ratelimit: 46 callbacks suppressed [ 220.053873][ T5786] Bluetooth: hci0: command tx timeout [ 221.253031][ T7324] sched: RT throttling activated [ 221.325077][ T70] team0 (unregistering): Port device team_slave_1 removed [ 221.458054][ T70] team0 (unregistering): Port device team_slave_0 removed [ 221.536944][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.626053][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.084114][ T7328] loop1: detected capacity change from 0 to 32768 [ 222.111451][ T7328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.381 (7328) [ 222.169952][ T7328] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.192044][ T7328] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 222.212182][ T7328] BTRFS info (device loop1): using free space tree [ 222.330083][ T7328] BTRFS info (device loop1): enabling ssd optimizations [ 222.337634][ T7328] BTRFS info (device loop1): auto enabling async discard [ 222.546630][ T70] bond0 (unregistering): Released all slaves [ 222.677866][ T7262] chnl_net:caif_netlink_parms(): no params data found [ 222.731694][ T7317] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 222.751904][ T7317] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 222.946251][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.223371][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.234132][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.254807][ T7262] bridge_slave_0: entered allmulticast mode [ 224.274894][ T7262] bridge_slave_0: entered promiscuous mode [ 224.327871][ T7368] Illegal XDP return value 4294967274 on prog (id 39) dev syzkaller1, expect packet loss! [ 224.363092][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.370809][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.386078][ T7262] bridge_slave_1: entered allmulticast mode [ 224.421879][ T7262] bridge_slave_1: entered promiscuous mode [ 224.552687][ T7370] Bluetooth: MGMT ver 1.22 [ 224.688586][ T7262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.745505][ T7262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.322227][ C0] net_ratelimit: 36 callbacks suppressed [ 226.039955][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.049703][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.075044][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.083416][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.057379][ T7262] team0: Port device team_slave_0 added [ 227.320011][ T7262] team0: Port device team_slave_1 added [ 228.635419][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.642708][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.669935][ T7262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.722333][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.729601][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.845887][ T7262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.693271][ T7262] hsr_slave_0: entered promiscuous mode [ 229.735373][ T7262] hsr_slave_1: entered promiscuous mode [ 230.451608][ T2906] net_ratelimit: 29 callbacks suppressed [ 231.406520][ T7262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.438637][ T7262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.639610][ T7262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.706716][ T7262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.452641][ T7262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.532528][ T7416] loop4: detected capacity change from 0 to 32768 [ 232.557911][ T7416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.402 (7416) [ 232.623817][ T7416] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.643770][ T7262] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.652735][ T7416] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 232.678071][ T7416] BTRFS info (device loop4): using free space tree [ 232.710246][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.717656][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.818003][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.825427][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.923419][ T7416] BTRFS info (device loop4): enabling ssd optimizations [ 232.930514][ T7416] BTRFS info (device loop4): auto enabling async discard [ 233.089705][ T7442] FAULT_INJECTION: forcing a failure. [ 233.089705][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 233.139841][ T7442] CPU: 0 PID: 7442 Comm: syz.0.407 Not tainted syzkaller #0 [ 233.147209][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.147229][ T7442] Call Trace: [ 233.147240][ T7442] [ 233.147251][ T7442] dump_stack_lvl+0x18c/0x250 [ 233.147285][ T7442] ? show_regs_print_info+0x20/0x20 [ 233.161039][ T7442] ? load_image+0x420/0x420 [ 233.168662][ T7442] ? __might_sleep+0xe0/0xe0 [ 233.168698][ T7442] ? __lock_acquire+0x7eb0/0x7eb0 [ 233.178441][ T7442] should_fail_ex+0x394/0x4c0 [ 233.178496][ T7442] should_failslab+0x9/0x20 [ 233.198864][ T7442] slab_pre_alloc_hook+0x59/0x300 [ 233.205175][ T7442] ? xprt_alloc+0x31/0x790 [ 233.210017][ T7442] ? xprt_alloc+0x31/0x790 [ 233.215134][ T7442] __kmem_cache_alloc_node+0x53/0x250 [ 233.220773][ T7442] ? xprt_alloc+0x31/0x790 [ 233.225416][ T7442] __kmalloc+0xa7/0x240 [ 233.229792][ T7442] xprt_alloc+0x31/0x790 [ 233.234249][ T7442] xs_setup_xprt+0x9e/0x3b0 [ 233.238976][ T7442] xs_setup_tcp+0xe0/0x920 [ 233.243956][ T7442] ? xprt_create_transport+0x12e/0x5b0 [ 233.249711][ T7442] ? xs_create_sock+0x7c0/0x7c0 [ 233.255038][ T7442] ? __rwlock_init+0x150/0x150 [ 233.260267][ T7442] ? do_raw_spin_unlock+0x121/0x230 [ 233.266698][ T7442] xprt_create_transport+0x152/0x5b0 [ 233.272012][ T7442] rpc_create+0x4d3/0x8a0 [ 233.276367][ T7442] ? rpc_cleanup_clids+0x20/0x20 [ 233.281352][ T7442] ? net_generic+0x1e/0x240 [ 233.285877][ T7442] ? net_generic+0x1e/0x240 [ 233.290481][ T7442] ? nfs_create_rpc_client+0x2ea/0x730 [ 233.295967][ T7442] nfs_create_rpc_client+0x525/0x730 [ 233.301277][ T7442] ? nfs_init_timeout_values+0x420/0x420 [ 233.307293][ T7442] ? __init_waitqueue_head+0xa8/0x140 [ 233.312691][ T7442] nfs4_alloc_client+0x79e/0xc20 [ 233.317836][ T7442] ? nfs40_shutdown_client+0x80/0x80 [ 233.323233][ T7442] ? net_generic+0x1e/0x240 [ 233.327856][ T7442] ? nfs_get_client+0xa8b/0xe50 [ 233.332724][ T7442] ? __lock_acquire+0x7eb0/0x7eb0 [ 233.337965][ T7442] ? do_raw_spin_unlock+0x121/0x230 [ 233.343196][ T7442] nfs_get_client+0xab3/0xe50 [ 233.348003][ T7442] nfs4_set_client+0x3e2/0x5b0 [ 233.352896][ T7442] ? nfs4_create_referral_server+0x5f0/0x5f0 [ 233.359086][ T7442] ? __rpc_init_priority_wait_queue+0x300/0x400 [ 233.365364][ T7442] nfs4_create_server+0x48e/0x1080 [ 233.370699][ T7442] ? nfs4_set_ds_client+0x590/0x590 [ 233.375921][ T7442] ? get_nfs_version+0x1eb/0x210 [ 233.381052][ T7442] ? nfs_get_tree+0x11a4/0x1650 [ 233.385929][ T7442] nfs4_try_get_tree+0x49/0x110 [ 233.390817][ T7442] vfs_get_tree+0x8c/0x280 [ 233.395524][ T7442] do_new_mount+0x24a/0xa40 [ 233.400408][ T7442] __se_sys_mount+0x2e7/0x3d0 [ 233.405107][ T7442] ? __x64_sys_mount+0xc0/0xc0 [ 233.410255][ T7442] ? lockdep_hardirqs_on+0x98/0x150 [ 233.415655][ T7442] ? __x64_sys_mount+0x20/0xc0 [ 233.420614][ T7442] do_syscall_64+0x55/0xb0 [ 233.425216][ T7442] ? clear_bhb_loop+0x40/0x90 [ 233.429908][ T7442] ? clear_bhb_loop+0x40/0x90 [ 233.434600][ T7442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.440604][ T7442] RIP: 0033:0x7f458279e1d9 [ 233.445036][ T7442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.464748][ T7442] RSP: 002b:00007f458358e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.473272][ T7442] RAX: ffffffffffffffda RBX: 00007f4582a25fa0 RCX: 00007f458279e1d9 [ 233.482133][ T7442] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 233.490735][ T7442] RBP: 00007f4582835888 R08: 0000200000000140 R09: 0000000000000000 [ 233.498809][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.507070][ T7442] R13: 00007f4582a26038 R14: 00007f4582a25fa0 R15: 00007ffe7449e958 [ 233.515615][ T7442] [ 233.563635][ T6783] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.990821][ T7400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (7400) [ 234.650304][ T7262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.535882][ C0] net_ratelimit: 42 callbacks suppressed [ 237.894973][ T7262] veth0_vlan: entered promiscuous mode [ 237.998428][ T7262] veth1_vlan: entered promiscuous mode [ 238.318105][ T7262] veth0_macvtap: entered promiscuous mode [ 238.343462][ T7262] veth1_macvtap: entered promiscuous mode [ 238.415739][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.443698][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.473334][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.528782][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.559457][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.579495][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.598597][ T7262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.609425][ T7262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.622395][ T7262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.634997][ T7262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.667199][ T7484] loop1: detected capacity change from 0 to 32768 [ 238.678431][ T7484] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 238.929462][ T7400] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 239.142956][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.177415][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.037495][ T7520] NILFS (nbd4): device size too small [ 240.184049][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.309323][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.681559][ C1] net_ratelimit: 65 callbacks suppressed [ 241.391668][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.298686][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.323630][ T27] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 242.344951][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.392094][ T27] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 242.411692][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 242.425981][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 242.443693][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 242.453620][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 242.484625][ T27] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 242.547446][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 242.617345][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 242.659359][ T27] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 242.741424][ T789] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 242.944001][ T789] usb 5-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 242.969610][ T789] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 242.985408][ T789] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 243.005931][ T789] usb 5-1: Manufacturer: syz [ 243.016145][ T789] usb 5-1: SerialNumber: syz [ 243.195307][ T7539] loop1: detected capacity change from 0 to 32768 [ 243.208630][ T7539] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 243.348023][ T789] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 243.380221][ T789] usb 5-1: USB disconnect, device