last executing test programs:

3m46.039497702s ago: executing program 2 (id=8):
r0 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c19493", 0x49}], 0x1}}], 0x2, 0x60cd894)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f00000000c0)=""/137, 0x89})

3m45.472214461s ago: executing program 2 (id=11):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1})

3m42.82590346s ago: executing program 2 (id=17):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c)

3m42.244892109s ago: executing program 2 (id=20):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x80000, 0x4)
connect$bt_l2cap(r0, &(0x7f0000001040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0x7f)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000010180)={'wlan0\x00'})
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x41)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x7, 0x8, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d16c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bbdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00000000000000e500", "f2837a00e6d6020000edff000000000000000100", [0x4, 0x7]})
read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020)

3m41.00658523s ago: executing program 2 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00422b710254bc20b8a15b276957b07ad2e8a4eccdd1af90915689786ef13145004213de7ef1bd9e8915f4d198d3422913a38bf6178ff4a9bb6ca2d2a021a79f2ca4dfad96d162fa339e59cd72131eddb57256463a52a0837c7e6c5f50e21c52c8fd68831da5e7d18d529fc1667a1cfc8ee86ce5cd"], 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ")
statx(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0/file0\x00', 0x0, 0x2dd8806920477201, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

3m40.190469778s ago: executing program 2 (id=25):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b45, 0x0)

3m39.706917244s ago: executing program 32 (id=25):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b45, 0x0)

6.236081282s ago: executing program 0 (id=962):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0, <r4=>0x0], &(0x7f0000000040), 0x2, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff})

6.134763955s ago: executing program 0 (id=963):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2e0})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x4})

5.902533303s ago: executing program 0 (id=965):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @empty}, 0x3d}, 0x1c)

5.738289508s ago: executing program 0 (id=967):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d)

5.68523206s ago: executing program 0 (id=969):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x904}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000)
socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0x98c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c)
r7 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1000, 0x12)
syz_open_dev$midi(&(0x7f0000000000), 0x4, 0x84080)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)

4.377504253s ago: executing program 4 (id=975):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdir(0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='ipv4', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='127.0.0.1', 0x9)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000400)='4420', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.', 0x19)

4.133598112s ago: executing program 4 (id=978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50)
syz_emit_ethernet(0x86, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa7, [{0x3, 0x8, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c6"}]}}}}}}, 0x0)
r1 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000})
io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x34, 0x6, 0x0, 0x2}, {0x16, 0x0, 0x0, 0x100}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000300, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.158318794s ago: executing program 4 (id=982):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32, @ANYBLOB="1400c7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

3.124233075s ago: executing program 1 (id=983):
prctl$PR_SET_IO_FLUSHER(0x4a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002900)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b58026bd7000fedbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="05001e0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r4, 0xda90)
accept4(r4, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket(0x29, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000002400005c00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000000000000000000783397d5fde59019fbf03b00197b93fc406cf57024ba291b823a18fb7239b5d368a9e51515e0a16903dbb8ab2949fc3265260ca99846ff8da5fefc7de8f7923afa3cfe81e6b723620c0f84fa81db5fe896b6b6276b65df72acf3cba1f35d4cd322174da9208b604932fdd77fa679e93e326eccc59f6b2bcd36286f43af39e5e1f67dc7354a6e05ad9063668cbe6122947f95a23b513fce"], 0x50)

2.955647451s ago: executing program 4 (id=984):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540), 0xa7c, r0}, 0x38)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4b)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93", 0x3}], 0x1)
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c)

2.238541005s ago: executing program 3 (id=987):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = dup(0xffffffffffffffff)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d)

2.002496153s ago: executing program 3 (id=988):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)

1.973002114s ago: executing program 1 (id=989):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xf)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)

1.836750749s ago: executing program 4 (id=990):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mbind(&(0x7f00003f8000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000240)=0x6, 0x8, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs$userns(0x0, &(0x7f0000001240))
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r1, &(0x7f0000000040)='\x00', 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}})
r2 = socket(0x1e, 0x4, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca3, 0x0, 0x0)

1.764952391s ago: executing program 1 (id=991):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0, <r4=>0x0], &(0x7f0000000040), 0x2, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, 0x0, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff})

1.681281934s ago: executing program 3 (id=992):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002ffffffffffffac1414bbaa5f"], 0x0)

1.381923084s ago: executing program 1 (id=993):
fchdir(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000340))
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
init_module(&(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x2, 0x8, 0x3, 0x3, 0x6, 0x68, 0x1e8, 0x40, 0x274, 0x6, 0x3, 0x38, 0x3, 0xc, 0xce, 0x1}, [{0x3, 0x6, 0x2, 0x7, 0x2, 0x5, 0x4, 0x1}, {0x70000000, 0x4, 0x8092, 0x0, 0x7, 0x4, 0x100, 0x5}, {0x6474e551, 0x10, 0x5, 0x7, 0xb, 0x9, 0x101, 0xd21}], "8debeca4", ['\x00', '\x00']}, 0x2ec, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x8e09, 0x0, 0x2, 0xeb}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe84, 0x2, 0x3, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x1, 0x10000, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f77, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8610, 0x1, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0))
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))

1.282383577s ago: executing program 0 (id=994):
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r0, 0x5b02, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

1.282087717s ago: executing program 3 (id=995):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdir(0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='ipv4', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='127.0.0.1', 0x9)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000400)='4420', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.', 0x19)

986.815567ms ago: executing program 3 (id=996):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
socket(0x10, 0x80003, 0x0)
add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0xfffff, 0xfffffffffffffffe)

181.989654ms ago: executing program 4 (id=997):
prctl$PR_SET_IO_FLUSHER(0x4a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002900)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="b58026bd7000fedbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="05001e0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r4, 0xda90)
accept4(r4, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket(0x29, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000002400005c00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000000000000000000783397d5fde59019fbf03b00197b93fc406cf57024ba291b823a18fb7239b5d368a9e51515e0a16903dbb8ab2949fc3265260ca99846ff8da5fefc7de8f7923afa3cfe81e6b723620c0f84fa81db5fe896b6b6276b65df72acf3cba1f35d4cd322174da9208b604932fdd77fa679e93e326eccc59f6b2bcd36286f43af39e5e1f67dc7354a6e05ad9063668cbe6122947f95a23b513fce"], 0x50)

167.647754ms ago: executing program 1 (id=998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

142.693755ms ago: executing program 3 (id=999):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1', 0x1)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubs', 0x1b)

0s ago: executing program 1 (id=1000):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xf)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)

kernel console output (not intermixed with test programs):

