last executing test programs: 1m37.283138699s ago: executing program 0 (id=797): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xffff}, {0xb, 0xfff3}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x6, 0x7, 0x2, 0x5, 0xd, 0x1}}, {0x6, 0x2, [0x2]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4044800) 1m37.106880127s ago: executing program 0 (id=799): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x8051, 0xbf7ffe01, 0x8001, 0x2, "202b9809007d001c5d01f3e82d1cc800", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000002c0)) 1m36.927904756s ago: executing program 0 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411223344"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a"], 0x0) 1m36.795966542s ago: executing program 0 (id=803): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c4800905020210020200000905820000000000"], 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./dev\x00', 0x6800, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0xa, 0x3, 0x7) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0xffffffc0, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0xfffffffb, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0xfffffffffffffffc, {}, 0xfe}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r6, 0x0, &(0x7f0000000100)) 1m33.675457188s ago: executing program 0 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='10485', 0x5) 1m30.762850675s ago: executing program 0 (id=839): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40044) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 1m30.618708612s ago: executing program 32 (id=839): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40044) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 15.337073361s ago: executing program 5 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newtfilter={0x8cc, 0x2c, 0x601, 0x0, 0x1, {0x0, 0x0, 0x0, 0xffffffff, {0xa, 0xe}, {0x1}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x89c, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x9dcc}, [@TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "d52d066b28e85a770ff5e76cfa4486432c5806b7b56e112c00371124e2d1ffe4a85b7428ecc2e5a0d9afa3e8303aae0d"}]}}]}]}, @TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x5, 0x3, 0x1c, 0x9, 0x9, 0xffffffff, 0x0, 0xe94c, 0xe4ca, 0x5, 0xb, 0xfffffff7, 0x4, 0x8, 0x80000001, 0xa19b355, 0x2, 0x1, 0x5, 0x3, 0x7, 0xa9, 0x5, 0x0, 0x4, 0x6, 0x8, 0xfffffff9, 0x8, 0x8001, 0x7fffffff, 0x8, 0x0, 0x10, 0x1, 0xfffffc01, 0x56, 0x8001, 0x401, 0x401, 0x3ff, 0x5, 0x40, 0x0, 0x200, 0x3, 0xfff, 0x2008, 0xffff8001, 0x3, 0xfffffffc, 0x1ff, 0xffffb17f, 0x6, 0x3, 0x8, 0x0, 0x3, 0x7, 0x113, 0x6, 0x8, 0xa57, 0xd, 0x4, 0x6, 0x2, 0x0, 0x1, 0x8, 0x4, 0xf, 0x1, 0x80000000, 0xc82200, 0x8, 0xfffffffb, 0x3ff, 0x4, 0x6, 0x80000001, 0x3b, 0x8, 0x400, 0x81d1, 0x3ff, 0x6, 0x7ff, 0x4, 0x8e7, 0x7, 0x2, 0x4, 0x5, 0x5, 0x8000, 0x3, 0x3ff, 0x4, 0x57, 0x0, 0x0, 0x3, 0x7, 0x0, 0x7, 0x3, 0x8, 0x2, 0x3, 0x7, 0xb, 0x30a, 0x6, 0x1000, 0x80000000, 0x6, 0x5, 0x95, 0xd96, 0x268, 0x3ff, 0x0, 0x20000, 0x5, 0x1000, 0x8, 0xc, 0x2, 0xe39, 0x5, 0x2, 0x9c, 0x8, 0xfffffffe, 0x8, 0xf4bd, 0x7, 0x401, 0x5, 0x0, 0xfffffff7, 0x100, 0x401, 0x7ff, 0x6, 0xfffffffe, 0x3, 0x10001, 0x1, 0x8, 0x7, 0x8, 0x6, 0x152, 0x2de0, 0x8, 0x2, 0x80, 0x3, 0x1, 0x9, 0x10000, 0xff, 0x0, 0xb4, 0x68d17845, 0x0, 0x3, 0x598, 0x3, 0xd536, 0x9, 0x9, 0x4, 0x8, 0x7ff, 0x80000001, 0x7, 0x7, 0x8b, 0xed, 0x3, 0x1000, 0x5a2, 0x1, 0xfffffffd, 0x7, 0x8, 0x6, 0x8001, 0x0, 0x0, 0x3, 0x3093, 0xfff, 0x819f, 0x5, 0x1, 0x3, 0x9, 0xff, 0x7, 0x6, 0xfffffffb, 0xf, 0xd, 0x3, 0x6, 0x1, 0x9, 0x1, 0x67, 0x5cc, 0xb798, 0x2, 0x1, 0xe5b, 0x1, 0x5, 0x7, 0x8, 0xfffffffa, 0x7, 0x7, 0x81, 0x6, 0x57, 0x5, 0xff, 0x8, 0x20002000, 0x3, 0x6, 0x6, 0xb34f, 0xe, 0x3, 0x8, 0xfffffffe, 0x3, 0xa, 0x1f70, 0x4c, 0x9, 0x8, 0x8c1c, 0x4, 0x800, 0x1, 0x9, 0xf9, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffff00, 0x0, 0x8, 0x4, 0x0, 0xbee, 0x96d2, 0x40009, 0x6, 0x7, 0x7fff, 0x8, 0x6, 0x80000001, 0x3, 0x2, 0x0, 0x98a, 0x9, 0x401, 0x572, 0x400, 0x7, 0x9, 0x2, 0x3, 0x48, 0x34f, 0x7a0, 0xffffffff, 0x3, 0xd2, 0x8001, 0x79a, 0x2, 0x8, 0x2, 0x6, 0x3, 0x90, 0x7fffffff, 0x1, 0x2, 0xcec1, 0x9, 0x401, 0x5, 0x5, 0xfff, 0xcb, 0x7fff, 0x69, 0x95a0, 0x7, 0xda08, 0x2, 0x3, 0x9, 0x5, 0x7, 0xb860, 0x2c7c, 0x40, 0xa14, 0x8, 0x3, 0x5, 0x3, 0x10, 0x3000000, 0x982, 0x0, 0x0, 0x3, 0x0, 0x1995, 0x7, 0x9, 0x0, 0x7, 0xd, 0x0, 0x44e5fb9d, 0x7, 0x334, 0xff, 0x800, 0x1, 0x80000000, 0x8, 0x5, 0x401, 0x5, 0x7f, 0xdf88, 0x3, 0x400, 0x800, 0x9, 0x0, 0x9, 0x4, 0x400, 0x7cb, 0x3c, 0x200, 0x6, 0x3, 0xb, 0x2ce, 0x6, 0xfffff800, 0x4, 0x0, 0x0, 0x8, 0x8, 0x2, 0xde, 0x8000, 0x6, 0x1, 0x5, 0x132c, 0x9d15, 0x0, 0x6, 0x9, 0x101, 0xc78, 0x1, 0x7, 0x6, 0x5, 0x0, 0x100, 0x33, 0xf2, 0xd, 0xd3e6, 0xfffffbff, 0x100, 0x41a, 0x3c, 0x42, 0xfffffffd, 0x2, 0x2, 0xbd3, 0x4, 0x70, 0x6, 0x8, 0x5bb, 0xbe, 0xfffffffe, 0x1, 0x9, 0x0, 0x80000001, 0x6, 0x3, 0x8, 0x9, 0x200, 0x2, 0x3ff, 0x8, 0x6, 0xffffff05, 0xffffffff, 0xd13, 0x81, 0x7ff, 0x8, 0x3ff, 0x7fffffff, 0x0, 0x6, 0x6, 0x31, 0x7, 0x1, 0x0, 0x7ff, 0x3, 0x5, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x0, 0x2, 0x8000, 0xfffffff5, 0xffffff7f, 0x5, 0x0, 0x3, 0x800, 0x7, 0x0, 0x88, 0x0, 0xfffffffb, 0x2, 0x3, 0x9, 0xfd62, 0xf2, 0x8, 0x8, 0x101, 0x9, 0x9, 0x6, 0x6, 0x7, 0x0, 0x1, 0x8, 0x3, 0x80, 0x2, 0xfffffff9, 0x0, 0xc4, 0x2, 0x5, 0x664a, 0x1, 0xffffffff, 0x1, 0x7, 0x5f, 0x80, 0xfff, 0x4, 0x0, 0x1, 0x7, 0x1000, 0x3, 0x7, 0x6, 0x3ff, 0x6, 0xffff, 0x6, 0x401, 0x4, 0x58672b87, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x6, 0x3, 0x1000000, 0x80000001, {0x3, 0x0, 0x4, 0x9, 0x5, 0xfffffffa}, {0x3, 0x0, 0x2000, 0x0, 0x2, 0x2}, 0x48a, 0x1ff, 0x3}}]}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.336584961s ago: executing program 4 (id=1268): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864d", 0x7b}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef) 15.259936934s ago: executing program 1 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='localhost /tmp 2147483647 136208 0 0 0\n', 0x27) 15.254914594s ago: executing program 5 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000bc0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) 15.225794966s ago: executing program 2 (id=1272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) writev(r0, &(0x7f0000000380)=[{0x0}], 0x1) 15.159740809s ago: executing program 1 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 15.111508421s ago: executing program 2 (id=1275): socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.92580114s ago: executing program 2 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) 14.693757381s ago: executing program 5 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x1, 0x100) listen(r5, 0x7fff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 14.661796142s ago: executing program 4 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @union]}}, 0x0, 0x32}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x42000000) 14.29131763s ago: executing program 2 (id=1279): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) 10.410697242s ago: executing program 3 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x6c, 0x2c, 0x401, 0x100000, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x100}, {0x8eb2, 0x8, 0x1, 0xfffffffd}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfffa, 0x9, 0x3}}}]}]}]}}]}, 0x6c}}, 0x0) 3.880076218s ago: executing program 2 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000bc0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) 3.83399544s ago: executing program 5 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x10}, 0x18) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 3.820270141s ago: executing program 1 (id=1290): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 3.731987625s ago: executing program 3 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='\x00\x00', 0x2) 2.524235031s ago: executing program 1 (id=1292): clock_settime(0x5, 0x0) memfd_create(0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) 2.416412916s ago: executing program 5 (id=1293): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) 2.322675961s ago: executing program 3 (id=1294): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864d", 0x7b}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef) 2.321543831s ago: executing program 2 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys_mnt\x00', &(0x7f0000000280)='bdev\x00', 0x1042c20, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_mnt/class/rtc/rtc0/date\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000000020100fd00000200000000000000000400000088000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) write(r0, &(0x7f0000000000)="d5e742ec02eebef5d0da1cc4a68d114f119f00647e77dc49c5fbb5b7a83892a836c2f04e5fa6f1fbe204707563d9da454293972540e2d2cdc9a3290f9e2f78974678ff2f0b8ba0974e9a9f2d13442dd18ff7ebab1b3f270a9239569e810a7f30fe10b517929aae6b000c1071c144203516869d893173429a6feae71cdf4569deb7b4b8bd54f494dd36fa0994c33e04541d644e544c2ba4517d882ac206f4459a17b51f3557df68a15eb22fb53bc709f1f38692f86fdab30b8384df8b4d6e8959282bfd2b79b395a6", 0xc8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) writev(r3, &(0x7f0000001c00)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) 2.271156483s ago: executing program 4 (id=1296): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) writev(r0, &(0x7f0000000380)=[{0x0}], 0x1) 2.079608242s ago: executing program 1 (id=1297): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="630500020000000adf3da7b33389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.079188542s ago: executing program 4 (id=1298): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc0500000800", 0x3e) 2.058526253s ago: executing program 3 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) 1.920624979s ago: executing program 5 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x1, 0x100) listen(r5, 0x7fff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 697.136597ms ago: executing program 4 (id=1301): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff250000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008844) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={'veth0_to_team\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 523.883765ms ago: executing program 1 (id=1302): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 167.403842ms ago: executing program 3 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x114, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 128.404543ms ago: executing program 4 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) 0s ago: executing program 3 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000bc0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) kernel console output (not intermixed with test programs): buffered_io value. [ 94.126717][ T5488] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 94.253199][ T4376] nvmet: creating nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 94.261530][ T5488] nvme nvme21: creating 1 I/O queues. [ 94.264618][ T5488] nvme nvme21: new ctrl: "testsubsys" [ 94.288971][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 94.649470][ T5501] binder: 5500:5501 tried to acquire reference to desc 0, got 1 instead [ 94.667204][ T5501] binder: 5500:5501 got transaction with invalid data ptr [ 94.671890][ T5501] binder: 5500:5501 transaction call to 5500:0 failed 92/29201/-14, size 0-24 line 3350 [ 94.689742][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.729070][ T5503] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 94.845970][ T3901] nvmet: creating nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 94.862384][ T5503] nvme nvme22: creating 1 I/O queues. [ 94.879725][ T5503] nvme nvme22: new ctrl: "testsubsys" [ 94.954076][ T5512] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 97.915151][ T5538] nvmet: disable ns before setting buffered_io value. [ 97.949188][ T5538] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 97.968237][ T5541] binder: 5540:5541 tried to acquire reference to desc 0, got 1 instead [ 97.974381][ T5541] binder: 5540:5541 got transaction with invalid data ptr [ 97.975737][ T5541] binder: 5540:5541 transaction call to 5540:0 failed 97/29201/-14, size 0-24 line 3350 [ 98.028556][ T7] nvmet: creating nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 98.031697][ T5538] nvme nvme23: creating 1 I/O queues. [ 98.034922][ T5541] syz.1.322 (5541): drop_caches: 2 [ 98.038693][ T5538] nvme nvme23: new ctrl: "testsubsys" [ 98.040888][ T5541] binder: 5540:5541 ioctl c0306201 0 returned -14 [ 98.051635][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.411984][ T5558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 98.472944][ T5561] nvmet: disable ns before setting buffered_io value. [ 98.481758][ T5561] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 98.771418][ T4376] nvmet: creating nvm controller 24 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 98.786558][ T5561] nvme nvme24: creating 1 I/O queues. [ 98.806715][ T5561] nvme nvme24: new ctrl: "testsubsys" [ 99.292566][ T5578] using random self ethernet address [ 99.306964][ T5578] using random host ethernet address [ 99.347890][ T5580] process 'syz.0.334' launched '/dev/fd/3' with NULL argv: empty string added [ 99.451024][ T5583] binder: 5582:5583 tried to acquire reference to desc 0, got 1 instead [ 99.467675][ T5583] binder: 5582:5583 got transaction with invalid data ptr [ 99.475759][ T5583] binder: 5582:5583 transaction call to 5582:0 failed 102/29201/-14, size 0-24 line 3350 [ 99.522740][ T5583] syz.2.335 (5583): drop_caches: 2 [ 99.537008][ T5583] binder: 5582:5583 ioctl c0306201 0 returned -14 [ 99.556239][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.639317][ T5589] nvmet: disable ns before setting buffered_io value. [ 99.655449][ T5589] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.810271][ T5599] nvmet: disable ns before setting buffered_io value. [ 99.822043][ T4376] nvmet: creating nvm controller 25 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 99.830454][ T5599] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.835829][ T5589] nvme nvme25: creating 1 I/O queues. [ 99.837288][ T5589] nvme nvme25: new ctrl: "testsubsys" [ 100.026542][ T7] nvmet: creating nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 100.030279][ T5599] nvme nvme26: creating 1 I/O queues. [ 100.037607][ T5599] nvme nvme26: new ctrl: "testsubsys" [ 100.251030][ T5614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 100.450873][ T5619] ERROR: Out of memory at tomoyo_memory_ok. [ 100.460203][ T5619] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-6-1-kasan-arm64/syz-executor /root/ci2-linux-6-1-kasan-arm64/syz-executor /newroot/77/file0' not defined. [ 101.666193][ T5628] FAULT_INJECTION: forcing a failure. [ 101.666193][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 101.668440][ T5628] CPU: 0 PID: 5628 Comm: syz.3.349 Not tainted syzkaller #0 [ 101.669845][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.671721][ T5628] Call trace: [ 101.672350][ T5628] dump_backtrace+0x1c4/0x1f0 [ 101.673304][ T5628] show_stack+0x2c/0x3c [ 101.674086][ T5628] __dump_stack+0x30/0x40 [ 101.674886][ T5628] dump_stack_lvl+0xf4/0x15c [ 101.675779][ T5628] dump_stack+0x1c/0x5c [ 