number 2 [ 243.813199][ T7535] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 244.717185][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.317069][ T7575] NILFS (nbd0): device size too small [ 245.327001][ T27] usb 6-1: USB disconnect, device number 2 [ 245.337816][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 245.355170][ T8] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 245.369812][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 245.375844][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 245.393306][ T27] keyspan 6-1:1.0: device disconnected [ 245.434259][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 245.471813][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 245.518888][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.570960][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 245.604145][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.683466][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 245.731283][ C0] net_ratelimit: 60 callbacks suppressed [ 246.563898][ T8] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 246.572264][ T8] usb 2-1: Product: syz [ 246.576453][ T8] usb 2-1: Manufacturer: syz [ 246.576475][ T8] usb 2-1: SerialNumber: syz [ 246.652298][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.664387][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.690398][ T7568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.709166][ T8] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 246.724875][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 246.734884][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 246.743245][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 246.761854][ T8] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 247.307320][ T7601] 8021q: VLANs not supported on gre0 [ 247.343690][ T7601] process 'syz.5.442' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 247.754960][ T27] usb 2-1: USB disconnect, device number 4 [ 248.255968][ T27] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 248.273403][ T27] keyspan 2-1:1.0: device disconnected [ 248.510540][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.445'. [ 250.221330][ T5819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 250.810518][ C1] net_ratelimit: 44 callbacks suppressed [ 250.927520][ T7603] loop4: detected capacity change from 0 to 32768 [ 250.972463][ T7603] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.036949][ T7626] NILFS (nbd0): device size too small [ 251.062017][ T7603] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 251.151762][ T7603] BTRFS info (device loop4): using free space tree [ 251.194852][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.297592][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 251.393866][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 251.415449][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 251.574205][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 251.727184][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 251.806684][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 251.942315][ T5819] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 251.951485][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.964521][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 251.965411][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 252.033614][ T5819] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 252.051784][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 252.052181][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 252.059588][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 252.115577][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 252.154937][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 252.182373][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 252.182964][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 252.243060][ T5819] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 252.262570][ T7603] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 252.285632][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 252.323910][ T7603] BTRFS error (device loop4): open_ctree failed: -12 [ 252.352456][ T5819] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 252.394851][ T5819] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 253.488157][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 253.618347][ T789] usb 6-1: USB disconnect, device number 3 [ 253.632743][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.655804][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.672378][ T789] keyspan 6-1:1.0: device disconnected [ 253.791129][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.835051][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 253.882886][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.911643][ T7673] fuse: Bad value for 'fd' [ 253.916301][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 253.964726][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.001738][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.036280][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.099079][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 254.135578][ T8] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 254.159426][ T8] usb 5-1: Product: syz [ 254.164074][ T8] usb 5-1: Manufacturer: syz [ 254.168957][ T8] usb 5-1: SerialNumber: syz [ 254.189892][ T7664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.204450][ T7664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.216701][ T7664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.239711][ T8] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 254.266959][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 254.313090][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 254.377341][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 254.559965][ T8] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 255.671555][ T789] usb 5-1: USB disconnect, device number 3 [ 255.708597][ T7687] NILFS (nbd0): device size too small [ 255.752977][ T789] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 255.788617][ T789] keyspan 5-1:1.0: device disconnected [ 255.881342][ C1] net_ratelimit: 51 callbacks suppressed [ 256.058218][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058274][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.436623][ T7711] bridge0: port 3(syz_tun) entered blocking state [ 256.552623][ T7711] bridge0: port 3(syz_tun) entered disabled state [ 256.686388][ T7711] syz_tun: entered allmulticast mode [ 256.905062][ T7711] syz_tun: entered promiscuous mode [ 256.945597][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.328245][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.350564][ T5837] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 257.405280][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.460706][ T5837] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 257.517150][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 257.546801][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 257.576384][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 257.611380][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 257.649839][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 257.680794][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 257.715145][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 257.762816][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 257.788668][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 258.007137][ T7698] loop5: detected capacity change from 0 to 32768 [ 258.060349][ T7698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.462 (7698) [ 258.122999][ T7698] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.148824][ T7698] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 258.171656][ T7698] BTRFS info (device loop5): using free space tree [ 259.348024][ T7756] FAULT_INJECTION: forcing a failure. [ 259.348024][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 259.451440][ T7756] CPU: 1 PID: 7756 Comm: syz.0.472 Not tainted syzkaller #0 [ 259.458814][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.469000][ T7756] Call Trace: [ 259.472320][ T7756] [ 259.475300][ T7756] dump_stack_lvl+0x18c/0x250 [ 259.480028][ T7756] ? show_regs_print_info+0x20/0x20 [ 259.485261][ T7756] ? load_image+0x420/0x420 [ 259.489922][ T7756] ? __might_sleep+0xe0/0xe0 [ 259.494558][ T7756] ? __lock_acquire+0x7eb0/0x7eb0 [ 259.499628][ T7756] should_fail_ex+0x394/0x4c0 [ 259.504532][ T7756] should_failslab+0x9/0x20 [ 259.509078][ T7756] slab_pre_alloc_hook+0x59/0x300 [ 259.514141][ T7756] ? lockdep_softirqs_off+0x440/0x440 [ 259.519649][ T7756] kmem_cache_alloc+0x5a/0x2c0 [ 259.524462][ T7756] ? security_inode_alloc+0x34/0x110 [ 259.529800][ T7756] security_inode_alloc+0x34/0x110 [ 259.534971][ T7756] inode_init_always+0x914/0xc90 [ 259.539955][ T7756] new_inode_pseudo+0x95/0x1d0 [ 259.544761][ T7756] sock_create_lite+0x8b/0x500 [ 259.549751][ T7756] __netlink_kernel_create+0xfb/0x7b0 [ 259.555159][ T7756] ? fib_default_rule_add+0x4f/0x390 [ 259.560486][ T7756] ? rcu_is_watching+0x15/0xb0 [ 259.565298][ T7756] ? fib_default_rule_add+0x4f/0x390 [ 259.570620][ T7756] ? __kmalloc+0xe5/0x240 [ 259.575251][ T7756] ? netlink_set_err+0x3b0/0x3b0 [ 259.580232][ T7756] ? fib_default_rule_add+0x1fe/0x390 [ 259.585642][ T7756] ? fib_net_init+0x1bf/0x370 [ 259.590370][ T7756] fib_net_init+0x1d1/0x370 [ 259.595004][ T7756] ? __in_dev_get_rtnl+0xb0/0xb0 [ 259.599987][ T7756] ? ip_fib_net_exit+0x380/0x380 [ 259.604974][ T7756] ? devinet_init_net+0x390/0x5c0 [ 259.610038][ T7756] ops_init+0x391/0x640 [ 259.614364][ T7756] setup_net+0x3b6/0xa20 [ 259.618651][ T7756] ? copy_net_ns+0x530/0x530 [ 259.623288][ T7756] ? copy_net_ns+0x347/0x530 [ 259.627918][ T7756] ? down_read_killable+0x1d0/0x340 [ 259.633169][ T7756] copy_net_ns+0x361/0x530 [ 259.638501][ T7756] create_new_namespaces+0x3ce/0x700 [ 259.643856][ T7756] unshare_nsproxy_namespaces+0x11a/0x160 [ 259.649712][ T7756] ksys_unshare+0x4fa/0x8f0 [ 259.654268][ T7756] ? sighand_ctor+0x50/0x50 [ 259.658808][ T7756] ? lock_chain_count+0x20/0x20 [ 259.663717][ T7756] ? syscall_enter_from_user_mode+0x25/0x80 [ 259.669671][ T7756] __x64_sys_unshare+0x38/0x40 [ 259.674474][ T7756] do_syscall_64+0x55/0xb0 [ 259.678986][ T7756] ? clear_bhb_loop+0x40/0x90 [ 259.683959][ T7756] ? clear_bhb_loop+0x40/0x90 [ 259.688665][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.694585][ T7756] RIP: 0033:0x7f458279e1d9 [ 259.694611][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.694631][ T7756] RSP: 002b:00007f458358e028 EFLAGS: 00000246 [ 259.719211][ T7756] ORIG_RAX: 0000000000000110 [ 259.719226][ T7756] RAX: ffffffffffffffda RBX: 00007f4582a25fa0 RCX: 00007f458279e1d9 [ 259.719243][ T7756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 259.719257][ T7756] RBP: 00007f4582835888 R08: 0000000000000000 R09: 0000000000000000 [ 259.730010][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.746029][ T7756] R13: 00007f4582a26038 R14: 00007f4582a25fa0 R15: 00007ffe7449e958 [ 259.746069][ T7756] [ 259.853816][ T7698] BTRFS error (device loop5): open_ctree failed: -4 [ 