T7838] loop1: detected capacity change from 0 to 32768
[  189.586084][ T7838] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  189.601703][ T7838] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  189.614078][ T7838] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  189.624437][ T7838] BTRFS info (device loop1): use zstd compression, level 3
[  189.633356][ T7838] BTRFS info (device loop1): using free space tree
[  189.741442][ T7838] BTRFS info (device loop1): enabling ssd optimizations
[  189.753031][ T7838] BTRFS info (device loop1): auto enabling async discard
[  189.812319][   T28] audit: type=1800 audit(1789065840.034:21): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.444" name="file1" dev="loop1" ino=260 res=0 errno=0
[  190.130799][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  190.323509][ T7467] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (7467)
[  190.900010][ T7877] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  190.910313][ T7877] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  190.932244][ T7877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  191.032575][ T1060] nvmet: connect request for invalid subsystem t!
[  191.041237][ T7877] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  191.049988][ T7877] nvme nvme0: failed to connect queue: 0 ret=16770
[  191.414334][ T7884] No source specified
[  191.665459][ T7888] netlink: 'syz.1.463': attribute type 281 has an invalid length.
[  191.808423][ T7889] Bluetooth: MGMT ver 1.22
[  192.361178][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'.
[  193.113019][ T7909] capability: warning: `syz.1.473' uses deprecated v2 capabilities in a way that may be insecure
[  193.185490][ T7907] syz.3.472: attempt to access beyond end of device
[  193.185490][ T7907] loop3: rw=0, sector=16, nr_sectors = 2 limit=0
[  193.341513][ T7891] loop0: detected capacity change from 0 to 32768
[  193.353225][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  193.383017][ T7891] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  193.432463][ T7897] loop4: detected capacity change from 0 to 32768
[  193.493729][ T7897] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  193.743139][ T7467] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  193.853426][ T7897] XFS (loop4): Ending clean mount
[  193.893979][ T7897] XFS (loop4): Quotacheck needed: Please wait.
[  193.919290][ T7923] syzkaller0: entered promiscuous mode
[  193.954031][ T7923] syzkaller0: entered allmulticast mode
[  193.986418][ T7897] XFS (loop4): Quotacheck: Done.
[  194.114957][ T7897] XFS (loop4): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  194.399471][ T5982] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  194.612689][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.619326][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  195.306217][ T7941] loop1: detected capacity change from 0 to 32768
[  195.344764][ T7941] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.360149][ T7941] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  195.381840][ T7941] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  195.393086][ T7941] BTRFS info (device loop1): use zstd compression, level 3
[  195.400421][ T7941] BTRFS info (device loop1): using free space tree
[  195.537716][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  195.553962][ T7941] BTRFS info (device loop1): enabling ssd optimizations
[  195.573351][ T7941] BTRFS info (device loop1): auto enabling async discard
[  195.627097][   T28] audit: type=1800 audit(1789065845.844:22): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file1" dev="loop1" ino=260 res=0 errno=0
[  195.762037][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.790987][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.806585][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  195.817389][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.835565][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  195.881164][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  195.911246][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  195.934076][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.979914][ T7936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  195.989717][    T9] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  196.024067][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  196.043073][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  196.076042][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  196.088528][ T7969] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  196.120136][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  196.131089][ T7969] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  196.158722][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  196.167479][ T7969] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  196.217960][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  196.375832][ T1060] nvmet: connect request for invalid subsystem t!
[  196.394818][ T7969] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  196.415220][ T7969] nvme nvme0: failed to connect queue: 0 ret=16770
[  197.743521][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'.
[  197.777509][    T9] usb 4-1: USB disconnect, device number 4
[  197.790398][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  197.842383][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  197.888509][    T9] keyspan 4-1:1.0: device disconnected
[  198.239896][ T7988] FAULT_INJECTION: forcing a failure.
[  198.239896][ T7988] name failslab, interval 1, probability 0, space 0, times 0
[  198.259031][ T7988] CPU: 1 PID: 7988 Comm: syz.0.496 Not tainted syzkaller #0
[  198.266406][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  198.276517][ T7988] Call Trace:
[  198.279849][ T7988]  <TASK>
[  198.282835][ T7988]  dump_stack_lvl+0x18c/0x250
[  198.287572][ T7988]  ? show_regs_print_info+0x20/0x20
[  198.292820][ T7988]  ? load_image+0x420/0x420
[  198.297370][ T7988]  ? __might_sleep+0xe0/0xe0
[  198.302007][ T7988]  ? __lock_acquire+0x7d80/0x7d80
[  198.307078][ T7988]  should_fail_ex+0x394/0x4c0
[  198.311796][ T7988]  should_failslab+0x9/0x20
[  198.316333][ T7988]  slab_pre_alloc_hook+0x59/0x300
[  198.321404][ T7988]  kmem_cache_alloc_lru+0x4d/0x2b0
[  198.326550][ T7988]  ? __d_alloc+0x31/0x710
[  198.330906][ T7988]  __d_alloc+0x31/0x710
[  198.335107][ T7988]  d_alloc_pseudo+0x1d/0x70
[  198.339639][ T7988]  alloc_file_pseudo+0xe4/0x210
[  198.344526][ T7988]  ? fput+0x1a0/0x1a0
[  198.348545][ T7988]  ? pfn_swap_entry_to_page+0x390/0x390
[  198.354133][ T7988]  hugetlb_file_setup+0x3d0/0x610
[  198.359211][ T7988]  ksys_mmap_pgoff+0x1e6/0x720
[  198.364012][ T7988]  do_syscall_64+0x55/0xb0
[  198.368476][ T7988]  ? clear_bhb_loop+0x40/0x90
[  198.373183][ T7988]  ? clear_bhb_loop+0x40/0x90
[  198.377888][ T7988]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.383816][ T7988] RIP: 0033:0x7f2a2039e159
[  198.388260][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.407906][ T7988] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  198.416385][ T7988] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  198.424386][ T7988] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  198.432415][ T7988] RBP: 00007f2a2043503b R08: ffffffffffffffff R09: 0000000000000000
[  198.440434][ T7988] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000
[  198.448430][ T7988] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  198.456437][ T7988]  </TASK>
[  198.706124][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[  198.816229][ T8002] netlink: 'syz.1.502': attribute type 281 has an invalid length.
[  199.745807][ T8017] FAULT_INJECTION: forcing a failure.
[  199.745807][ T8017] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  199.783538][ T8017] CPU: 1 PID: 8017 Comm: syz.0.507 Not tainted syzkaller #0
[  199.790926][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.801038][ T8017] Call Trace:
[  199.804371][ T8017]  <TASK>
[  199.807341][ T8017]  dump_stack_lvl+0x18c/0x250
[  199.812087][ T8017]  ? show_regs_print_info+0x20/0x20
[  199.817344][ T8017]  ? load_image+0x420/0x420
[  199.821905][ T8017]  ? __lock_acquire+0x7d80/0x7d80
[  199.826991][ T8017]  should_fail_ex+0x394/0x4c0
[  199.831736][ T8017]  prepare_alloc_pages+0x1e1/0x5b0
[  199.836908][ T8017]  __alloc_pages+0x134/0x460
[  199.841561][ T8017]  ? zone_statistics+0x170/0x170
[  199.846555][ T8017]  ? __mod_lruvec_page_state+0xa5/0x410
[  199.852166][ T8017]  __kmalloc_large_node+0x8c/0x1f0
[  199.853924][ T8005] loop1: detected capacity change from 0 to 32768
[  199.857329][ T8017]  ? vhost_dev_set_owner+0x2a5/0x9b0
[  199.869130][ T8017]  __kmalloc+0x114/0x240
[  199.873435][ T8017]  vhost_dev_set_owner+0x2a5/0x9b0
[  199.878612][ T8017]  vhost_net_ioctl+0x6c7/0x1280
[  199.883541][ T8017]  ? vhost_net_chr_poll+0x50/0x50
[  199.888691][ T8017]  ? bpf_lsm_file_ioctl+0x9/0x10
[  199.893720][ T8017]  ? security_file_ioctl+0x80/0xa0
[  199.898915][ T8017]  ? vhost_net_chr_poll+0x50/0x50
[  199.904008][ T8017]  __se_sys_ioctl+0xfd/0x170
[  199.908670][ T8017]  do_syscall_64+0x55/0xb0
[  199.913146][ T8017]  ? clear_bhb_loop+0x40/0x90
[  199.917884][ T8017]  ? clear_bhb_loop+0x40/0x90
[  199.922622][ T8017]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  199.928577][ T8017] RIP: 0033:0x7f2a2039e159
[  199.933043][ T8017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.948637][ T8005] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  199.952677][ T8017] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.971598][ T8017] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  199.979629][ T8017] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004
[  199.987657][ T8017] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  199.995696][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.003726][ T8017] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  200.011770][ T8017]  </TASK>
[  200.019284][ T8007] loop4: detected capacity change from 0 to 32768
[  200.039421][ T8007] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.505 (8007)
[  200.074878][ T8007] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  200.121280][ T8007] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  200.177678][ T8007] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  200.200508][ T8007] BTRFS info (device loop4): use zstd compression, level 3
[  200.232039][ T8007] BTRFS info (device loop4): using free space tree
[  200.366896][ T7467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (7467)
[  200.404770][ T8007] BTRFS info (device loop4): enabling ssd optimizations
[  200.416668][ T8007] BTRFS info (device loop4): auto enabling async discard
[  200.479576][   T28] audit: type=1800 audit(1789065850.704:23): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.505" name="file1" dev="loop4" ino=260 res=0 errno=0
[  200.699361][ T5982] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  200.813926][ T8046] netlink: 'syz.1.512': attribute type 281 has an invalid length.
[  200.822797][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  200.969638][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[  201.037355][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.048141][ T5816] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  201.107458][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  201.146524][ T5816] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  201.167052][ T5816] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  201.214025][ T5816] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  201.257683][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.326901][ T8000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.337394][ T5816] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  201.386249][ T5816] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  201.431347][ T5816] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  201.465932][ T5816] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  201.500101][ T5816] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  201.540203][ T5816] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  201.583790][ T5816] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  201.632511][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'.
[  201.643781][ T5816] usb 4-1: USB disconnect, device number 5
[  201.676130][ T5816] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  201.728310][ T5816] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  201.770054][ T5816] keyspan 4-1:1.0: device disconnected
[  202.250378][ T8076] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  202.267765][ T8076] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  202.514290][ T8076] nvme nvme0: failed to connect socket: -111
[  202.555741][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'.
[  202.737813][ T8085] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  202.756731][ T8085] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  202.795903][ T8085] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  202.990218][ T8085] nvme nvme0: failed to connect socket: -111
[  203.394240][ T8108] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  203.416898][ T8108] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  203.511158][ T8108] nvme nvme0: failed to connect socket: -111
[  203.919219][ T8119] FAULT_INJECTION: forcing a failure.
[  203.919219][ T8119] name failslab, interval 1, probability 0, space 0, times 0
[  203.992737][ T8122] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  204.013192][ T8119] CPU: 0 PID: 8119 Comm: syz.0.540 Not tainted syzkaller #0
[  204.020567][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.028293][ T8122] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  204.030656][ T8119] Call Trace:
[  204.030700][ T8119]  <TASK>
[  204.030710][ T8119]  dump_stack_lvl+0x18c/0x250
[  204.030746][ T8119]  ? show_regs_print_info+0x20/0x20
[  204.030775][ T8119]  ? load_image+0x420/0x420
[  204.030801][ T8119]  ? __might_sleep+0xe0/0xe0
[  204.030831][ T8119]  ? __lock_acquire+0x7d80/0x7d80
[  204.030866][ T8119]  should_fail_ex+0x394/0x4c0
[  204.030901][ T8119]  should_failslab+0x9/0x20
[  204.030935][ T8119]  slab_pre_alloc_hook+0x59/0x300
[  204.030970][ T8119]  ? shmem_init_fs_context+0x54/0x230
[  204.030999][ T8119]  __kmem_cache_alloc_node+0x53/0x250
[  204.031035][ T8119]  ? shmem_init_fs_context+0x54/0x230
[  204.031062][ T8119]  kmalloc_trace+0x2a/0xe0
[  204.031095][ T8119]  shmem_init_fs_context+0x54/0x230
[  204.031118][ T8119]  ? shmem_error_remove_page+0x10/0x10
[  204.031146][ T8119]  alloc_fs_context+0x618/0x7a0
[  204.031184][ T8119]  reconfigure_single+0x49/0xa0
[  204.031212][ T8119]  public_dev_mount+0x70/0xe0
[  204.062536][ T8122] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  204.065536][ T8119]  legacy_get_tree+0xea/0x180
[  204.144358][ T8119]  ? devtmpfs_delete_node+0x230/0x230
[  204.149780][ T8119]  vfs_get_tree+0x8c/0x280
[  204.154239][ T8119]  do_new_mount+0x24a/0xa40
[  204.158779][ T8119]  __se_sys_mount+0x2e7/0x3d0
[  204.163615][ T8119]  ? __x64_sys_mount+0xc0/0xc0
[  204.168417][ T8119]  ? lockdep_hardirqs_on+0x98/0x150
[  204.173656][ T8119]  ? __x64_sys_mount+0x20/0xc0
[  204.178452][ T8119]  do_syscall_64+0x55/0xb0
[  204.182903][ T8119]  ? clear_bhb_loop+0x40/0x90
[  204.187618][ T8119]  ? clear_bhb_loop+0x40/0x90
[  204.192329][ T8119]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.198257][ T8119] RIP: 0033:0x7f2a2039e159
[  204.202702][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.222343][ T8119] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  204.230799][ T8119] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  204.238801][ T8119] RDX: 0000200000001600 RSI: 0000200000001500 RDI: 0000000000000000
[  204.246804][ T8119] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  204.254808][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.262812][ T8119] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  204.270853][ T8119]  </TASK>