101.676535][ T5628] should_fail_ex+0x3cc/0x524 [ 101.677376][ T5628] __should_failslab+0xc0/0x11c [ 101.678225][ T5628] should_failslab+0x10/0x28 [ 101.679039][ T5628] __kmem_cache_alloc_node+0x7c/0x318 [ 101.679998][ T5628] __kmalloc+0xc4/0x180 [ 101.680784][ T5628] load_msg+0x4c/0x55c [ 101.681508][ T5628] do_msgsnd+0x170/0xfd4 [ 101.682265][ T5628] __arm64_sys_msgsnd+0x174/0x1b0 [ 101.683188][ T5628] invoke_syscall+0x98/0x290 [ 101.684018][ T5628] el0_svc_common+0x13c/0x258 [ 101.684867][ T5628] do_el0_svc+0x5c/0x134 [ 101.685615][ T5628] el0_svc+0x58/0x128 [ 101.686306][ T5628] el0t_64_sync_handler+0x84/0xf0 [ 101.687191][ T5628] el0t_64_sync+0x18c/0x190 [ 101.712559][ T5630] binder: 5629:5630 tried to acquire reference to desc 0, got 1 instead [ 101.785870][ T5633] binder: 5629:5633 got transaction with invalid data ptr [ 101.787203][ T5633] binder: 5629:5633 transaction call to 5629:0 failed 107/29201/-14, size 0-24 line 3350 [ 101.801354][ T5630] syz.1.350 (5630): drop_caches: 2 [ 101.809976][ T5630] binder: 5629:5630 ioctl c0306201 0 returned -14 [ 101.814040][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.978969][ T5638] nvmet: disable ns before setting buffered_io value. [ 101.995847][ T5638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 102.085675][ T7] nvmet: creating nvm controller 27 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 102.095204][ T5638] nvme nvme27: creating 1 I/O queues. [ 102.103025][ T5638] nvme nvme27: new ctrl: "testsubsys" [ 102.212800][ T5646] nvmet: disable ns before setting buffered_io value. [ 102.219819][ T5646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 102.281907][ T7] nvmet: creating nvm controller 28 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 102.287656][ T5646] nvme nvme28: creating 1 I/O queues. [ 102.292930][ T5646] nvme nvme28: new ctrl: "testsubsys" [ 102.787534][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 103.949435][ T5670] binder: 5669:5670 tried to acquire reference to desc 0, got 1 instead [ 103.992619][ T5670] binder: 5669:5670 got transaction with invalid data ptr [ 104.002629][ T5670] binder: 5669:5670 transaction call to 5669:0 failed 112/29201/-14, size 0-24 line 3350 [ 104.022145][ T5670] syz.0.363 (5670): drop_caches: 2 [ 104.052015][ T5674] nvmet: disable ns before setting buffered_io value. [ 104.061701][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.081523][ T5674] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.226851][ T3901] nvmet: creating nvm controller 29 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 104.230482][ T5674] nvme nvme29: creating 1 I/O queues. [ 104.231860][ T5674] nvme nvme29: new ctrl: "testsubsys" [ 104.237878][ T5683] nvmet: disable ns before setting buffered_io value. [ 104.259339][ T5683] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.445770][ T3901] nvmet: creating nvm controller 30 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 104.450702][ T5683] nvme nvme30: creating 1 I/O queues. [ 104.456674][ T5683] nvme nvme30: new ctrl: "testsubsys" [ 104.905720][ T5700] tun0: tun_chr_ioctl cmd 1074025675 [ 104.906806][ T5700] tun0: persist disabled [ 105.072158][ T5707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 105.341536][ T5715] binder: 5714:5715 tried to acquire reference to desc 0, got 1 instead [ 105.348671][ T5715] binder: 5714:5715 got transaction with invalid data ptr [ 105.356669][ T5715] binder: 5714:5715 transaction call to 5714:0 failed 117/29201/-14, size 0-24 line 3350 [ 105.367093][ T5715] syz.0.378 (5715): drop_caches: 2 [ 106.338646][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.577453][ T5725] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 106.689164][ T4376] nvmet: creating nvm controller 31 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 106.705435][ T5734] nvmet: disable ns before setting buffered_io value. [ 106.708517][ T5725] nvme nvme31: creating 1 I/O queues. [ 106.717229][ T5734] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 106.724782][ T5725] nvme nvme31: new ctrl: "testsubsys" [ 106.827871][ T7] nvmet: creating nvm controller 32 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 106.845842][ T5734] nvme nvme32: creating 1 I/O queues. [ 106.852633][ T5734] nvme nvme32: new ctrl: "testsubsys" [ 107.143748][ T5742] /dev/loop0: Can't open blockdev [ 107.741968][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 107.799685][ T5756] binder: 5755:5756 tried to acquire reference to desc 0, got 1 instead [ 107.810190][ T5756] binder: 5755:5756 got transaction with invalid data ptr [ 107.815879][ T5756] binder: 5755:5756 transaction call to 5755:0 failed 122/29201/-14, size 0-24 line 3350 [ 107.830710][ T5756] syz.1.392 (5756): drop_caches: 2 [ 107.838286][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.609386][ T5771] nvmet: disable ns before setting buffered_io value. [ 108.611834][ T5768] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 108.620014][ T5771] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 108.710267][ T3901] nvmet: creating nvm controller 33 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 108.724511][ T5768] nvme nvme33: creating 1 I/O queues. [ 108.748516][ T5768] nvme nvme33: new ctrl: "testsubsys" [ 108.861177][ T3901] nvmet: creating nvm controller 34 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 108.868401][ T5771] nvme nvme34: creating 1 I/O queues. [ 108.875778][ T5771] nvme nvme34: new ctrl: "testsubsys" [ 109.186572][ T5783] netlink: 7 bytes leftover after parsing attributes in process `syz.4.400'. [ 109.405000][ T5790] device syzkaller0 entered promiscuous mode [ 109.720796][ T5801] binder: 5800:5801 tried to acquire reference to desc 0, got 1 instead [ 109.735738][ T5801] binder: 5800:5801 got transaction with invalid data ptr [ 109.737118][ T5801] binder: 5800:5801 transaction call to 5800:0 failed 127/29201/-14, size 0-24 line 3350 [ 109.795826][ T5801] syz.4.406 (5801): drop_caches: 2 [ 109.825647][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.133832][ T5810] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.465443][ T3901] nvmet: creating nvm controller 35 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 110.471827][ T5810] nvme nvme35: creating 1 I/O queues. [ 110.476074][ T5810] nvme nvme35: new ctrl: "testsubsys" [ 110.661002][ T5817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 112.059022][ T5832] device syzkaller0 entered promiscuous mode [ 112.207937][ T5840] binder: 5837:5840 tried to acquire reference to desc 0, got 1 instead [ 112.229888][ T5840] binder: 5837:5840 got transaction with invalid data ptr [ 112.239952][ T5840] binder: 5837:5840 transaction call to 5837:0 failed 132/29201/-14, size 0-24 line 3350 [ 112.269067][ T5840] syz.4.419 (5840): drop_caches: 2 [ 112.307636][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.497962][ T5848] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.533858][ T5850] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.574616][ T3901] nvmet: creating nvm controller 36 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 112.580750][ T5848] nvme nvme36: creating 1 I/O queues. [ 112.591214][ T5848] nvme nvme36: new ctrl: "testsubsys" [ 112.729678][ T3901] nvmet: creating nvm controller 37 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 112.737553][ T5850] nvme nvme37: creating 1 I/O queues. [ 112.739409][ T5850] nvme nvme37: new ctrl: "testsubsys" [ 113.552714][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 113.891011][ T5876] device syzkaller0 entered promiscuous mode [ 114.073907][ T5879] binder: 5878:5879 tried to acquire reference to desc 0, got 1 instead [ 114.134840][ T5882] binder: 5878:5882 got transaction with invalid data ptr [ 114.136279][ T5882] binder: 5878:5882 transaction call to 5878:0 failed 137/29201/-14, size 0-24 line 3350 [ 114.167437][ T5879] syz.1.433 (5879): drop_caches: 2 [ 114.189534][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.510557][ T5889] device syzkaller0 entered promiscuous mode [ 114.713729][ T5895] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.722786][ T5897] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.798015][ T7] nvmet: creating nvm controller 38 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 114.807194][ T5895] nvme nvme38: creating 1 I/O queues. [ 114.808668][ T5895] nvme nvme38: new ctrl: "testsubsys" [ 114.941354][ T7] nvmet: creating nvm controller 39 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 114.961390][ T5897] nvme nvme39: creating 1 I/O queues. [ 114.964940][ T5897] nvme nvme39: new ctrl: "testsubsys" [ 115.300338][ T5914] device syzkaller0 entered promiscuous mode [ 115.372265][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 115.847811][ T5929] device syzkaller0 entered promiscuous mode [ 116.968814][ T5936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.318152][ T7] nvmet: creating nvm controller 40 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 117.330701][ T5936] nvme nvme40: creating 1 I/O queues. [ 117.338397][ T5936] nvme nvme40: new ctrl: "testsubsys" [ 117.371067][ T5945] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.449844][ T7] nvmet: creating nvm controller 41 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 117.456446][ T5945] nvme nvme41: creating 1 I/O queues. [ 117.460115][ T5945] nvme nvme41: new ctrl: "testsubsys" [ 117.872334][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'. [ 117.958189][ T5957] device syzkaller0 entered promiscuous mode [ 119.189551][ T5974] device syzkaller0 entered promiscuous mode [ 119.668362][ T5982] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 119.714554][ T4376] nvmet: creating nvm controller 42 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 119.720303][ T5982] nvme nvme42: creating 1 I/O queues. [ 119.730596][ T5982] nvme nvme42: new ctrl: "testsubsys" [ 119.777859][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.780995][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.079175][ T5990] nvmet: disable ns before setting buffered_io value. [ 120.085893][ T5990] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.127159][ T4376] nvmet: creating nvm controller 43 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 120.131351][ T5990] nvme nvme43: creating 1 I/O queues. [ 120.132807][ T5990] nvme nvme43: new ctrl: "testsubsys" [ 120.406387][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 120.542714][ T6000] nvmet: disable ns before setting buffered_io value. [ 120.564845][ T6000] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.624489][ T6004] device syzkaller0 entered promiscuous mode [ 120.679052][ T7] nvmet: creating nvm controller 44 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 120.684764][ T6000] nvme nvme44: creating 1 I/O queues. [ 120.698794][ T6000] nvme nvme44: new ctrl: "testsubsys" [ 121.412189][ T6024] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 121.577358][ T4376] nvmet: creating nvm controller 45 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 121.581983][ T6024] nvme nvme45: creating 1 I/O queues. [ 121.591532][ T6024] nvme nvme45: new ctrl: "testsubsys" [ 122.108929][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 122.795729][ T6047] nvmet: disable ns before setting buffered_io value. [ 122.808758][ T6047] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.851547][ T6050] device syzkaller0 entered promiscuous mode [ 122.878383][ T3901] nvmet: creating nvm controller 46 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 122.899485][ T6047] nvme nvme46: creating 1 I/O queues. [ 122.901359][ T6047] nvme nvme46: new ctrl: "testsubsys" [ 123.397338][ T6063] device syzkaller0 entered promiscuous mode [ 124.650974][ T6081] device syzkaller0 entered promiscuous mode [ 124.824647][ T6086] nvmet: disable ns before setting buffered_io value. [ 124.844397][ T6086] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 125.049187][ T3901] nvmet: creating nvm controller 47 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 125.063365][ T6086] nvme nvme47: creating 1 I/O queues. [ 125.083295][ T6086] nvme nvme47: new ctrl: "testsubsys" [ 126.113034][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.114681][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.206419][ T6114] device syzkaller0 entered promiscuous mode [ 126.355744][ T6118] device syzkaller0 entered promiscuous mode [ 129.505647][ T6154] device syzkaller0 entered promiscuous mode [ 129.596042][ T6156] device syzkaller0 entered promiscuous mode [ 130.405620][ T4378] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 130.626143][ T4378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.629378][ T4378] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.635790][ T4378] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 130.638667][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.149184][ T6192] device syzkaller0 entered promiscuous mode [ 131.474069][ T4378] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 131.477703][ T4378] dvb_ttusb_budget: ttusb_init_controller: error [ 131.478914][ T4378] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 131.891182][ T4378] DVB: Unable to find symbol stv0299_attach() [ 131.898561][ T6204] device syzkaller0 entered promiscuous mode [ 131.986187][ T4378] DVB: Unable to find symbol tda8083_attach() [ 131.987476][ T4378] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 132.640902][ T4378] usb 1-1: USB disconnect, device number 3 [ 132.697648][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.707326][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.250694][ T6233] device syzkaller0 entered promiscuous mode [ 133.977358][ T6248] device syzkaller0 entered promiscuous mode [ 134.327338][ T6262] capability: warning: `syz.4.566' uses 32-bit capabilities (legacy support in use) [ 134.970261][ T6281] device syzkaller0 entered promiscuous mode [ 136.168705][ T6304] FAULT_INJECTION: forcing a failure. [ 136.168705][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.171062][ T6304] CPU: 0 PID: 6304 Comm: syz.3.577 Not tainted syzkaller #0 [ 136.172293][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.174005][ T6304] Call trace: [ 136.174594][ T6304] dump_backtrace+0x1c4/0x1f0 [ 136.175419][ T6304] show_stack+0x2c/0x3c [ 136.176173][ T6304] __dump_stack+0x30/0x40 [ 136.176945][ T6304] dump_stack_lvl+0xf4/0x15c [ 136.177764][ T6304] dump_stack+0x1c/0x5c [ 136.178499][ T6304] should_fail_ex+0x3cc/0x524 [ 136.179333][ T6304] should_fail+0x14/0x24 [ 136.180104][ T6304] should_fail_usercopy+0x20/0x30 [ 136.180981][ T6304] __arm64_sys_io_pgetevents+0x1b8/0x4dc [ 136.182024][ T6304] invoke_syscall+0x98/0x290 [ 136.182863][ T6304] el0_svc_common+0x13c/0x258 [ 136.183715][ T6304] do_el0_svc+0x5c/0x134 [ 136.184462][ T6304] el0_svc+0x58/0x128 [ 136.185217][ T6304] el0t_64_sync_handler+0x84/0xf0 [ 136.186142][ T6304] el0t_64_sync+0x18c/0x190 [ 136.935665][ T6317] device syzkaller0 entered promiscuous mode [ 139.093892][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.096003][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.256412][ T6338] nvmet: disable ns before setting buffered_io value. [ 140.883221][ T6338] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.925143][ T27] audit: type=1326 audit(140.