last executing test programs: 8m29.873797796s ago: executing program 3 (id=298): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x08\n', 0x5) 8m26.547557416s ago: executing program 3 (id=302): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf25"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3, 0x0, 0x300}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m23.646501054s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x14, 0x42, 0x201, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) 8m18.171587316s ago: executing program 3 (id=311): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x34, r0, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) 8m18.130445937s ago: executing program 3 (id=312): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000600)='r:s/p ./file0:0\f', 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) 8m14.823553256s ago: executing program 3 (id=316): utime(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) 7m58.039111859s ago: executing program 32 (id=316): utime(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) 5m25.151501654s ago: executing program 0 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) close(0x3) 5m14.232187546s ago: executing program 0 (id=615): r0 = socket$inet6(0xa, 0x3, 0x3) socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_setup(0x9e1, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x9, 0x2d2}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 5m13.835585556s ago: executing program 0 (id=616): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) 5m13.574907472s ago: executing program 0 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x4000, 0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000001c0)=""/86) 5m12.882004528s ago: executing program 0 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}}, 0x4800) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB]) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) keyctl$chown(0x4, r6, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) 5m8.272690739s ago: executing program 0 (id=624): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x4000, 0xfff, 0x0, 0x4, 0x0, [{0x0, 0x4, 0x5, '\x00', 0x1}, {0x4, 0xac, 0x3, '\x00', 0x1}, {0xd, 0xf4, 0x7, '\x00', 0xd1}, {0x4, 0x9c, 0x0, '\x00', 0x1}, {0x1, 0x8, 0x9, '\x00', 0xb}, {0x89, 0xb, 0xf7, '\x00', 0x6}, {0x2, 0x4, 0x5, '\x00', 0x5}, {0x0, 0xd5, 0x19, '\x00', 0xd}, {0x9, 0x10, 0x2, '\x00', 0xf0}, {0x4, 0x7, 0x9, '\x00', 0x9}, {0x5, 0xf7, 0x5, '\x00', 0x8}, {0x5, 0x9, 0x9, '\x00', 0x3}, {0x0, 0x8, 0xab, '\x00', 0x80}, {0x8, 0x5, 0x3, '\x00', 0xf9}, {0x1, 0x20, 0x6, '\x00', 0x8}, {0x0, 0x5, 0xd6, '\x00', 0x4}, {0x6, 0xfa, 0x4, '\x00', 0x40}, {0x8, 0x2, 0xff, '\x00', 0x19}, {0x6, 0x85, 0xb, '\x00', 0x14}, {0x7, 0x6, 0x8, '\x00', 0x7}, {0x44, 0x2, 0x40, '\x00', 0x2}, {0xf7, 0x9, 0x80, '\x00', 0x7}, {0xb, 0x80, 0xa}, {0xac, 0x23, 0xe7, '\x00', 0x2c}]}}) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000"], 0x8) close(r4) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x3, 0x5, 0x1, 0x0, 0x10, "00000000020000000000002100", "00004702", "0052008f", '\x00', ['\x00', "1bfaa444a1eed87212ff0bff", "0000efff17dc15b20d62aab5", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x86e, 0x1, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) r7 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r7) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r7) keyctl$unlink(0x9, r8, r7) close(0x3) 4m52.287059252s ago: executing program 33 (id=624): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x4000, 0xfff, 0x0, 0x4, 0x0, [{0x0, 0x4, 0x5, '\x00', 0x1}, {0x4, 0xac, 0x3, '\x00', 0x1}, {0xd, 0xf4, 0x7, '\x00', 0xd1}, {0x4, 0x9c, 0x0, '\x00', 0x1}, {0x1, 0x8, 0x9, '\x00', 0xb}, {0x89, 0xb, 0xf7, '\x00', 0x6}, {0x2, 0x4, 0x5, '\x00', 0x5}, {0x0, 0xd5, 0x19, '\x00', 0xd}, {0x9, 0x10, 0x2, '\x00', 0xf0}, {0x4, 0x7, 0x9, '\x00', 0x9}, {0x5, 0xf7, 0x5, '\x00', 0x8}, {0x5, 0x9, 0x9, '\x00', 0x3}, {0x0, 0x8, 0xab, '\x00', 0x80}, {0x8, 0x5, 0x3, '\x00', 0xf9}, {0x1, 0x20, 0x6, '\x00', 0x8}, {0x0, 0x5, 0xd6, '\x00', 0x4}, {0x6, 0xfa, 0x4, '\x00', 0x40}, {0x8, 0x2, 0xff, '\x00', 0x19}, {0x6, 0x85, 0xb, '\x00', 0x14}, {0x7, 0x6, 0x8, '\x00', 0x7}, {0x44, 0x2, 0x40, '\x00', 0x2}, {0xf7, 0x9, 0x80, '\x00', 0x7}, {0xb, 0x80, 0xa}, {0xac, 0x23, 0xe7, '\x00', 0x2c}]}}) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000"], 0x8) close(r4) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x3, 0x5, 0x1, 0x0, 0x10, "00000000020000000000002100", "00004702", "0052008f", '\x00', ['\x00', "1bfaa444a1eed87212ff0bff", "0000efff17dc15b20d62aab5", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x86e, 0x1, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) r7 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r7) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r7) keyctl$unlink(0x9, r8, r7) close(0x3) 2m15.602433589s ago: executing program 5 (id=951): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 2m15.006791583s ago: executing program 5 (id=953): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x40800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) 2m12.783577016s ago: executing program 5 (id=955): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 1m59.874915156s ago: executing program 5 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 1m57.271478418s ago: executing program 5 (id=982): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0xcf, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) open(0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000040), 0x380d10d15a21ab0b, 0x0, 0x0, 0xfffffffffffffd25) 1m56.843569968s ago: executing program 5 (id=986): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x33, 0x7, @empty, @rand_addr=0x64010100}}}}}}, 0x0) 1m56.045001758s ago: executing program 34 (id=986): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x33, 0x7, @empty, @rand_addr=0x64010100}}}}}}, 0x0) 22.231829887s ago: executing program 2 (id=1168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 21.70321186s ago: executing program 2 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x4000, 0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000001c0)=""/86) 19.990502411s ago: executing program 2 (id=1172): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7ad07e8c5d00000000000000"]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 18.106761756s ago: executing program 2 (id=1174): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x40800) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) 13.220590823s ago: executing program 2 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 13.189872684s ago: executing program 4 (id=1184): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001fc0)=@newtfilter={0x45c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xa, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffc4, 0x0, 0x6, 0x6, 0x81, 0x8, 0x3, 0x0, 0x4, 0x3, 0x6, 0x8000000, 0x215, 0x3, 0xc2f1, 0x80000001, 0x8173, 0x8, 0xd, 0xf, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x80000000, 0x6, 0x6, 0x8, 0x9, 0xff, 0x7, 0x8, 0x400, 0x1, 0xffffffff, 0x8, 0xfffff234, 0x7fffffff, 0x80, 0x8, 0x7, 0x7, 0xe39, 0x7, 0x92, 0x9, 0xae27, 0x1, 0x9, 0x8, 0x8, 0x2, 0x1, 0xd, 0x0, 0x2, 0xfff, 0xbb3, 0x7, 0x80, 0x7f, 0x40, 0x0, 0x0, 0x9, 0x63, 0x8, 0x4300, 0xbdc, 0xfffffff8, 0x100, 0x693bb0ee, 0x55, 0x1, 0x9, 0x5, 0x80, 0x2c8a512d, 0x3, 0x3, 0x8001, 0xfffffff8, 0x4, 0x1, 0x762f, 0x8, 0x9, 0x1, 0x81, 0x2cdf, 0xfffffff4, 0x8, 0x80, 0x5, 0xd, 0x1f, 0x6, 0x1, 0x5, 0x6, 0x40, 0x100010, 0xfffff712, 0x43f, 0x9, 0x7, 0xfe, 0x0, 0x4, 0x8, 0x0, 0xd2, 0x7, 0x8, 0x6, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x5, 0xa, 0x3, 0xc4c, 0x8, 0x3, 0x9, 0x10000, 0xc0, 0x5, 0x80000001, 0x0, 0x101, 0x1, 0x2, 0x1, 0x2ae, 0x11e5, 0xffff0001, 0x5, 0x0, 0x6edd, 0xffff, 0x8, 0x0, 0xff, 0x8, 0x6e25, 0x8, 0x1, 0xfffffff8, 0x2, 0x9, 0xfffffff7, 0x4, 0x5, 0x1, 0x8, 0x6, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x0, 0x3, 0x9, 0x5e55, 0x6, 0x5, 0x5, 0x9, 0x4be9, 0x1ff, 0x8001, 0x1000003, 0xe, 0x800, 0x6, 0x10001, 0x100, 0x5, 0xfffffa93, 0xffffffff, 0x2, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x97, 0x6, 0x81, 0x40, 0x0, 0xfffff801, 0x8, 0x9, 0x6, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x5, 0x1, 0x9, 0x3, 0xae71, 0x1, 0x6, 0x6, 0x7, 0x1, 0x100, 0x6, 0x28000000, 0x7, 0x7f, 0x3, 0x1, 0x4, 0xa, 0x76a, 0x401, 0xf, 0x2, 0x0, 0x4, 0x7, 0xa0000000, 0x7794, 0x6, 0x9, 0x400, 0xfff, 0xff, 0x8, 0x2, 0x7221, 0x3, 0x7, 0xfffffff8, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x2, 0x5, 0x800, 0x0, 0x7, 0x8001, 0x6, [{0xfffffffb, 0xffff8000, 0x7, 0xffffaa94}]}}]}}]}, 0x45c}}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 12.51802382s ago: executing program 4 (id=1188): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 10.038285129s ago: executing program 4 (id=1191): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x8, 0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x7}, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001c000506000000000000000002000000", @ANYBLOB="0000000408000160b5d966c842f30e16e9cb8f70000100000208000f0001000024"], 0x2c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x45) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x173) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000280)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) 9.715077097s ago: executing program 4 (id=1193): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x4000003, 0x2a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.559783225s ago: executing program 2 (id=1194): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x1, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.9151983s ago: executing program 4 (id=1197): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 7.9148367s ago: executing program 6 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x4000, 0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000001c0)=""/86) 6.711591299s ago: executing program 4 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x60800, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)=@newchain={0x32c, 0x64, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {0xe, 0xfff0}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x4b3f}]}}, @filter_kind_options=@f_basic={{0xa}, {0x2dc, 0x2, [@TCA_BASIC_ACT={0x2d8, 0x3, [@m_simple={0x170, 0x1d, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, '\xbe^%\\-]%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xffffff0e, 0x7, 0x7, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3c, 0x5, 0x3a, 0x1000}}, @TCA_DEF_DATA={0x9, 0x3, 'cifs\x00'}, @TCA_DEF_DATA={0xa, 0x3, '}\xb2%^&\x00'}]}, {0xf0, 0x6, "5cc3f0ceec2c46c7943b3109f7be96cafa7bfc4bd5b866ab5565e854ba8f7c466a96cffbc6d3fc717ab346fcda156842f865b16a13870cd95a95fe2fda846eb7c87d5e01c711a622ffd8607cc71cb39a075875569c52cc7370b8fac581a5cd6e45323e78995faf597d9307d51399457ebfe993fa69676c210a15528308d5478ee56be5f92a7de5c51a2a6e36dee526a269e54d27c273f5893159bf7dcd7ea17d6e229a32165f99fe72f2a56843f556f7d9e1418d2bb80bf36d440081a5333d2b7f4e83ca8487b1ad13cdd0f66f675722b101f500a2217191bc5fffb9936b70420204b4c04f5a868667ad5f79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_xt={0x164, 0x7, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x955}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff7}]}, {0xe6, 