[  205.039261][ T8122] nvme nvme0: failed to connect socket: -512
[  205.263397][ T8128] loop3: detected capacity change from 0 to 128
[  205.291193][ T8128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.352050][ T8128] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.693296][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.764009][ T8140] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) !
[  205.813677][ T8140] syzkaller0: entered promiscuous mode
[  205.825877][ T8140] syzkaller0: entered allmulticast mode
[  205.912055][ T8149] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  205.923553][ T8149] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  205.943893][ T8149] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  206.085534][ T1060] nvmet: connect request for invalid subsystem t!
[  206.092727][ T8149] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  206.158080][ T8149] nvme nvme0: failed to connect queue: 0 ret=16770
[  206.216599][ T8157] binder: 8156:8157 ioctl c0306201 0 returned -14
[  206.283419][ T8160] binder: 8156:8160 ioctl c0306201 0 returned -14
[  206.331221][ T8162] loop1: detected capacity change from 0 to 128
[  206.373907][ T8162] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.402057][ T8164] binder: 8156:8164 ioctl 40189206 0 returned -22
[  206.455381][ T8162] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.559182][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.015555][ T8168] loop3: detected capacity change from 0 to 32768
[  207.087171][ T8168] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.116763][ T8168] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  207.136244][ T8168] BTRFS info (device loop3): setting nodatasum
[  207.158348][ T8168] BTRFS info (device loop3): force zlib compression, level 3
[  207.165816][ T8168] BTRFS info (device loop3): turning on flush-on-commit
[  207.218696][ T8168] BTRFS info (device loop3): max_inline at 4096
[  207.257735][ T8168] BTRFS info (device loop3): using free space tree
[  207.471750][ T8168] BTRFS info (device loop3): enabling ssd optimizations
[  207.656416][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.737819][ T5763] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  207.764650][ T8199] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  207.798724][ T8199] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  207.820776][ T8199] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  207.856777][ T7467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (7467)
[  207.958855][ T5763] usb 5-1: Using ep0 maxpacket: 8
[  207.966202][ T5763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.004647][ T5763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  208.036572][ T8199] nvme nvme0: failed to connect socket: -111
[  208.056611][ T5763] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  208.081166][ T5763] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  208.125762][ T5763] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  208.141703][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.196649][ T5763] hub 5-1:1.0: bad descriptor, ignoring hub
[  208.223706][ T5763] hub: probe of 5-1:1.0 failed with error -5
[  208.245299][ T5763] cdc_wdm 5-1:1.0: skipping garbage
[  208.251063][ T5763] cdc_wdm 5-1:1.0: skipping garbage
[  208.262604][ T5763] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  208.268923][ T5763] cdc_wdm 5-1:1.0: Unknown control protocol
[  209.165820][ T8208] loop3: detected capacity change from 0 to 32768
[  209.225841][ T8208] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  209.282084][ T8213] loop0: detected capacity change from 0 to 32768
[  209.293642][ T8213] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  209.313772][ T8228] IPv6: Can't replace route, no match found
[  209.451197][ T8208] XFS (loop3): Ending clean mount
[  209.469216][ T8208] XFS (loop3): Quotacheck needed: Please wait.
[  209.576942][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.590346][ T5911] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  209.607411][ T8208] XFS (loop3): Quotacheck: Done.
[  209.666898][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.722731][ T8208] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  209.941732][ T8237] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  209.982303][ T8237] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  210.013785][ T8237] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  210.052783][ T8237] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  210.069877][ T5773] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  210.183743][ T1060] nvmet: connect request for invalid subsystem t!
[  210.193728][ T8237] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  210.218219][ T8237] nvme nvme0: failed to connect queue: 0 ret=16770
[  210.519860][ T5826] usb 5-1: USB disconnect, device number 5
[  210.798993][ T8245] loop3: detected capacity change from 0 to 128
[  210.873412][ T8245] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.979760][ T8245] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.233128][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.431468][ T8257] tipc: Started in network mode
[  211.436816][ T8257] tipc: Node identity d60e076d86be, cluster identity 4711
[  211.453136][ T8257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.518475][ T8257] tipc: Disabling bearer <eth:syzkaller0>
[  211.845443][ T8255] loop0: detected capacity change from 0 to 32768
[  211.889666][ T8255] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  211.978818][ T8265] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  211.989009][ T8265] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  212.030722][ T8265] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  212.041315][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  212.083713][ T7467] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  212.155050][ T8265] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  212.376840][ T8265] nvme nvme0: failed to connect socket: -111
[  212.550143][ T8277] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  212.567792][ T5816] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  212.579781][ T8277] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  212.612450][ T8277] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  212.638925][ T8277] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  212.777980][ T8277] nvme nvme0: failed to connect socket: -111
[  212.791951][ T5816] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  212.828512][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.858410][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  212.914865][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  212.951190][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.254464][ T5816] usb 1-1: usb_control_msg returned -32
[  213.281311][ T5816] usbtmc 1-1:16.0: can't read capabilities
[  213.634206][ T8298] loop4: detected capacity change from 0 to 128
[  213.644119][   T56] usb 1-1: USB disconnect, device number 4
[  213.655060][ T8271] usbtmc 1-1:16.0: usb_control_msg returned -71
[  213.698883][ T8298] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.778129][ T8298] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.106956][ T5982] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.747287][ T8309] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  214.783311][ T8309] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  214.808691][ T8309] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  214.845930][ T8309] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  215.152953][ T1060] nvmet: connect request for invalid subsystem t!
[  215.160522][ T8309] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  215.198245][ T8309] nvme nvme0: failed to connect queue: 0 ret=16770
[  215.547824][   T56] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  216.230705][   T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.247719][   T56] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  216.267344][   T56] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  216.289787][   T56] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  216.311323][   T56] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  216.333327][   T56] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  216.352707][   T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.374766][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  216.470086][   T56] usb 4-1: can't set config #1, error -71
[  216.511497][   T56] usb 4-1: USB disconnect, device number 6
[  216.842736][ T8332] syz.0.608: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  216.920321][ T8332] CPU: 1 PID: 8332 Comm: syz.0.608 Not tainted syzkaller #0
[  216.927698][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.937809][ T8332] Call Trace:
[  216.941149][ T8332]  <TASK>
[  216.944126][ T8332]  dump_stack_lvl+0x18c/0x250
[  216.948877][ T8332]  ? show_regs_print_info+0x20/0x20
[  216.954146][ T8332]  ? load_image+0x420/0x420
[  216.958711][ T8332]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  216.965190][ T8332]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  216.971772][ T8332]  warn_alloc+0x246/0x340
[  216.976217][ T8332]  ? _end+0x67dda14a/0x0
[  216.980522][ T8332]  ? zone_watermark_ok_safe+0x230/0x230
[  216.986141][ T8332]  ? _end+0x67dda14a/0x0
[  216.990452][ T8332]  __vmalloc_node_range+0x129/0x1320
[  216.995797][ T8332]  ? __mutex_trylock_common+0x160/0x270
[  217.001403][ T8332]  ? trace_raw_output_contention_end+0xd0/0xd0
[  217.007623][ T8332]  ? rcu_is_watching+0x15/0xb0
[  217.012449][ T8332]  ? trace_contention_end+0x39/0xe0
[  217.017689][ T8332]  ? __mutex_lock+0x30d/0xc80
[  217.022437][ T8332]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  217.028143][ T8332]  ? free_vm_area+0x50/0x50
[  217.032707][ T8332]  ? dvb_demux_do_ioctl+0x317/0x530
[  217.037953][ T8332]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  217.043469][ T8332]  ? mutex_lock_nested+0x20/0x20
[  217.048445][ T8332]  ? _end+0x67dda14a/0x0
[  217.052713][ T8332]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  217.058585][ T8332]  vmalloc+0x79/0x90
[  217.062518][ T8332]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  217.068363][ T8332]  ? _end+0x67dda14a/0x0
[  217.072638][ T8332]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  217.078318][ T8332]  dvb_demux_do_ioctl+0x454/0x530
[  217.083390][ T8332]  ? _end+0x67dda14a/0x0
[  217.087687][ T8332]  ? _end+0x67dda14a/0x0
[  217.091988][ T8332]  dvb_usercopy+0x195/0x2b0
[  217.096544][ T8332]  ? _end+0x67dda14a/0x0
[  217.100838][ T8332]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  217.106430][ T8332]  ? dvb_generic_ioctl+0xb0/0xb0
[  217.111426][ T8332]  ? _end+0x67dda14a/0x0
[  217.115714][ T8332]  ? _end+0x67dda14a/0x0
[  217.120016][ T8332]  ? dvb_demux_poll+0x210/0x210
[  217.124918][ T8332]  ? _end+0x67dda14a/0x0
[  217.129210][ T8332]  dvb_demux_ioctl+0x29/0x30
[  217.133855][ T8332]  __se_sys_ioctl+0xfd/0x170
[  217.138514][ T8332]  do_syscall_64+0x55/0xb0
[  217.142992][ T8332]  ? clear_bhb_loop+0x40/0x90
[  217.147729][ T8332]  ? clear_bhb_loop+0x40/0x90
[  217.152464][ T8332]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.158408][ T8332] RIP: 0033:0x7f2a2039e159
[  217.162866][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.182612][ T8332] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.191072][ T8332] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  217.199084][ T8332] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000009
[  217.207096][ T8332] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  217.215104][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.223125][ T8332] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  217.231174][ T8332]  ? _end+0x67dda14a/0x0
[  217.235468][ T8332]  </TASK>
[  217.253940][ T8332] Mem-Info:
[  217.257197][ T8332] active_anon:6158 inactive_anon:0 isolated_anon:0
[  217.257197][ T8332]  active_file:1245 inactive_file:40010 isolated_file:0
[  217.257197][ T8332]  unevictable:768 dirty:127 writeback:2
[  217.257197][ T8332]  slab_reclaimable:10513 slab_unreclaimable:93586
[  217.257197][ T8332]  mapped:24718 shmem:1391 pagetables:657
[  217.257197][ T8332]  sec_pagetables:0 bounce:0
[  217.257197][ T8332]  kernel_misc_reclaimable:0
[  217.257197][ T8332]  free:1354088 free_pcp:12594 free_cma:0
[  217.302467][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.342775][ T8332] Node 0 active_anon:24632kB inactive_anon:0kB active_file:4980kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98872kB dirty:308kB writeback:108kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10952kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no
[  217.376808][ T8332] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  217.407468][ T8332] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.436844][ T8332] lowmem_reserve[]: 0 2521 2522 2522 2522
[  217.450223][ T8332] Node 0 DMA32 free:1514340kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24592kB inactive_anon:0kB active_file:4980kB inactive_file:159016kB unevictable:1536kB writepending:316kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:25348kB local_pcp:11260kB free_cma:0kB
[  217.517820][ T8332] lowmem_reserve[]: 0 0 0 0 0
[  217.533941][ T8332] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.577163][ T8332] lowmem_reserve[]: 0 0 0 0 0
[  217.582618][ T8332] Node 1 Normal free:3886644kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24904kB local_pcp:12896kB free_cma:0kB
[  217.612285][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.642565][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  217.651402][ T8332] lowmem_reserve[]: 0 0 0 0 0
[  217.666320][ T8339] bridge_slave_0: left allmulticast mode
[  217.675957][ T8332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  217.678449][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  217.703351][ T8339] bridge_slave_0: left promiscuous mode
[  217.721388][ T8332] Node 0 DMA32: 216*4kB (M) 629*8kB (UME) 102*16kB (UME) 522*32kB (UME) 164*64kB (UME) 102*128kB (UME) 89*256kB (UME) 49*512kB (UME) 15*1024kB (UME) 3*2048kB (M) 341*4096kB (UM) = 1513896kB
[  217.740374][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.747455][ T8346] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  217.762365][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.789748][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  217.793359][ T8332] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  217.829296][ T8339] bridge_slave_1: left allmulticast mode
[  217.835029][ T8339] bridge_slave_1: left promiscuous mode
[  217.846465][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.865384][ T8332] Node 1 Normal: 249*4kB (UME) 52*8kB (UME) 47*16kB (UME) 58*32kB (UME) 24*64kB (UE) 3*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3886644kB
[  217.916397][ T8339] bond0: (slave bond_slave_0): Releasing backup interface
[  217.925803][ T8332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  217.940276][ T8332] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[  217.952851][ T8332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  217.980125][ T8332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.992622][ T8339] bond0: (slave bond_slave_1): Releasing backup interface
[  218.001205][ T8332] 42639 total pagecache pages
[  218.006065][ T8332] 0 pages in swap cache
[  218.011432][ T8332] Free swap  = 124648kB
[  218.015655][ T8332] Total swap = 124996kB
[  218.020412][ T8332] 2097051 pages RAM
[  218.024324][ T8332] 0 pages HighMem/MovableOnly
[  218.030380][ T8344] nvme nvme0: failed to connect socket: -111
[  218.035748][ T8332] 416960 pages reserved
[  218.041334][ T8332] 0 pages cma reserved
[  218.086044][ T8339] team0: Port device team_slave_0 removed
[  218.105145][ T8349] jffs2: notice: (8349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  218.149206][ T8339] team0: Port device team_slave_1 removed