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 140.929149][ T27] audit: type=1326 audit(140.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 140.938468][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.940101][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.969597][ T27] audit: type=1326 audit(140.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 140.996733][ T27] audit: type=1326 audit(140.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 141.001152][ T27] audit: type=1326 audit(140.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8635c22c code=0x7ffc0000 [ 141.024114][ T7] nvmet: creating nvm controller 48 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 141.035733][ T6338] nvme nvme48: creating 1 I/O queues. [ 141.042896][ T6338] nvme nvme48: new ctrl: "testsubsys" [ 141.057556][ T27] audit: type=1326 audit(140.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8637aa0c code=0x7ffc0000 [ 141.097194][ T27] audit: type=1326 audit(140.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 141.128458][ T27] audit: type=1326 audit(140.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8637aa0c code=0x7ffc0000 [ 141.223224][ T27] audit: type=1326 audit(140.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8635c22c code=0x7ffc0000 [ 141.227265][ T27] audit: type=1326 audit(140.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86379368 code=0x7ffc0000 [ 141.683453][ T6363] device syzkaller0 entered promiscuous mode [ 143.808235][ T6388] nvmet: disable ns before setting buffered_io value. [ 143.837197][ T6388] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 143.946290][ T4378] nvmet: creating nvm controller 49 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 143.949821][ T6388] nvme nvme49: creating 1 I/O queues. [ 144.021045][ T6388] nvme nvme49: new ctrl: "testsubsys" [ 144.537489][ T6411] device syzkaller0 entered promiscuous mode [ 147.327738][ T6439] nvmet: disable ns before setting buffered_io value. [ 147.347261][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.349627][ T6439] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.359665][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.436181][ T14] nvmet: creating nvm controller 50 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 147.441333][ T6439] nvme nvme50: creating 1 I/O queues. [ 147.446350][ T6439] nvme nvme50: new ctrl: "testsubsys" [ 148.558488][ T6451] fuseblk: Unknown parameter 'us00000000000000000000' [ 148.672695][ T6455] device syzkaller0 entered promiscuous mode [ 150.871126][ T6477] device syzkaller0 entered promiscuous mode [ 150.908149][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 151.100526][ T6483] capability: warning: `syz.4.630' uses deprecated v2 capabilities in a way that may be insecure [ 151.116399][ T6483] CUSE: info not properly terminated [ 151.137878][ T6486] device syzkaller0 entered promiscuous mode [ 151.139496][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.156068][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.386510][ T6488] nvmet: disable ns before setting buffered_io value. [ 151.395105][ T6488] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 151.472032][ T3901] nvmet: creating nvm controller 51 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 151.478356][ T6488] nvme nvme51: creating 1 I/O queues. [ 151.480030][ T6488] nvme nvme51: new ctrl: "testsubsys" [ 151.972827][ T6497] device syzkaller0 entered promiscuous mode [ 155.668150][ T6519] nvmet: disable ns before setting buffered_io value. [ 155.676088][ T6519] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.949394][ T3901] nvmet: creating nvm controller 52 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 155.956914][ T6519] nvme nvme52: creating 1 I/O queues. [ 155.967007][ T6519] nvme nvme52: new ctrl: "testsubsys" [ 156.098423][ T6530] nvmet: disable ns before setting buffered_io value. [ 156.106869][ T6530] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 156.195752][ T3901] nvmet: creating nvm controller 53 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 156.199372][ T6530] nvme nvme53: creating 1 I/O queues. [ 156.201049][ T6530] nvme nvme53: new ctrl: "testsubsys" [ 156.267273][ T6537] device syzkaller0 entered promiscuous mode [ 157.789223][ T6568] nvmet: disable ns before setting buffered_io value. [ 157.825849][ T6568] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 157.933406][ T3901] nvmet: creating nvm controller 54 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 157.942364][ T6568] nvme nvme54: creating 1 I/O queues. [ 157.952152][ T6568] nvme nvme54: new ctrl: "testsubsys" [ 158.275261][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.826986][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.869543][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.897175][ T6589] input: syz0 as /devices/virtual/input/input3 [ 159.906328][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.950426][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.279148][ T6604] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 161.306189][ T6606] FAULT_INJECTION: forcing a failure. [ 161.306189][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 161.308486][ T6606] CPU: 0 PID: 6606 Comm: syz.2.675 Not tainted syzkaller #0 [ 161.309828][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 161.311675][ T6606] Call trace: [ 161.312256][ T6606] dump_backtrace+0x1c4/0x1f0 [ 161.313149][ T6606] show_stack+0x2c/0x3c [ 161.313950][ T6606] __dump_stack+0x30/0x40 [ 161.314781][ T6606] dump_stack_lvl+0xf4/0x15c [ 161.315630][ T6606] dump_stack+0x1c/0x5c [ 161.316371][ T6606] should_fail_ex+0x3cc/0x524 [ 161.317217][ T6606] __should_failslab+0xc0/0x11c [ 161.318103][ T6606] should_failslab+0x10/0x28 [ 161.318911][ T6606] slab_pre_alloc_hook+0x6c/0x31c [ 161.319839][ T6606] kmem_cache_alloc_lru+0x60/0x284 [ 161.320765][ T6606] __d_alloc+0x40/0x68c [ 161.321496][ T6606] d_alloc_pseudo+0x28/0x8c [ 161.322250][ T6606] alloc_file_pseudo+0xd8/0x1f4 [ 161.323089][ T6606] sock_alloc_file+0xb4/0x234 [ 161.323919][ T6606] __sys_socket+0x138/0x1b0 [ 161.324745][ T6606] __arm64_sys_socket+0x7c/0x94 [ 161.325611][ T6606] invoke_syscall+0x98/0x290 [ 161.326425][ T6606] el0_svc_common+0x13c/0x258 [ 161.327234][ T6606] do_el0_svc+0x5c/0x134 [ 161.328018][ T6606] el0_svc+0x58/0x128 [ 161.328751][ T6606] el0t_64_sync_handler+0x84/0xf0 [ 161.329655][ T6606] el0t_64_sync+0x18c/0x190 [ 161.338344][ T6604] CIFS: Attempting to mount \\127.0.0.1\share [ 161.339506][ T6604] CIFS: VFS: No username specified [ 161.589094][ T6610] nvmet: disable ns before setting buffered_io value. [ 161.600036][ T6610] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 161.681309][ T3901] nvmet: creating nvm controller 55 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 161.687512][ T6610] nvme nvme55: creating 1 I/O queues. [ 161.689091][ T6610] nvme nvme55: new ctrl: "testsubsys" [ 162.171855][ T6628] nvmet: disable ns before setting buffered_io value. [ 162.186772][ T6628] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 162.348144][ T3901] nvmet: creating nvm controller 56 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 162.356454][ T6628] nvme nvme56: creating 1 I/O queues. [ 162.367146][ T6628] nvme nvme56: new ctrl: "testsubsys" [ 162.518765][ T6644] tipc: Started in network mode [ 162.519757][ T6644] tipc: Node identity 1001001, cluster identity 4711 [ 162.554427][ T6644] tipc: Node number set to 16781313 [ 162.591246][ T6644] tipc: Enabled bearer , priority 1 [ 162.627606][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.687'. [ 163.432440][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 163.464373][ T6672] netlink: 'syz.0.692': attribute type 30 has an invalid length. [ 163.500711][ T6672] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.502455][ T6672] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.504095][ T6672] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.505783][ T6672] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.571494][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 163.573024][ T6675] netlink: 'syz.0.692': attribute type 30 has an invalid length. [ 164.102773][ T6697] 9pnet_virtio: no channels available for device syz [ 164.108499][ T6698] nvmet: disable ns before setting buffered_io value. [ 164.125783][ T6698] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 164.251378][ T3901] nvmet: creating nvm controller 57 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 164.274256][ T6698] nvme nvme57: creating 1 I/O queues. [ 164.275874][ T6698] nvme nvme57: new ctrl: "testsubsys" [ 164.497266][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.699'. [ 164.608870][ T6714] syz.0.701 uses obsolete (PF_INET,SOCK_PACKET) [ 164.875258][ T6721] FAULT_INJECTION: forcing a failure. [ 164.875258][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 164.889875][ T6721] CPU: 0 PID: 6721 Comm: syz.0.702 Not tainted syzkaller #0 [ 164.891309][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 164.893259][ T6721] Call trace: [ 164.893884][ T6721] dump_backtrace+0x1c4/0x1f0 [ 164.894730][ T6721] show_stack+0x2c/0x3c [ 164.895466][ T6721] __dump_stack+0x30/0x40 [ 164.896263][ T6721] dump_stack_lvl+0xf4/0x15c [ 164.897105][ T6721] dump_stack+0x1c/0x5c [ 164.897975][ T6721] should_fail_ex+0x3cc/0x524 [ 164.898942][ T6721] __should_failslab+0xc0/0x11c [ 164.899925][ T6721] should_failslab+0x10/0x28 [ 164.900855][ T6721] __kmem_cache_alloc_node+0x7c/0x318 [ 164.901943][ T6721] kmalloc_trace+0x48/0x94 [ 164.902821][ T6721] __request_module+0x370/0xae8 [ 164.903803][ T6721] bprm_execve+0xb94/0x1588 [ 164.904733][ T6721] do_execveat_common+0x668/0x7fc [ 164.905784][ T6721] __arm64_sys_execve+0x98/0xb0 [ 164.906758][ T6721] invoke_syscall+0x98/0x290 [ 164.907676][ T6721] el0_svc_common+0x13c/0x258 [ 164.908606][ T6721] do_el0_svc+0x5c/0x134 [ 164.909513][ T6721] el0_svc+0x58/0x128 [ 164.910373][ T6721] el0t_64_sync_handler+0x84/0xf0 [ 164.911418][ T6721] el0t_64_sync+0x18c/0x190 [ 165.604725][ T6748] FAULT_INJECTION: forcing a failure. [ 165.604725][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 165.607080][ T6748] CPU: 0 PID: 6748 Comm: syz.2.709 Not tainted syzkaller #0 [ 165.608434][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.610325][ T6748] Call trace: [ 165.610888][ T6748] dump_backtrace+0x1c4/0x1f0 [ 165.611760][ T6748] show_stack+0x2c/0x3c [ 165.612550][ T6748] __dump_stack+0x30/0x40 [ 165.613364][ T6748] dump_stack_lvl+0xf4/0x15c [ 165.614255][ T6748] dump_stack+0x1c/0x5c [ 165.615075][ T6748] should_fail_ex+0x3cc/0x524 [ 165.615980][ T6748] __should_failslab+0xc0/0x11c [ 165.616910][ T6748] should_failslab+0x10/0x28 [ 165.617759][ T6748] __kmem_cache_alloc_node+0x7c/0x318 [ 165.618762][ T6748] kmalloc_trace+0x48/0x94 [ 165.619543][ T6748] ref_tracker_alloc+0x138/0x3f0 [ 165.620425][ T6748] dst_init+0xc0/0x3dc [ 165.621158][ T6748] dst_alloc+0x124/0x16c [ 165.621926][ T6748] rt_dst_clone+0x68/0x63c [ 165.622717][ T6748] ip_mc_finish_output+0xb8/0x464 [ 165.623619][ T6748] ip_mc_output+0x4a0/0x6f4 [ 165.624424][ T6748] ip_send_skb+0x138/0x2b4 [ 165.625214][ T6748] udp_send_skb+0x7dc/0x12c8 [ 165.626050][ T6748] udp_sendmsg+0x147c/0x1db0 [ 165.626867][ T6748] inet_sendmsg+0x154/0x27c [ 165.627664][ T6748] ____sys_sendmsg+0x588/0x90c [ 165.628481][ T6748] __sys_sendmmsg+0x320/0x7ec [ 165.629325][ T6748] __arm64_sys_sendmmsg+0xa4/0xc0 [ 165.630203][ T6748] invoke_syscall+0x98/0x290 [ 165.631055][ T6748] el0_svc_common+0x13c/0x258 [ 165.631917][ T6748] do_el0_svc+0x5c/0x134 [ 165.632703][ T6748] el0_svc+0x58/0x128 [ 165.633466][ T6748] el0t_64_sync_handler+0x84/0xf0 [ 165.634401][ T6748] el0t_64_sync+0x18c/0x190 [ 165.635288][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.775746][ T6748] memory allocation failure, unreliable refcount tracker. [ 167.236749][ T6770] FAULT_INJECTION: forcing a failure. [ 167.236749][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 167.238969][ T6770] CPU: 0 PID: 6770 Comm: syz.2.717 Not tainted syzkaller #0 [ 167.240296][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 167.242281][ T6770] Call trace: [ 167.242891][ T6770] dump_backtrace+0x1c4/0x1f0 [ 167.243771][ T6770] show_stack+0x2c/0x3c [ 167.244538][ T6770] __dump_stack+0x30/0x40 [ 167.245387][ T6770] dump_stack_lvl+0xf4/0x15c [ 167.246266][ T6770] dump_stack+0x1c/0x5c [ 167.247007][ T6770] should_fail_ex+0x3cc/0x524 [ 167.247847][ T6770] __should_failslab+0xc0/0x11c [ 167.248751][ T6770] should_failslab+0x10/0x28 [ 167.249582][ T6770] __kmem_cache_alloc_node+0x7c/0x318 [ 167.250577][ T6770] __kmalloc+0xc4/0x180 [ 167.251344][ T6770] load_msg+0xc4/0x55c [ 167.252086][ T6770] do_msgsnd+0x170/0xfd4 [ 167.252825][ T6770] __arm64_sys_msgsnd+0x174/0x1b0 [ 167.253675][ T6770] invoke_syscall+0x98/0x290 [ 167.254501][ T6770] el0_svc_common+0x13c/0x258 [ 167.255316][ T6770] do_el0_svc+0x5c/0x134 [ 167.256084][ T6770] el0_svc+0x58/0x128 [ 167.256813][ T6770] el0t_64_sync_handler+0x84/0xf0 [ 167.257719][ T6770] el0t_64_sync+0x18c/0x190 [ 167.424711][ T6779] sctp: [Deprecated]: syz.1.716 (pid 6779) Use of int in max_burst socket option deprecated. [ 167.424711][ T6779] Use struct sctp_assoc_value instead [ 170.639384][ T6811] device syzkaller0 entered promiscuous mode [ 170.659839][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 170.774993][ T6818] netlink: 176 bytes leftover after parsing attributes in process `syz.3.729'. [ 171.227618][ T6843] FAULT_INJECTION: forcing a failure. [ 171.227618][ T6843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.247481][ T6846] FAULT_INJECTION: forcing a failure. [ 171.247481][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 171.252330][ T6843] CPU: 0 PID: 6843 Comm: syz.1.737 Not tainted syzkaller #0 [ 171.253721][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 171.255828][ T6843] Call trace: [ 171.256469][ T6843] dump_backtrace+0x1c4/0x1f0 [ 171.257407][ T6843] show_stack+0x2c/0x3c [ 171.258153][ T6843] __dump_stack+0x30/0x40 [ 171.258945][ T6843] dump_stack_lvl+0xf4/0x15c [ 171.259854][ T6843] dump_stack+0x1c/0x5c [ 171.260646][ T6843] should_fail_ex+0x3cc/0x524 [ 171.261534][ T6843] should_fail_alloc_page+0x74/0xb8 [ 171.262514][ T6843] prepare_alloc_pages+0x1b8/0x4f0 [ 171.263486][ T6843] __alloc_pages+0x134/0x544 [ 171.264347][ T6843] alloc_pages+0x434/0x6fc [ 171.265128][ T6843] get_zeroed_page+0x20/0x8c [ 171.265953][ T6843] __pud_alloc+0x48/0x1b8 [ 171.266674][ T6843] handle_mm_fault+0x1adc/0x3018 [ 171.267537][ T6843] __get_user_pages+0x340/0x770 [ 171.268373][ T6843] __get_user_pages_remote+0x188/0x684 [ 171.269330][ T6843] get_user_pages_remote+0x80/0xbc [ 171.270216][ T6843] get_arg_page+0x18c/0x3b4 [ 171.271044][ T6843] copy_string_kernel+0x15c/0x254 [ 171.271944][ T6843] do_execveat_common+0x508/0x7fc [ 171.272906][ T6843] __arm64_sys_execve+0x98/0xb0 [ 171.273829][ T6843] invoke_syscall+0x98/0x290 [ 171.274761][ T6843] el0_svc_common+0x13c/0x258 [ 171.275667][ T6843] do_el0_svc+0x5c/0x134 [ 171.276514][ T6843] el0_svc+0x58/0x128 [ 171.277302][ T6843] el0t_64_sync_handler+0x84/0xf0 [ 171.278197][ T6843] el0t_64_sync+0x18c/0x190 [ 171.304561][ T6846] CPU: 0 PID: 6846 Comm: syz.0.738 Not tainted syzkaller #0 [ 171.306009][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 