0x6, "81b33cee9793cb8cd3e569cad13eca1e4fde1cec927ed8d7b49eeba42853a75f450fd410d85e111aef54b8749d5e15e2e8788681b113150ef8074a96d3c6d1dab866b4a56d4417be72fa84716e104448c326f0f7301966b8e26cd2c7b079e6e1041f9889ca6d369862f12f793023f1bd330622a80db92f00d98585287ef4d29450448752fa1a7d52c1b75e4c079ddbb1d0317781c0bfb6d1fd951684b8b6d9edd17ecd282c0717c85695b2028b940b3e7c7287e6bdc4fe082602bc03bfaf450d2a158b307e930bea53314ffd8c3b35cc3bd8135510595187f72ca876f928ed98025a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4014}, 0x4000001) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept(r0, 0x0, 0x0) recvfrom(r5, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) 6.194397132s ago: executing program 6 (id=1200): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 5.994305316s ago: executing program 1 (id=1201): openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(0x0, &(0x7f0000001240)={0x0, ""/144}, 0x98, 0x3, 0x2000) msgrcv(0x0, &(0x7f0000000900)={0x0, ""/185}, 0xc1, 0x3, 0x1000) 5.756400822s ago: executing program 6 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 5.537995377s ago: executing program 1 (id=1203): socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.098752378s ago: executing program 1 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 3.703111841s ago: executing program 6 (id=1205): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7a"]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 3.227781253s ago: executing program 1 (id=1206): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.47776351s ago: executing program 6 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 755.284032ms ago: executing program 1 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x4000, 0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000001c0)=""/86) 613.913855ms ago: executing program 6 (id=1209): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001fc0)=@newtfilter={0x45c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xa, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffc4, 0x0, 0x6, 0x6, 0x81, 0x8, 0x3, 0x0, 0x4, 0x3, 0x6, 0x8000000, 0x215, 0x3, 0xc2f1, 0x80000001, 0x8173, 0x8, 0xd, 0xf, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x80000000, 0x6, 0x6, 0x8, 0x9, 0xff, 0x7, 0x8, 0x400, 0x1, 0xffffffff, 0x8, 0xfffff234, 0x7fffffff, 0x80, 0x8, 0x7, 0x7, 0xe39, 0x7, 0x92, 0x9, 0xae27, 0x1, 0x9, 0x8, 0x8, 0x2, 0x1, 0xd, 0x0, 0x2, 0xfff, 0xbb3, 0x7, 0x80, 0x7f, 0x40, 0x0, 0x0, 0x9, 0x63, 0x8, 0x4300, 0xbdc, 0xfffffff8, 0x100, 0x693bb0ee, 0x55, 0x1, 0x9, 0x5, 0x80, 0x2c8a512d, 0x3, 0x3, 0x8001, 0xfffffff8, 0x4, 0x1, 0x762f, 0x8, 0x9, 0x1, 0x81, 0x2cdf, 0xfffffff4, 0x8, 0x80, 0x5, 0xd, 0x1f, 0x6, 0x1, 0x5, 0x6, 0x40, 0x100010, 0xfffff712, 0x43f, 0x9, 0x7, 0xfe, 0x0, 0x4, 0x8, 0x0, 0xd2, 0x7, 0x8, 0x6, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x5, 0xa, 0x3, 0xc4c, 0x8, 0x3, 0x9, 0x10000, 0xc0, 0x5, 0x80000001, 0x0, 0x101, 0x1, 0x2, 0x1, 0x2ae, 0x11e5, 0xffff0001, 0x5, 0x0, 0x6edd, 0xffff, 0x8, 0x0, 0xff, 0x8, 0x6e25, 0x8, 0x1, 0xfffffff8, 0x2, 0x9, 0xfffffff7, 0x4, 0x5, 0x1, 0x8, 0x6, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x0, 0x3, 0x9, 0x5e55, 0x6, 0x5, 0x5, 0x9, 0x4be9, 0x1ff, 0x8001, 0x1000003, 0xe, 0x800, 0x6, 0x10001, 0x100, 0x5, 0xfffffa93, 0xffffffff, 0x2, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x97, 0x6, 0x81, 0x40, 0x0, 0xfffff801, 0x8, 0x9, 0x6, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x5, 0x1, 0x9, 0x3, 0xae71, 0x1, 0x6, 0x6, 0x7, 0x1, 0x100, 0x6, 0x28000000, 0x7, 0x7f, 0x3, 0x1, 0x4, 0xa, 0x76a, 0x401, 0xf, 0x2, 0x0, 0x4, 0x7, 0xa0000000, 0x7794, 0x6, 0x9, 0x400, 0xfff, 0xff, 0x8, 0x2, 0x7221, 0x3, 0x7, 0xfffffff8, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x2, 0x5, 0x800, 0x0, 0x7, 0x8001, 0x6, [{0xfffffffb, 0xffff8000, 0x7, 0xffffaa94}]}}]}}]}, 0x45c}}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 0s ago: executing program 1 (id=1210): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) kernel console output (not intermixed with test programs): 422.133683][ T28] audit: type=1800 audit(1788701515.319:21): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.521" name="addr_trtype" dev="configfs" ino=14943 res=0 errno=0 [ 422.168603][ T7937] nvmet_tcp: address family 255 not supported [ 422.950911][ T28] audit: type=1800 audit(1788701515.349:22): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.521" name="addr_traddr" dev="configfs" ino=14944 res=0 errno=0 [ 429.564966][ T28] audit: type=1800 audit(1788701522.739:23): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.532" name="addr_trtype" dev="configfs" ino=15021 res=0 errno=0 [ 429.595887][ T7994] nvmet_tcp: address family 255 not supported [ 431.364480][ T28] audit: type=1800 audit(1788701522.769:24): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.532" name="addr_traddr" dev="configfs" ino=15022 res=0 errno=0 [ 433.960934][ T8018] syz.1.537 uses obsolete (PF_INET,SOCK_PACKET) [ 434.251255][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 434.461109][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 434.540284][ T5816] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.548900][ T5816] usb 2-1: config 179 has no interface number 0 [ 434.561594][ T5816] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 434.600877][ T5816] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 434.638810][ T5816] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.660516][ T5816] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 434.761797][ T5816] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.855927][ T5816] usb 2-1: config 179 interface 65 has no altsetting 0 [ 434.887784][ T5816] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 434.935601][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.019422][ T8034] kAFS: No cell specified [ 435.056675][ T5816] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 435.253324][ T5816] usb 2-1: USB disconnect, device number 7 [ 435.274202][ T5816] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.541146][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 437.659687][ T8059] nvmet_tcp: address family 255 not supported [ 437.683631][ T28] audit: type=1800 audit(1788701530.829:25): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="addr_trtype" dev="configfs" ino=15531 res=0 errno=0 [ 437.803530][ T28] audit: type=1800 audit(1788701530.839:26): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="addr_traddr" dev="configfs" ino=15532 res=0 errno=0 [ 439.854635][ T8070] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 440.184793][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.191359][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.279396][ T8088] nvmet_tcp: address family 255 not supported [ 441.302338][ T28] audit: type=1800 audit(1788701534.459:27): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.555" name="addr_trtype" dev="configfs" ino=15576 res=0 errno=0 [ 441.603960][ T28] audit: type=1800 audit(1788701534.459:28): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.555" name="addr_traddr" dev="configfs" ino=15577 res=0 errno=0 [ 448.381273][ T5814] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 450.213526][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 450.236066][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 450.272382][ T5814] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 450.301100][ T5814] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 450.320222][ T5814] usb 2-1: config 14 has no interface number 0 [ 450.338730][ T5814] usb 2-1: config 14 has no interface number 1 [ 450.349217][ T5814] usb 2-1: config 14 interface 57 has no altsetting 0 [ 450.360722][ T5814] usb 2-1: config 14 interface 228 has no altsetting 0 [ 450.377803][ T5814] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 451.514654][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.539604][ T5814] usb 2-1: Product: syz [ 451.544687][ T5814] usb 2-1: Manufacturer: syz [ 451.549362][ T5814] usb 2-1: SerialNumber: syz [ 451.591809][ T5814] usb 2-1: can't set config #14, error -71 [ 451.622325][ T5814] usb 2-1: USB disconnect, device number 8 [ 451.908315][ T8152] kAFS: No cell specified [ 454.111661][ T8165] nvmet_tcp: address family 255 not supported [ 454.134032][ T28] audit: type=1800 audit(1788701547.289:29): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.578" name="addr_traddr" dev="configfs" ino=15280 res=0 errno=0 [ 455.541699][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 455.655494][ T8185] kAFS: No cell specified [ 455.731014][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 455.740763][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 455.768606][ T5814] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 455.780857][ T5814] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 455.793180][ T5814] usb 5-1: config 14 has no interface number 0 [ 455.799636][ T5814] usb 5-1: config 14 has no interface number 1 [ 455.813464][ T5814] usb 5-1: config 14 interface 57 has no altsetting 0 [ 455.830745][ T5814] usb 5-1: config 14 interface 228 has no altsetting 0 [ 455.869758][ T5814] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 455.899672][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.923828][ T5814] usb 5-1: Product: syz [ 455.928074][ T5814] usb 5-1: Manufacturer: syz [ 455.947255][ T5814] usb 5-1: SerialNumber: syz [ 458.921241][ T8199] nvmet_tcp: address family 255 not supported [ 458.928821][ T28] audit: type=1800 audit(1788701552.089:30): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.588" name="addr_traddr" dev="configfs" ino=15352 res=0 errno=0 [ 459.914072][ T5814] legousbtower 5-1:14.57: interrupt endpoints not found [ 459.957924][ T5814] legousbtower 5-1:14.228: interrupt endpoints not found [ 459.989861][ T5814] usb 5-1: USB disconnect, device number 5 [ 464.462205][ T8236] nvmet_tcp: address family 255 not supported [ 465.235023][ T28] audit: type=1800 audit(1788701557.639:31): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.599" name="addr_traddr" dev="configfs" ino=15828 res=0 errno=0 [ 465.623295][ T28] audit: type=1800 audit(1788701558.809:32): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.611" name="addr_trtype" dev="configfs" ino=15836 res=0 errno=0 [ 465.654732][ T8245] nvmet_tcp: address family 255 not supported [ 465.943683][ T28] audit: type=1800 audit(1788701558.839:33): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.611" name="addr_traddr" dev="configfs" ino=15837 res=0 errno=0 [ 467.776074][ T8262] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 468.087069][ T8262] bond1: entered promiscuous mode [ 468.093613][ T8262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.757660][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 468.767620][ T8265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'. [ 469.505568][ T8248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.136396][ T8281] nvmet_tcp: address family 255 not supported [ 474.145656][ T28] audit: type=1800 audit(1788701567.309:34): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="addr_trtype" dev="configfs" ino=16485 res=0 errno=0 [ 474.359335][ T28] audit: type=1800 audit(1788701567.309:35): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="addr_traddr" dev="configfs" ino=16486 res=0 errno=0 [ 