[  218.168935][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.176432][ T8339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.215452][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.235345][ T8339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.872804][ T8354] loop3: detected capacity change from 0 to 32768
[  219.949281][ T8354] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.007702][ T8354] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  220.035109][ T8354] BTRFS info (device loop3): setting nodatasum
[  220.041798][ T8354] BTRFS info (device loop3): force zlib compression, level 3
[  220.063706][ T8354] BTRFS info (device loop3): turning on flush-on-commit
[  220.084203][ T8354] BTRFS info (device loop3): max_inline at 4096
[  220.101559][ T8354] BTRFS info (device loop3): using free space tree
[  220.140019][   T28] audit: type=1800 audit(1789065870.364:24): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.620" name="/" dev="fuse" ino=1 res=0 errno=0
[  220.166847][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  220.194822][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  220.222188][ T8373] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  220.366483][ T8354] BTRFS info (device loop3): enabling ssd optimizations
[  220.419514][ T8373] nvme nvme0: failed to connect socket: -111
[  220.667523][ T8394] loop4: detected capacity change from 0 to 128
[  220.703753][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.727354][ T8394] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.760308][ T8394] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.781842][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  220.791836][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  220.802069][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  220.814824][ T8399] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  220.938762][ T8399] nvme nvme0: failed to connect socket: -111
[  220.960407][ T8394] FAULT_INJECTION: forcing a failure.
[  220.960407][ T8394] name fail_futex, interval 1, probability 0, space 0, times 0
[  220.980670][ T8394] CPU: 0 PID: 8394 Comm: syz.4.624 Not tainted syzkaller #0
[  220.988037][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  220.998145][ T8394] Call Trace:
[  221.001489][ T8394]  <TASK>
[  221.004460][ T8394]  dump_stack_lvl+0x18c/0x250
[  221.009192][ T8394]  ? show_regs_print_info+0x20/0x20
[  221.014449][ T8394]  ? load_image+0x420/0x420
[  221.019001][ T8394]  ? __lock_acquire+0x1336/0x7d80
[  221.024085][ T8394]  should_fail_ex+0x394/0x4c0
[  221.028822][ T8394]  get_futex_key+0x16f/0x1030
[  221.033555][ T8394]  ? futex_setup_timer+0xc0/0xc0
[  221.038549][ T8394]  futex_wake+0x127/0x4f0
[  221.042939][ T8394]  ? futex_wake_mark+0x150/0x150
[  221.047949][ T8394]  do_futex+0x35d/0x3e0
[  221.052157][ T8394]  ? __might_fault+0xaa/0x120
[  221.056890][ T8394]  ? __ia32_sys_get_robust_list+0x110/0x110
[  221.062846][ T8394]  ? __might_fault+0xc6/0x120
[  221.067583][ T8394]  mm_release+0x184/0x3a0
[  221.071966][ T8394]  ? exit_mm_release+0x30/0x30
[  221.076777][ T8394]  ? lockdep_hardirqs_on+0x98/0x150
[  221.082040][ T8394]  exit_mm+0xa4/0x340
[  221.086087][ T8394]  ? sysctl_delayacct+0x220/0x220
[  221.091164][ T8394]  ? do_exit+0x2530/0x2530
[  221.095656][ T8394]  do_exit+0x909/0x2530
[  221.099879][ T8394]  ? put_task_struct+0xc0/0xc0
[  221.104709][ T8394]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  221.110736][ T8394]  ? get_signal+0x100e/0x1390
[  221.115462][ T8394]  ? lock_chain_count+0x20/0x20
[  221.120460][ T8394]  ? _raw_spin_lock_irq+0xbb/0xf0
[  221.125532][ T8394]  do_group_exit+0x22d/0x2f0
[  221.130180][ T8394]  ? lockdep_hardirqs_on+0x98/0x150
[  221.135445][ T8394]  get_signal+0x12a6/0x1390
[  221.140025][ T8394]  arch_do_signal_or_restart+0xc2/0x7b0
[  221.145638][ T8394]  ? __ia32_sys_get_robust_list+0x110/0x110
[  221.151578][ T8394]  ? get_sigframe_size+0x20/0x20
[  221.156591][ T8394]  ? exit_to_user_mode_loop+0x3b/0x110
[  221.162119][ T8394]  exit_to_user_mode_loop+0x70/0x110
[  221.167459][ T8394]  exit_to_user_mode_prepare+0xee/0x180
[  221.173063][ T8394]  syscall_exit_to_user_mode+0x1a/0x50
[  221.178579][ T8394]  do_syscall_64+0x61/0xb0
[  221.183046][ T8394]  ? clear_bhb_loop+0x40/0x90
[  221.187776][ T8394]  ? clear_bhb_loop+0x40/0x90
[  221.192505][ T8394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.197821][ T5763] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  221.198433][ T8394] RIP: 0033:0x7fc2af99e159
[  221.210369][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.230024][ T8394] RSP: 002b:00007fc2b089a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  221.238491][ T8394] RAX: fffffffffffffe00 RBX: 00007fc2afc25fa8 RCX: 00007fc2af99e159
[  221.246511][ T8394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc2afc25fa8
[  221.254534][ T8394] RBP: 00007fc2afc25fa0 R08: 0000000000000000 R09: 0000000000000000
[  221.262553][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.270575][ T8394] R13: 00007fc2afc26038 R14: 00007ffe8e469750 R15: 00007ffe8e469838
[  221.278608][ T8394]  </TASK>
[  221.281752][    C0] vkms_vblank_simulate: vblank timer overrun
[  221.426593][ T5982] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.681971][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.693787][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  221.714733][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  221.724727][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  221.734483][ T5763] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  221.884483][ T5763] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  222.113561][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.511349][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  223.424430][ T5763] usb 2-1: can't set config #1, error -71
[  223.484659][ T8416] netlink: 'syz.0.630': attribute type 281 has an invalid length.
[  223.542443][ T5763] usb 2-1: USB disconnect, device number 6
[  223.566729][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'.
[  223.783471][ T8424] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  223.814386][ T8424] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  223.830102][ T8424] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  223.890235][ T8428] loop4: detected capacity change from 0 to 128
[  223.914940][ T8431] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  223.925997][ T8431] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  223.942311][ T8431] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  223.954674][ T8428] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.977739][ T8428] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.998747][ T8431] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  224.076793][ T8424] nvme nvme0: failed to connect socket: -111
[  224.103758][ T5982] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.248162][ T8365] nvmet: connect request for invalid subsystem t!
[  224.267760][ T8431] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  224.278325][ T8431] nvme nvme0: failed to connect queue: 0 ret=16770
[  226.101761][ T8461] loop0: detected capacity change from 0 to 128
[  226.128835][ T8461] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  226.181712][ T8461] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  226.330197][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.495635][ T8454] loop4: detected capacity change from 0 to 32768
[  226.517921][ T8454] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.644 (8454)
[  226.551870][ T8454] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  226.569998][ T8454] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  226.580053][ T8454] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  226.592187][ T8454] BTRFS info (device loop4): use zstd compression, level 3
[  226.606276][ T8454] BTRFS info (device loop4): using free space tree
[  226.677830][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  226.714322][ T8454] BTRFS info (device loop4): enabling ssd optimizations
[  226.725897][ T8454] BTRFS info (device loop4): auto enabling async discard
[  226.755755][ T8485] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  226.766543][   T28] audit: type=1800 audit(1789065876.974:25): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.644" name="file1" dev="loop4" ino=260 res=0 errno=0
[  226.812900][ T8485] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  226.838715][ T8485] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  226.848788][ T8485] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  226.874307][ T5982] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  226.952092][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.970992][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  227.001372][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  227.005105][ T8485] nvme nvme0: failed to connect socket: -111
[  227.039619][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  227.074306][ T5816] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  227.104922][ T5816] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  227.119952][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.176337][ T8450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  227.196977][ T5816] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  227.217397][ T5816] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  227.234076][ T5816] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  227.290542][ T5816] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  227.301188][ T8490] syz.0.651: attempt to access beyond end of device
[  227.301188][ T8490] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  227.330114][ T5816] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  227.371797][ T5816] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  227.439893][ T5816] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  227.665723][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  227.725175][ T5840] usb 2-1: USB disconnect, device number 7
[  227.735545][ T5840] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  227.766342][ T5840] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  227.788601][ T5840] keyspan 2-1:1.0: device disconnected
[  228.185358][ T8510] syz.0.661: attempt to access beyond end of device
[  228.185358][ T8510] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  228.727866][ T5816] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  229.200248][ T8365] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.211562][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 102438)
[  229.238128][ T8365] buffer_io_error: 2 callbacks suppressed
[  229.238147][ T8365] Buffer I/O error on device sda1, logical block 102400
[  229.256803][ T8365] device offline error, dev sda, sector 827638 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 2
[  229.267879][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103454)
[  229.282132][ T8365] Buffer I/O error on device sda1, logical block 103416
[  229.293430][ T8365] Buffer I/O error on device sda1, logical block 103417
[  229.305894][ T8365] Buffer I/O error on device sda1, logical block 103418
[  229.314644][ T8365] Buffer I/O error on device sda1, logical block 103419
[  229.328543][ T8365] Buffer I/O error on device sda1, logical block 103420
[  229.335854][ T8365] Buffer I/O error on device sda1, logical block 103421
[  229.348457][ T8365] Buffer I/O error on device sda1, logical block 103422
[  229.355557][ T8365] Buffer I/O error on device sda1, logical block 103423
[  229.363893][ T8365] device offline error, dev sda, sector 831654 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2
[  229.380492][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103956)
[  229.399055][ T8365] Buffer I/O error on device sda1, logical block 103918
[  229.409816][ T8365] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.429811][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246)
[  229.442216][ T8365] device offline error, dev sda, sector 762150 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  229.453216][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95268)
[  229.467137][ T8365] device offline error, dev sda, sector 766062 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.488686][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95757)
[  229.501141][ T8365] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.513732][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 96294)
[  229.529495][ T8365] device offline error, dev sda, sector 778494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.540560][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 97311)
[  229.556392][ T8365] device offline error, dev sda, sector 782430 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[  229.587799][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 97803)
[  229.600789][ T8365] device offline error, dev sda, sector 725302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  229.612041][ T8365] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2029 starting block 90662)
[  229.649099][ T5101] Aborting journal on device sda1-8.
[  229.657157][ T8524] Buffer I/O error on dev sda1, logical block 272, lost async page write
[  229.667929][ T1060] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  229.677420][ T5101] JBD2: I/O error when updating journal superblock for sda1-8.
[  229.707071][ T5761] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal
[  229.797950][ T1060] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  229.806892][ T5816] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  229.817847][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  229.828547][ T5761] EXT4-fs (sda1): I/O error while writing superblock
[  229.838070][ T5816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.853949][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  229.863138][ T5761] EXT4-fs (sda1): Remounting filesystem read-only
[  229.863772][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.107175][ T5816] usb 2-1: usb_control_msg returned -32
[  230.127976][ T5816] usbtmc 2-1:16.0: can't read capabilities
[  230.155376][ T8524] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  230.283105][ T8536] syz.3.671: attempt to access beyond end of device
[  230.283105][ T8536] loop3: rw=0, sector=16, nr_sectors = 2 limit=0
[  231.303639][ T8525] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000
[  231.330674][ T8525] pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]
[  231.351146][ T8525] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f]
[  231.504733][ T8525] virtio-pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]: not claimed; can't enable device
[  231.524454][ T8525] virtio-pci: probe of 0000:00:03.0 failed with error -22
[  231.651900][ T8555] FAULT_INJECTION: forcing a failure.
[  231.651900][ T8555] name fail_futex, interval 1, probability 0, space 0, times 0
[  231.685819][ T8555] CPU: 0 PID: 8555 Comm: syz.4.680 Not tainted syzkaller #0
[  231.693205][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  231.702131][ T8545] block nbd3: shutting down sockets
[  231.703286][ T8555] Call Trace:
[  231.703297][ T8555]  <TASK>
[  231.703308][ T8555]  dump_stack_lvl+0x18c/0x250
[  231.719538][ T8555]  ? show_regs_print_info+0x20/0x20
[  231.724804][ T8555]  ? load_image+0x420/0x420
[  231.729398][ T8555]  ? stack_trace_save+0xaa/0x100
[  231.734399][ T8555]  ? stack_trace_snprint+0xf0/0xf0
[  231.739577][ T8555]  should_fail_ex+0x394/0x4c0
[  231.744318][ T8555]  get_futex_key+0x136/0x1030
[  231.749047][ T8555]  ? kasan_set_track+0x4e/0x70
[  231.753863][ T8555]  ? kasan_save_free_info+0x28/0x40
[  231.759141][ T8555]  ? ____kasan_slab_free+0x126/0x1f0
[  231.764511][ T8555]  ? __kmem_cache_free+0xba/0x1f0
[  231.769616][ T8555]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.775758][ T8555]  ? futex_setup_timer+0xc0/0xc0
[  231.781036][ T8555]  futex_wake+0x127/0x4f0
[  231.785445][ T8555]  ? futex_wake_mark+0x150/0x150