171.307902][ T6846] Call trace: [ 171.308501][ T6846] dump_backtrace+0x1c4/0x1f0 [ 171.309375][ T6846] show_stack+0x2c/0x3c [ 171.310195][ T6846] __dump_stack+0x30/0x40 [ 171.311019][ T6846] dump_stack_lvl+0xf4/0x15c [ 171.311888][ T6846] dump_stack+0x1c/0x5c [ 171.312631][ T6846] should_fail_ex+0x3cc/0x524 [ 171.313473][ T6846] __should_failslab+0xc0/0x11c [ 171.314369][ T6846] should_failslab+0x10/0x28 [ 171.315186][ T6846] kmem_cache_alloc+0x88/0x310 [ 171.316093][ T6846] alloc_vfsmnt+0x34/0x4b4 [ 171.316900][ T6846] vfs_create_mount+0x84/0x4b4 [ 171.317791][ T6846] fc_mount+0x98/0xac [ 171.318501][ T6846] mq_init_ns+0x324/0x4d8 [ 171.319299][ T6846] copy_ipcs+0x274/0x4d4 [ 171.320101][ T6846] create_new_namespaces+0x1b0/0x604 [ 171.321035][ T6846] unshare_nsproxy_namespaces+0x108/0x160 [ 171.322105][ T6846] ksys_unshare+0x3f0/0x70c [ 171.322886][ T6846] __arm64_sys_unshare+0x3c/0x50 [ 171.323802][ T6846] invoke_syscall+0x98/0x290 [ 171.324662][ T6846] el0_svc_common+0x13c/0x258 [ 171.325544][ T6846] do_el0_svc+0x5c/0x134 [ 171.326336][ T6846] el0_svc+0x58/0x128 [ 171.327089][ T6846] el0t_64_sync_handler+0x84/0xf0 [ 171.327955][ T6846] el0t_64_sync+0x18c/0x190 [ 171.752841][ T6857] device syzkaller0 entered promiscuous mode [ 171.784072][ T6857] tipc: Enabling of bearer rejected, failed to enable media [ 172.197243][ T6873] device syzkaller0 entered promiscuous mode [ 174.279527][ T6891] nvmet: disable ns before setting buffered_io value. [ 174.286754][ T6893] tipc: Started in network mode [ 174.295509][ T6893] tipc: Node identity 1001001, cluster identity 4711 [ 174.302002][ T6893] tipc: Node number set to 16781313 [ 174.312691][ T6891] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 174.414955][ T6898] device syzkaller0 entered promiscuous mode [ 174.438562][ T6898] tipc: Enabling of bearer rejected, failed to enable media [ 174.461859][ T7] nvmet: creating nvm controller 58 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 174.474754][ T6891] nvme nvme58: creating 1 I/O queues. [ 174.479451][ T6891] nvme nvme58: new ctrl: "testsubsys" [ 174.552742][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.759'. [ 174.965705][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.112712][ T6923] syz.3.764: attempt to access beyond end of device [ 175.112712][ T6923] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.147420][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 175.154649][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.156731][ T7] usb 1-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 175.158410][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.182508][ T7] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 175.193440][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.197200][ T7] usb 1-1: Product: syz [ 175.198170][ T7] usb 1-1: Manufacturer: syz [ 175.201512][ T7] usb 1-1: SerialNumber: syz [ 175.305571][ T6923] device-mapper: table: 248:1: integrity: Error reading superblock (-EIO) [ 175.307224][ T6923] device-mapper: ioctl: error adding target to table [ 175.465102][ T7] usb 1-1: 0:1 : does not exist [ 175.466246][ T7] usb 1-1: 0:2 : does not exist [ 175.534073][ T7] usb 1-1: USB disconnect, device number 4 [ 175.548669][ T6935] 9pnet_virtio: no channels available for device syz [ 175.560931][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'. [ 175.579968][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.224899][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.509853][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 177.511247][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.538790][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.561081][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 177.562434][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.565398][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.577196][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 177.578431][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.579903][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.588153][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 177.589275][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.595922][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.603794][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 177.605031][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.608897][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.615986][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 177.617173][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.845069][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 177.855567][ T6964] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 177.856849][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.873257][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 177.906627][ T6965] vhci_hcd: connection closed [ 177.908359][ T5270] vhci_hcd: stop threads [ 177.910648][ T5270] vhci_hcd: release socket [ 177.912029][ T5270] vhci_hcd: disconnect device [ 177.916310][ T6961] vhci_hcd: connection closed [ 177.917260][ T6959] vhci_hcd: connection closed [ 177.918868][ T6957] vhci_hcd: connection closed [ 177.925730][ T5270] vhci_hcd: stop threads [ 177.927607][ T6955] vhci_hcd: connection closed [ 177.927958][ T6952] vhci_hcd: connection closed [ 177.930266][ T6949] vhci_hcd: connection closed [ 177.937580][ T5270] vhci_hcd: release socket [ 177.945299][ T5270] vhci_hcd: disconnect device [ 177.947374][ T5270] vhci_hcd: stop threads [ 177.948038][ T5270] vhci_hcd: release socket [ 177.955245][ T5270] vhci_hcd: disconnect device [ 177.962353][ T5270] vhci_hcd: stop threads [ 177.966316][ T5270] vhci_hcd: release socket [ 177.968397][ T5270] vhci_hcd: disconnect device [ 177.970143][ T5270] vhci_hcd: stop threads [ 177.975402][ T5270] vhci_hcd: release socket [ 177.978542][ T5270] vhci_hcd: disconnect device [ 177.982698][ T5270] vhci_hcd: stop threads [ 177.984829][ T7] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 177.987670][ T6950] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 177.991038][ T5270] vhci_hcd: release socket [ 178.002267][ T5270] vhci_hcd: disconnect device [ 178.009759][ T5270] vhci_hcd: stop threads [ 178.010657][ T5270] vhci_hcd: release socket [ 178.018729][ T5270] vhci_hcd: disconnect device [ 178.144912][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.774'. [ 178.367297][ T6980] device syzkaller0 entered promiscuous mode [ 178.428785][ T6979] null_blk: disk rnullb0 created [ 178.505513][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 178.507191][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 178.535154][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 178.536814][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 178.739027][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.740805][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.302719][ T7018] device syzkaller0 entered promiscuous mode [ 180.435887][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 180.467550][ T7025] nvmet: disable ns before setting buffered_io value. [ 180.497497][ T7025] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 180.619798][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 180.621067][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.631639][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.639266][ T4378] nvmet: creating nvm controller 59 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 180.652620][ T7025] nvme nvme59: creating 1 I/O queues. [ 180.662533][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 180.663699][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.667127][ T7025] nvme nvme59: new ctrl: "testsubsys" [ 180.681585][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.709014][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 180.710202][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.724113][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.742534][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 180.743807][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.752925][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.768356][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 180.769700][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.777171][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.789508][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 180.790813][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.799296][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.847036][ T7033] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 180.848367][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.850167][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 180.866368][ T7050] vhci_hcd: connection closed [ 180.867190][ T5624] vhci_hcd: stop threads [ 180.868880][ T5624] vhci_hcd: release socket [ 180.869875][ T5624] vhci_hcd: disconnect device [ 180.871047][ T7048] vhci_hcd: connection closed [ 180.875884][ T7046] vhci_hcd: connection closed [ 180.876990][ T7042] vhci_hcd: connection closed [ 180.877970][ T7040] vhci_hcd: connection closed [ 180.881138][ T7037] vhci_hcd: connection closed [ 180.882215][ T7034] vhci_hcd: connection closed [ 180.898842][ T5624] vhci_hcd: stop threads [ 180.900458][ T5624] vhci_hcd: release socket [ 180.915942][ T5624] vhci_hcd: disconnect device [ 180.935861][ T5624] vhci_hcd: stop threads [ 180.936719][ T5624] vhci_hcd: release socket [ 180.942472][ T5624] vhci_hcd: disconnect device [ 180.945871][ T5624] vhci_hcd: stop threads [ 180.946552][ T5624] vhci_hcd: release socket [ 180.952592][ T5624] vhci_hcd: disconnect device [ 180.960329][ T5624] vhci_hcd: stop threads [ 180.961080][ T5624] vhci_hcd: release socket [ 180.972819][ T5624] vhci_hcd: disconnect device [ 180.983778][ T5624] vhci_hcd: stop threads [ 181.001171][ T5624] vhci_hcd: release socket [ 181.012606][ T5624] vhci_hcd: disconnect device [ 181.016096][ T5624] vhci_hcd: stop threads [ 181.016864][ T5624] vhci_hcd: release socket [ 181.019895][ T5624] vhci_hcd: disconnect device [ 181.295563][ T4378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.469995][ T7072] device syzkaller0 entered promiscuous mode [ 181.475853][ T4378] usb 1-1: Using ep0 maxpacket: 32 [ 181.478425][ T4378] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 181.479949][ T4378] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 181.491818][ T4378] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.499136][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'. [ 181.501930][ T4378] usb 1-1: config 0 has no interface number 0 [ 181.502928][ T4378] usb 1-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 181.512661][ T4378] usb 1-1: config 0 interface 196 has no altsetting 0 [ 181.529811][ T4378] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 181.531363][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.548963][ T4378] usb 1-1: Product: syz [ 181.549743][ T4378] usb 1-1: Manufacturer: syz [ 181.550531][ T4378] usb 1-1: SerialNumber: syz [ 181.569162][ T4378] usb 1-1: config 0 descriptor?? [ 181.686691][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.812'. [ 182.322186][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 182.323487][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.338962][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.359186][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 182.360504][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.368044][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.382142][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 182.383469][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.395366][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.420342][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 182.421614][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.426516][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.442819][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 182.444160][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.455816][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.469112][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 182.470375][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.477604][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.489678][ T7103] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 182.490999][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.514853][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 182.525626][ T7119] vhci_hcd: connection closed [ 182.525827][ T5932] vhci_hcd: stop threads [ 182.527584][ T5932] vhci_hcd: release socket [ 182.528489][ T5932] vhci_hcd: disconnect device [ 182.535728][ T7116] vhci_hcd: connection closed [ 182.535933][ T7113] vhci_hcd: connection closed [ 182.536975][ T7111] vhci_hcd: connection closed [ 182.537954][ T7109] vhci_hcd: connection closed [ 182.539014][ T7107] vhci_hcd: connection closed [ 182.540070][ T7104] vhci_hcd: connection closed [ 182.541536][ T7106] vhci_hcd: stop threads [ 182.544501][ T7106] vhci_hcd: release socket [ 182.545395][ T7106] vhci_hcd: disconnect device [ 182.546414][ T7106] vhci_hcd: stop threads [ 182.547231][ T7106] vhci_hcd: release socket [ 182.555679][ T7106] vhci_hcd: disconnect device [ 182.578638][ T7106] vhci_hcd: stop threads [ 182.579521][ T7106] vhci_hcd: release socket [ 182.588933][ T7106] vhci_hcd: disconnect device [ 182.592939][ T7106] vhci_hcd: stop threads [ 182.613291][ T7106] vhci_hcd: release socket [ 182.616540][ T7106] vhci_hcd: disconnect device [ 182.622229][ T7106] vhci_hcd: stop threads [ 182.627224][ T7106] vhci_hcd: release socket [ 182.637216][ T7106] vhci_hcd: disconnect device [ 182.641502][ T7106] vhci_hcd: stop threads [ 182.642433][ T7106] vhci_hcd: release socket [ 182.653524][ T7106] vhci_hcd: disconnect device [ 182.773226][ T7126] device lo entered promiscuous mode [ 182.798984][ T7126] device tunl0 entered promiscuous mode [ 182.822584][ T7126] device gre0 entered promiscuous mode [ 182.908963][ T7126] device gretap0 entered promiscuous mode [ 182.946925][ T7126] device erspan0 entered promiscuous mode [ 182.974252][ T7126] device ip_vti0 entered promiscuous mode [ 182.997137][ T7126] device ip6_vti0 entered promiscuous mode [ 183.027045][ T7126] device sit0 entered promiscuous mode [ 183.118235][ T7126] device ip6tnl0 entered promiscuous mode [ 183.133427][ T7] vhci_hcd: vhci_device speed not set [ 183.147967][ T7126] device ip6gre0 entered promiscuous mode [ 183.179764][ T7128] nvmet: disable ns before setting buffered_io value. [ 183.181894][ T7126] device syz_tun entered promiscuous mode [ 183.196332][ T7126] device ip6gretap0 entered promiscuous mode [ 183.199275][ T7128] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 183.212972][ T7126] device bridge0 entered promiscuous mode [ 183.246641][ T7126] device vcan0 entered promiscuous mode [ 183.254406][ T7126] device bond0 entered promiscuous mode [ 183.255538][ T7126] device bond_slave_0 entered promiscuous mode [ 183.287269][ T7126] device bond_slave_1 entered promiscuous mode [ 183.338663][ T7126] device team0 entered promiscuous mode [ 183.347820][ T7126] device team_slave_0 entered promiscuous mode [ 183.356730][ T7126] device team_slave_1 entered promiscuous mode [ 183.370649][ T4376] nvmet: creating nvm controller 60 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 183.378231][ T7128] nvme nvme60: creating 1 I/O queues. [ 183.392188][ T7128] nvme nvme60: new ctrl: "testsubsys" [ 183.422733][ T7126] device dummy0 entered promiscuous mode [ 183.468019][ T7126] device nlmon0 entered promiscuous mode [ 183.471856][ T7126] device caif0 entered promiscuous mode [ 183.502195][ T7126] device batadv0 entered promiscuous mode [ 183.539720][ T7126] device vxcan0 entered promiscuous mode [ 183.552696][ T7126] device vxcan1 entered promiscuous mode [ 183.562329][ T7126] device veth0 entered promiscuous mode [ 183.636945][ T7126] device veth1 entered promiscuous mode [ 183.725180][ T7126] device wg0 entered promiscuous mode [ 183.774098][ T7126] device wg1 entered promiscuous mode [ 183.792566][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.826'. [ 183.833856][ T7126] device wg2 entered promiscuous mode [ 183.840212][ T7126] device veth0_to_bridge entered promiscuous mode [ 183.897915][ T7126] device veth1_to_bridge entered promiscuous mode [ 183.978589][ T7126] device veth0_to_bond entered promiscuous mode [ 184.031375][ T7126] device veth1_to_bond entered promiscuous mode [ 184.082460][ T7126] device veth0_to_team entered promiscuous mode [ 184.154553][ T7126] device veth1_to_team entered promiscuous mode [ 184.246681][ T7126] device veth0_to_batadv entered promiscuous mode [ 184.255861][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.270294][ T7126] device batadv_slave_0 entered promiscuous mode [ 184.327766][ T7126] device veth1_to_batadv entered promiscuous mode [ 184.330620][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.350852][ T7126] device batadv_slave_1 entered promiscuous mode [ 184.408906][ T7126] device xfrm0 entered promiscuous mode [ 184.430157][ T7126] device veth0_to_hsr entered promiscuous mode [ 184.479980][ T7126] device veth1_to_hsr entered promiscuous mode [ 184.532461][ T7126] device hsr0 entered promiscuous mode [ 184.569606][ T7126] device veth1_virt_wifi entered promiscuous mode [ 184.595495][ T7126] device veth0_virt_wifi entered promiscuous mode [ 184.600140][ T7126] device virt_wifi0 entered promiscuous mode [ 184.691913][ T7126] device vlan0 entered promiscuous mode [ 184.698656][ T7126] device vlan1 entered promiscuous mode [ 184.754648][ T7126] device macvlan0 entered promiscuous mode [ 184.794689][ T7126] device macvlan1 entered promiscuous mode [ 184.800396][ T7126] device ipvlan0 entered promiscuous mode [ 184.806199][ T7126] device ipvlan1 entered promiscuous mode [ 184.875308][ T7126] device macvtap0 entered promiscuous mode [ 184.898730][ T7126] device macsec0 entered promiscuous mode [ 184.945938][ T7126] device geneve0 entered promiscuous mode [ 184.961336][ T7126] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.966069][ T7126] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.970776][ T7126] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.980098][ T7126] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.013316][ T7126] device geneve1 entered promiscuous mode [ 185.040574][ T7126] device netdevsim0 entered promiscuous mode [ 185.051354][ T7126] device netdevsim1 entered promiscuous mode [ 185.065966][ T7126] device netdevsim2 entered promiscuous mode [ 185.087647][ T7126] device netdevsim3 entered promiscuous mode [ 185.090101][ T7126] device wlan0 entered promiscuous mode [ 185.093806][ T7126] device wlan1 entered promiscuous mode [ 185.098292][ T7126] device syztnl1 entered promiscuous mode [ 186.836889][ T14] usb 1-1: USB disconnect, device number 5 [ 186.958502][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.968031][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.095514][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.097506][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.114234][ T7174] device syzkaller0 entered promiscuous mode [ 187.226738][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.228572][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.305151][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.308657][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.375043][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376358][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.390390][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.398291][ T4333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.401012][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.402546][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.404707][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.407707][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.409340][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.410731][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.444581][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.460300][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.465945][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.468998][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.470598][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.472789][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.484508][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.487551][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.505099][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.506894][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.651477][ T7192] nvmet: disable ns before setting buffered_io value. [ 187.702387][ T7192] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 187.837076][ T7] nvmet: creating nvm controller 61 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 187.858304][ T7192] nvme nvme61: creating 1 I/O queues. [ 187.873872][ T7192] nvme nvme61: new ctrl: "testsubsys" [ 188.797471][ T7226] device syzkaller0 entered promiscuous mode [ 189.016992][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 189.400221][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.407810][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.421774][ T7183] device bridge_slave_0 entered promiscuous mode [ 189.533555][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 189.551287][ T7256] device bridge0 left promiscuous mode [ 189.554205][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.555460][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.557177][ T7183] device bridge_slave_1 entered promiscuous mode [ 189.767127][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.769845][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.764617][ T7183] team0: Port device team_slave_0 added [ 191.200071][ T7183] team0: Port device team_slave_1 added [ 191.251565][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.252892][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.370708][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.487883][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.496463][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.521950][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.613369][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 191.680975][ T7307] nvmet: disable ns before setting buffered_io value. [ 191.712185][ T7307] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 191.765054][ T7183] device hsr_slave_0 entered promiscuous mode [ 191.783767][ T7183] device hsr_slave_1 entered promiscuous mode [ 191.804352][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.808779][ T7] nvmet: creating nvm controller 62 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 191.815894][ T7183] Cannot create hsr debugfs directory [ 191.829766][ T7307] nvme nvme62: creating 1 I/O queues. [ 191.832430][ T5660] device hsr_slave_0 left promiscuous mode [ 191.840540][ T7307] nvme nvme62: new ctrl: "testsubsys" [ 191.864780][ T5660] device hsr_slave_1 left promiscuous mode [ 191.903978][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.907509][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.912644][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.919841][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.925842][ T5660] device bridge_slave_1 left promiscuous mode [ 191.930191][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.956582][ T5660] device bridge_slave_0 left promiscuous mode [ 191.959412][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.114113][ T5660] device veth1_macvtap left promiscuous mode [ 192.117674][ T5660] device veth0_macvtap left promiscuous mode [ 192.119794][ T5660] device veth1_vlan left promiscuous mode [ 192.126944][ T5660] device veth0_vlan left promiscuous mode [ 193.693377][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 195.773338][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 196.184971][ T5660] team0 (unregistering): Port device team_slave_1 removed [ 196.304670][ T5660] team0 (unregistering): Port device team_slave_0 removed [ 196.435831][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.584103][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.674602][ T5660] bond0 (unregistering): Released all slaves [ 197.930559][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'. [ 197.963450][ T7328] device syzkaller0 entered promiscuous mode [ 197.971850][ T7348] device syzkaller0 entered promiscuous mode [ 198.499991][ T7380] device syzkaller0 entered promiscuous mode [ 199.684423][ T7183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.792259][ T7394] FAULT_INJECTION: forcing a failure. [ 199.792259][ T7394] name failslab, interval 1, probability 0, space 0, times 0 [ 199.815653][ T7394] CPU: 0 PID: 7394 Comm: syz.1.883 Not tainted syzkaller #0 [ 199.816988][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 199.818685][ T7394] Call trace: [ 199.819228][ T7394] dump_backtrace+0x1c4/0x1f0 [ 199.820031][ T7394] show_stack+0x2c/0x3c [ 199.820710][ T7394] __dump_stack+0x30/0x40 [ 199.821473][ T7394] dump_stack_lvl+0xf4/0x15c [ 199.822261][ T7394] dump_stack+0x1c/0x5c [ 199.822957][ T7394] should_fail_ex+0x3cc/0x524 [ 199.823880][ T7394] __should_failslab+0xc0/0x11c [ 199.824832][ T7394] should_failslab+0x10/0x28 [ 199.825731][ T7394] kmem_cache_alloc+0x88/0x310 [ 199.826613][ T7394] getname_flags+0xb8/0x458 [ 199.827433][ T7394] getname+0x28/0x38 [ 199.828173][ T7394] __arm64_sys_execve+0x78/0xb0 [ 199.829097][ T7394] invoke_syscall+0x98/0x290 [ 199.829947][ T7394] el0_svc_common+0x13c/0x258 [ 199.830840][ T7394] do_el0_svc+0x5c/0x134 [ 199.831634][ T7394] el0_svc+0x58/0x128 [ 199.832371][ T7394] el0t_64_sync_handler+0x84/0xf0 [ 199.833360][ T7394] el0t_64_sync+0x18c/0x190 [ 199.858405][ T7183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.964595][ T7183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.984262][ T7183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.136629][ T7412] device syzkaller0 entered promiscuous mode [ 201.176520][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.217980][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.236927][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.238835][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.337571][ T7420] device syzkaller0 entered promiscuous mode [ 201.340388][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.342260][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.361740][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.362987][ T5416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.536334][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.538105][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.550980][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.563039][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.564518][ T5416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.576726][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.590476][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.604948][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.621250][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.627742][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.639414][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.656170][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.669616][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.687472][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.691612][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.711231][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.717001][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.727308][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.772501][ T7438] nvmet: disable ns before setting buffered_io value. [ 201.787791][ T7438] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 201.906982][ T7445] FAULT_INJECTION: forcing a failure. [ 201.906982][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 201.918319][ T4377] nvmet: creating nvm controller 63 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 201.928179][ T7438] nvme nvme63: creating 1 I/O queues. [ 201.932349][ T7445] CPU: 0 PID: 7445 Comm: syz.2.896 Not tainted syzkaller #0 [ 201.933615][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 201.935405][ T7445] Call trace: [ 201.936043][ T7445] dump_backtrace+0x1c4/0x1f0 [ 201.936964][ T7445] show_stack+0x2c/0x3c [ 201.937753][ T7445] __dump_stack+0x30/0x40 [ 201.938573][ T7445] dump_stack_lvl+0xf4/0x15c [ 201.939493][ T7445] dump_stack+0x1c/0x5c [ 201.940298][ T7445] should_fail_ex+0x3cc/0x524 [ 201.941219][ T7445] __should_failslab+0xc0/0x11c [ 201.942162][ T7445] should_failslab+0x10/0x28 [ 201.943049][ T7445] kmem_cache_alloc+0x88/0x310 [ 201.943956][ T7445] getname_flags+0xb8/0x458 [ 201.944790][ T7445] getname+0x28/0x38 [ 201.945560][ T7445] __arm64_sys_execve+0x78/0xb0 [ 201.946507][ T7445] invoke_syscall+0x98/0x290 [ 201.947334][ T7445] el0_svc_common+0x13c/0x258 [ 201.948210][ T7445] do_el0_svc+0x5c/0x134 [ 201.948965][ T7445] el0_svc+0x58/0x128 [ 201.949740][ T7445] el0t_64_sync_handler+0x84/0xf0 [ 201.950657][ T7445] el0t_64_sync+0x18c/0x190 [ 201.968844][ T7438] nvme nvme63: new ctrl: "testsubsys" [ 202.131565][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.134679][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.165940][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.450928][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 203.778626][ T7482] device syzkaller0 entered promiscuous mode [ 203.847411][ T7487] device syzkaller0 entered promiscuous mode [ 204.026362][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.028315][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.103902][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.105789][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.107650][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.109179][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.110989][ T7183] device veth0_vlan entered promiscuous mode [ 204.128575][ T7183] device veth1_vlan entered promiscuous mode [ 204.216254][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.218247][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.219793][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.304257][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.309953][ T7183] device veth0_macvtap entered promiscuous mode [ 204.312410][ T7183] device veth1_macvtap entered