475.725110][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'. [ 477.921521][ T5839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 481.221009][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 481.233317][ T5839] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 481.252002][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.290896][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.330952][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.373428][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.433592][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.496576][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.573114][ T5839] usb 5-1: can't set config #16, error -71 [ 481.622021][ T5839] usb 5-1: USB disconnect, device number 6 [ 481.733132][ T8322] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 481.772288][ T8322] /dev/nullb0: Can't open blockdev [ 484.155053][ T8341] nvmet_tcp: address family 255 not supported [ 484.165400][ T28] audit: type=1800 audit(1788701577.329:36): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.623" name="addr_trtype" dev="configfs" ino=16591 res=0 errno=0 [ 484.392840][ T28] audit: type=1800 audit(1788701577.329:37): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.623" name="addr_traddr" dev="configfs" ino=16592 res=0 errno=0 [ 489.431606][ T8361] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 489.453364][ T8361] cramfs: wrong magic [ 489.574259][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.582728][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.512251][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.613963][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.576269][ T28] audit: type=1800 audit(1788701587.749:38): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.640" name="addr_trtype" dev="configfs" ino=16656 res=0 errno=0 [ 494.602872][ T8394] nvmet_tcp: address family 255 not supported [ 494.728403][ T28] audit: type=1800 audit(1788701587.759:39): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.640" name="addr_traddr" dev="configfs" ino=16657 res=0 errno=0 [ 495.315396][ T8339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.361159][ T8339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.370116][ T8339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.414534][ T8339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.370978][ T8369] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 497.379112][ T8369] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 497.405513][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 497.464287][ T8375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.633'. [ 497.707816][ T8402] ======================================================= [ 497.707816][ T8402] WARNING: The mand mount option has been deprecated and [ 497.707816][ T8402] and is ignored by this kernel. Remove the mand [ 497.707816][ T8402] option from the mount to silence this warning. [ 497.707816][ T8402] ======================================================= [ 497.924579][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.941426][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.952284][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.997522][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.016767][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 498.117005][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.751169][ T8414] netlink: 'syz.1.647': attribute type 12 has an invalid length. [ 499.140938][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 499.414527][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 499.551145][ T27] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 499.636638][ T27] usb 2-1: config 0 has no interface number 0 [ 499.707005][ T27] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 499.897790][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 501.490625][ T5785] Bluetooth: hci3: command tx timeout [ 501.520852][ T27] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 501.531189][ T27] usb 2-1: Product: syz [ 501.536268][ T27] usb 2-1: SerialNumber: syz [ 501.564572][ T27] usb 2-1: config 0 descriptor?? [ 501.577144][ T27] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 501.588132][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11 [ 501.624947][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.631523][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.688869][ T8339] syz.0.624 (8339) used greatest stack depth: 20904 bytes left [ 501.735030][ T5776] syz-executor (5776) used greatest stack depth: 20616 bytes left [ 501.933912][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.944078][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.952227][ T971] usb 2-1: USB disconnect, device number 9 [ 501.960716][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.967772][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 503.695397][ T5785] Bluetooth: hci3: command tx timeout [ 503.705589][ T971] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 503.734852][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 504.476456][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.514910][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.551810][ T28] audit: type=1800 audit(1788701597.729:40): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.649" name="addr_trtype" dev="configfs" ino=16855 res=0 errno=0 [ 504.574592][ T8441] nvmet_tcp: address family 255 not supported [ 504.616712][ T8406] bridge_slave_0: entered allmulticast mode [ 504.743886][ T8406] bridge_slave_0: entered promiscuous mode [ 504.793560][ T28] audit: type=1800 