260.149588][ T7764] NILFS (nbd4): device size too small [ 260.501343][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 260.914082][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.924492][ C1] net_ratelimit: 64 callbacks suppressed [ 261.209409][ T27] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 261.340077][ T27] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 261.414194][ T27] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 261.431012][ T789] usb 2-1: USB disconnect, device number 5 [ 261.480875][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 261.498134][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.535710][ T27] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 261.547100][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 261.583758][ T27] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 261.599472][ T789] keyspan 2-1:1.0: device disconnected [ 261.638486][ T27] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 261.658512][ T27] usb 6-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 261.679058][ T27] usb 6-1: Product: syz [ 261.699298][ T27] usb 6-1: Manufacturer: syz [ 261.709569][ T27] usb 6-1: SerialNumber: syz [ 261.737428][ T7766] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.761688][ T7766] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.770670][ T7766] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.785925][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 261.904395][ T27] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 261.932179][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 261.953551][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 261.991989][ T27] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 262.854978][ T27] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 262.870994][ T27] usb 6-1: USB disconnect, device number 4 [ 262.893538][ T27] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 262.905922][ T27] keyspan 6-1:1.0: device disconnected [ 263.840397][ T7810] FAULT_INJECTION: forcing a failure. [ 263.840397][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 263.853827][ T7810] CPU: 0 PID: 7810 Comm: syz.5.483 Not tainted syzkaller #0 [ 263.861163][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.871544][ T7810] Call Trace: [ 263.874952][ T7810] [ 263.878012][ T7810] dump_stack_lvl+0x18c/0x250 [ 263.882762][ T7810] ? show_regs_print_info+0x20/0x20 [ 263.887984][ T7810] ? load_image+0x420/0x420 [ 263.892512][ T7810] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.897647][ T7810] should_fail_ex+0x394/0x4c0 [ 263.902358][ T7810] should_failslab+0x9/0x20 [ 263.906887][ T7810] slab_pre_alloc_hook+0x59/0x300 [ 263.911942][ T7810] ? security_sk_alloc+0x4b/0x130 [ 263.917072][ T7810] ? security_sk_alloc+0x4b/0x130 [ 263.922135][ T7810] __kmem_cache_alloc_node+0x53/0x250 [ 263.927784][ T7810] ? security_sk_alloc+0x4b/0x130 [ 263.932856][ T7810] __kmalloc+0xa7/0x240 [ 263.937051][ T7810] ? sk_prot_alloc+0xe7/0x210 [ 263.941847][ T7810] security_sk_alloc+0x4b/0x130 [ 263.946724][ T7810] sk_prot_alloc+0x101/0x210 [ 263.951419][ T7810] ? sk_alloc+0x24/0x350 [ 263.955789][ T7810] sk_alloc+0x3a/0x350 [ 263.959971][ T7810] __netlink_create+0x6c/0x290 [ 263.964850][ T7810] __netlink_kernel_create+0x148/0x7b0 [ 263.970348][ T7810] ? fib_default_rule_add+0x4f/0x390 [ 263.975656][ T7810] ? rcu_is_watching+0x15/0xb0 [ 263.980440][ T7810] ? fib_default_rule_add+0x4f/0x390 [ 263.985739][ T7810] ? __kmalloc+0xe5/0x240 [ 263.990104][ T7810] ? netlink_set_err+0x3b0/0x3b0 [ 263.995078][ T7810] ? fib_default_rule_add+0x1fe/0x390 [ 264.000556][ T7810] ? fib_net_init+0x1bf/0x370 [ 264.005396][ T7810] fib_net_init+0x1d1/0x370 [ 264.009950][ T7810] ? __in_dev_get_rtnl+0xb0/0xb0 [ 264.014922][ T7810] ? ip_fib_net_exit+0x380/0x380 [ 264.019899][ T7810] ? devinet_init_net+0x390/0x5c0 [ 264.025035][ T7810] ops_init+0x391/0x640 [ 264.029240][ T7810] setup_net+0x3b6/0xa20 [ 264.033513][ T7810] ? copy_net_ns+0x530/0x530 [ 264.038157][ T7810] ? copy_net_ns+0x347/0x530 [ 264.042769][ T7810] ? down_read_killable+0x1d0/0x340 [ 264.047993][ T7810] copy_net_ns+0x361/0x530 [ 264.052436][ T7810] create_new_namespaces+0x3ce/0x700 [ 264.057756][ T7810] unshare_nsproxy_namespaces+0x11a/0x160 [ 264.063585][ T7810] ksys_unshare+0x4fa/0x8f0 [ 264.068113][ T7810] ? sighand_ctor+0x50/0x50 [ 264.072634][ T7810] ? lock_chain_count+0x20/0x20 [ 264.077510][ T7810] ? syscall_enter_from_user_mode+0x25/0x80 [ 264.083424][ T7810] __x64_sys_unshare+0x38/0x40 [ 264.088205][ T7810] do_syscall_64+0x55/0xb0 [ 264.092633][ T7810] ? clear_bhb_loop+0x40/0x90 [ 264.097335][ T7810] ? clear_bhb_loop+0x40/0x90 [ 264.102036][ T7810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.107955][ T7810] RIP: 0033:0x7f219a79e1d9 [ 264.112479][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.132380][ T7810] RSP: 002b:00007f219b62d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 264.140840][ T7810] RAX: ffffffffffffffda RBX: 00007f219aa25fa0 RCX: 00007f219a79e1d9 [ 264.149177][ T7810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 264.157176][ T7810] RBP: 00007f219a835888 R08: 0000000000000000 R09: 0000000000000000 [ 264.165167][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.173239][ T7810] R13: 00007f219aa26038 R14: 00007f219aa25fa0 R15: 00007ffedc1b5b78 [ 264.181257][ T7810] [ 265.362685][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 265.362700][ T28] audit: type=1326 audit(1791516916.536:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 265.407321][ T28] audit: type=1326 audit(1791516916.536:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 265.432243][ T28] audit: type=1326 audit(1791516915.686:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 265.456744][ T28] audit: type=1326 audit(1791516916.576:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 265.497664][ T28] audit: type=1326 audit(1791516916.576:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 265.609362][ T7821] NILFS (nbd5): device size too small [ 265.707100][ T28] audit: type=1326 audit(1791516916.576:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f458279df42 code=0x7ffc0000 [ 265.831429][ T28] audit: type=1326 audit(1791516916.576:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f458279df42 code=0x7ffc0000 [ 265.934009][ T28] audit: type=1326 audit(1791516916.666:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 266.037065][ T28] audit: type=1326 audit(1791516916.666:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 266.116342][ T28] audit: type=1326 audit(1791516916.666:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 266.261489][ T5819] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.281520][ C1] net_ratelimit: 52 callbacks suppressed [ 266.467074][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 266.482216][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.501661][ T5819] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 266.501688][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.632703][ T5819] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 266.665066][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 266.676133][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 267.783895][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 267.792254][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 267.817907][ T5819] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 267.870006][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 267.898861][ T5819] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 267.922646][ T5819] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 268.161661][ T173] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.395121][ T173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.641455][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 269.650575][ T5786] Bluetooth: hci0: Injecting HCI hardware error event [ 269.847898][ T173] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 269.859948][ T173] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 269.870400][ T173] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 269.881057][ T173] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.881088][ T5786] Bluetooth: hci0: hardware error 0x00 [ 269.914929][ T173] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.035255][ T173] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 270.056842][ T789] usb 5-1: USB disconnect, device number 4 [ 270.068939][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 270.117946][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 270.137554][ T173] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 270.164132][ T789] keyspan 5-1:1.0: device disconnected [ 270.166529][ T173] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 270.218555][ T173] usb 2-1: Product: syz [ 270.233298][ T173] usb 2-1: Manufacturer: syz [ 270.255512][ T173] usb 2-1: SerialNumber: syz [ 270.280376][ T7857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 270.294470][ T7857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 270.316261][ T7857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 270.327809][ T5090] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 270.372911][ T7880] NILFS (nbd5): device size too small [ 270.383914][ T173] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 270.403490][ T173] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 271.103254][ T173] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 271.121449][ T173] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 271.148958][ T173] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 271.181417][ T173] usb 2-1: USB disconnect, device number 6 [ 271.209271][ T173] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 271.230497][ T173] keyspan 2-1:1.0: device disconnected [ 271.502842][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 271.961267][ C1] net_ratelimit: 47 callbacks suppressed [ 272.041344][ T5786] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 275.249175][ T7926] NILFS (nbd5): device size too small [ 275.381433][ T789] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.232157][ T1215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 276.273713][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.286303][ T789] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 276.306667][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.358850][ T789] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 276.412997][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 276.427191][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 276.454354][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.510'. [ 276.465957][ T1215] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.498371][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 276.511327][ T1215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 276.545988][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 276.565784][ T1215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 276.885803][ T789] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 276.983331][ C1] net_ratelimit: 45 callbacks suppressed [ 278.427808][ T1215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 