promiscuous mode [ 204.339868][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.341831][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.367867][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.370102][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.371861][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.394444][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.408637][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.416070][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.418019][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.422245][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.429835][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.441365][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.445439][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.454418][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.462030][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.471526][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.480013][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.494673][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.516089][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.517654][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.571227][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.584352][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.597043][ T7183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.599146][ T7183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.608970][ T7183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.618252][ T7183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.780109][ T7473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.781800][ T7473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.786549][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.855345][ T7473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.856918][ T7473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.858651][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.369622][ T7523] Invalid input. Must be >= 2304 [ 206.460541][ T7534] device-mapper: table: 248:0: zero-length target [ 206.461737][ T7534] device-mapper: ioctl: error adding target to table [ 206.614169][ T4378] nvmet: creating nvm controller 64 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 206.649322][ T7536] nvme nvme64: creating 1 I/O queues. [ 206.723958][ T7536] nvme nvme64: new ctrl: "testsubsys" [ 207.295368][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.311871][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.322919][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.336708][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.582012][ T7562] FAULT_INJECTION: forcing a failure. [ 207.582012][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 207.606708][ T7562] CPU: 0 PID: 7562 Comm: syz.5.921 Not tainted syzkaller #0 [ 207.608032][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 207.609675][ T7562] Call trace: [ 207.610220][ T7562] dump_backtrace+0x1c4/0x1f0 [ 207.610986][ T7562] show_stack+0x2c/0x3c [ 207.611769][ T7562] __dump_stack+0x30/0x40 [ 207.612588][ T7562] dump_stack_lvl+0xf4/0x15c [ 207.613414][ T7562] dump_stack+0x1c/0x5c [ 207.614163][ T7562] should_fail_ex+0x3cc/0x524 [ 207.615018][ T7562] __should_failslab+0xc0/0x11c [ 207.615906][ T7562] should_failslab+0x10/0x28 [ 207.616765][ T7562] kmem_cache_alloc+0x88/0x310 [ 207.617660][ T7562] getname_flags+0xb8/0x458 [ 207.618471][ T7562] getname+0x28/0x38 [ 207.619150][ T7562] __arm64_sys_execve+0x78/0xb0 [ 207.620018][ T7562] invoke_syscall+0x98/0x290 [ 207.620854][ T7562] el0_svc_common+0x13c/0x258 [ 207.621683][ T7562] do_el0_svc+0x5c/0x134 [ 207.622443][ T7562] el0_svc+0x58/0x128 [ 207.623159][ T7562] el0t_64_sync_handler+0x84/0xf0 [ 207.624086][ T7562] el0t_64_sync+0x18c/0x190 [ 207.676194][ T7568] tipc: Started in network mode [ 207.677157][ T7568] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 207.678519][ T7568] tipc: Enabled bearer , priority 1 [ 208.781259][ T4378] tipc: Node number set to 43690 [ 208.958452][ T7580] device-mapper: table: 248:0: zero-length target [ 208.959723][ T7580] device-mapper: ioctl: error adding target to table [ 209.140381][ T4378] nvmet: creating nvm controller 65 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 209.145492][ T7590] nvme nvme65: creating 1 I/O queues. [ 209.171744][ T7590] nvme nvme65: new ctrl: "testsubsys" [ 209.772927][ T7614] Invalid input. Must be >= 2304 [ 209.824680][ T7] nvmet: creating nvm controller 66 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 209.838495][ T7609] nvme nvme66: creating 1 I/O queues. [ 209.870576][ T7609] nvme nvme66: new ctrl: "testsubsys" [ 211.387298][ T7632] device-mapper: table: 248:0: zero-length target [ 211.408328][ T7632] device-mapper: ioctl: error adding target to table [ 211.432313][ T7634] FAULT_INJECTION: forcing a failure. [ 211.432313][ T7634] name failslab, interval 1, probability 0, space 0, times 0 [ 211.472651][ T7634] CPU: 0 PID: 7634 Comm: syz.4.939 Not tainted syzkaller #0 [ 211.474086][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.475932][ T7634] Call trace: [ 211.476615][ T7634] dump_backtrace+0x1c4/0x1f0 [ 211.477518][ T7634] show_stack+0x2c/0x3c [ 211.478320][ T7634] __dump_stack+0x30/0x40 [ 211.479130][ T7634] dump_stack_lvl+0xf4/0x15c [ 211.480021][ T7634] dump_stack+0x1c/0x5c [ 211.480818][ T7634] should_fail_ex+0x3cc/0x524 [ 211.481695][ T7634] __should_failslab+0xc0/0x11c [ 211.482715][ T7634] should_failslab+0x10/0x28 [ 211.483661][ T7634] kmem_cache_alloc+0x88/0x310 [ 211.484579][ T7634] getname_flags+0xb8/0x458 [ 211.485387][ T7634] getname+0x28/0x38 [ 211.486095][ T7634] __arm64_sys_execve+0x78/0xb0 [ 211.486972][ T7634] invoke_syscall+0x98/0x290 [ 211.487814][ T7634] el0_svc_common+0x13c/0x258 [ 211.488640][ T7634] do_el0_svc+0x5c/0x134 [ 211.489386][ T7634] el0_svc+0x58/0x128 [ 211.490096][ T7634] el0t_64_sync_handler+0x84/0xf0 [ 211.491015][ T7634] el0t_64_sync+0x18c/0x190 [ 211.758975][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 211.769323][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.947'. [ 211.779426][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 211.792397][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.947'. [ 212.300258][ T7664] FAULT_INJECTION: forcing a failure. [ 212.300258][ T7664] name fail_futex, interval 1, probability 0, space 0, times 1 [ 212.314706][ T7664] CPU: 0 PID: 7664 Comm: syz.4.950 Not tainted syzkaller #0 [ 212.316121][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 212.317948][ T7664] Call trace: [ 212.318555][ T7664] dump_backtrace+0x1c4/0x1f0 [ 212.319420][ T7664] show_stack+0x2c/0x3c [ 212.320190][ T7664] __dump_stack+0x30/0x40 [ 212.321029][ T7664] dump_stack_lvl+0xf4/0x15c [ 212.321926][ T7664] dump_stack+0x1c/0x5c [ 212.322702][ T7664] should_fail_ex+0x3cc/0x524 [ 212.323557][ T7664] should_fail+0x14/0x24 [ 212.324356][ T7664] get_futex_key+0x904/0xfb0 [ 212.325244][ T7664] futex_wake+0x10c/0x458 [ 212.326030][ T7664] do_futex+0x2c4/0x340 [ 212.326835][ T7664] __arm64_sys_futex+0x390/0x414 [ 212.327773][ T7664] invoke_syscall+0x98/0x290 [ 212.328641][ T7664] el0_svc_common+0x13c/0x258 [ 212.329553][ T7664] do_el0_svc+0x5c/0x134 [ 212.330354][ T7664] el0_svc+0x58/0x128 [ 212.331083][ T7664] el0t_64_sync_handler+0x84/0xf0 [ 212.332026][ T7664] el0t_64_sync+0x18c/0x190 [ 213.708927][ T7] nvmet: creating nvm controller 67 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 213.712694][ T7677] nvme nvme67: creating 1 I/O queues. [ 213.721271][ T7687] device-mapper: table: 248:0: zero-length target [ 213.723021][ T7677] nvme nvme67: new ctrl: "testsubsys" [ 213.742934][ T7688] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 213.744281][ T7688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.749483][ T7687] device-mapper: ioctl: error adding target to table [ 213.787694][ T7688] vhci_hcd vhci_hcd.0: Device attached [ 213.820814][ T7694] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 213.822120][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.862137][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 213.899177][ T7688] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 213.900376][ T7688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.921215][ T7688] vhci_hcd vhci_hcd.0: Device attached [ 213.942226][ T7701] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 213.943478][ T7701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.982592][ T7701] vhci_hcd vhci_hcd.0: Device attached [ 213.996966][ T7704] vhci_hcd: connection closed [ 213.997200][ T7625] vhci_hcd: stop threads [ 213.998862][ T7625] vhci_hcd: release socket [ 213.999709][ T7625] vhci_hcd: disconnect device [ 214.002135][ T7700] vhci_hcd: connection closed [ 214.003750][ T7696] vhci_hcd: connection closed [ 214.005948][ T7689] vhci_hcd: connection closed [ 214.010318][ T7625] vhci_hcd: stop threads [ 214.012044][ T7625] vhci_hcd: release socket [ 214.018910][ T7625] vhci_hcd: disconnect device [ 214.026711][ T7625] vhci_hcd: stop threads [ 214.041314][ T7625] vhci_hcd: release socket [ 214.050089][ T7625] vhci_hcd: disconnect device [ 214.051244][ T7625] vhci_hcd: stop threads [ 214.051997][ T7625] vhci_hcd: release socket [ 214.055582][ T7] usb 10-1: new high-speed USB device number 2 using vhci_hcd [ 214.088392][ T7625] vhci_hcd: disconnect device [ 214.635033][ T14] nvmet: creating nvm controller 68 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 214.638760][ T7719] nvme nvme68: creating 1 I/O queues. [ 214.644827][ T7719] nvme nvme68: new ctrl: "testsubsys" [ 214.671759][ T7729] FAULT_INJECTION: forcing a failure. [ 214.671759][ T7729] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.689186][ T7729] CPU: 0 PID: 7729 Comm: syz.1.965 Not tainted syzkaller #0 [ 214.690623][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 214.692412][ T7729] Call trace: [ 214.692997][ T7729] dump_backtrace+0x1c4/0x1f0 [ 214.693846][ T7729] show_stack+0x2c/0x3c [ 214.694562][ T7729] __dump_stack+0x30/0x40 [ 214.695359][ T7729] dump_stack_lvl+0xf4/0x15c [ 214.696206][ T7729] dump_stack+0x1c/0x5c [ 214.696985][ T7729] should_fail_ex+0x3cc/0x524 [ 214.697901][ T7729] should_fail+0x14/0x24 [ 214.698694][ T7729] get_futex_key+0x904/0xfb0 [ 214.699519][ T7729] futex_wake+0x10c/0x458 [ 214.700283][ T7729] do_futex+0x2c4/0x340 [ 214.701022][ T7729] __arm64_sys_futex+0x390/0x414 [ 214.701887][ T7729] invoke_syscall+0x98/0x290 [ 214.702688][ T7729] el0_svc_common+0x13c/0x258 [ 214.703546][ T7729] do_el0_svc+0x5c/0x134 [ 214.704318][ T7729] el0_svc+0x58/0x128 [ 214.705075][ T7729] el0t_64_sync_handler+0x84/0xf0 [ 214.705949][ T7729] el0t_64_sync+0x18c/0x190 [ 215.398857][ T14] nvmet: creating nvm controller 69 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 215.405232][ T7749] nvme nvme69: creating 1 I/O queues. [ 215.409026][ T7749] nvme nvme69: new ctrl: "testsubsys" [ 216.269705][ T4378] nvmet: creating nvm controller 70 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 216.272976][ T7775] nvme nvme70: creating 1 I/O queues. [ 216.276580][ T7775] nvme nvme70: new ctrl: "testsubsys" [ 216.317827][ T7782] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 216.319059][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.339753][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 216.365669][ T7787] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 216.366840][ T7787] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.382617][ T7787] vhci_hcd vhci_hcd.0: Device attached [ 216.434577][ T7782] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 216.435827][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.456533][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 216.506145][ T7782] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 216.507423][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.536136][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 216.575551][ T7797] vhci_hcd: connection closed [ 216.575678][ T5831] vhci_hcd: stop threads [ 216.577339][ T5831] vhci_hcd: release socket [ 216.578321][ T5831] vhci_hcd: disconnect device [ 216.579304][ T7793] vhci_hcd: connection closed [ 216.579444][ T7790] vhci_hcd: connection closed [ 216.580400][ T7783] vhci_hcd: connection reset by peer [ 216.583003][ T7800] vhci_hcd: stop threads [ 216.584454][ T7800] vhci_hcd: release socket [ 216.585305][ T7800] vhci_hcd: disconnect device [ 216.586320][ T7800] vhci_hcd: stop threads [ 216.587096][ T7800] vhci_hcd: release socket [ 216.602055][ T7800] vhci_hcd: disconnect device [ 216.603563][ T7800] vhci_hcd: stop threads [ 216.604349][ T7800] vhci_hcd: release socket [ 216.620657][ T7800] vhci_hcd: disconnect device [ 216.637882][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 216.639369][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.984'. [ 216.662762][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 216.677876][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.984'. [ 216.680829][ T4378] nvmet: creating nvm controller 71 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 216.688773][ T7803] nvme nvme71: creating 1 I/O queues. [ 216.690301][ T7803] nvme nvme71: new ctrl: "testsubsys" [ 217.584891][ T4378] nvmet: creating nvm controller 72 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 217.592732][ T7834] nvme nvme72: creating 1 I/O queues. [ 217.606778][ T7834] nvme nvme72: new ctrl: "testsubsys" [ 217.748117][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 217.792987][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 217.829823][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 217.859166][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 218.006194][ T4378] nvmet: creating nvm controller 73 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 218.015701][ T7852] nvme nvme73: creating 1 I/O queues. [ 218.031929][ T7852] nvme nvme73: new ctrl: "testsubsys" [ 218.218600][ T7866] tipc: Started in network mode [ 218.219538][ T7866] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 218.234783][ T7866] tipc: Enabled bearer , priority 1 [ 218.386400][ T7870] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 218.388136][ T7870] device-mapper: ioctl: error adding target to table [ 218.534161][ T7880] device syzkaller0 entered promiscuous mode [ 219.649803][ T4377] tipc: Node number set to 43690 [ 219.723777][ T7] vhci_hcd: vhci_device speed not set [ 219.845931][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 219.847530][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 219.877788][ T7894] device syzkaller0 entered promiscuous mode [ 220.157670][ T7912] tipc: Enabling of bearer rejected, already enabled [ 221.751189][ T4378] nvmet: creating nvm controller 74 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 221.842744][ T7915] nvme nvme74: creating 1 I/O queues. [ 221.846096][ T7915] nvme nvme74: new ctrl: "testsubsys" [ 221.879307][ T7925] FAULT_INJECTION: forcing a failure. [ 221.879307][ T7925] name fail_futex, interval 1, probability 0, space 0, times 0 [ 221.881726][ T7925] CPU: 0 PID: 7925 Comm: syz.5.1018 Not tainted syzkaller #0 [ 221.882995][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 221.884854][ T7925] Call trace: [ 221.885469][ T7925] dump_backtrace+0x1c4/0x1f0 [ 221.886381][ T7925] show_stack+0x2c/0x3c [ 221.887196][ T7925] __dump_stack+0x30/0x40 [ 221.888036][ T7925] dump_stack_lvl+0xf4/0x15c [ 221.888911][ T7925] dump_stack+0x1c/0x5c [ 221.889693][ T7925] should_fail_ex+0x3cc/0x524 [ 221.890575][ T7925] should_fail+0x14/0x24 [ 221.891344][ T7925] get_futex_key+0x904/0xfb0 [ 221.892175][ T7925] futex_wake+0x10c/0x458 [ 221.892955][ T7925] do_futex+0x2c4/0x340 [ 221.893770][ T7925] __arm64_sys_futex+0x390/0x414 [ 221.894684][ T7925] invoke_syscall+0x98/0x290 [ 221.895537][ T7925] el0_svc_common+0x13c/0x258 [ 221.896416][ T7925] do_el0_svc+0x5c/0x134 [ 221.897240][ T7925] el0_svc+0x58/0x128 [ 221.898040][ T7925] el0t_64_sync_handler+0x84/0xf0 [ 221.898970][ T7925] el0t_64_sync+0x18c/0x190 [ 222.077542][ T7933] device syzkaller0 entered promiscuous mode [ 222.253757][ T7941] FAULT_INJECTION: forcing a failure. [ 222.253757][ T7941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.265868][ T7941] CPU: 0 PID: 7941 Comm: syz.5.1024 Not tainted syzkaller #0 [ 222.267254][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 222.269249][ T7941] Call trace: [ 222.269917][ T7941] dump_backtrace+0x1c4/0x1f0 [ 222.270775][ T7941] show_stack+0x2c/0x3c [ 222.271531][ T7941] __dump_stack+0x30/0x40 [ 222.272314][ T7941] dump_stack_lvl+0xf4/0x15c [ 222.273168][ T7941] dump_stack+0x1c/0x5c [ 222.274065][ T7941] should_fail_ex+0x3cc/0x524 [ 222.275069][ T7941] should_fail_alloc_page+0x74/0xb8 [ 222.276096][ T7941] prepare_alloc_pages+0x1b8/0x4f0 [ 222.277105][ T7941] __alloc_pages+0x134/0x544 [ 222.278030][ T7941] alloc_pages+0x434/0x6fc [ 222.278818][ T7941] get_zeroed_page+0x20/0x8c [ 222.279669][ T7941] __pud_alloc+0x48/0x1b8 [ 222.280465][ T7941] handle_mm_fault+0x1adc/0x3018 [ 222.281357][ T7941] __get_user_pages+0x340/0x770 [ 222.282218][ T7941] __get_user_pages_remote+0x188/0x684 [ 222.283184][ T7941] get_user_pages_remote+0x80/0xbc [ 222.284126][ T7941] get_arg_page+0x18c/0x3b4 [ 222.284942][ T7941] copy_string_kernel+0x15c/0x254 [ 222.285838][ T7941] do_execveat_common+0x508/0x7fc [ 222.286707][ T7941] __arm64_sys_execve+0x98/0xb0 [ 222.287532][ T7941] invoke_syscall+0x98/0x290 [ 222.288329][ T7941] el0_svc_common+0x13c/0x258 [ 222.289164][ T7941] do_el0_svc+0x5c/0x134 [ 222.289927][ T7941] el0_svc+0x58/0x128 [ 222.290652][ T7941] el0t_64_sync_handler+0x84/0xf0 [ 222.291540][ T7941] el0t_64_sync+0x18c/0x190 [ 222.350852][ T7946] __nla_validate_parse: 2 callbacks suppressed [ 222.350868][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 222.365505][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 222.376802][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 222.378369][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 222.519942][ T7955] device syzkaller0 entered promiscuous mode [ 222.537782][ T7961] tipc: Enabled bearer , priority 1 [ 222.648714][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.667362][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.785142][ T4378] nvmet: creating nvm controller 75 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 222.788545][ T7970] nvme nvme75: creating 1 I/O queues. [ 222.790564][ T7970] nvme nvme75: new ctrl: "testsubsys" [ 224.595178][ T7986] nvmet: disable ns before setting buffered_io value. [ 224.601281][ T7986] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 224.647692][ T7990] device syzkaller0 entered promiscuous mode [ 224.699604][ T4378] nvmet: creating nvm controller 76 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 224.715515][ T7986] nvme nvme76: creating 1 I/O queues. [ 224.730720][ T7986] nvme nvme76: new ctrl: "testsubsys" [ 224.953331][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 225.064811][ T8005] tipc: Enabling of bearer rejected, already enabled [ 225.084445][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.099316][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.118247][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.132493][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.246587][ T8009] device syzkaller0 entered promiscuous mode [ 225.478394][ T4378] nvmet: creating nvm controller 77 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 225.495730][ T8013] nvme nvme77: creating 1 I/O queues. [ 225.506063][ T8013] nvme nvme77: new ctrl: "testsubsys" [ 227.348811][ T8034] device syzkaller0 entered promiscuous mode [ 227.350305][ T8036] nvmet: disable ns before setting buffered_io value. [ 227.361468][ T8036] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 227.495797][ T4376] nvmet: creating nvm controller 78 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 227.510911][ T8036] nvme nvme78: creating 1 I/O queues. [ 227.520915][ T8036] nvme nvme78: new ctrl: "testsubsys" [ 227.674379][ T7] nvmet: creating nvm controller 79 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 227.705695][ T8043] nvme nvme79: creating 1 I/O queues. [ 227.728687][ T8054] tipc: Enabling of bearer rejected, already enabled [ 227.736368][ T8043] nvme nvme79: new ctrl: "testsubsys" [ 227.881473][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 227.907145][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 227.917574][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 227.919137][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 228.189775][ T8072] md: could not open device unknown-block(1,0). [ 228.347988][ T8072] md: pers->run() failed ... [ 228.394332][ T8081] syz.2.1059: attempt to access beyond end of device [ 228.394332][ T8081] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 228.646239][ T8081] device-mapper: table: 248:1: integrity: Error reading superblock (-EIO) [ 228.648047][ T8081] device-mapper: ioctl: error adding target to table [ 228.956938][ T8108] tipc: Enabling of bearer rejected, already enabled [ 229.210240][ T4377] nvmet: creating nvm controller 80 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 229.216743][ T8118] nvme nvme80: creating 1 I/O queues. [ 229.258230][ T8118] nvme nvme80: new ctrl: "testsubsys" [ 229.415703][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 229.435384][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 229.490711][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 229.505495][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 229.929877][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.809512][ T8147] syz.4.1073 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 230.845364][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.080582][ T8154] tipc: Enabling of bearer rejected, already enabled [ 231.130275][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 231.130284][ T27] audit: type=1326 audit(231.110:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.159296][ T27] audit: type=1326 audit(231.120:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.209867][ T27] audit: type=1326 audit(231.120:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.231551][ T27] audit: type=1326 audit(231.120:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.275497][ T27] audit: type=1326 audit(231.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.310977][ T27] audit: type=1326 audit(231.120:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.341299][ T27] audit: type=1326 audit(231.120:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.370354][ T27] audit: type=1326 audit(231.130:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.428591][ T27] audit: type=1326 audit(231.130:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.462503][ T27] audit: type=1326 audit(231.130:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.1078" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 231.663407][ T4377] nvmet: creating nvm controller 81 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 231.683612][ T8174] nvme nvme81: creating 1 I/O queues. [ 231.685259][ T8174] nvme nvme81: new ctrl: "testsubsys" [ 231.727200][ T8181] nvmet: disable ns before setting buffered_io value. [ 231.742035][ T8181] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 231.910886][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1085'. [ 231.960293][ T4377] nvmet: creating nvm controller 82 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 231.966730][ T8181] nvme nvme82: creating 1 I/O queues. [ 231.975974][ T8181] nvme nvme82: new ctrl: "testsubsys" [ 233.243863][ T8205] [U] ¥ [ 233.244653][ T8205] [U] [ 233.245154][ T8205] [U] [ 233.245668][ T8205] [U] [ 233.246175][ T8205] [U] [ 233.246670][ T8205] [U] [ 233.247175][ T8205] [U] [ 233.247675][ T8205] [U] [ 233.248239][ T8205] [U] [ 233.248754][ T8205] [U] [ 233.249247][ T8205] [U] [ 233.249735][ T8205] [U] [ 233.250221][ T8205] [U] [ 233.250720][ T8205] [U] [ 233.251218][ T8205] [U] [ 233.251710][ T8205] [U] [ 233.252185][ T8205] [U] [ 233.252614][ T8205] [U] [ 233.253065][ T8205] [U] [ 233.253559][ T8205] [U] [ 233.254073][ T8205] [U] [ 233.254570][ T8205] [U] [ 233.255085][ T8205] [U] [ 233.255607][ T8205] [U] [ 233.289208][ T8208] syz.2.1089: attempt to access beyond end of device [ 233.289208][ T8208] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 233.340232][ T8205] [U] [ 233.340834][ T8205] [U] [ 233.341321][ T8205] [U] [ 233.341804][ T8205] [U] [ 233.342299][ T8205] [U] [ 233.342774][ T8205] [U] [ 233.343276][ T8205] [U] [ 233.343772][ T8205] [U] [ 233.377208][ T8205] [U] [ 233.377812][ T8205] [U] [ 233.378322][ T8205] [U] [ 233.378833][ T8205] [U] [ 233.379356][ T8205] [U] [ 233.379875][ T8205] [U] [ 233.380398][ T8205] [U] [ 233.380913][ T8205] [U] [ 233.389128][ T8215] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 233.403812][ T8215] device-mapper: ioctl: error adding target to table [ 233.405300][ T8205] [U] [ 233.405810][ T8205] [U] [ 233.406346][ T8205] [U] [ 233.406905][ T8205] [U] [ 233.407473][ T8205] [U] [ 233.407967][ T8205] [U] [ 233.408479][ T8205] [U] [ 233.408980][ T8205] [U] [ 233.444067][ T8205] [U] [ 233.444645][ T8205] [U] [ 233.445123][ T8205] [U] [ 233.445646][ T8205] [U] [ 233.446184][ T8205] [U] [ 233.446736][ T8205] [U] [ 233.447270][ T8205] [U] [ 233.447787][ T8205] [U] [ 233.459840][ T8208] device-mapper: table: 248:1: integrity: Error reading superblock (-EIO) [ 233.461650][ T8208] device-mapper: ioctl: error adding target to table [ 233.471298][ T8205] [U] [ 233.471826][ T8205] [U] [ 233.472271][ T8205] [U] [ 233.472774][ T8205] [U] [ 233.473286][ T8205] [U] [ 233.473797][ T8205] [U] [ 233.474298][ T8205] [U] [ 233.474806][ T8205] [U] [ 233.521821][ T8205] [U] [ 233.522423][ T8205] [U] [ 233.522946][ T8205] [U] [ 233.523446][ T8205] [U] [ 233.523943][ T8205] [U] [ 233.524439][ T8205] [U] [ 233.524945][ T8205] [U] [ 233.525439][ T8205] [U] [ 233.556866][ T8205] [U] [ 233.557454][ T8205] [U] [ 233.557942][ T8205] [U] [ 233.558459][ T8205] [U] [ 233.558992][ T8205] [U] [ 233.559517][ T8205] [U] [ 233.560051][ T8205] [U] [ 233.560581][ T8205] [U] [ 233.597659][ T8205] [U] [ 233.598195][ T8205] [U] [ 233.598665][ T8205] [U] [ 233.599184][ T8205] [U] [ 233.599684][ T8205] [U] [ 233.600181][ T8205] [U] [ 233.600702][ T8205] [U] [ 233.601212][ T8205] [U] [ 233.627297][ T8205] [U] [ 233.627846][ T8205] [U] [ 233.628369][ T8205] [U] [ 233.628892][ T8205] [U] [ 233.629388][ T8205] [U] [ 233.629884][ T8205] [U] [ 233.630392][ T8205] [U] [ 233.630901][ T8205] [U] [ 233.643607][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.645196][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.662532][ T8205] [U] [ 233.663097][ T8205] [U] [ 233.663698][ T8205] [U] [ 233.664256][ T8205] [U] [ 233.664755][ T8205] [U] [ 233.665271][ T8205] [U] [ 233.665775][ T8205] [U] [ 233.666280][ T8205] [U] [ 233.668344][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.682326][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.699932][ T8205] [U] [ 233.700537][ T8205] [U] [ 233.701122][ T8205] [U] [ 233.701654][ T8205] [U] [ 233.702201][ T8205] [U] [ 233.702733][ T8205] [U] [ 233.703277][ T8205] [U] [ 233.703819][ T8205] [U] [ 233.747141][ T8205] [U] [ 233.747701][ T8205] [U] [ 233.748210][ T8205] [U] [ 233.748751][ T8205] [U] [ 233.749309][ T8205] [U] [ 233.749805][ T8205] [U] [ 233.750293][ T8205] [U] [ 233.780306][ T8204] [U] [ 233.964158][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'. [ 234.096970][ T8241] tipc: Enabling of bearer rejected, already enabled [ 234.117078][ T8243] device syzkaller0 entered promiscuous mode [ 235.786715][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 235.788374][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 235.810497][ T8276] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.812278][ T8276] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.814172][ T8276] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.815724][ T8276] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.880353][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 235.882089][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 236.175913][ T8290] bond0: (slave bond_slave_0): Releasing backup interface [ 239.045709][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 239.067522][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 239.091105][ T8339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.092797][ T8339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.094614][ T8339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.096085][ T8339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.187320][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 239.199013][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 239.604785][ T8359] device syzkaller0 entered promiscuous mode [ 239.967055][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 241.186712][ T8378] tipc: Enabling of bearer rejected, already enabled [ 241.205667][ T8379] device syzkaller0 entered promiscuous mode [ 242.278436][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 242.280403][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 242.288348][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 242.308594][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 242.662524][ T8411] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 242.707743][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.717899][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.089962][ T8430] tipc: Enabling of bearer rejected, already enabled [ 244.152505][ T8432] device syzkaller0 entered promiscuous mode [ 244.307416][ T8435] device syzkaller0 entered promiscuous mode [ 244.467487][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 244.469217][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 244.538180][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 244.553775][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 244.592969][ T8447] nvmet: disable ns before setting buffered_io value. [ 244.602804][ T8447] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 244.723010][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 244.742795][ T4377] nvmet: creating nvm controller 83 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 244.749791][ T8447] nvme nvme83: creating 1 I/O queues. [ 244.751438][ T8447] nvme nvme83: new ctrl: "testsubsys" [ 245.989201][ T8463] tipc: Enabling of bearer rejected, already enabled [ 246.108783][ T8469] device syzkaller0 entered