[  231.790461][ T8555]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  231.796530][ T8555]  ? lock_chain_count+0x20/0x20
[  231.801465][ T8555]  do_futex+0x35d/0x3e0
[  231.805696][ T8555]  ? __ia32_sys_get_robust_list+0x110/0x110
[  231.811654][ T8555]  ? slab_free_freelist_hook+0x130/0x1a0
[  231.817374][ T8555]  __se_sys_futex+0x3a9/0x440
[  231.822135][ T8555]  ? __x64_sys_futex+0xf0/0xf0
[  231.826987][ T8555]  ? __x64_sys_futex+0x21/0xf0
[  231.831835][ T8555]  do_syscall_64+0x55/0xb0
[  231.836322][ T8555]  ? clear_bhb_loop+0x40/0x90
[  231.841075][ T8555]  ? clear_bhb_loop+0x40/0x90
[  231.845832][ T8555]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.851891][ T8555] RIP: 0033:0x7fc2af99e159
[  231.856369][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.876050][ T8555] RSP: 002b:00007fc2b089a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  231.884545][ T8555] RAX: ffffffffffffffda RBX: 00007fc2afc25fa8 RCX: 00007fc2af99e159
[  231.892589][ T8555] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc2afc25fac
[  231.900714][ T8555] RBP: 00007fc2afc25fa0 R08: 0000000000745d1e R09: 0000000000000000
[  231.908749][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.916794][ T8555] R13: 00007fc2afc26038 R14: 00007ffe8e469750 R15: 00007ffe8e469838
[  231.924863][ T8555]  </TASK>
[  231.928078][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.100371][ T8561] syz.3.682: attempt to access beyond end of device
[  232.100371][ T8561] loop3: rw=0, sector=16, nr_sectors = 2 limit=0
[  232.544006][ T8575] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  232.555048][ T8575] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  232.565657][ T8575] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  232.601107][ T8575] nvme nvme0: failed to connect socket: -111
[  232.893531][ T8584] FAULT_INJECTION: forcing a failure.
[  232.893531][ T8584] name failslab, interval 1, probability 0, space 0, times 0
[  232.932368][ T8584] CPU: 0 PID: 8584 Comm: syz.4.691 Not tainted syzkaller #0
[  232.939766][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  232.949899][ T8584] Call Trace:
[  232.953322][ T8584]  <TASK>
[  232.956322][ T8584]  dump_stack_lvl+0x18c/0x250
[  232.961072][ T8584]  ? show_regs_print_info+0x20/0x20
[  232.966337][ T8584]  ? load_image+0x420/0x420
[  232.970994][ T8584]  ? __lock_acquire+0x7d80/0x7d80
[  232.976116][ T8584]  should_fail_ex+0x394/0x4c0
[  232.980901][ T8584]  should_failslab+0x9/0x20
[  232.985463][ T8584]  slab_pre_alloc_hook+0x59/0x300
[  232.990543][ T8584]  ? lookup_mnt+0x580/0x580
[  232.995105][ T8584]  ? get_mountpoint+0x205/0x440
[  233.000011][ T8584]  __kmem_cache_alloc_node+0x53/0x250
[  233.005454][ T8584]  ? get_mountpoint+0x205/0x440
[  233.010361][ T8584]  kmalloc_trace+0x2a/0xe0
[  233.014837][ T8584]  get_mountpoint+0x205/0x440
[  233.019573][ T8584]  do_lock_mount+0x441/0x530
[  233.024258][ T8584]  ? mnt_warn_timestamp_expiry+0x2c0/0x2c0
[  233.030128][ T8584]  ? do_raw_spin_unlock+0x121/0x230
[  233.035393][ T8584]  ? ktime_get_real_seconds+0x9/0x20
[  233.040747][ T8584]  ? mnt_warn_timestamp_expiry+0x12f/0x2c0
[  233.046620][ T8584]  do_new_mount+0x385/0xa40
[  233.051192][ T8584]  __se_sys_mount+0x2e7/0x3d0
[  233.055937][ T8584]  ? __x64_sys_mount+0xc0/0xc0
[  233.060771][ T8584]  ? lockdep_hardirqs_on+0x98/0x150
[  233.066043][ T8584]  ? __x64_sys_mount+0x20/0xc0
[  233.070868][ T8584]  do_syscall_64+0x55/0xb0
[  233.075350][ T8584]  ? clear_bhb_loop+0x40/0x90
[  233.080092][ T8584]  ? clear_bhb_loop+0x40/0x90
[  233.084851][ T8584]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.090802][ T8584] RIP: 0033:0x7fc2af99e159
[  233.095266][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.114935][ T8584] RSP: 002b:00007fc2b089a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  233.123416][ T8584] RAX: ffffffffffffffda RBX: 00007fc2afc25fa0 RCX: 00007fc2af99e159
[  233.131446][ T8584] RDX: 0000200000001600 RSI: 0000200000001500 RDI: 0000000000000000
[  233.139478][ T8584] RBP: 00007fc2afa3503b R08: 0000000000000000 R09: 0000000000000000
[  233.147511][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.155541][ T8584] R13: 00007fc2afc26038 R14: 00007fc2afc25fa0 R15: 00007ffe8e469838
[  233.163593][ T8584]  </TASK>
[  233.166772][    C0] vkms_vblank_simulate: vblank timer overrun
[  233.183582][ T8586] syz.0.693: attempt to access beyond end of device
[  233.183582][ T8586] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  233.612165][ T8601] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  233.642704][ T8601] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  233.655068][ T8601] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  233.679888][ T8601] nvme nvme0: failed to connect socket: -111
[  234.139969][ T8613] syz.4.705: attempt to access beyond end of device
[  234.139969][ T8613] loop4: rw=0, sector=16, nr_sectors = 2 limit=0
[  234.801740][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'.
[  234.914978][ T8622] serio: Serial port ptm0
[  234.969687][ T8625] netlink: 48 bytes leftover after parsing attributes in process `syz.3.709'.
[  235.399628][ T8521] usbtmc 2-1:16.0: usb_control_msg returned -110
[  235.485492][   T23] usb 2-1: USB disconnect, device number 8
[  235.833035][ T8638] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  235.866963][ T8638] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  235.895794][ T8638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  235.954221][ T1060] nvmet: connect request for invalid subsystem t!
[  235.967390][ T8638] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  236.004018][ T8638] nvme nvme0: failed to connect queue: 0 ret=16770
[  237.552392][   T28] audit: type=1326 audit(1789065887.774:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.4.721" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc2af997ed7 code=0x0
[  237.711561][ T8649] loop0: detected capacity change from 0 to 32768
[  237.748603][ T8649] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.715 (8649)
[  237.797701][ T5763] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  237.812587][ T8649] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  237.837937][ T8649] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  237.857302][ T8649] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  237.878403][ T8649] BTRFS info (device loop0): use zstd compression, level 3
[  237.888214][ T8649] BTRFS info (device loop0): using free space tree
[  237.951388][ T8675] udevd[8675]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  237.994638][ T5763] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  238.019917][ T5763] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.048962][ T8649] BTRFS info (device loop0): enabling ssd optimizations
[  238.055998][ T8649] BTRFS info (device loop0): auto enabling async discard
[  238.093498][ T5763] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  238.147171][ T5763] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  238.173155][   T28] audit: type=1800 audit(1789065888.364:27): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.715" name="file1" dev="loop0" ino=260 res=0 errno=0
[  238.179174][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.305998][ T8685] udevd[8685]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  238.403668][ T5777] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  238.493197][ T5763] usb 4-1: usb_control_msg returned -32
[  238.519064][ T5763] usbtmc 4-1:16.0: can't read capabilities
[  238.857753][ T5763] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  238.979147][ T8696] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  239.000686][ T8696] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  239.050696][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.062804][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  239.115008][ T8696] nvme nvme0: failed to connect socket: -111
[  239.115574][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  239.139410][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  239.156636][ T5763] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  239.175843][ T5763] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  239.186008][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.244378][ T8661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  239.272546][ T5763] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  239.305747][ T5763] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  239.355095][ T5763] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  239.377161][ T5763] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  239.406992][ T5763] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  239.437829][ T5763] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  239.490721][ T5763] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  239.707795][ T5816] usb 2-1: USB disconnect, device number 9
[  239.779906][ T5816] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  239.885787][ T5816] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  239.936053][ T5816] keyspan 2-1:1.0: device disconnected
[  242.837698][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  243.737925][ T8664] usbtmc 4-1:16.0: usb_control_msg returned -110
[  243.959923][ T5840] usb 4-1: USB disconnect, device number 7
[  244.239791][ T8729] FAULT_INJECTION: forcing a failure.
[  244.239791][ T8729] name failslab, interval 1, probability 0, space 0, times 0
[  244.278326][ T8729] CPU: 0 PID: 8729 Comm: syz.0.734 Not tainted syzkaller #0
[  244.285723][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  244.295829][ T8729] Call Trace:
[  244.299153][ T8729]  <TASK>
[  244.302120][ T8729]  dump_stack_lvl+0x18c/0x250
[  244.306862][ T8729]  ? show_regs_print_info+0x20/0x20
[  244.312119][ T8729]  ? load_image+0x420/0x420
[  244.316677][ T8729]  ? __lock_acquire+0x7d80/0x7d80
[  244.321778][ T8729]  should_fail_ex+0x394/0x4c0
[  244.326525][ T8729]  should_failslab+0x9/0x20
[  244.331091][ T8729]  slab_pre_alloc_hook+0x59/0x300
[  244.336180][ T8729]  ? lookup_mnt+0x580/0x580
[  244.340741][ T8729]  ? get_mountpoint+0x205/0x440
[  244.345657][ T8729]  __kmem_cache_alloc_node+0x53/0x250
[  244.351109][ T8729]  ? get_mountpoint+0x205/0x440
[  244.356019][ T8729]  kmalloc_trace+0x2a/0xe0
[  244.360502][ T8729]  get_mountpoint+0x205/0x440
[  244.365239][ T8729]  do_lock_mount+0x441/0x530
[  244.369892][ T8729]  ? mnt_warn_timestamp_expiry+0x2c0/0x2c0
[  244.375756][ T8729]  ? do_raw_spin_unlock+0x121/0x230
[  244.381021][ T8729]  ? ktime_get_real_seconds+0x9/0x20
[  244.386374][ T8729]  ? mnt_warn_timestamp_expiry+0x12f/0x2c0
[  244.392243][ T8729]  do_new_mount+0x385/0xa40
[  244.396799][ T8729]  __se_sys_mount+0x2e7/0x3d0
[  244.401526][ T8729]  ? __x64_sys_mount+0xc0/0xc0
[  244.406335][ T8729]  ? lockdep_hardirqs_on+0x98/0x150
[  244.411569][ T8729]  ? __x64_sys_mount+0x20/0xc0
[  244.416372][ T8729]  do_syscall_64+0x55/0xb0
[  244.420819][ T8729]  ? clear_bhb_loop+0x40/0x90
[  244.425555][ T8729]  ? clear_bhb_loop+0x40/0x90
[  244.430271][ T8729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.436227][ T8729] RIP: 0033:0x7f2a2039e159
[  244.440670][ T8729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.460312][ T8729] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  244.468759][ T8729] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  244.476758][ T8729] RDX: 0000200000001600 RSI: 0000200000001500 RDI: 0000000000000000
[  244.484841][ T8729] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  244.492850][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.500847][ T8729] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  244.508868][ T8729]  </TASK>
[  245.827828][ T5815] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  246.064284][ T5815] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  246.947829][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.959106][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.972576][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  246.982050][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.267774][ T5815] usb 5-1: usb_control_msg returned -32
[  247.307916][ T5815] usbtmc 5-1:16.0: can't read capabilities
[  247.365476][ T8764] FAULT_INJECTION: forcing a failure.
[  247.365476][ T8764] name fail_futex, interval 1, probability 0, space 0, times 0
[  247.384542][ T8764] CPU: 0 PID: 8764 Comm: syz.1.748 Not tainted syzkaller #0
[  247.391925][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.402029][ T8764] Call Trace:
[  247.405359][ T8764]  <TASK>
[  247.408326][ T8764]  dump_stack_lvl+0x18c/0x250
[  247.413038][ T8764]  ? show_regs_print_info+0x20/0x20
[  247.418263][ T8764]  ? load_image+0x420/0x420
[  247.422803][ T8764]  ? stack_trace_save+0xaa/0x100
[  247.427775][ T8764]  ? stack_trace_snprint+0xf0/0xf0
[  247.432920][ T8764]  should_fail_ex+0x394/0x4c0
[  247.437655][ T8764]  get_futex_key+0x136/0x1030
[  247.442376][ T8764]  ? kasan_set_track+0x4e/0x70
[  247.447179][ T8764]  ? kasan_save_free_info+0x28/0x40
[  247.452413][ T8764]  ? ____kasan_slab_free+0x126/0x1f0
[  247.457732][ T8764]  ? __kmem_cache_free+0xba/0x1f0
[  247.462825][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.468974][ T8764]  ? futex_setup_timer+0xc0/0xc0
[  247.473961][ T8764]  futex_wake+0x127/0x4f0
[  247.478342][ T8764]  ? futex_wake_mark+0x150/0x150
[  247.483320][ T8764]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  247.489344][ T8764]  ? lock_chain_count+0x20/0x20
[  247.494235][ T8764]  do_futex+0x35d/0x3e0
[  247.498430][ T8764]  ? __ia32_sys_get_robust_list+0x110/0x110
[  247.504358][ T8764]  ? slab_free_freelist_hook+0x130/0x1a0
[  247.510025][ T8764]  __se_sys_futex+0x3a9/0x440
[  247.514734][ T8764]  ? __x64_sys_futex+0xf0/0xf0
[  247.519799][ T8764]  ? __x64_sys_futex+0x21/0xf0
[  247.524595][ T8764]  do_syscall_64+0x55/0xb0
[  247.529044][ T8764]  ? clear_bhb_loop+0x40/0x90
[  247.533749][ T8764]  ? clear_bhb_loop+0x40/0x90
[  247.538458][ T8764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.544387][ T8764] RIP: 0033:0x7f70ad59e159
[  247.548832][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.568642][ T8764] RSP: 002b:00007f70ae45d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  247.577094][ T8764] RAX: ffffffffffffffda RBX: 00007f70ad825fa8 RCX: 00007f70ad59e159
[  247.585099][ T8764] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f70ad825fac
[  247.593103][ T8764] RBP: 00007f70ad825fa0 R08: 0000000000745d1e R09: 0000000000000000
[  247.601278][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.609282][ T8764] R13: 00007f70ad826038 R14: 00007ffc9adbd640 R15: 00007ffc9adbd728
[  247.617298][ T8764]  </TASK>
[  247.671912][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  247.968117][    T9] usb 4-1: Using ep0 maxpacket: 8
[  247.975566][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.000922][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  248.027643][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.070578][    T9] usb 4-1: config 0 descriptor??
[  248.304700][    T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  249.736439][ T5840] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  250.151221][ T5840] usb 1-1: Using ep0 maxpacket: 16
[  250.178942][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.195583][ T5840] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  250.221967][ T5840] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  250.239938][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.253326][ T5840] usb 1-1: Product: syz
[  250.264233][ T5840] usb 1-1: Manufacturer: syz
[  250.273281][ T5840] usb 1-1: SerialNumber: syz
[  251.138644][ T8785] mmap: syz.0.755 (8785) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  251.296316][ T5840] usb 1-1: 0:2 : does not exist
[  251.323244][ T5840] usb 1-1: 0:3 : does not exist
[  251.335840][ T5840] usb 1-1: 0:4 : does not exist
[  251.345889][ T5840] usb 1-1: 0:5 : does not exist
[  251.352336][ T5840] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch
[  251.486002][ T5840] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  251.527402][ T5840] usb 1-1: USB disconnect, device number 5
[  251.601857][ T7467] udevd[7467]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.759053][ T8747] usbtmc 5-1:16.0: usb_control_msg returned -110
[  253.350327][    T9] usb 5-1: USB disconnect, device number 6
[  253.727192][ T8825] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  253.775872][ T5826] usb 4-1: USB disconnect, device number 8
[  253.782376][ T8825] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  253.904971][ T1060] nvmet: connect request for invalid subsystem t!
[  253.918171][ T8825] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  253.938924][ T8825] nvme nvme0: failed to connect queue: 0 ret=16770
[  254.905222][ T8834] loop1: detected capacity change from 0 to 32768
[  254.908029][ T8833] Invalid ELF header type: 3 != 1
[  254.933908][ T8834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.770 (8834)
[  255.306911][ T8834] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  255.346390][ T8834] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  255.363696][ T8843] udevd[8843]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  255.382243][ T8834] BTRFS info (device loop1): setting nodatasum
[  255.388922][ T8834] BTRFS info (device loop1): force zlib compression, level 3
[  255.406700][ T8834] BTRFS info (device loop1): turning on flush-on-commit
[  255.427153][ T8834] BTRFS info (device loop1): max_inline at 4096
[  255.435983][ T8834] BTRFS info (device loop1): using free space tree
[  255.494255][ T8834] BTRFS info (device loop1): enabling ssd optimizations
[  256.046540][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.057672][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.512610][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.563893][ T8863] udevd[8863]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  256.797894][ T5826] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  257.162876][ T5826] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  257.422711][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  257.508862][ T8871] binder: 8870:8871 ioctl c0306201 0 returned -14
[  257.562298][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.575677][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  257.597588][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.868877][ T5826] usb 4-1: usb_control_msg returned -32
[  257.874583][ T5826] usbtmc 4-1:16.0: can't read capabilities
[  258.049562][ T8879] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  258.071895][ T8879] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  258.105352][ T5826] usb 4-1: USB disconnect, device number 9
[  258.123790][ T8879] nvme nvme0: failed to connect socket: -111
[  258.531259][ T8886] Invalid ELF header type: 3 != 1
[  259.352235][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'.
[  259.382869][ T8895] binder: 8894:8895 ioctl c0306201 0 returned -14
[  260.607752][ T8905] socket: no more sockets
[  260.627907][   T56] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  260.640677][ T8905] socket: no more sockets
[  260.666002][   T28] audit: type=1326 audit(1789065910.884:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.1.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f70ad597ed7 code=0x0
[  260.712658][ T8892] loop4: detected capacity change from 0 to 32768
[  260.738728][ T8892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.784 (8892)
[  260.780937][ T8892] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.793766][ T8892] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  260.802680][ T8892] BTRFS info (device loop4): setting nodatasum
[  260.816216][ T8892] BTRFS info (device loop4): force zlib compression, level 3
[  260.834653][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.845915][ T8892] BTRFS info (device loop4): turning on flush-on-commit
[  260.865772][ T8892] BTRFS info (device loop4): max_inline at 4096
[  260.872364][   T56] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  260.892382][ T8892] BTRFS info (device loop4): using free space tree
[  260.920335][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.959465][   T56] usb 1-1: config 0 descriptor??
[  261.016979][ T8925] udevd[8925]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  261.071461][ T8892] BTRFS info (device loop4): enabling ssd optimizations
[  261.187729][   T56] usbhid 1-1:0.0: can't add hid device: -71
[  261.194582][   T56] usbhid: probe of 1-1:0.0 failed with error -71
[  261.204410][   T56] usb 1-1: USB disconnect, device number 6
[  261.439091][ T5982] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  261.468859][ T8930] udevd[8930]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  262.042937][   T56] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  262.333191][ T8935] binder: 8934:8935 ioctl c0306201 0 returned -14
[  262.587899][   T56] usb 1-1: Using ep0 maxpacket: 32
[  262.599680][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.630080][   T56] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  262.670368][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.705942][   T56] usb 1-1: config 0 descriptor??
[  262.782826][   T56] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  262.815788][   T56] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  263.827691][ T8950] Invalid ELF header type: 3 != 1
[  265.325157][ T5840] usb 1-1: USB disconnect, device number 7
[  265.374188][ T5840] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  265.578942][ T8960] FAULT_INJECTION: forcing a failure.
[  265.578942][ T8960] name failslab, interval 1, probability 0, space 0, times 0
[  265.607044][ T8960] CPU: 1 PID: 8960 Comm: syz.0.801 Not tainted syzkaller #0
[  265.614391][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.624673][ T8960] Call Trace:
[  265.628007][ T8960]  <TASK>
[  265.630951][ T8960]  dump_stack_lvl+0x18c/0x250
[  265.635689][ T8960]  ? show_regs_print_info+0x20/0x20
[  265.640917][ T8960]  ? load_image+0x420/0x420
[  265.645439][ T8960]  ? __might_sleep+0xe0/0xe0
[  265.650045][ T8960]  ? __lock_acquire+0x7d80/0x7d80
[  265.655088][ T8960]  ? mtree_load+0x109/0x840
[  265.659613][ T8960]  should_fail_ex+0x394/0x4c0
[  265.664317][ T8960]  should_failslab+0x9/0x20
[  265.668847][ T8960]  slab_pre_alloc_hook+0x59/0x300
[  265.673893][ T8960]  ? can_vma_merge_before+0x6e/0x280
[  265.679207][ T8960]  kmem_cache_alloc+0x5a/0x2c0
[  265.684039][ T8960]  ? vm_area_dup+0x27/0x270
[  265.688565][ T8960]  vm_area_dup+0x27/0x270
[  265.692916][ T8960]  __split_vma+0x1a8/0xc20
[  265.697398][ T8960]  ? mmap_write_unlock+0x160/0x160
[  265.702552][ T8960]  ? split_vma+0x8f/0x110
[  265.706912][ T8960]  madvise_update_vma+0x44e/0xda0
[  265.711989][ T8960]  ? __ia32_sys_process_madvise+0xc0/0xc0
[  265.717737][ T8960]  ? down_write_killable+0x181/0x230
[  265.723068][ T8960]  do_madvise+0x145c/0x3790
[  265.727620][ T8960]  ? madvise_set_anon_name+0x440/0x440
[  265.733113][ T8960]  ? schedule+0xc7/0x170
[  265.737374][ T8960]  ? futex_wait_queue+0x27/0x1b0
[  265.742322][ T8960]  ? futex_wait_queue+0x138/0x1b0
[  265.747440][ T8960]  ? futex_unqueue+0xcb/0xf0
[  265.752062][ T8960]  ? futex_wait+0x4a7/0x5c0
[  265.756585][ T8960]  ? futex_setup_timer+0xc0/0xc0
[  265.761542][ T8960]  ? futex_wait_setup+0x270/0x270
[  265.766602][ T8960]  ? file_end_write+0x159/0x250
[  265.771476][ T8960]  ? vfs_write+0x5de/0x9a0
[  265.775916][ T8960]  ? do_futex+0x2ff/0x3e0
[  265.780277][ T8960]  ? __ia32_sys_get_robust_list+0x110/0x110
[  265.786197][ T8960]  ? lock_chain_count+0x20/0x20
[  265.791109][ T8960]  __x64_sys_madvise+0xa6/0xc0
[  265.795908][ T8960]  do_syscall_64+0x55/0xb0
[  265.800348][ T8960]  ? clear_bhb_loop+0x40/0x90
[  265.805065][ T8960]  ? clear_bhb_loop+0x40/0x90
[  265.809771][ T8960]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.815681][ T8960] RIP: 0033:0x7f2a2039e159
[  265.820136][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.839762][ T8960] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  265.848194][ T8960] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  265.856200][ T8960] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000
[  265.864197][ T8960] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  265.872205][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.880206][ T8960] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  265.888309][ T8960]  </TASK>
[  266.030742][   T28] audit: type=1326 audit(1789065916.254:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2af99e159 code=0x0
[  270.507748][ T8993] Invalid ELF header type: 3 != 1
[  271.928713][ T9000] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  272.200046][ T9000] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  272.304977][ T9000] nvme nvme0: failed to connect socket: -111
[  272.658223][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  272.727610][ T5816] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  272.887757][    T9] usb 4-1: Using ep0 maxpacket: 16
[  272.896106][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  272.940265][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  272.957971][ T5816] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  272.971477][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.981349][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.022575][    T9] usb 4-1: Product: syz
[  273.027067][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.058007][    T9] usb 4-1: Manufacturer: syz
[  273.067828][    T9] usb 4-1: SerialNumber: syz
[  273.093941][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  273.108542][    T9] usb 4-1: config 0 descriptor??
[  273.146498][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  273.166650][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.207369][    T9] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  273.829180][ T5816] usb 1-1: usb_control_msg returned -32
[  273.834869][ T5816] usbtmc 1-1:16.0: can't read capabilities
[  273.899696][    T9] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  273.913866][ T5826] usb 1-1: USB disconnect, device number 8
[  273.920000][ T5763] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  274.317794][ T9023] Invalid ELF header type: 3 != 1
[  274.419822][ T5763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.546518][ T5763] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  274.607666][ T5763] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  274.674254][ T5763] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  274.734104][ T5763] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  274.957780][ T5763] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  274.966908][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.054505][ T9016] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  275.081940][ T5763] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  275.146827][    T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  275.162630][ T5763] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  275.167767][    T9] em28xx 4-1:0.0: board has no eeprom
[  275.201816][ T5763] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  275.450576][ T5763] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  275.460343][ T5763] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  275.468299][ T5763] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  275.477700][    T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  275.482368][ T5763] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  275.501565][ T5763] usb 5-1: USB disconnect, device number 7
[  275.516317][    T9] em28xx 4-1:0.0: dvb set to bulk mode.
[  275.708317][ T5763] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  276.199509][ T5763] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  276.263697][ T5763] keyspan 5-1:1.0: device disconnected
[  276.334548][ T5816] em28xx 4-1:0.0: Binding DVB extension
[  276.348213][    T9] usb 4-1: USB disconnect, device number 10
[  276.356243][    T9] em28xx 4-1:0.0: Disconnecting em28xx
[  276.398930][ T5816] em28xx 4-1:0.0: Registering input extension
[  276.406454][    T9] em28xx 4-1:0.0: Closing input extension
[  276.483707][    T9] em28xx 4-1:0.0: Freeing device
[  277.570753][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  277.781668][    T9] usb 4-1: Using ep0 maxpacket: 8
[  277.796072][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.845156][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.888046][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  277.933740][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  277.975100][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.977166][ T9059] FAULT_INJECTION: forcing a failure.
[  277.977166][ T9059] name failslab, interval 1, probability 0, space 0, times 0
[  277.996612][ T9059] CPU: 1 PID: 9059 Comm: syz.0.831 Not tainted syzkaller #0
[  278.003985][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  278.009983][    T9] usb 4-1: config 0 descriptor??
[  278.014070][ T9059] Call Trace:
[  278.014082][ T9059]  <TASK>
[  278.025349][ T9059]  dump_stack_lvl+0x18c/0x250
[  278.030090][ T9059]  ? show_regs_print_info+0x20/0x20
[  278.035358][ T9059]  ? load_image+0x420/0x420
[  278.039921][ T9059]  ? __might_sleep+0xe0/0xe0
[  278.044572][ T9059]  ? __lock_acquire+0x7d80/0x7d80
[  278.049657][ T9059]  should_fail_ex+0x394/0x4c0
[  278.054404][ T9059]  should_failslab+0x9/0x20
[  278.058972][ T9059]  slab_pre_alloc_hook+0x59/0x300
[  278.064062][ T9059]  kmem_cache_alloc+0x5a/0x2c0
[  278.068878][ T9059]  ? prepare_creds+0x30/0x5d0
[  278.073621][ T9059]  prepare_creds+0x30/0x5d0
[  278.078193][ T9059]  cap_task_prctl+0x94e/0xba0
[  278.082921][ T9059]  security_task_prctl+0x79/0x100
[  278.088009][ T9059]  __se_sys_prctl+0xc6/0x1510
[  278.092765][ T9059]  ? __x64_sys_prctl+0xc0/0xc0
[  278.097585][ T9059]  ? lockdep_hardirqs_on+0x98/0x150
[  278.102840][ T9059]  ? __x64_sys_prctl+0x20/0xc0
[  278.107692][ T9059]  do_syscall_64+0x55/0xb0
[  278.112160][ T9059]  ? clear_bhb_loop+0x40/0x90
[  278.116888][ T9059]  ? clear_bhb_loop+0x40/0x90
[  278.121618][ T9059]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.127562][ T9059] RIP: 0033:0x7f2a2039e159
[  278.132025][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.151688][ T9059] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  278.160162][ T9059] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  278.168179][ T9059] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c
[  278.176194][ T9059] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  278.184228][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.192245][ T9059] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  278.200282][ T9059]  </TASK>
[  278.206058][ T9057] Invalid ELF header type: 3 != 1
[  278.348251][   T56] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  278.745644][   T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  278.780420][   T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.807885][   T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.842923][   T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.867182][   T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.926592][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  278.940486][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  278.954363][    T9] usb 4-1: USB disconnect, device number 11
[  279.002124][ T9068] binder: 9067:9068 ioctl c0306201 0 returned -14
[  279.262568][ T5763] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  279.270938][   T56] usb 5-1: usb_control_msg returned -32
[  279.276596][   T56] usbtmc 5-1:16.0: can't read capabilities
[  279.487854][ T5763] usb 1-1: Using ep0 maxpacket: 8
[  279.572507][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.687117][ T5763] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  279.720249][ T9052] usbtmc 5-1:16.0: usb_control_msg returned -71
[  279.727187][   T56] usb 5-1: USB disconnect, device number 8