279.335260][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 279.521384][ T1215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.531116][ T1215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 279.546221][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 279.573099][ T789] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 279.581282][ T1215] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 279.601796][ T789] usb 5-1: USB disconnect, device number 5 [ 279.622422][ T1215] usb 1-1: string descriptor 0 read error: -71 [ 279.628987][ T1215] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 279.638269][ T1215] usb 1-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 279.654853][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.678478][ T1215] usb 1-1: can't set config #1, error -71 [ 279.686106][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.732748][ T1215] usb 1-1: USB disconnect, device number 4 [ 279.752703][ T789] keyspan 5-1:1.0: device disconnected [ 280.849930][ T7976] NILFS (nbd1): device size too small [ 282.100320][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 282.354847][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 282.354897][ T28] audit: type=1800 audit(1791516933.516:148): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.526" name="attr_allow_any_host" dev="configfs" ino=18534 res=0 errno=0 [ 282.384359][ T8006] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 282.398154][ T28] audit: type=1800 audit(1791516933.556:149): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.526" name="addr_trtype" dev="configfs" ino=18535 res=0 errno=0 [ 282.522350][ T173] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 282.555064][ T8006] nvme nvme1: creating 2 I/O queues. [ 282.561527][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 282.578023][ T8006] nvme nvme1: new ctrl: "testsubsys" [ 282.761395][ C1] net_ratelimit: 47 callbacks suppressed [ 282.784277][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.426673][ T5837] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 283.436041][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.516676][ T5837] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 283.536245][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 283.544218][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 283.559905][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 283.567814][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 283.592019][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 283.625738][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 283.645895][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 283.681432][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 286.415488][ T5843] usb 2-1: USB disconnect, device number 7 [ 286.484028][ T5843] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 286.632963][ T5843] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 286.672490][ T5843] keyspan 2-1:1.0: device disconnected [ 286.799458][ T8037] NILFS (nbd5): device size too small [ 286.945724][ T28] audit: type=1800 audit(1791516938.116:150): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.536" name="attr_allow_any_host" dev="configfs" ino=18615 res=0 errno=0 [ 286.970782][ T8045] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 287.008462][ T28] audit: type=1800 audit(1791516938.136:151): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.536" name="addr_trtype" dev="configfs" ino=18616 res=0 errno=0 [ 287.117772][ T9] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 287.141334][ T5837] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.159272][ T8045] nvme nvme2: creating 2 I/O queues. [ 287.177691][ T8045] nvme nvme2: new ctrl: "testsubsys" [ 287.411391][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.450356][ T5837] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 287.462846][ T5837] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 287.479298][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.552343][ T5837] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 288.041274][ C1] net_ratelimit: 46 callbacks suppressed [ 288.771827][ T5820] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 288.984562][ T5820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.012481][ T5820] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 289.032844][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.077959][ T5820] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 289.089674][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 289.115009][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 289.138512][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 289.159973][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 289.198335][ T5820] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 289.224924][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 289.246118][ T5820] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 289.268342][ T5820] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 289.337133][ T28] audit: type=1800 audit(1791516940.506:152): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="attr_allow_any_host" dev="configfs" ino=18680 res=0 errno=0 [ 289.375433][ T8091] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 289.405612][ T28] audit: type=1800 audit(1791516940.536:153): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="addr_trtype" dev="configfs" ino=18681 res=0 errno=0 [ 289.696295][ T5843] usb 1-1: USB disconnect, device number 5 [ 290.815491][ T173] nvmet: creating nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 291.144072][ T8091] nvme nvme3: creating 2 I/O queues. [ 291.431929][ T8091] nvme nvme3: new ctrl: "testsubsys" [ 291.683647][ T5843] idmouse 1-1:1.0: disconnected [ 291.734812][ T789] usb 6-1: USB disconnect, device number 5 [ 291.766070][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 291.790872][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 291.803966][ T789] keyspan 6-1:1.0: device disconnected [ 292.307395][ T8108] NILFS (nbd5): device size too small [ 293.321270][ C0] net_ratelimit: 42 callbacks suppressed [ 293.533019][ T28] audit: type=1800 audit(1791516944.706:154): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.558" name="attr_allow_any_host" dev="configfs" ino=18010 res=0 errno=0 [ 293.568396][ T8132] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 293.571879][ T28] audit: type=1800 audit(1791516944.726:155): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.558" name="addr_trtype" dev="configfs" ino=18011 res=0 errno=0 [ 293.671901][ T5837] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 293.782051][ T5843] nvmet: creating nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 293.827591][ T8132] nvme nvme4: creating 2 I/O queues. [ 293.858796][ T8132] nvme nvme4: new ctrl: "testsubsys" [ 293.879876][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.901535][ T5837] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 293.940758][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.999998][ T5837] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 294.018229][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 294.038387][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 294.060395][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 294.139272][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 294.171996][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 294.230539][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 294.259244][ T5837] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 294.313409][ T5837] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 296.859835][ T5843] usb 2-1: USB disconnect, device number 8 [ 296.925444][ T5843] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 297.014652][ T5843] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 297.062443][ T5843] keyspan 2-1:1.0: device disconnected [ 297.378482][ T8165] NILFS (nbd1): device size too small [ 298.361279][ C0] net_ratelimit: 36 callbacks suppressed [ 298.765017][ T28] audit: type=1800 audit(1791516949.936:156): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.569" name="attr_allow_any_host" dev="configfs" ino=18901 res=0 errno=0 [ 298.869241][ T28] audit: type=1800 audit(1791516950.036:157): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.569" name="addr_trtype" dev="configfs" ino=18902 res=0 errno=0 [ 298.883863][ T8184] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 299.117940][ T173] nvmet: creating nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 299.138030][ T8184] nvme nvme5: creating 2 I/O queues. [ 299.158017][ T8184] nvme nvme5: new ctrl: "testsubsys" [ 299.352127][ T28] audit: type=1800 audit(1791516950.526:158): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.575" name="attr_allow_any_host" dev="configfs" ino=18938 res=0 errno=0 [ 299.383331][ T8201] NILFS (nbd5): device size too small [ 299.421918][ T28] audit: type=1800 audit(1791516950.576:159): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.575" name="addr_trtype" dev="configfs" ino=18939 res=0 errno=0 [ 299.444223][ T8205] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 300.216006][ T5843] nvmet: creating nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 300.277026][ T8205] nvme nvme6: creating 2 I/O queues. [ 300.321683][ T8205] nvme nvme6: new ctrl: "testsubsys" [ 300.593467][ T28] audit: type=1800 audit(1791516951.766:160): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.582" name="attr_allow_any_host" dev="configfs" ino=18976 res=0 errno=0 [ 300.669931][ T28] audit: type=1800 audit(1791516951.836:161): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.582" name="addr_trtype" dev="configfs" ino=18977 res=0 errno=0 [ 300.829830][ T5843] nvmet: creating nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 300.883015][ T8227] nvme nvme7: creating 2 I/O queues. [ 300.912987][ T8227] nvme nvme7: new ctrl: "testsubsys" [ 301.288431][ T28] audit: type=1800 audit(1791516952.456:162): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.585" name="attr_allow_any_host" dev="configfs" ino=18323 res=0 errno=0 [ 301.321921][ T8244] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 301.386339][ T28] audit: type=1800 audit(1791516952.486:163): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.585" name="addr_trtype" dev="configfs" ino=18324 res=0 errno=0 [ 301.464577][ T8254] NILFS (nbd0): device size too small [ 302.527889][ T173] nvmet: creating nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 302.553992][ T8244] nvme nvme8: creating 2 I/O queues. [ 302.606685][ T8244] nvme nvme8: new ctrl: "testsubsys" [ 302.762040][ T28] audit: type=1800 audit(1791516953.936:164): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="attr_allow_any_host" dev="configfs" ino=19047 res=0 errno=0 [ 302.798651][ T8262] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 302.838193][ T28] audit: type=1800 audit(1791516953.966:165): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="addr_trtype" dev="configfs" ino=18346 res=0 errno=0 [ 302.990452][ T1215] nvmet: creating nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 