promiscuous mode [ 247.240618][ T8477] device syzkaller0 entered promiscuous mode [ 247.468682][ T8490] nvmet: disable ns before setting buffered_io value. [ 247.487326][ T8490] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 247.642347][ T4377] nvmet: creating nvm controller 84 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 247.652138][ T8490] nvme nvme84: creating 1 I/O queues. [ 247.659009][ T8490] nvme nvme84: new ctrl: "testsubsys" [ 247.674383][ T8500] tipc: Started in network mode [ 247.680852][ T8500] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 247.689283][ T8500] tipc: Enabled bearer , priority 1 [ 248.037957][ T8511] device syzkaller0 entered promiscuous mode [ 249.044675][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.050961][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.125105][ T4377] tipc: Node number set to 43690 [ 249.246224][ T8523] device syzkaller0 entered promiscuous mode [ 250.950389][ T8532] nvmet: disable ns before setting buffered_io value. [ 250.962444][ T8532] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 251.030424][ T4378] nvmet: creating nvm controller 85 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 251.039973][ T8532] nvme nvme85: creating 1 I/O queues. [ 251.046467][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 251.051556][ T8535] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.053658][ T8535] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.055223][ T8535] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.056910][ T8535] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.075161][ T8532] nvme nvme85: new ctrl: "testsubsys" [ 251.097219][ T8534] tipc: Enabling of bearer rejected, already enabled [ 251.148639][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 252.588304][ T8558] device syzkaller0 entered promiscuous mode [ 252.736880][ T8566] FAULT_INJECTION: forcing a failure. [ 252.736880][ T8566] name fail_futex, interval 1, probability 0, space 0, times 0 [ 252.747399][ T8566] CPU: 0 PID: 8566 Comm: syz.2.1198 Not tainted syzkaller #0 [ 252.748682][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 252.750735][ T8566] Call trace: [ 252.751360][ T8566] dump_backtrace+0x1c4/0x1f0 [ 252.752262][ T8566] show_stack+0x2c/0x3c [ 252.753114][ T8566] __dump_stack+0x30/0x40 [ 252.753939][ T8566] dump_stack_lvl+0xf4/0x15c [ 252.754811][ T8566] dump_stack+0x1c/0x5c [ 252.755599][ T8566] should_fail_ex+0x3cc/0x524 [ 252.756492][ T8566] should_fail+0x14/0x24 [ 252.757305][ T8566] get_futex_key+0x904/0xfb0 [ 252.758193][ T8566] futex_wake+0x10c/0x458 [ 252.759005][ T8566] do_futex+0x2c4/0x340 [ 252.759769][ T8566] __arm64_sys_futex+0x390/0x414 [ 252.760664][ T8566] invoke_syscall+0x98/0x290 [ 252.761503][ T8566] el0_svc_common+0x13c/0x258 [ 252.762359][ T8566] do_el0_svc+0x5c/0x134 [ 252.763132][ T8566] el0_svc+0x58/0x128 [ 252.763839][ T8566] el0t_64_sync_handler+0x84/0xf0 [ 252.764782][ T8566] el0t_64_sync+0x18c/0x190 [ 252.879549][ T8575] nvmet: disable ns before setting buffered_io value. [ 252.893887][ T8575] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 252.927473][ T8572] tipc: Enabling of bearer rejected, already enabled [ 252.930390][ T8568] device syzkaller0 entered promiscuous mode [ 253.039539][ T8582] nvmet: disable ns before setting buffered_io value. [ 253.059599][ T4376] nvmet: creating nvm controller 86 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 253.066891][ T8582] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 253.068826][ T8575] nvme nvme86: creating 1 I/O queues. [ 253.094619][ T8575] nvme nvme86: new ctrl: "testsubsys" [ 253.206447][ T4376] nvmet: creating nvm controller 87 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 253.219800][ T8582] nvme nvme87: creating 1 I/O queues. [ 253.221508][ T8582] nvme nvme87: new ctrl: "testsubsys" [ 254.696457][ T8613] device syzkaller0 entered promiscuous mode [ 254.720517][ T8612] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 254.730334][ T8618] tipc: Enabling of bearer rejected, already enabled [ 254.736017][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 254.847762][ T8621] nvmet: disable ns before setting buffered_io value. [ 254.875642][ T8621] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 254.970992][ T8630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.979200][ T8629] device syzkaller0 entered promiscuous mode [ 254.987841][ T8630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.999867][ T4376] nvmet: creating nvm controller 88 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 255.016139][ T8621] nvme nvme88: creating 1 I/O queues. [ 255.031826][ T8621] nvme nvme88: new ctrl: "testsubsys" [ 256.442523][ T8652] tipc: Enabling of bearer rejected, already enabled [ 256.573700][ T8658] device syzkaller0 entered promiscuous mode [ 256.992565][ T8681] tipc: Enabling of bearer rejected, already enabled [ 257.183701][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1236'. [ 257.462598][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.478569][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.840968][ T8701] nvmet: disable ns before setting buffered_io value. [ 257.850520][ T8701] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 257.930959][ T4376] nvmet: creating nvm controller 89 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 257.934992][ T8701] nvme nvme89: creating 1 I/O queues. [ 257.941372][ T8701] nvme nvme89: new ctrl: "testsubsys" [ 257.947199][ T8706] device syzkaller0 entered promiscuous mode [ 259.807586][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 259.809251][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 259.835710][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 259.837419][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 259.856125][ T8724] nvmet: disable ns before setting buffered_io value. [ 259.881911][ T8724] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 259.961366][ T8729] nvmet: disable ns before setting buffered_io value. [ 259.971230][ T8729] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 259.981801][ T4378] nvmet: creating nvm controller 90 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 259.987787][ T8724] nvme nvme90: creating 1 I/O queues. [ 259.996768][ T8724] nvme nvme90: new ctrl: "testsubsys" [ 260.114215][ T4378] nvmet: creating nvm controller 91 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 260.117914][ T8729] nvme nvme91: creating 1 I/O queues. [ 260.120480][ T8729] nvme nvme91: new ctrl: "testsubsys" [ 260.310994][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.329010][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.399149][ T8749] nvmet: disable ns before setting buffered_io value. [ 260.421369][ T8749] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 260.459378][ T8750] device syzkaller0 entered promiscuous mode [ 260.468177][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.481431][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.516160][ T4378] nvmet: creating nvm controller 92 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 260.526897][ T8749] nvme nvme92: creating 1 I/O queues. [ 260.530179][ T8749] nvme nvme92: new ctrl: "testsubsys" [ 262.595838][ T8775] nvmet: disable ns before setting buffered_io value. [ 262.608749][ T8775] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 262.706036][ T4378] nvmet: creating nvm controller 93 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 262.710814][ T8775] nvme nvme93: creating 1 I/O queues. [ 262.712409][ T8775] nvme nvme93: new ctrl: "testsubsys" [ 263.075664][ T8780] device syzkaller0 entered promiscuous mode [ 263.129616][ T8793] nvmet: disable ns before setting buffered_io value. [ 263.150741][ T8793] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 263.252120][ T3901] nvmet: creating nvm controller 94 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 263.268061][ T8793] nvme nvme94: creating 1 I/O queues. [ 263.275983][ T8793] nvme nvme94: new ctrl: "testsubsys" [ 263.308167][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.328590][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.972183][ T8837] nvmet: disable ns before setting buffered_io value. [ 273.995660][ T8837] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 275.318479][ T4376] nvmet: creating nvm controller 95 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 275.322171][ T8837] nvme nvme95: creating 1 I/O queues. [ 275.325675][ T8837] nvme nvme95: new ctrl: "testsubsys" [ 275.369578][ T8853] FAULT_INJECTION: forcing a failure. [ 275.369578][ T8853] name failslab, interval 1, probability 0, space 0, times 0 [ 275.389824][ T8853] CPU: 0 PID: 8853 Comm: syz.1.1292 Not tainted syzkaller #0 [ 275.391214][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 275.392972][ T8853] Call trace: [ 275.393589][ T8853] dump_backtrace+0x1c4/0x1f0 [ 275.394508][ T8853] show_stack+0x2c/0x3c [ 275.395270][ T8853] __dump_stack+0x30/0x40 [ 275.396109][ T8853] dump_stack_lvl+0xf4/0x15c [ 275.396954][ T8853] dump_stack+0x1c/0x5c [ 275.397754][ T8853] should_fail_ex+0x3cc/0x524 [ 275.398640][ T8853] __should_failslab+0xc0/0x11c [ 275.399535][ T8853] should_failslab+0x10/0x28 [ 275.400431][ T8853] kmem_cache_alloc+0x88/0x310 [ 275.401274][ T8853] __kernfs_new_node+0xec/0x5fc [ 275.402151][ T8853] kernfs_new_node+0x120/0x230 [ 275.402997][ T8853] kernfs_create_link+0x98/0x1e4 [ 275.403877][ T8853] sysfs_do_create_link_sd+0x8c/0x120 [ 275.404898][ T8853] sysfs_create_link+0x74/0x94 [ 275.405832][ T8853] device_add+0x744/0xe4c [ 275.406671][ T8853] netdev_register_kobject+0x170/0x2f4 [ 275.407682][ T8853] register_netdevice+0xf28/0x1650 [ 275.408577][ T8853] ipip6_tunnel_create+0x114/0x2d0 [ 275.409520][ T8853] ipip6_tunnel_locate+0x47c/0x678 [ 275.410423][ T8853] ipip6_tunnel_ctl+0x598/0x858 [ 275.411336][ T8853] ip_tunnel_siocdevprivate+0x1cc/0x388 [ 275.412313][ T8853] ipip6_tunnel_siocdevprivate+0x1ec/0x1850 [ 275.413348][ T8853] dev_ifsioc+0x810/0xc04 [ 275.414160][ T8853] dev_ioctl+0x530/0xc78 [ 275.414940][ T8853] sock_ioctl+0x778/0x828 [ 275.415704][ T8853] __arm64_sys_ioctl+0x14c/0x1c8 [ 275.416568][ T8853] invoke_syscall+0x98/0x290 [ 275.417385][ T8853] el0_svc_common+0x13c/0x258 [ 275.418192][ T8853] do_el0_svc+0x5c/0x134 [ 275.418987][ T8853] el0_svc+0x58/0x128 [ 275.419767][ T8853] el0t_64_sync_handler+0x84/0xf0 [ 275.420676][ T8853] el0t_64_sync+0x18c/0x190 [ 275.458770][ T8855] nvmet: disable ns before setting buffered_io value. [ 275.474324][ T8855] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 275.554449][ T4376] nvmet: creating nvm controller 96 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 275.557900][ T8855] nvme nvme96: creating 1 I/O queues. [ 275.559530][ T8855] nvme nvme96: new ctrl: "testsubsys" [ 276.847966][ T8866] sched: RT throttling activated [ 277.097040][ T8870] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 277.235288][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 277.254762][ T4376] nvmet: creating nvm controller 97 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5460bec4-42f9-44fa-8642-9681097ba3e1. [ 277.258260][ T8870] nvme nvme97: creating 1 I/O queues. [ 277.260654][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.262099][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.273311][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 277.275486][ T8870] nvme nvme97: new ctrl: "testsubsys" [ 277.292111][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 277.374830][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 277.784342][ T8895] nvmet: disable ns before setting buffered_io value. [ 277.789147][ T8895] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 382.843046][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 382.844438][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8897/1:b..l [ 382.846157][ C0] (detected by 0, t=10502 jiffies, g=38773, q=162 ncpus=1) [ 382.847514][ C0] task:modprobe state:R running task stack:0 pid:8897 ppid:8848 flags:0x00000004 [ 382.849587][ C0] Call trace: [ 382.850143][ C0] __switch_to+0x2f4/0x550 [ 382.850927][ C0] __schedule+0xdb4/0x1a6c [ 382.851686][ C0] preempt_schedule_irq+0x8c/0x1ac [ 382.852569][ C0] arm64_preempt_schedule_irq+0x44/0x54 [ 382.853571][ C0] el1_interrupt+0x3c/0x54 [ 382.854382][ C0] el1h_64_irq_handler+0x18/0x24 [ 382.855279][ C0] el1h_64_irq+0x64/0x68 [ 382.856038][ C0] arch_local_irq_restore+0x8/0x10 [ 382.856963][ C0] xas_descend+0xdc/0x40c [ 382.857851][ C0] xas_find+0x198/0x92c [ 382.858733][ C0] filemap_map_pages+0x1d4/0x1284 [ 382.859760][ C0] handle_mm_fault+0x1cd0/0x3018 [ 382.860722][ C0] do_page_fault+0x310/0x99c [ 382.861627][ C0] do_translation_fault+0x94/0xc8 [ 382.862587][ C0] do_mem_abort+0x70/0x198 [ 382.863381][ C0] el0_ia+0xa4/0x1d0 [ 382.864100][ C0] el0t_64_sync_handler+0xd8/0xf0 [ 382.864975][ C0] el0t_64_sync+0x18c/0x190 [ 382.865784][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g38773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 382.867788][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 382.869624][ C0] rcu: RCU grace-period kthread stack dump: [ 382.870673][ C0] task:rcu_preempt state:R running task stack:0 pid:16 ppid:2 flags:0x00000008 [ 382.872590][ C0] Call trace: [ 382.873181][ C0] __switch_to+0x2f4/0x550 [ 382.874005][ C0] __schedule+0xdb4/0x1a6c [ 382.874850][ C0] schedule+0xc4/0x170 [ 382.875631][ C0] schedule_timeout+0x194/0x2f4 [ 382.876505][ C0] rcu_gp_fqs_loop+0x2b0/0x15b8 [ 382.877424][ C0] rcu_gp_kthread+0xb0/0x300 [ 382.878302][ C0] kthread+0x254/0x2e0 [ 382.879082][ C0] ret_from_fork+0x10/0x20 [ 382.879889][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 382.881086][ C0] CPU: 0 PID: 8892 Comm: syz.4.1304 Not tainted syzkaller #0 [ 382.882525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 382.884648][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 382.886169][ C0] pc : lock_release+0x4c4/0x90c [ 382.887113][ C0] lr : lock_release+0x48c/0x90c [ 382.888028][ C0] sp : ffff8000209d7600 [ 382.888807][ C0] x29: ffff8000209d7640 x28: ffff800015316d00 x27: 0000000000000000 [ 382.890396][ C0] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000d3642678 [ 382.891988][ C0] x23: 0000000000000001 x22: ffff00019f34cd00 x21: ffffffffffffffff [ 382.893558][ C0] x20: ffff0000d3641c00 x19: ffff00019f34cd00 x18: 0000000000000000 [ 382.895141][ C0] x17: 0000000000000000 x16: ffff800011bb65f8 x15: 0000ffffc497b7f8 [ 382.896650][ C0] x14: 0000000000000001 x13: 1ffff00002a78071 x12: 000000003552ed0d [ 382.898147][ C0] x11: ff0080000a97caac x10: 0000000000000000 x9 : 0000000000000080 [ 382.899683][ C0] x8 : 0000000000000000 x7 : ffff8000087f03bc x6 : 0000000000000000 [ 382.901233][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 382.902702][ C0] x2 : 0000000000000008 x1 : ffff800011d1edc0 x0 : 0000000000000000 [ 382.904221][ C0] Call trace: [ 382.904846][ C0] lock_release+0x4c4/0x90c [ 382.905702][ C0] __might_fault+0xf0/0x124 [ 382.906599][ C0] __arm64_sys_rt_sigreturn+0x2e4/0x1f1c [ 382.907684][ C0] invoke_syscall+0x98/0x290 [ 382.908546][ C0] el0_svc_common+0x13c/0x258 [ 382.909409][ C0] do_el0_svc+0x5c/0x134 [ 382.910209][ C0] el0_svc+0x58/0x128 [ 382.910932][ C0] el0t_64_sync_handler+0x84/0xf0 [ 382.911844][ C0] el0t_64_sync+0x18c/0x190