[  279.873968][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.097092][ T5763] usb 1-1: config 0 descriptor??
[  280.376775][ T5763] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  281.135445][ T9092] syzkaller0: entered promiscuous mode
[  281.145472][ T9092] syzkaller0: entered allmulticast mode
[  282.197843][ T9098] Invalid ELF header type: 3 != 1
[  283.581003][ T9102] binder: 9101:9102 ioctl c0306201 0 returned -14
[  285.299715][ T5816] usb 1-1: USB disconnect, device number 9
[  286.131095][ T5816] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  286.346362][ T5816] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  286.354902][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.365076][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.380002][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  286.390877][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.633744][ T5816] usb 1-1: usb_control_msg returned -32
[  286.643636][ T5816] usbtmc 1-1:16.0: can't read capabilities
[  286.968685][ T5816] usb 1-1: USB disconnect, device number 10
[  286.977611][ T9119] usbtmc 1-1:16.0: usb_control_msg returned -71
[  287.524043][ T9128] null_blk: disk nullb1 created
[  287.616564][ T9133] binder: 9132:9133 ioctl c0306201 0 returned -14
[  287.685475][ T9134] Invalid ELF header type: 3 != 1
[  291.254798][ T9158] binder: 9157:9158 ioctl c0306201 0 returned -14
[  291.627355][ T9170] FAULT_INJECTION: forcing a failure.
[  291.627355][ T9170] name failslab, interval 1, probability 0, space 0, times 0
[  291.648589][ T9170] CPU: 0 PID: 9170 Comm: syz.4.866 Not tainted syzkaller #0
[  291.656001][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  291.666116][ T9170] Call Trace:
[  291.669443][ T9170]  <TASK>
[  291.672414][ T9170]  dump_stack_lvl+0x18c/0x250
[  291.677156][ T9170]  ? show_regs_print_info+0x20/0x20
[  291.682412][ T9170]  ? load_image+0x420/0x420
[  291.686974][ T9170]  ? __might_sleep+0xe0/0xe0
[  291.691641][ T9170]  ? __lock_acquire+0x7d80/0x7d80
[  291.696726][ T9170]  ? mtree_load+0x109/0x840
[  291.701291][ T9170]  should_fail_ex+0x394/0x4c0
[  291.706052][ T9170]  should_failslab+0x9/0x20
[  291.710643][ T9170]  slab_pre_alloc_hook+0x59/0x300
[  291.715732][ T9170]  ? can_vma_merge_before+0x6e/0x280
[  291.721098][ T9170]  kmem_cache_alloc+0x5a/0x2c0
[  291.725933][ T9170]  ? vm_area_dup+0x27/0x270
[  291.730511][ T9170]  vm_area_dup+0x27/0x270
[  291.734913][ T9170]  __split_vma+0x1a8/0xc20
[  291.739401][ T9170]  ? mmap_write_unlock+0x160/0x160
[  291.744600][ T9170]  ? split_vma+0x8f/0x110
[  291.748996][ T9170]  madvise_update_vma+0x44e/0xda0
[  291.754091][ T9170]  ? __ia32_sys_process_madvise+0xc0/0xc0
[  291.759878][ T9170]  ? down_write_killable+0x181/0x230
[  291.765279][ T9170]  do_madvise+0x145c/0x3790
[  291.769867][ T9170]  ? madvise_set_anon_name+0x440/0x440
[  291.775386][ T9170]  ? schedule+0xc7/0x170
[  291.779683][ T9170]  ? futex_wait_queue+0x27/0x1b0
[  291.784671][ T9170]  ? futex_wait_queue+0x138/0x1b0
[  291.789753][ T9170]  ? futex_unqueue+0xcb/0xf0
[  291.794396][ T9170]  ? futex_wait+0x4a7/0x5c0
[  291.798955][ T9170]  ? futex_setup_timer+0xc0/0xc0
[  291.803951][ T9170]  ? futex_wait_setup+0x270/0x270
[  291.809061][ T9170]  ? file_end_write+0x159/0x250
[  291.813978][ T9170]  ? vfs_write+0x5de/0x9a0
[  291.818457][ T9170]  ? do_futex+0x2ff/0x3e0
[  291.822841][ T9170]  ? __ia32_sys_get_robust_list+0x110/0x110
[  291.828815][ T9170]  ? lock_chain_count+0x20/0x20
[  291.833737][ T9170]  __x64_sys_madvise+0xa6/0xc0
[  291.838568][ T9170]  do_syscall_64+0x55/0xb0
[  291.843038][ T9170]  ? clear_bhb_loop+0x40/0x90
[  291.847774][ T9170]  ? clear_bhb_loop+0x40/0x90
[  291.852529][ T9170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.858499][ T9170] RIP: 0033:0x7fc2af99e159
[  291.862972][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.882641][ T9170] RSP: 002b:00007fc2b089a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  291.891209][ T9170] RAX: ffffffffffffffda RBX: 00007fc2afc25fa0 RCX: 00007fc2af99e159
[  291.899238][ T9170] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000
[  291.907270][ T9170] RBP: 00007fc2afa3503b R08: 0000000000000000 R09: 0000000000000000
[  291.915318][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.923343][ T9170] R13: 00007fc2afc26038 R14: 00007fc2afc25fa0 R15: 00007ffe8e469838
[  291.931382][ T9170]  </TASK>
[  292.106790][ T9175] Invalid ELF header type: 3 != 1
[  295.018098][ T9205] FAULT_INJECTION: forcing a failure.
[  295.018098][ T9205] name failslab, interval 1, probability 0, space 0, times 0
[  295.052524][ T9205] CPU: 1 PID: 9205 Comm: syz.0.877 Not tainted syzkaller #0
[  295.059906][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.070016][ T9205] Call Trace:
[  295.073350][ T9205]  <TASK>
[  295.076323][ T9205]  dump_stack_lvl+0x18c/0x250
[  295.081074][ T9205]  ? show_regs_print_info+0x20/0x20
[  295.086344][ T9205]  ? load_image+0x420/0x420
[  295.090990][ T9205]  ? __might_sleep+0xe0/0xe0
[  295.095641][ T9205]  ? __lock_acquire+0x7d80/0x7d80
[  295.100718][ T9205]  ? mtree_load+0x109/0x840
[  295.105282][ T9205]  should_fail_ex+0x394/0x4c0
[  295.110031][ T9205]  should_failslab+0x9/0x20
[  295.114592][ T9205]  slab_pre_alloc_hook+0x59/0x300
[  295.119682][ T9205]  ? can_vma_merge_before+0x6e/0x280
[  295.125047][ T9205]  kmem_cache_alloc+0x5a/0x2c0
[  295.129855][ T9205]  ? vm_area_dup+0x27/0x270
[  295.134395][ T9205]  vm_area_dup+0x27/0x270
[  295.138753][ T9205]  __split_vma+0x1a8/0xc20
[  295.143213][ T9205]  ? mmap_write_unlock+0x160/0x160
[  295.148394][ T9205]  ? split_vma+0x8f/0x110
[  295.152756][ T9205]  madvise_update_vma+0x44e/0xda0
[  295.157831][ T9205]  ? __ia32_sys_process_madvise+0xc0/0xc0
[  295.163601][ T9205]  ? down_write_killable+0x181/0x230
[  295.169035][ T9205]  do_madvise+0x145c/0x3790
[  295.173589][ T9205]  ? madvise_set_anon_name+0x440/0x440
[  295.179081][ T9205]  ? schedule+0xc7/0x170
[  295.183368][ T9205]  ? futex_wait_queue+0x27/0x1b0
[  295.188331][ T9205]  ? futex_wait_queue+0x138/0x1b0
[  295.193379][ T9205]  ? futex_unqueue+0xcb/0xf0
[  295.197994][ T9205]  ? futex_wait+0x4a7/0x5c0
[  295.202558][ T9205]  ? futex_wait_setup+0x270/0x270
[  295.207636][ T9205]  ? file_end_write+0x159/0x250
[  295.212533][ T9205]  ? vfs_write+0x5de/0x9a0
[  295.217193][ T9205]  ? do_futex+0x2ff/0x3e0
[  295.221559][ T9205]  ? __ia32_sys_get_robust_list+0x110/0x110
[  295.227520][ T9205]  ? lock_chain_count+0x20/0x20
[  295.232435][ T9205]  __x64_sys_madvise+0xa6/0xc0
[  295.237239][ T9205]  do_syscall_64+0x55/0xb0
[  295.241699][ T9205]  ? clear_bhb_loop+0x40/0x90
[  295.246425][ T9205]  ? clear_bhb_loop+0x40/0x90
[  295.251137][ T9205]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.257064][ T9205] RIP: 0033:0x7f2a2039e159
[  295.261538][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.281181][ T9205] RSP: 002b:00007f2a21279028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  295.289626][ T9205] RAX: ffffffffffffffda RBX: 00007f2a20625fa0 RCX: 00007f2a2039e159
[  295.297625][ T9205] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000
[  295.305621][ T9205] RBP: 00007f2a2043503b R08: 0000000000000000 R09: 0000000000000000
[  295.313621][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.321622][ T9205] R13: 00007f2a20626038 R14: 00007f2a20625fa0 R15: 00007fffb85390f8
[  295.329640][ T9205]  </TASK>
[  295.332827][    C1] vkms_vblank_simulate: vblank timer overrun
[  295.735877][ T9214] Invalid ELF header type: 3 != 1
[  296.656166][   T28] audit: type=1326 audit(1789065946.864:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.1.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f70ad597ed7 code=0x0
[  296.679472][    C1] vkms_vblank_simulate: vblank timer overrun
[  296.724485][ T9225] FAULT_INJECTION: forcing a failure.
[  296.724485][ T9225] name fail_futex, interval 1, probability 0, space 0, times 0
[  296.742306][ T9225] CPU: 0 PID: 9225 Comm: syz.0.886 Not tainted syzkaller #0
[  296.749698][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  296.759813][ T9225] Call Trace:
[  296.763222][ T9225]  <TASK>
[  296.766193][ T9225]  dump_stack_lvl+0x18c/0x250
[  296.770964][ T9225]  ? show_regs_print_info+0x20/0x20
[  296.776223][ T9225]  ? load_image+0x420/0x420
[  296.780771][ T9225]  ? stack_trace_save+0xaa/0x100
[  296.785782][ T9225]  should_fail_ex+0x394/0x4c0
[  296.790562][ T9225]  get_futex_key+0x136/0x1030
[  296.795304][ T9225]  ? futex_setup_timer+0xc0/0xc0
[  296.800307][ T9225]  futex_wake+0x127/0x4f0
[  296.804704][ T9225]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  296.810747][ T9225]  ? futex_wake_mark+0x150/0x150
[  296.815754][ T9225]  ? lockdep_hardirqs_on+0x98/0x150
[  296.821023][ T9225]  do_futex+0x35d/0x3e0
[  296.825236][ T9225]  ? __ia32_sys_get_robust_list+0x110/0x110
[  296.831195][ T9225]  __se_sys_futex+0x3a9/0x440
[  296.835936][ T9225]  ? __x64_sys_futex+0xf0/0xf0
[  296.840755][ T9225]  ? __x64_sys_futex+0x21/0xf0
[  296.845610][ T9225]  do_syscall_64+0x55/0xb0
[  296.850080][ T9225]  ? clear_bhb_loop+0x40/0x90
[  296.854811][ T9225]  ? clear_bhb_loop+0x40/0x90
[  296.859537][ T9225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  296.865529][ T9225] RIP: 0033:0x7f2a2039e159
[  296.870001][ T9225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.889754][ T9225] RSP: 002b:00007f2a212790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  296.898318][ T9225] RAX: ffffffffffffffda RBX: 00007f2a20625fa8 RCX: 00007f2a2039e159
[  296.906346][ T9225] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2a20625fac
[  296.914373][ T9225] RBP: 00007f2a20625fa0 R08: 0000000000745d1e R09: 0000000000000000
[  296.922396][ T9225] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  296.930416][ T9225] R13: 00007f2a20626038 R14: 00007fffb8539010 R15: 00007fffb85390f8
[  296.938499][ T9225]  </TASK>
[  297.897705][ T5816] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  298.080100][ T9240] syzkaller0: entered promiscuous mode
[  298.090085][ T9240] syzkaller0: entered allmulticast mode
[  298.297942][ T5816] usb 5-1: device not accepting address 9, error -71
[  298.512380][ T9251] Invalid ELF header type: 3 != 1
[  299.441012][   T28] audit: type=1326 audit(1789065949.664:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.1.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f70ad597ed7 code=0x0
[  299.621703][ T9266] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  299.652492][ T9266] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  300.500334][ T9277] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  300.663922][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  300.850921][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.861716][   T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  300.872380][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  300.882823][   T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  300.893136][   T23] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  300.906656][   T23] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  300.926570][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.946314][ T9275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  300.969990][   T23] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  300.992957][   T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  301.001144][   T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  301.014881][   T23] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  301.040394][   T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  301.077886][   T23] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  301.089720][   T23] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  301.425611][ T5815] usb 5-1: USB disconnect, device number 11
[  301.438867][ T5815] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  301.472385][ T5815] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  301.496464][ T5815] keyspan 5-1:1.0: device disconnected
[  302.407426][   T28] audit: type=1326 audit(1789065952.624:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.4.913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc2af997ed7 code=0x0
[  302.430646][    C1] vkms_vblank_simulate: vblank timer overrun
[  303.744991][ T9309] FAULT_INJECTION: forcing a failure.
[  303.744991][ T9309] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  303.789391][ T9309] CPU: 1 PID: 9309 Comm: syz.1.918 Not tainted syzkaller #0
[  303.796794][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  303.807016][ T9309] Call Trace:
[  303.810354][ T9309]  <TASK>
[  303.813340][ T9309]  dump_stack_lvl+0x18c/0x250
[  303.818092][ T9309]  ? show_regs_print_info+0x20/0x20
[  303.823390][ T9309]  ? load_image+0x420/0x420
[  303.827963][ T9309]  ? __lock_acquire+0x7d80/0x7d80
[  303.833063][ T9309]  ? mark_lock+0x94/0x320
[  303.837337][ T9311] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  303.837432][ T9309]  should_fail_ex+0x394/0x4c0
[  303.851126][ T9309]  prepare_alloc_pages+0x1e1/0x5b0
[  303.856318][ T9309]  __alloc_pages+0x134/0x460
[  303.860981][ T9309]  ? zone_statistics+0x170/0x170
[  303.865988][ T9309]  __folio_alloc+0x10/0x20
[  303.870436][ T9309]  vma_alloc_folio+0x474/0x8f0
[  303.875237][ T9309]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  303.881122][ T9309]  shmem_alloc_folio+0x1a9/0x2a0
[  303.886115][ T9309]  ? folio_put+0xd0/0xd0
[  303.890435][ T9309]  ? shmem_inode_acct_block+0x324/0x460
[  303.896038][ T9309]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  303.901816][ T9309]  ? put_swap_device+0x230/0x230
[  303.906795][ T9309]  ? xas_load+0x12b/0x140
[  303.911155][ T9309]  ? filemap_get_entry+0xce/0x3f0
[  303.916206][ T9309]  ? filemap_get_entry+0xce/0x3f0
[  303.921265][ T9309]  ? filemap_get_entry+0x375/0x3f0
[  303.926410][ T9309]  ? page_cache_prev_miss+0x390/0x390
[  303.931816][ T9309]  ? copy_page_from_iter_atomic+0xc2e/0x13d0
[  303.937836][ T9309]  ? __asan_memcpy+0x40/0x70
[  303.942485][ T9309]  shmem_get_folio_gfp+0xe1d/0x2b40
[  303.947762][ T9309]  shmem_write_begin+0xf2/0x430
[  303.952676][ T9309]  generic_perform_write+0x2fe/0x5c0
[  303.958013][ T9309]  ? generic_file_direct_write+0x3e0/0x3e0
[  303.963936][ T9309]  ? down_write+0x16e/0x200
[  303.968486][ T9309]  ? file_update_time+0x98/0x1a0
[  303.973455][ T9309]  shmem_file_write_iter+0xfb/0x120
[  303.978689][ T9309]  __kernel_write_iter+0x29f/0x6d0
[  303.983929][ T9309]  ? vfs_read+0x990/0x990
[  303.988289][ T9309]  ? rcu_read_lock_any_held+0xb4/0x140
[  303.993781][ T9309]  ? __asan_memset+0x22/0x40
[  303.998411][ T9309]  ? iov_iter_kvec+0xd4/0x1b0
[  304.003164][ T9309]  kernel_write+0x1b5/0x350
[  304.008314][ T9309]  ? __kernel_write+0x170/0x170
[  304.013228][ T9309]  ? shmem_get_inode+0xa7a/0xcd0
[  304.018234][ T9309]  ? __shmem_file_setup+0x268/0x2c0
[  304.023478][ T9309]  big_key_preparse+0x3bf/0x4f0
[  304.028375][ T9309]  ? keyctl_pkey_verify+0x270/0x270
[  304.033614][ T9309]  __key_create_or_update+0x3a6/0xa60
[  304.039049][ T9309]  ? key_create_or_update+0x60/0x60
[  304.044286][ T9309]  ? bpf_lsm_key_permission+0x9/0x10
[  304.049616][ T9309]  ? lookup_user_key+0xb66/0x1140
[  304.054691][ T9309]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  304.060718][ T9309]  key_create_or_update+0x42/0x60
[  304.065783][ T9309]  __se_sys_add_key+0x34f/0x410
[  304.070670][ T9309]  ? __x64_sys_add_key+0xc0/0xc0
[  304.075650][ T9309]  ? lockdep_hardirqs_on+0x98/0x150
[  304.080888][ T9309]  ? __x64_sys_add_key+0x20/0xc0
[  304.085867][ T9309]  do_syscall_64+0x55/0xb0
[  304.090320][ T9309]  ? clear_bhb_loop+0x40/0x90
[  304.095031][ T9309]  ? clear_bhb_loop+0x40/0x90
[  304.099746][ T9309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  304.105670][ T9309] RIP: 0033:0x7f70ad59e159
[  304.110121][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.129762][ T9309] RSP: 002b:00007f70ae45d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  304.138211][ T9309] RAX: ffffffffffffffda RBX: 00007f70ad825fa0 RCX: 00007f70ad59e159