303.039229][ T8262] nvme nvme9: creating 2 I/O queues. [ 303.061126][ T8262] nvme nvme9: new ctrl: "testsubsys" [ 303.382208][ C1] net_ratelimit: 48 callbacks suppressed [ 304.007301][ T8292] NILFS (nbd0): device size too small [ 308.521443][ C0] net_ratelimit: 49 callbacks suppressed [ 310.895421][ T28] audit: type=1800 audit(1791516962.066:166): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="attr_allow_any_host" dev="configfs" ino=19560 res=0 errno=0 [ 310.943211][ T8369] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 310.949060][ T28] audit: type=1800 audit(1791516962.106:167): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="addr_trtype" dev="configfs" ino=19561 res=0 errno=0 [ 311.177095][ T5820] nvmet: creating nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 311.266838][ T8369] nvme nvme10: creating 2 I/O queues. [ 311.328043][ T8369] nvme nvme10: new ctrl: "testsubsys" [ 311.963232][ T8389] fuse: Bad value for 'fd' [ 313.663702][ C1] net_ratelimit: 37 callbacks suppressed [ 314.625176][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.624'. [ 316.041558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 316.451204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 317.357124][ T8419] fuse: Bad value for 'fd' [ 317.485986][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492638][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.761293][ C0] net_ratelimit: 41 callbacks suppressed [ 321.299534][ T28] audit: type=1800 audit(1791516972.466:168): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.637" name="attr_allow_any_host" dev="configfs" ino=19712 res=0 errno=0 [ 321.412082][ T28] audit: type=1800 audit(1791516972.576:169): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.637" name="addr_trtype" dev="configfs" ino=19713 res=0 errno=0 [ 321.583393][ T8455] fuse: Bad value for 'fd' [ 321.644921][ T5837] nvmet: creating nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 321.689771][ T8450] nvme nvme11: creating 2 I/O queues. [ 321.724448][ T8450] nvme nvme11: new ctrl: "testsubsys" [ 322.617667][ T8439] loop4: detected capacity change from 0 to 32768 [ 322.634263][ T8439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.633 (8439) [ 322.670868][ T8439] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 322.857698][ T8439] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 323.721585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 324.051100][ C1] net_ratelimit: 43 callbacks suppressed [ 324.060470][ T8439] BTRFS info (device loop4): using free space tree [ 324.083680][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 324.351828][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 324.352968][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 324.452076][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 324.471981][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 324.472797][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 324.529886][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 324.530479][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 324.541982][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 324.551989][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 324.579892][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 324.591096][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 324.602649][ T8439] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 324.638745][ T8439] BTRFS error (device loop4): open_ctree failed: -12 [ 326.245303][ T8508] fuse: Bad value for 'fd' [ 327.452585][ T8518] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 327.466061][ T28] audit: type=1800 audit(1791516978.616:170): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.652" name="attr_allow_any_host" dev="configfs" ino=20614 res=0 errno=0 [ 327.566204][ T28] audit: type=1800 audit(1791516978.626:171): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.652" name="addr_trtype" dev="configfs" ino=20615 res=0 errno=0 [ 327.795762][ T5819] nvmet: creating nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 327.851923][ T8518] nvme nvme12: creating 2 I/O queues. [ 327.910927][ T8518] nvme nvme12: new ctrl: "testsubsys" [ 329.061766][ T8524] loop1: detected capacity change from 0 to 32768 [ 329.138777][ T8524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.653 (8524) [ 329.161290][ C0] net_ratelimit: 41 callbacks suppressed [ 329.240482][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.660'. [ 329.301824][ T8524] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.316280][ T8524] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 329.343050][ T8524] BTRFS info (device loop1): using free space tree [ 329.506283][ T8560] fuse: Bad value for 'fd' [ 329.600932][ T8524] BTRFS info (device loop1): enabling ssd optimizations [ 329.656533][ T8524] BTRFS info (device loop1): auto enabling async discard [ 330.623666][ T28] audit: type=1800 audit(1791516981.796:172): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="attr_allow_any_host" dev="configfs" ino=20714 res=0 errno=0 [ 330.671702][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.679899][ T28] audit: type=1800 audit(1791516981.836:173): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="addr_trtype" dev="configfs" ino=20715 res=0 errno=0 [ 330.745881][ T8579] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 331.053932][ T1215] nvmet: creating nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 331.130553][ T8579] nvme nvme13: creating 2 I/O queues. [ 331.181578][ T8579] nvme nvme13: new ctrl: "testsubsys" [ 333.634116][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 334.198859][ T8613] fuse: Bad value for 'fd' [ 334.601290][ C1] net_ratelimit: 51 callbacks suppressed [ 337.211450][ T8630] overlayfs: failed to resolve './file0': -2 [ 338.110898][ T28] audit: type=1800 audit(1791516989.276:174): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.678" name="attr_allow_any_host" dev="configfs" ino=19979 res=0 errno=0 [ 338.151118][ T8638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 338.204204][ T28] audit: type=1800 audit(1791516989.316:175): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.678" name="addr_trtype" dev="configfs" ino=19980 res=0 errno=0 [ 338.352245][ T27] nvmet: creating nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 338.390978][ T8638] nvme nvme14: creating 2 I/O queues. [ 338.415481][ T8638] nvme nvme14: new ctrl: "testsubsys" [ 338.734162][ T8634] loop5: detected capacity change from 0 to 32768 [ 338.743375][ T8657] fuse: Bad value for 'fd' [ 338.812840][ T8634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.675 (8634) [ 338.858558][ T8634] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.878831][ T8634] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 338.911598][ T8634] BTRFS info (device loop5): using free space tree [ 339.571455][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 339.572230][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 339.692924][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 339.722354][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 339.741858][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 339.761051][ C1] net_ratelimit: 30 callbacks suppressed [ 339.769016][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 339.769847][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 339.788913][ T8634] BTRFS error (device loop5): open_ctree failed: -12 [ 339.843520][ T8651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (8651) [ 340.203485][ T8687] overlayfs: failed to resolve './file0': -2 [ 342.221336][ T28] audit: type=1800 audit(1791516993.386:176): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="attr_allow_any_host" dev="configfs" ino=20951 res=0 errno=0 [ 342.246963][ T8717] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 342.323313][ T28] audit: type=1800 audit(1791516993.386:177): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="addr_trtype" dev="configfs" ino=20952 res=0 errno=0 [ 342.447414][ T5819] nvmet: creating nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 342.488875][ T8717] nvme nvme15: creating 2 I/O queues. [ 342.527134][ T8717] nvme nvme15: new ctrl: "testsubsys" [ 342.668918][ T8734] fuse: Bad value for 'fd' [ 344.471127][ T8768] fuse: Bad value for 'fd' [ 344.489257][ T28] audit: type=1800 audit(1791516995.656:178): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.703" name="attr_allow_any_host" dev="configfs" ino=20139 res=0 errno=0 [ 344.518661][ T8766] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 344.571331][ T28] audit: type=1800 audit(1791516995.686:179): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.703" name="addr_trtype" dev="configfs" ino=20140 res=0 errno=0 [ 344.725370][ T1215] nvmet: creating nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 344.747597][ T8766] nvme nvme16: creating 2 I/O queues. [ 344.786516][ T8766] nvme nvme16: new ctrl: "testsubsys" [ 344.889016][ T8743] loop0: detected capacity change from 0 to 32768 [ 344.987081][ T8743] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.046223][ T8743] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 345.081278][ C1] net_ratelimit: 63 callbacks suppressed [ 345.112738][ T8743] BTRFS info (device loop0): using free space tree [ 345.447676][ T8743] BTRFS info (device loop0): enabling ssd optimizations [ 345.488251][ T8743] BTRFS info (device loop0): auto enabling async discard [ 345.921879][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 346.326883][ T8819] page:ffffea0001cc0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73010 [ 346.392526][ T8819] head:ffffea0001cc0400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 346.451623][ T8819] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 346.502785][ T8819] page_type: 0xffffffff() [ 346.511542][ T8819] raw: 00fff00000000840 ffff888018842140 dead000000000122 0000000000000000 [ 346.551601][ T8819] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 346.587878][ T8819] page dumped because: unmovable page [ 346.615115][ T8819] page_owner tracks the page as allocated [ 346.662922][ T8819] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2906, tgid 2906 (kworker/u4:9), ts 343397879149, free_ts 343286241677 [ 346.687163][ T8819] post_alloc_hook+0x1c1/0x200 [ 346.693220][ T8819] get_page_from_freelist+0x2181/0x22a0 [ 346.699208][ T8819] __alloc_pages+0x1f0/0x460 [ 346.718274][ T8819] alloc_slab_page+0x5d/0x180 [ 346.725182][ T8819] new_slab+0x87/0x2d0 [ 346.729572][ T8819] ___slab_alloc+0xc5c/0x12f0 [ 346.737032][ T8819] __kmem_cache_alloc_node+0x11f/0x250 [ 346.745446][ T8819] __kmalloc_node_track_caller+0xa4/0x230 [ 346.765081][ T8819] kmalloc_reserve+0x116/0x240 [ 346.777490][ T8819] __alloc_skb+0x138/0x2c0 [ 346.796971][ T8819] nsim_dev_trap_report_work+0x253/0xa90 [ 346.816934][ T8819] process_scheduled_works+0xa60/0x1600 [ 346.833669][ T8819] worker_thread+0xa5e/0xfe0 [ 346.837082][ T8833] fuse: Bad value for 'fd' [ 346.838668][ T8819] kthread+0x2fa/0x390 [ 346.847913][ T8819] ret_from_fork+0x48/0x80 [ 346.852875][ T8819] ret_from_fork_asm+0x11/0x20 [ 346.857743][ T8819] page last free stack trace: [ 346.862752][ T8819] free_unref_page_prepare+0x7d7/0x8f0 [ 346.869185][ T8819] free_unref_page+0x32/0x2e0 [ 346.883645][ T8819] __unfreeze_partials+0x1cf/0x210 [ 346.889064][ T8819] put_cpu_partial+0x17c/0x250 [ 346.896316][ T8819] __slab_free+0x319/0x400 [ 346.915005][ T8819] qlist_free_all+0x75/0xd0 [ 346.940364][ T8819] kasan_quarantine_reduce+0x143/0x160 [ 346.956009][ T8819] __kasan_slab_alloc+0x22/0x80 [ 346.966971][ T8819] slab_post_alloc_hook+0x6a/0x4d0 [ 346.988161][ T8819] kmem_cache_alloc_node+0x1af/0x310 [ 347.000675][ T8819] __alloc_skb+0x103/0x2c0 [ 347.006593][ T8819] tcp_stream_alloc_skb+0x3d/0x330 [ 347.013460][ T8819] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 347.018933][ T8819] tcp_sendmsg+0x2f/0x50 [ 347.024130][ T8819] __sys_sendto+0x4a9/0x6b0 [ 347.028816][ T8819] __x64_sys_sendto+0xde/0xf0 [ 347.093095][ T8820] page:ffffea0001800000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 347.132178][ T8820] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 347.139536][ T8820] page_type: 0xffffffff() [ 347.170333][ T8820] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 347.180596][ T8820] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 347.232097][ T8820] page dumped because: unmovable page [ 347.237739][ T8820] page_owner tracks the page as allocated [ 347.273581][ T8820] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 5786, tgid 5786 (kworker/u5:3), ts 80788796114, free_ts 27938642783 [ 347.305289][ T8820] post_alloc_hook+0x1c1/0x200 [ 347.319284][ T8820] get_page_from_freelist+0x2181/0x22a0 [ 347.328419][ T8820] __alloc_pages+0x1f0/0x460 [ 347.333200][ T8820] __vmalloc_node_range+0x962/0x1320 [ 347.338673][ T8820] vmalloc+0x79/0x90 [ 347.342767][ T8820] kcov_remote_start+0x383/0x810 [ 347.347854][ T8820] hci_rx_work+0x12b/0xd60 [ 347.352726][ T8820] process_scheduled_works+0xa60/0x1600 [ 347.358611][ T8820] worker_thread+0xa5e/0xfe0 [ 347.365678][ T8820] kthread+0x2fa/0x390 [ 347.370784][ T8820] ret_from_fork+0x48/0x80 [ 347.376604][ T8820] ret_from_fork_asm+0x11/0x20 [ 347.382204][ T8820] page last free stack trace: [ 347.387135][ T8820] free_unref_page_prepare+0x7d7/0x8f0 [ 347.392741][ T8820] free_unref_page+0x32/0x2e0 [ 347.397639][ T8820] free_contig_range+0xa1/0x150 [ 347.403188][ T8820] destroy_args+0x7d/0x840 [ 347.407827][ T8820] debug_vm_pgtable+0x411/0x440 [ 347.412826][ T8820] do_one_initcall+0x242/0x790 [ 347.417693][ T8820] do_initcall_level+0x13d/0x1f0 [ 347.423471][ T8820] do_initcalls+0x69/0xd0 [ 347.433410][ T8820] kernel_init_freeable+0x3d9/0x560 [ 347.438839][ T8820] kernel_init+0x1d/0x1c0 [ 347.451578][ T8820] ret_from_fork+0x48/0x80 [ 347.456672][ T8820] ret_from_fork_asm+0x11/0x20 [ 350.121445][ C0] net_ratelimit: 41 callbacks suppressed [ 350.331705][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 351.374281][ T27] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 351.378180][ T8867] fuse: Bad value for 'fd' [ 351.404800][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 351.450193][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 351.472718][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 351.482740][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.493283][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 351.503141][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 351.528618][ T27] usb 1-1: string descriptor 0 read error: -71 [ 351.544620][ T27] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 351.586608][ T27] usb 1-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 351.639155][ T27] usb 1-1: can't set config #1, error -71 [ 351.690510][ T27] usb 1-1: USB disconnect, device number 6 [ 352.002739][ T8885] page:ffffea0001cc0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73010 [ 352.027228][ T8885] head:ffffea0001cc0400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 352.052754][ T8885] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 352.084563][ T8885] page_type: 0xffffffff() [ 352.089764][ T8885] raw: 00fff00000000840 ffff888018842140 dead000000000122 0000000000000000 [ 352.089794][ T8885] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 352.114641][ T1215] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.154617][ T8885] page dumped because: unmovable page [ 352.171446][ T8885] page_owner tracks the page as allocated [ 352.190181][ T8885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2906, tgid 2906 (kworker/u4:9), ts 343397879149, free_ts 343286241677 [ 352.233133][ T8885] post_alloc_hook+0x1c1/0x200 [ 352.254411][ T8885] get_page_from_freelist+0x2181/0x22a0 [ 352.271104][ T8885] __alloc_pages+0x1f0/0x460 [ 352.284509][ T8885] alloc_slab_page+0x5d/0x180 [ 352.300409][ T8885] new_slab+0x87/0x2d0 [ 352.316827][ T8885] ___slab_alloc+0xc5c/0x12f0 [ 352.325155][ T1215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.341924][ T8885] __kmem_cache_alloc_node+0x11f/0x250 [ 352.351091][ T1215] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 352.366434][ T8885] __kmalloc_node_track_caller+0xa4/0x230 [ 352.381340][ T8885] kmalloc_reserve+0x116/0x240 [ 352.386342][ T1215] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 352.393765][ T8885] __alloc_skb+0x138/0x2c0 [ 352.411113][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.431407][ T8885] nsim_dev_trap_report_work+0x253/0xa90 [ 352.437712][ T8885] process_scheduled_works+0xa60/0x1600 [ 352.437798][ T8885] worker_thread+0xa5e/0xfe0 [ 352.477717][ T1215] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 352.499814][ T8885] kthread+0x2fa/0x390 [ 352.520081][ T8885] ret_from_fork+0x48/0x80 [ 352.540343][ T8885] ret_from_fork_asm+0x11/0x20 [ 352.560596][ T8885] page last free stack trace: [ 352.570716][ T8885] free_unref_page_prepare+0x7d7/0x8f0 [ 352.592152][ T8885] free_unref_page+0x32/0x2e0 [ 352.597027][ T8885] __unfreeze_partials+0x1cf/0x210 [ 352.623977][ T8885] put_cpu_partial+0x17c/0x250 [ 352.629378][ T8885] __slab_free+0x319/0x400 [ 352.647237][ T8885] qlist_free_all+0x75/0xd0 [ 352.661307][ T8885] kasan_quarantine_reduce+0x143/0x160 [ 352.671277][ T8885] __kasan_slab_alloc+0x22/0x80 [ 352.676501][ T8885] slab_post_alloc_hook+0x6a/0x4d0 [ 352.705545][ T8885] kmem_cache_alloc_node+0x1af/0x310 [ 352.710981][ T8885] __alloc_skb+0x103/0x2c0 [ 352.731281][ T8885] tcp_stream_alloc_skb+0x3d/0x330 [ 352.737098][ T8885] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 352.754595][ T8885] tcp_sendmsg+0x2f/0x50 [ 352.760142][ T8885] __sys_sendto+0x4a9/0x6b0 [ 352.767328][ T8885] __x64_sys_sendto+0xde/0xf0 [ 353.261433][ T5819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 353.464265][ T5819] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 353.503401][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 353.544423][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 353.577048][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 353.601287][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.632666][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 353.648863][ T8907] loop0: detected capacity change from 0 to 32768 [ 353.657616][ T5819] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 353.681701][ T8907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.733 (8907) [ 353.719156][ T5819] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 353.743767][ T5819] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 353.760236][ T5819] usb 2-1: Product: syz [ 353.767572][ T5819] usb 2-1: Manufacturer: syz [ 353.772458][ T8907] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.786388][ T5819] usb 2-1: SerialNumber: syz [ 353.792290][ T8907] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 353.810295][ T8907] BTRFS info (device loop0): using free space tree [ 353.820341][ T8904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.835826][ T8904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.850292][ T8904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.906264][ T5819] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 353.944852][ T5819] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 353.984643][ T5819] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 354.001846][ T5819] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 354.009878][ T8907] BTRFS info (device loop0): enabling ssd optimizations [ 354.009915][ T8907] BTRFS info (device loop0): auto enabling async discard [ 354.039208][ T5819] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 355.161244][ C1] net_ratelimit: 58 callbacks suppressed [ 356.844199][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.879886][ T9] usb 2-1: USB disconnect, device number 9 [ 356.915873][ T5837] usb 6-1: USB disconnect, device number 6 [ 357.842803][ T5837] idmouse 6-1:1.0: disconnected [ 358.004275][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 358.095885][ T9] keyspan 2-1:1.0: device disconnected [ 358.111316][ T28] audit: type=1800 audit(1791517009.276:180): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.738" name="attr_allow_any_host" dev="configfs" ino=20367 res=0 errno=0 [ 358.151838][ T8956] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 358.237740][ T28] audit: type=1800 audit(1791517009.306:181): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.738" name="addr_trtype" dev="configfs" ino=20368 res=0 errno=0 [ 358.288568][ T8960] fuse: Bad value for 'fd' [ 358.457519][ T5820] nvmet: creating nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 358.517354][ T8956] nvme nvme17: creating 2 I/O queues. [ 358.615038][ T8956] nvme nvme17: new ctrl: "testsubsys" [ 358.857801][ T8968] page:ffffea0001cc0800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73020 [ 358.902478][ T8968] flags: 0xfff00000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 358.918052][ T8975] NILFS (nbd0): device size too small [ 358.932143][ T8968] page_type: 0xffffffff() [ 358.937264][ T8968] raw: 00fff00000000004 0000000000000000 dead000000000122 0000000000000000 [ 358.957322][ T8968] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 358.980568][ T8968] page dumped because: unmovable page [ 358.988054][ T8968] page_owner tracks the page as allocated [ 359.020062][ T8968] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 7234, tgid 7234 (syz-executor), ts 210906846226, free_ts 176800967919 [ 359.058054][ T8968] post_alloc_hook+0x1c1/0x200 [ 359.064942][ T8968] get_page_from_freelist+0x2181/0x22a0 [ 359.075334][ T8968] __alloc_pages+0x1f0/0x460 [ 359.080767][ T8968] __vmalloc_node_range+0x962/0x1320 [ 359.101243][ T8968] vmalloc_user+0x74/0x80 [ 359.106520][ T8968] kcov_ioctl+0x58/0x610 [ 359.138924][ T8968] __se_sys_ioctl+0xfd/0x170 [ 359.155613][ T8968] do_syscall_64+0x55/0xb0 [ 359.171296][ T8968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.185496][ T8968] page last free stack trace: [ 359.203960][ T8968] free_unref_page_prepare+0x7d7/0x8f0 [ 359.209529][ T8968] free_unref_page+0x32/0x2e0 [ 359.256566][ T8968] vfree+0x1a7/0x340 [ 359.260770][ T8968] kcov_close+0x2b/0x50 [ 359.290471][ T8968] __fput+0x221/0x940 [ 359.304106][ T8968] task_work_run+0x1d4/0x260 [ 359.308825][ T8968] do_exit+0x986/0x2530 [ 359.331927][ T8968] do_group_exit+0x22d/0x2f0 [ 359.347030][ T8968] get_signal+0x12a6/0x1390 [ 359.361773][ T8968] arch_do_signal_or_restart+0xc2/0x7b0 [ 359.374922][ T8968] exit_to_user_mode_loop+0x70/0x110 [ 359.391975][ T8968] exit_to_user_mode_prepare+0xee/0x180 [ 359.397645][ T8968] syscall_exit_to_user_mode+0x1a/0x50 [ 359.428918][ T8968] do_syscall_64+0x61/0xb0 [ 359.442933][ T8968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.488826][ T8974] page:ffffea0001800000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 359.565823][ T8974] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 359.592341][ T8974] page_type: 0xffffffff() [ 359.596751][ T8974] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 359.596775][ T8974] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 359.596790][ T8974] page dumped because: unmovable page [ 359.596805][ T8974] page_owner tracks the page as allocated [ 359.674751][ T8974] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 5786, tgid 5786 (kworker/u5:3), ts 80788796114, free_ts 27938642783 [ 359.730695][ T8974] post_alloc_hook+0x1c1/0x200 [ 359.751302][ T8974] get_page_from_freelist+0x2181/0x22a0 [ 359.762476][ T8974] __alloc_pages+0x1f0/0x460 [ 359.778677][ T8974] __vmalloc_node_range+0x962/0x1320 [ 359.788850][ T8974] vmalloc+0x79/0x90 [ 359.800351][ T8974] kcov_remote_start+0x383/0x810 [ 359.811582][ T8974] hci_rx_work+0x12b/0xd60 [ 359.816352][ T8974] process_scheduled_works+0xa60/0x1600 [ 359.831316][ T8974] worker_thread+0xa5e/0xfe0 [ 359.837261][ T8974] kthread+0x2fa/0x390 [ 359.851387][ T8974] ret_from_fork+0x48/0x80 [ 359.855966][ T8974] ret_from_fork_asm+0x11/0x20 [ 359.868706][ T8974] page last free stack trace: [ 359.882956][ T8974] free_unref_page_prepare+0x7d7/0x8f0 [ 359.899275][ T8974] free_unref_page+0x32/0x2e0 [ 359.904603][ T1215] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 359.921545][ T8974] free_contig_range+0xa1/0x150 [ 359.932417][ T8974] destroy_args+0x7d/0x840 [ 359.937105][ T8974] debug_vm_pgtable+0x411/0x440 [ 359.961361][ T8974] do_one_initcall+0x242/0x790 [ 359.966412][ T8974] do_initcall_level+0x13d/0x1f0 [ 359.981257][ T8974] do_initcalls+0x69/0xd0 [ 359.991250][ T8974] kernel_init_freeable+0x3d9/0x560 [ 359.996815][ T8974] kernel_init+0x1d/0x1c0 [ 360.021286][ T8974] ret_from_fork+0x48/0x80 [ 360.026742][ T8974] ret_from_fork_asm+0x11/0x20 [ 360.122896][ T1215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.161555][ T1215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 360.181561][ T1215] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 360.190643][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.281233][ C1] net_ratelimit: 40 callbacks suppressed [ 360.588902][ T1215] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 361.105047][ T8982] loop4: detected capacity change from 0 to 32768 [ 361.303576][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.311426][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.427273][ T8982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.744 (8982) [ 361.811090][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.820264][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.007693][ T8982] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.292071][ T8982] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 362.319755][ T8982] BTRFS info (device loop4): using free space tree [ 362.389512][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 362.398332][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 362.466275][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 362.480910][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 362.523785][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 362.549819][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 362.717745][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 362.732954][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 362.838026][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 362.846009][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 362.875018][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 362.967772][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 362.979522][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 363.252097][ T8982] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 363.317996][ T8982] BTRFS error (device loop4): open_ctree failed: -12 [ 364.390770][ T27] usb 2-1: device descriptor read/all, error -71 [ 364.402254][ T789] usb 1-1: USB disconnect, device number 7 [ 364.464747][ T789] idmouse 1-1:1.0: disconnected [ 364.614279][ T8947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (8947) [ 364.925041][ T28] audit: type=1800 audit(1791517016.086:182): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.752" name="attr_allow_any_host" dev="configfs" ino=20464 res=0 errno=0 [ 364.984151][ T9041] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 365.052352][ T28] audit: type=1800 audit(1791517016.146:183): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.752" name="addr_trtype" dev="configfs" ino=21350 res=0 errno=0 [ 365.186401][ T9047] NILFS (nbd1): device size too small [ 365.232829][ T5837] nvmet: creating nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 365.259197][ T9041] nvme nvme18: creating 2 I/O queues. [ 365.264638][ T9051] page:ffffea0001cc0800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73020 [ 365.281693][ T9041] nvme nvme18: new ctrl: "testsubsys" [ 365.331109][ T9051] flags: 0xfff00000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 365.360814][ T9051] page_type: 0xffffffff() [ 365.382363][ T9051] raw: 00fff00000000004 0000000000000000 dead000000000122 0000000000000000 [ 365.412234][ T9051] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 365.443392][ T9051] page dumped because: unmovable page [ 365.465268][ T9051] page_owner tracks the page as allocated [ 365.489412][ T9051] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 7234, tgid 7234 (syz-executor), ts 210906846226, free_ts 176800967919 [ 365.521481][ T9051] post_alloc_hook+0x1c1/0x200 [ 365.556152][ T9051] get_page_from_freelist+0x2181/0x22a0 [ 365.582622][ T9051] __alloc_pages+0x1f0/0x460 [ 365.588188][ T9051] __vmalloc_node_range+0x962/0x1320 [ 365.595476][ T9051] vmalloc_user+0x74/0x80 [ 365.600505][ T9051] kcov_ioctl+0x58/0x610 [ 365.607569][ T9051] __se_sys_ioctl+0xfd/0x170 [ 365.615770][ T9051] do_syscall_64+0x55/0xb0 [ 365.620513][ T9051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.629834][ T9051] page last free stack trace: [ 365.641484][ C1] net_ratelimit: 43 callbacks suppressed [ 365.642591][ T9051] free_unref_page_prepare+0x7d7/0x8f0 [ 365.668999][ T9051] free_unref_page+0x32/0x2e0 [ 365.682637][ T9051] vfree+0x1a7/0x340 [ 365.693738][ T9051] kcov_close+0x2b/0x50 [ 365.703885][ T9051] __fput+0x221/0x940 [ 365.717557][ T9051] task_work_run+0x1d4/0x260 [ 365.734777][ T9051] do_exit+0x986/0x2530 [ 365.744668][ T9051] do_group_exit+0x22d/0x2f0 [ 365.758007][ T9051] get_signal+0x12a6/0x1390 [ 365.770897][ T9051] arch_do_signal_or_restart+0xc2/0x7b0 [ 365.801749][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.816052][ T9051] exit_to_user_mode_loop+0x70/0x110 [ 365.849759][ T9051] exit_to_user_mode_prepare+0xee/0x180 [ 365.877649][ T9051] syscall_exit_to_user_mode+0x1a/0x50 [ 365.921377][ T9051] do_syscall_64+0x61/0xb0 [ 365.938217][ T9051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.988616][ T9052] page:ffffea0001800000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 366.015466][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.042705][ T5837] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 366.051288][ T9052] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 366.062441][ T9052] page_type: 0xffffffff() [ 366.067638][ T5837] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 366.079586][ T9052] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 366.088688][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.114864][ T9052] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 366.137758][ T9052] page dumped because: unmovable page [ 366.161597][ T9052] page_owner tracks the page as allocated [ 366.168761][ T5837] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 366.178019][ T9052] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 5786, tgid 5786 (kworker/u5:3), ts 80788796114, free_ts 27938642783 [ 366.231272][ T9052] post_alloc_hook+0x1c1/0x200 [ 366.243471][ T9052] get_page_from_freelist+0x2181/0x22a0 [ 366.265867][ T9052] __alloc_pages+0x1f0/0x460 [ 366.270619][ T9052] __vmalloc_node_range+0x962/0x1320 [ 366.286335][ T9052] vmalloc+0x79/0x90 [ 366.290710][ T9052] kcov_remote_start+0x383/0x810 [ 366.291418][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 366.308643][ T9052] hci_rx_work+0x12b/0xd60 [ 366.321548][ T9052] process_scheduled_works+0xa60/0x1600 [ 366.337779][ T9052] worker_thread+0xa5e/0xfe0 [ 366.347673][ T9052] kthread+0x2fa/0x390 [ 366.357822][ T9052] ret_from_fork+0x48/0x80 [ 366.378116][ T9052] ret_from_fork_asm+0x11/0x20 [ 366.387663][ T9052] page last free stack trace: [ 366.402519][ T9052] free_unref_page_prepare+0x7d7/0x8f0 [ 366.411278][ T9052] free_unref_page+0x32/0x2e0 [ 366.416047][ T9052] free_contig_range+0xa1/0x150 [ 366.434475][ T9052] destroy_args+0x7d/0x840 [ 366.451574][ T9052] debug_vm_pgtable+0x411/0x440 [ 366.466539][ T9052] do_one_initcall+0x242/0x790 [ 366.480087][ T9052] do_initcall_level+0x13d/0x1f0 [ 366.492999][ T9052] do_initcalls+0x69/0xd0 [ 366.499505][ T9] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 366.499668][ T9052] kernel_init_freeable+0x3d9/0x560 [ 366.512350][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 366.519913][ T9052] kernel_init+0x1d/0x1c0 [ 366.536008][ T9052] ret_from_fork+0x48/0x80 [ 366.541095][ T9052] ret_from_fork_asm+0x11/0x20 [ 366.547335][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 366.558092][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 366.586428][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.597463][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 366.636772][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 366.664877][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 366.696232][ T9] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 366.721283][ T9] usb 2-1: Product: syz [ 366.725626][ T9] usb 2-1: Manufacturer: syz [ 366.737951][ T9] usb 2-1: SerialNumber: syz [ 366.764046][ T9063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.781623][ T9063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.800849][ T9063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 367.941841][ T9] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 367.949979][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 369.374395][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 369.385220][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 369.426466][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 369.487406][ T789] usb 2-1: USB disconnect, device number 12 [ 369.518911][ T789] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 369.557250][ T789] keyspan 2-1:1.0: device disconnected [ 370.345869][ T28] audit: type=1800 audit(1791517021.516:184): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="attr_allow_any_host" dev="configfs" ino=21539 res=0 errno=0 [ 370.373655][ T9104] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 370.433977][ T28] audit: type=1800 audit(1791517021.546:185): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="addr_trtype" dev="configfs" ino=21540 res=0 errno=0 [ 370.571673][ T27] usb 1-1: USB disconnect, device number 8 [ 370.601125][ T27] idmouse 1-1:1.0: disconnected [ 370.691216][ T789] nvmet: creating nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 370.741832][ T9104] nvme nvme19: creating 2 I/O queues. [ 370.770015][ T9104] nvme nvme19: new ctrl: "testsubsys" [ 371.481278][ C1] net_ratelimit: 40 callbacks suppressed [ 372.971549][ T173] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 375.381182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 375.581198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 375.591194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 375.691191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 375.721182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 376.101118][ T173] usb 2-1: device descriptor read/all, error -71 [ 376.396041][ T28] audit: type=1800 audit(1791517027.566:186): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.777" name="attr_allow_any_host" dev="configfs" ino=22533 res=0 errno=0 [ 376.446450][ T28] audit: type=1800 audit(1791517027.616:187): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.777" name="addr_trtype" dev="configfs" ino=22535 res=0 errno=0 [ 376.473966][ T9156] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 376.747642][ T9] nvmet: creating nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7b73593a-16f1-434f-9f0b-01f8676f70b5. [ 376.790910][ T9156] nvme nvme20: creating 2 I/O queues. [ 376.806880][ T9156] nvme nvme20: new ctrl: "testsubsys" [ 376.921228][ C1] net_ratelimit: 55 callbacks suppressed [ 377.011296][ T173] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 377.226410][ T173] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 377.269044][ T28] audit: type=1800 audit(1791517028.436:188): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.784" name="file0" dev="overlay" ino=670 res=0 errno=0 [ 377.269152][ T173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.345524][ T173] usb 2-1: config 0 has no interface number 0 [ 378.356469][ T173] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 378.366102][ T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.374871][ T173] usb 2-1: Product: syz [ 378.380044][ T173] usb 2-1: Manufacturer: syz [ 378.385582][ T173] usb 2-1: SerialNumber: syz [ 378.399083][ T173] usb 2-1: config 0 descriptor?? [ 378.409523][ T173] yurex 2-1:0.50: Could not find endpoints [ 378.511274][ T5819] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.675608][ T5820] usb 2-1: USB disconnect, device number 14 [ 378.724140][ T5819] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 378.774519][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 378.793271][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 378.804011][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 378.888895][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.935520][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.942917][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.101885][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 380.504708][ T5819] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 380.588638][ T5819] usb 1-1: string descriptor 0 read error: -71 [ 380.616387][ T5819] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 380.723834][ T5819] usb 1-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 380.815586][ T5819] usb 1-1: can't set config #1, error -71 [ 380.862668][ T5819] usb 1-1: USB disconnect, device number 9 [ 382.131216][ C0] net_ratelimit: 48 callbacks suppressed [ 384.085228][ T28] audit: type=1326 audit(1791517035.176:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.182138][ T28] audit: type=1326 audit(1791517035.176:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.251698][ T28] audit: type=1326 audit(1791517035.176:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.350809][ T28] audit: type=1326 audit(1791517035.176:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.462759][ T28] audit: type=1326 audit(1791517035.176:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.569055][ T28] audit: type=1326 audit(1791517035.186:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458279e1d9 code=0x7ffc0000 [ 384.667142][ C1] virtqueue callback for ffff888145a54a00 (ffffffff857fec60) [ 384.667165][ C1] sd 0:0:1:0: cmd ffff888024e704d0 response 0 status 0x0 sense_len 0 [ 384.667189][ C1] sd 0:0:1:0: cmd ffff888024e713d0 response 0 status 0x0 sense_len 0 [ 384.667208][ C1] No more buffers in queue [ 384.667227][ C1] virtqueue callback for ffff888145a54a00 (ffffffff857fec60) [ 384.667244][ C1] sd 0:0:1:0: cmd ffff888024e70890 response 0 status 0x0 sense_len 0 [ 384.667265][ C1] sd 0:0:1:0: cmd ffff888024e71010 response 0 status 0x0 sense_len 0 [ 384.667285][ C1] sd 0:0:1:0: cmd ffff888024e71b50 response 0 status 0x0 sense_len 0 [ 384.667306][ C1] sd 0:0:1:0: cmd ffff888024e71f10 response 0 status 0x0 sense_len 0 [ 384.667326][ C1] sd 0:0:1:0: cmd ffff888024e722d0 response 0 status 0x0 sense_len 0 [ 384.667345][ C1] No more buffers in queue [ 384.667515][ C1] virtqueue callback for ffff888145a54a00 (ffffffff857fec60) [ 384.667536][ C1] sd 0:0:1:0: cmd ffff888024e6ed50 response 0 status 0x0 sense_len 0 [ 384.667559][ C1] sd 0:0:1:0: cmd ffff888024e6f4d0 response 0 status 0x0 sense_len 0 [ 384.667580][ C1] sd 0:0:1:0: cmd ffff888024e6f890 response 0 status 0x0 sense_len 0 [ 384.667601][ C1] sd 0:0:1:0: cmd ffff888024e6fc50 response 0 status 0x0 sense_len 0 [ 384.667622][ C1] sd 0:0:1:0: cmd ffff888024e70110 response 0 status 0x0 sense_len 0 [ 384.667643][ C1] sd 0:0:1:0: cmd ffff888024e70c50 response 0 status 0x0 sense_len 0 [ 384.667663][ C1] sd 0:0:1:0: cmd ffff888024e71790 response 0 status 0x0 sense_len 0 [ 384.667682][ C1] No more buffers in queue [ 384.701320][ T9229] kcov: kcov_start: t = ffff88807d03da00, size = 524288, area = ffffc90011154000 [ 384.731924][ T9] ================================================================== [ 384.732009][ T9] BUG: KASAN: vmalloc-out-of-bounds in drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732093][ T9] Write of size 3072 at addr ffffc9000453a000 by task kworker/0:1/9 [ 384.732112][ T9] [ 384.732118][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 384.732138][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.732153][ T9] Workqueue: events drm_fb_helper_damage_work [ 384.732183][ T9] Call Trace: [ 384.732192][ T9] [ 384.732201][ T9] dump_stack_lvl+0x18c/0x250 [ 384.732223][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732280][ T9] ? show_regs_print_info+0x20/0x20 [ 384.732300][ T9] ? load_image+0x420/0x420 [ 384.732343][ T9] print_report+0xa8/0x210 [ 384.732372][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732400][ T9] kasan_report+0x117/0x150 [ 384.732431][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732464][ T9] kasan_check_range+0x241/0x290 [ 384.732490][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732520][ T9] __asan_memcpy+0x40/0x70 [ 384.732550][ T9] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.732586][ T9] ? drm_fbdev_generic_helper_fb_probe+0x520/0x520 [ 384.732621][ T9] drm_fb_helper_damage_work+0x22f/0x6f0 [ 384.732652][ T9] ? __lock_acquire+0x7eb0/0x7eb0 [ 384.732679][ T9] ? drm_fb_helper_resume_worker+0x50/0x50 [ 384.732710][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.732752][ T9] ? process_scheduled_works+0x975/0x1600 [ 384.732779][ T9] ? process_scheduled_works+0x975/0x1600 [ 384.732807][ T9] process_scheduled_works+0xa60/0x1600 [ 384.732848][ T9] ? worker_attach_to_pool+0x370/0x370 [ 384.732879][ T9] ? assign_work+0x3cc/0x5d0 [ 384.732908][ T9] worker_thread+0xa5e/0xfe0 [ 384.732941][ T9] ? _raw_spin_unlock+0x40/0x40 [ 384.732968][ T9] ? __kthread_parkme+0x71/0x1c0 [ 384.732994][ T9] kthread+0x2fa/0x390 [ 384.733016][ T9] ? pr_cont_work+0x550/0x550 [ 384.733043][ T9] ? kthread_blkcg+0xd0/0xd0 [ 384.733065][ T9] ret_from_fork+0x48/0x80 [ 384.733101][ T9] ? kthread_blkcg+0xd0/0xd0 [ 384.733123][ T9] ret_from_fork_asm+0x11/0x20 [ 384.733158][ T9] [ 384.733165][ T9] [ 384.733170][ T9] The buggy address belongs to a vmalloc virtual mapping [ 384.733189][ T9] Memory state around the buggy address: [ 384.733201][ T9] ffffc90004539f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 384.733215][ T9] ffffc90004539f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 384.733228][ T9] >ffffc9000453a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 384.733239][ T9] ^ [ 384.733250][ T9] ffffc9000453a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 384.733263][ T9] ffffc9000453a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 384.733274][ T9] ================================================================== [ 384.733338][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 384.733349][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 384.733368][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.733379][ T9] Workqueue: events drm_fb_helper_damage_work [ 384.733406][ T9] Call Trace: [ 384.733413][ T9] [ 384.733421][ T9] dump_stack_lvl+0x18c/0x250 [ 384.733442][ T9] ? show_regs_print_info+0x20/0x20 [ 384.733461][ T9] ? load_image+0x420/0x420 [ 384.733491][ T9] panic+0x2ca/0x720 [ 384.733519][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 384.733544][ T9] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 384.733571][ T9] ? _raw_spin_unlock+0x40/0x40 [ 384.733595][ T9] ? print_memory_metadata+0x314/0x400 [ 384.733624][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.733651][ T9] check_panic_on_warn+0x84/0xa0 [ 384.733676][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.733703][ T9] end_report+0x6f/0x130 [ 384.733727][ T9] kasan_report+0x128/0x150 [ 384.733752][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.733782][ T9] kasan_check_range+0x241/0x290 [ 384.733807][ T9] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.733835][ T9] __asan_memcpy+0x40/0x70 [ 384.733865][ T9] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 384.733900][ T9] ? drm_fbdev_generic_helper_fb_probe+0x520/0x520 [ 384.733932][ T9] drm_fb_helper_damage_work+0x22f/0x6f0 [ 384.733960][ T9] ? __lock_acquire+0x7eb0/0x7eb0 [ 384.733985][ T9] ? drm_fb_helper_resume_worker+0x50/0x50 [ 384.734013][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.734039][ T9] ? process_scheduled_works+0x975/0x1600 [ 384.734064][ T9] ? process_scheduled_works+0x975/0x1600 [ 384.734101][ T9] process_scheduled_works+0xa60/0x1600 [ 384.734139][ T9] ? worker_attach_to_pool+0x370/0x370 [ 384.734167][ T9] ? assign_work+0x3cc/0x5d0 [ 384.734194][ T9] worker_thread+0xa5e/0xfe0 [ 384.734224][ T9] ? _raw_spin_unlock+0x40/0x40 [ 384.734249][ T9] ? __kthread_parkme+0x71/0x1c0 [ 384.734272][ T9] kthread+0x2fa/0x390 [ 384.734293][ T9] ? pr_cont_work+0x550/0x550 [ 384.734317][ T9] ? kthread_blkcg+0xd0/0xd0 [ 384.734337][ T9] ret_from_fork+0x48/0x80 [ 384.734360][ T9] ? kthread_blkcg+0xd0/0xd0 [ 384.734381][ T9] ret_from_fork_asm+0x11/0x20 [ 384.734412][ T9] [ 384.734727][ T9] Kernel Offset: disabled