[  304.146203][ T9309] RDX: 0000200000000400 RSI: 0000200000000280 RDI: 0000200000000180
[  304.154242][ T9309] RBP: 00007f70ad63503b R08: fffffffffffffffe R09: 0000000000000000
[  304.162243][ T9309] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000000
[  304.170239][ T9309] R13: 00007f70ad826038 R14: 00007f70ad825fa0 R15: 00007ffc9adbd728
[  304.178254][ T9309]  </TASK>
[  304.181380][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.194786][ T5816] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  304.207204][ T9311] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  304.222198][ T9311] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  304.232156][ T9311] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  304.249420][ T9311] nvme_fabrics: missing parameter 'nqn=%s'
[  304.431900][ T5816] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  304.442928][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.455908][ T5816] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.486428][ T5816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  304.532770][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.568570][   T28] audit: type=1326 audit(1789065954.784:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.1.922" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f70ad597ed7 code=0x0
[  304.678655][ T9325] netlink: 'syz.0.924': attribute type 13 has an invalid length.
[  304.966221][ T5816] usb 4-1: usb_control_msg returned -71
[  304.973308][ T5816] usbtmc 4-1:16.0: can't read capabilities
[  304.995496][ T5816] usb 4-1: USB disconnect, device number 12
[  305.139776][ T9329] syzkaller0: entered promiscuous mode
[  305.145491][ T9329] syzkaller0: entered allmulticast mode
[  305.634373][   T28] audit: type=1326 audit(1789065955.854:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9333 comm="syz.1.926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70ad59e159 code=0x0
[  306.584346][ T9345] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  306.594571][ T9345] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  306.605954][ T9345] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  306.616283][ T9345] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  306.645527][ T9345] nvme_fabrics: missing parameter 'nqn=%s'
[  307.110719][   T28] audit: type=1326 audit(1789065957.334:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f70ad597ed7 code=0x0
[  309.344421][ T9368] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  309.370582][ T9368] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  309.386597][ T9368] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  309.406499][ T9368] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  309.424331][ T9368] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request
[  309.447794][ T5839] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  309.631130][   T28] audit: type=1326 audit(1789065959.854:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.0.943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a2039e159 code=0x0
[  309.659860][ T5839] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  309.677671][ T5839] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  309.690580][ T5839] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  309.704086][ T5839] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  309.715678][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.723357][ T9382] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  309.740417][ T9382] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  309.757824][   T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  309.765738][ T9382] nvme_fabrics: missing parameter 'transport=%s'
[  309.773953][ T9382] nvme_fabrics: missing parameter 'nqn=%s'
[  310.107704][   T23] usb 5-1: Using ep0 maxpacket: 8
[  310.115814][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.131872][   T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  310.141201][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.164964][   T23] usb 5-1: config 0 descriptor??
[  310.201469][ T9387] Invalid ELF header type: 3 != 1
[  310.859771][   T23] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  310.953688][ T5839] usb 4-1: usb_control_msg returned -71
[  310.962389][ T5839] usbtmc 4-1:16.0: can't read capabilities
[  310.978912][ T5839] usb 4-1: USB disconnect, device number 13
[  311.447358][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'.
[  311.470627][ T9401] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  311.493415][ T9401] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  311.509640][ T9401] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  311.521432][ T9401] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  311.546970][ T9401] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request
[  311.710026][ T9405] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  311.725816][ T9405] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  311.761424][ T9405] nvme_fabrics: missing parameter 'transport=%s'
[  311.774878][ T9405] nvme_fabrics: missing parameter 'nqn=%s'
[  312.038659][   T28] audit: type=1326 audit(1789065962.264:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.3.954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe92f99e159 code=0x0
[  312.061941][    C1] vkms_vblank_simulate: vblank timer overrun
[  312.177356][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  312.893840][ T5763] usb 5-1: USB disconnect, device number 12
[  313.172606][ T9429] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  313.185918][ T9429] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  313.194936][ T9428] random: crng reseeded on system resumption
[  313.208011][ T9429] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  313.230659][ T9429] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  313.814465][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'.
[  314.034086][ T9458] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  314.061224][ T9458] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  314.077712][ T5839] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  314.090455][ T9458] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  314.104815][ T9458] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  314.126855][ T9458] nvme_fabrics: missing parameter 'nqn=%s'
[  314.197760][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  314.277702][ T5839] usb 1-1: Using ep0 maxpacket: 8
[  314.969240][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  314.980271][ T5839] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  314.989444][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.020430][ T5839] usb 1-1: config 0 descriptor??
[  315.154617][ T9469] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  315.192867][ T9469] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  315.209580][ T9469] nvme_fabrics: missing parameter 'nqn=%s'
[  315.272325][ T5839] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  315.422871][   T28] audit: type=1326 audit(1789065965.644:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.4.978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2af99e159 code=0x0
[  315.446238][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.652579][ T9472] FAULT_INJECTION: forcing a failure.
[  315.652579][ T9472] name fail_futex, interval 1, probability 0, space 0, times 0
[  315.668810][ T9472] CPU: 0 PID: 9472 Comm: syz.1.976 Not tainted syzkaller #0
[  315.676308][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  315.686547][ T9472] Call Trace:
[  315.689870][ T9472]  <TASK>
[  315.692836][ T9472]  dump_stack_lvl+0x18c/0x250
[  315.697566][ T9472]  ? show_regs_print_info+0x20/0x20
[  315.702812][ T9472]  ? load_image+0x420/0x420
[  315.707353][ T9472]  ? mark_lock+0x94/0x320
[  315.711729][ T9472]  ? __lock_acquire+0x1336/0x7d80
[  315.716854][ T9472]  ? verify_lock_unused+0x140/0x140
[  315.722134][ T9472]  should_fail_ex+0x394/0x4c0
[  315.726879][ T9472]  get_futex_key+0x136/0x1030
[  315.731605][ T9472]  ? futex_setup_timer+0xc0/0xc0
[  315.736577][ T9472]  ? __local_bh_enable_ip+0x13a/0x1c0
[  315.742161][ T9472]  ? lockdep_hardirqs_on+0x98/0x150
[  315.747409][ T9472]  futex_wait_setup+0xbc/0x270
[  315.752225][ T9472]  ? futex_wait_multiple+0x920/0x920
[  315.757645][ T9472]  futex_wait+0x1bc/0x5c0
[  315.762006][ T9472]  ? fpu__restore_sig+0x495/0x1210
[  315.767165][ T9472]  ? futex_wait_setup+0x270/0x270
[  315.772222][ T9472]  ? __lock_acquire+0x7d80/0x7d80
[  315.777294][ T9472]  ? __ia32_sys_rt_sigreturn+0x739/0x850
[  315.782995][ T9472]  do_futex+0x2ff/0x3e0
[  315.787193][ T9472]  ? x64_setup_rt_frame+0xc30/0xc30
[  315.792434][ T9472]  ? __ia32_sys_get_robust_list+0x110/0x110
[  315.798368][ T9472]  __se_sys_futex+0x3a9/0x440
[  315.803079][ T9472]  ? __x64_sys_futex+0xf0/0xf0
[  315.807881][ T9472]  ? __x64_sys_futex+0x21/0xf0
[  315.812672][ T9472]  do_syscall_64+0x55/0xb0
[  315.817121][ T9472]  ? clear_bhb_loop+0x40/0x90
[  315.821830][ T9472]  ? clear_bhb_loop+0x40/0x90
[  315.826543][ T9472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.832469][ T9472] RIP: 0033:0x7f70ad59e159
[  315.836913][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.856549][ T9472] RSP: 002b:00007f70ae45d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  315.864995][ T9472] RAX: ffffffffffffffda RBX: 00007f70ad825fa8 RCX: 00007f70ad59e159
[  315.872999][ T9472] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f70ad825fa8
[  315.881006][ T9472] RBP: 00007f70ad825fa0 R08: 0000000000000000 R09: 0000000000000000
[  315.889037][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.897050][ T9472] R13: 00007f70ad826038 R14: 00007ffc9adbd640 R15: 00007ffc9adbd728
[  315.905150][ T9472]  </TASK>
[  315.937542][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  316.993452][ T9498] loop4: detected capacity change from 0 to 32768
[  317.016972][ T9498] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.984 (9498)
[  317.048654][ T9498] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  317.071022][ T9498] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  317.082865][ T9504] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  317.092815][ T9498] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  317.104063][ T9504] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  317.113793][ T9498] BTRFS info (device loop4): use zstd compression, level 3
[  317.125364][ T9504] nvme_fabrics: missing parameter 'nqn=%s'
[  317.132719][ T9498] BTRFS info (device loop4): using free space tree
[  317.200908][ T9498] BTRFS info (device loop4): enabling ssd optimizations
[  317.234137][ T9498] BTRFS info (device loop4): auto enabling async discard
[  317.302000][   T28] audit: type=1800 audit(1789065967.524:39): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.984" name="file1" dev="loop4" ino=260 res=0 errno=0
[  317.540917][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.547301][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.631528][ T9528] udevd[9528]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  317.679321][ T5982] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  317.957107][   T56] usb 1-1: USB disconnect, device number 11
[  318.350690][ T9537] nvme_fabrics: missing parameter 'nqn=%s'
[  318.559985][ T9548] Invalid ELF header type: 3 != 1
[  319.418415][ T9556] nvmet: adding nsid 1 to subsystem testsubsys
[  319.448618][ T9556] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  319.460409][ T9556] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  319.468868][ T9556] CPU: 1 PID: 9556 Comm: syz.3.999 Not tainted syzkaller #0
[  319.476212][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  319.486329][ T9556] RIP: 0010:strlen+0x29/0x70
[  319.490987][ T9556] Code: da f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  319.510672][ T9556] RSP: 0018:ffffc9000362f9c0 EFLAGS: 00010246
[  319.516829][ T9556] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  319.524860][ T9556] RDX: ffffc9000d54a000 RSI: 0000000000000176 RDI: 0000000000000000
[  319.532893][ T9556] RBP: ffffc9000362faf8 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5
[  319.540928][ T9556] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff920006c5f48
[  319.548997][ T9556] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  319.557055][ T9556] FS:  00007fe9308316c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  319.566061][ T9556] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.572697][ T9556] CR2: 000000110c37efda CR3: 000000002f9c7000 CR4: 00000000003506e0
[  319.580732][ T9556] Call Trace:
[  319.584050][ T9556]  <TASK>
[  319.587021][ T9556]  getname_kernel+0x28/0x2f0
[  319.591680][ T9556]  filp_open+0x88/0x1e0
[  319.595904][ T9556]  ? file_open_name+0x1c0/0x1c0
[  319.600821][ T9556]  ? nvmet_ns_enable+0x4d/0x8c0
[  319.605739][ T9556]  ? __might_sleep+0xe0/0xe0
[  319.610387][ T9556]  ? mutex_lock_nested+0x20/0x20
[  319.615388][ T9556]  ? __lock_acquire+0x7d80/0x7d80
[  319.620478][ T9556]  nvmet_file_ns_enable+0x74/0x330
[  319.625660][ T9556]  nvmet_ns_enable+0xf4/0x8c0
[  319.630406][ T9556]  nvmet_ns_enable_store+0xd8/0x170
[  319.635664][ T9556]  ? nvmet_ns_enable_show+0x60/0x60
[  319.640937][ T9556]  ? down_read+0x1ac/0x2e0
[  319.645419][ T9556]  configfs_write_iter+0x312/0x400
[  319.650615][ T9556]  ? nvmet_ns_enable_show+0x60/0x60
[  319.655864][ T9556]  vfs_write+0x474/0x9a0
[  319.660173][ T9556]  ? file_end_write+0x250/0x250
[  319.665085][ T9556]  ? __fget_files+0x3fc/0x460
[  319.669819][ T9556]  ? __fdget_pos+0x2a3/0x330
[  319.674464][ T9556]  ? ksys_write+0x74/0x260
[  319.678936][ T9556]  ksys_write+0x151/0x260
[  319.683324][ T9556]  ? __ia32_sys_read+0x90/0x90
[  319.688406][ T9556]  ? lockdep_hardirqs_on+0x98/0x150
[  319.693662][ T9556]  do_syscall_64+0x55/0xb0
[  319.698129][ T9556]  ? clear_bhb_loop+0x40/0x90
[  319.702857][ T9556]  ? clear_bhb_loop+0x40/0x90
[  319.707592][ T9556]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.713533][ T9556] RIP: 0033:0x7fe92f99e159
[  319.717998][ T9556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.737682][ T9556] RSP: 002b:00007fe930831028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.746142][ T9556] RAX: ffffffffffffffda RBX: 00007fe92fc25fa0 RCX: 00007fe92f99e159
[  319.754130][ T9556] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005
[  319.762112][ T9556] RBP: 00007fe92fa3503b R08: 0000000000000000 R09: 0000000000000000
[  319.770186][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.778174][ T9556] R13: 00007fe92fc26038 R14: 00007fe92fc25fa0 R15: 00007ffe56727ad8
[  319.786164][ T9556]  </TASK>
[  319.789222][ T9556] Modules linked in:
[  319.793281][    C1] vkms_vblank_simulate: vblank timer overrun
Sep 10 18:46:10 syzkaller kern.alert kernel: [  319.460409][ T9556] KASAN: null-ptr-deref in range [0x0000000000[  319.809145][ T9563] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
000000-0x0000000[  319.819335][ T9556] ---[ end trace 0000000000000000 ]---
000000007]
[  319.825751][ T9556] RIP: 0010:strlen+0x29/0x70
[  319.845222][ T9556] Code: da f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  319.865290][ T9556] RSP: 0018:ffffc9000362f9c0 EFLAGS: 00010246
[  319.872938][ T9556] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  319.881292][ T9556] RDX: ffffc9000d54a000 RSI: 0000000000000176 RDI: 0000000000000000
[  319.891227][ T9556] RBP: ffffc9000362faf8 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5
[  319.899859][ T9556] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff920006c5f48
[  319.912376][ T9556] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  319.926578][ T9556] FS:  00007fe9308316c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  319.938427][ T9556] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.945153][ T9556] CR2: 00007fe92f9eb840 CR3: 000000002f9c7000 CR4: 00000000003506e0
[  319.953579][ T9556] Kernel panic - not syncing: Fatal exception
[  319.960263][ T9556] Kernel Offset: disabled
[  319.964632][ T9556] Rebooting in 86400 seconds..