audit(1788701597.729:41): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.649" name="addr_traddr" dev="configfs" ino=16856 res=0 errno=0 [ 504.871631][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.878807][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.042782][ T8406] bridge_slave_1: entered allmulticast mode [ 505.164594][ T8406] bridge_slave_1: entered promiscuous mode [ 505.510056][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.565544][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.602380][ T1098] tipc: Disabling bearer [ 505.611244][ T1098] tipc: Left network mode [ 505.736262][ T8406] team0: Port device team_slave_0 added [ 505.781310][ T5785] Bluetooth: hci3: command tx timeout [ 505.790610][ T8406] team0: Port device team_slave_1 added [ 505.839111][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.846376][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.899960][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.752841][ T8458] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 507.771628][ T8458] /dev/nullb0: Can't open blockdev [ 507.787818][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.811206][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.861470][ T5785] Bluetooth: hci3: command tx timeout [ 507.881677][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.872859][ T8406] hsr_slave_0: entered promiscuous mode [ 509.892753][ T8406] hsr_slave_1: entered promiscuous mode [ 509.939930][ T8406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.971349][ T8406] Cannot create hsr debugfs directory [ 510.248939][ T5815] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 510.463315][ T5815] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.506950][ T5815] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 510.541067][ T5815] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 510.570897][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.579738][ T8479] Bluetooth: hci0: unsupported parameter 255 [ 510.607742][ T5815] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 510.616600][ T5815] usb 5-1: invalid MIDI out EP 0 [ 510.631975][ T8479] Bluetooth: hci0: unsupported parameter 255 [ 510.779190][ T5815] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 510.820443][ T8391] udevd[8391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.966851][ T8482] nvmet_tcp: address family 255 not supported [ 511.119529][ T28] audit: type=1800 audit(1788701604.139:42): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.661" name="addr_trtype" dev="configfs" ino=16956 res=0 errno=0 [ 513.071091][ T28] audit: type=1800 audit(1788701604.149:43): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.661" name="addr_traddr" dev="configfs" ino=16957 res=0 errno=0 [ 513.151080][ T971] usb 5-1: USB disconnect, device number 7 [ 513.410240][ T1098] hsr_slave_0: left promiscuous mode [ 513.433037][ T1098] hsr_slave_1: left promiscuous mode [ 513.482304][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.507035][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.542057][ T1098] bridge_slave_1: left allmulticast mode [ 513.562195][ T1098] bridge_slave_1: left promiscuous mode [ 513.577871][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.632872][ T1098] bridge_slave_0: left allmulticast mode [ 513.665444][ T1098] bridge_slave_0: left promiscuous mode [ 513.697026][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.539296][ T28] audit: type=1800 audit(1788701612.709:44): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.669" name="addr_trtype" dev="configfs" ino=17040 res=0 errno=0 [ 519.568380][ T8527] nvmet_tcp: address family 255 not supported [ 519.598897][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 519.725677][ T28] audit: type=1800 audit(1788701612.749:45): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.669" name="addr_traddr" dev="configfs" ino=17041 res=0 errno=0 [ 520.188913][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 520.394523][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.431791][ T8529] Bluetooth: hci0: unsupported parameter 255 [ 520.437878][ T8529] Bluetooth: hci0: unsupported parameter 255 [ 520.628671][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.714938][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 521.928661][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 521.936020][ T5814] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 521.961357][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.988885][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 522.016876][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 522.042663][ T1098] bond0 (unregistering): Released all slaves [ 522.049831][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.084039][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 522.109306][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.132333][ T8406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 525.174641][ T5814] usb 3-1: usb_control_msg returned -71 [ 525.180312][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 525.204859][ T8406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.276051][ T5814] usb 3-1: USB disconnect, device number 5 [ 525.309070][ T8406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.351467][ T8549] FAULT_INJECTION: forcing a failure. [ 525.351467][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 525.377520][ T8549] CPU: 1 PID: 8549 Comm: syz.4.676 Not tainted syzkaller #0 [ 525.384904][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.386315][ T8406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.394983][ T8549] Call Trace: [ 525.394995][ T8549] [ 525.395005][ T8549] dump_stack_lvl+0x18c/0x250 [ 525.395044][ T8549] ? show_regs_print_info+0x20/0x20 [ 525.395070][ T8549] ? load_image+0x420/0x420 [ 525.395094][ T8549] ? __might_sleep+0xe0/0xe0 [ 525.395123][ T8549] ? __lock_acquire+0x7d80/0x7d80 [ 525.395160][ T8549] should_fail_ex+0x394/0x4c0 [ 525.395196][ T8549] should_failslab+0x9/0x20 [ 525.395228][ T8549] slab_pre_alloc_hook+0x59/0x300 [ 525.395267][ T8549] kmem_cache_alloc+0x5a/0x2c0 [ 525.395297][ T8549] ? __kernfs_new_node+0xe5/0x7f0 [ 525.395370][ T8549] __kernfs_new_node+0xe5/0x7f0 [ 525.395406][ T8549] ? kernfs_new_node+0x260/0x260 [ 525.395432][ T8549] ? rwsem_wake+0xeb/0x130 [ 525.395454][ T8549] ? rwsem_spin_on_owner+0x2a0/0x2a0 [ 525.395486][ T8549] ? up_write+0x1be/0x410 [ 525.395511][ T8549] kernfs_new_node+0x14c/0x260 [ 525.395545][ T8549] __kernfs_create_file+0x4b/0x2e0 [ 525.395568][ T8549] sysfs_add_file_mode_ns+0x237/0x2f0 [ 525.395598][ T8549] sysfs_merge_group+0x184/0x320 [ 525.395624][ T8549] ? sysfs_remove_groups+0xa0/0xa0 [ 525.395664][ T8549] ? device_add_class_symlinks+0x240/0x240 [ 525.395713][ T8549] dpm_sysfs_add+0xd2/0x270 [ 525.395742][ T8549] device_add+0x55c/0xc40 [ 525.395770][ T8549] iommufd_test+0x121d/0x2a20 [ 525.395821][ T8549] ? iommufd_selftest_destroy+0xf0/0xf0 [ 525.530892][ T8549] ? __lock_acquire+0x7d80/0x7d80 [ 525.535958][ T8549] ? __lock_acquire+0x7d80/0x7d80 [ 525.541028][ T8549] ? __might_fault+0xaa/0x120 [ 525.545726][ T8549] ? __might_fault+0xaa/0x120 [ 525.550467][ T8549] iommufd_fops_ioctl+0x48b/0x540 [ 525.555521][ T8549] ? iommufd_ctx_put+0x40/0x40 [ 525.560312][ T8549] ? __fget_files+0x28/0x460 [ 525.564944][ T8549] ? bpf_lsm_file_ioctl+0x9/0x10 [ 525.569933][ T8549] ? security_file_ioctl+0x80/0xa0 [ 525.575099][ T8549] ? iommufd_ctx_put+0x40/0x40 [ 525.579897][ T8549] __se_sys_ioctl+0xfd/0x170 [ 525.584523][ T8549] do_syscall_64+0x55/0xb0 [ 525.588969][ T8549] ? clear_bhb_loop+0x40/0x90 [ 525.593678][ T8549] ? clear_bhb_loop+0x40/0x90 [ 525.598395][ T8549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.604329][ T8549] RIP: 0033:0x7f1089d9e159 [ 525.608781][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.628419][ T8549] RSP: 002b:00007f1087ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.636864][ T8549] RAX: ffffffffffffffda RBX: 00007f108a025fa0 RCX: 00007f1089d9e159 [ 525.644863][ T8549] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 525.652859][ T8549] RBP: 00007f1089e35024 R08: 0000000000000000 R09: 0000000000000000 [ 525.660851][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.668846][ T8549] R13: 00007f108a026038 R14: 00007f108a025fa0 R15: 00007fff497ec238 [ 525.676854][ T8549] [ 527.766893][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.854307][ T1098] IPVS: stop unused estimator thread 0... [ 527.881672][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.906046][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.913400][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.592809][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.600039][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.980526][ T8406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.285642][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.452964][ T28] audit: type=1800 audit(1788701625.629:46): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.677" name="addr_trtype" dev="configfs" ino=17280 res=0 errno=0 [ 532.480183][ T8600] nvmet_tcp: address family 255 not supported [ 532.778627][ T28] audit: type=1800 audit(1788701625.659:47): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.677" name="addr_traddr" dev="configfs" ino=17281 res=0 errno=0 [ 535.041894][ T8406] veth0_vlan: entered promiscuous mode [ 535.134222][ T8406] veth1_vlan: entered promiscuous mode [ 535.300190][ T8406] veth0_macvtap: entered promiscuous mode [ 535.330642][ T8406] veth1_macvtap: entered promiscuous mode [ 535.418045][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.469716][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.497249][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.539257][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.570829][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.612326][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.654427][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.688763][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.739088][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.780659][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.816609][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.850986][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.900873][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.932724][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.964913][ T8406] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.000911][ T8406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.009693][ T8406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.063520][ T8406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.182063][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.189958][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.284931][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.351076][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.731102][ T28] audit: type=1800 audit(1788701633.909:48): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.696" name="addr_trtype" dev="configfs" ino=17607 res=0 errno=0 [ 540.763599][ T8651] nvmet_tcp: address family 255 not supported [ 540.970996][ T28] audit: type=1800 audit(1788701633.939:49): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.696" name="addr_traddr" dev="configfs" ino=17608 res=0 errno=0 [ 541.342653][ T8665] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 543.760832][ T8672] comedi comedi1: reset error (fatal) [ 546.284930][ T8674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.318325][ T28] audit: type=1800 audit(1788701641.499:50): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.707" name="addr_trtype" dev="configfs" ino=17669 res=0 errno=0 [ 548.354628][ T8696] nvmet_tcp: address family 255 not supported [ 548.484688][ T28] audit: type=1800 audit(1788701641.529:51): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.707" name="addr_traddr" dev="configfs" ino=17670 res=0 errno=0 [ 550.326175][ T8727] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 550.350144][ T8727] FAULT_INJECTION: forcing a failure. [ 550.350144][ T8727] name fail_futex, interval 1, probability 0, space 0, times 1 [ 550.370182][ T8727] CPU: 1 PID: 8727 Comm: syz.2.713 Not tainted syzkaller #0 [ 550.377545][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.387655][ T8727] Call Trace: [ 550.391019][ T8727] [ 550.393993][ T8727] dump_stack_lvl+0x18c/0x250 [ 550.398741][ T8727] ? show_regs_print_info+0x20/0x20 [ 550.403993][ T8727] ? load_image+0x420/0x420 [ 550.408572][ T8727] should_fail_ex+0x394/0x4c0 [ 550.413313][ T8727] get_futex_key+0x136/0x1030 [ 550.418056][ T8727] ? futex_setup_timer+0xc0/0xc0 [ 550.423047][ T8727] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 550.429086][ T8727] ? __lock_acquire+0x7d80/0x7d80 [ 550.434175][ T8727] ? preempt_schedule+0xc0/0xd0 [ 550.439172][ T8727] futex_wait_setup+0xbc/0x270 [ 550.443992][ T8727] ? futex_wait_multiple+0x920/0x920 [ 550.449336][ T8727] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 550.455277][ T8727] ? _raw_spin_unlock+0x40/0x40 [ 550.460196][ T8727] futex_wait+0x1bc/0x5c0 [ 550.464602][ T8727] ? futex_wait_setup+0x270/0x270 [ 550.469708][ T8727] ? lock_chain_count+0x20/0x20 [ 550.474624][ T8727] do_futex+0x2ff/0x3e0 [ 550.478850][ T8727] ? __ia32_sys_get_robust_list+0x110/0x110 [ 550.484798][ T8727] ? slab_free_freelist_hook+0x130/0x1a0 [ 550.490498][ T8727] __se_sys_futex+0x3a9/0x440 [ 550.495233][ T8727] ? __x64_sys_futex+0xf0/0xf0 [ 550.500052][ T8727] ? __x64_sys_futex+0x21/0xf0 [ 550.504869][ T8727] do_syscall_64+0x55/0xb0 [ 550.509344][ T8727] ? clear_bhb_loop+0x40/0x90 [ 550.514073][ T8727] ? clear_bhb_loop+0x40/0x90 [ 550.518809][ T8727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.524774][ T8727] RIP: 0033:0x7f0f4cd9e159 [ 550.529243][ T8727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.548904][ T8727] RSP: 002b:00007f0f4dd340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 550.557395][ T8727] RAX: ffffffffffffffda RBX: 00007f0f4d025fa8 RCX: 00007f0f4cd9e159 [ 550.565419][ T8727] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f4d025fa8 [ 550.573446][ T8727] RBP: 00007f0f4d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 550.581475][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.589503][ T8727] R13: 00007f0f4d026038 R14: 00007ffed1460e50 R15: 00007ffed1460f38 [ 550.597545][ T8727] [ 550.619260][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 550.801314][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 552.546240][ T27] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 552.580919][ T27] usb 6-1: can't read configurations, error -71 [ 552.764736][ T28] audit: type=1800 audit(1788701645.939:52): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.717" name="addr_trtype" dev="configfs" ino=18722 res=0 errno=0 [ 552.790113][ T8747] nvmet_tcp: address family 255 not supported [ 553.104910][ T28] audit: type=1800 audit(1788701645.969:53): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.717" name="addr_traddr" dev="configfs" ino=18723 res=0 errno=0 [ 555.469630][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 555.660948][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 555.691731][ T27] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 555.719674][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 555.744867][ T27] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 555.798953][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.848693][ T27] usb 6-1: config 0 descriptor?? [ 556.335950][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x2 [ 556.364761][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x2 [ 556.380990][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 556.388049][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 556.409969][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 556.425306][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.070897][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.077955][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.091854][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.098890][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.107779][ T27] saitek 0003:06A3:0CCD.0002: unknown main item tag 0x0 [ 558.115144][ T27] saitek 0003:06A3:0CCD.0002: item fetching failed at offset 68/70 [ 558.124422][ T27] saitek 0003:06A3:0CCD.0002: parse failed [ 558.130415][ T27] saitek: probe of 0003:06A3:0CCD.0002 failed with error -22 [ 558.202686][ T173] usb 6-1: USB disconnect, device number 4 [ 558.431534][ T8776] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 559.236761][ T8797] nvmet_tcp: address family 255 not supported [ 559.257222][ T28] audit: type=1800 audit(1788701652.409:54): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.728" name="addr_trtype" dev="configfs" ino=18788 res=0 errno=0 [ 559.567552][ T28] audit: type=1800 audit(1788701652.409:55): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.728" name="addr_traddr" dev="configfs" ino=18789 res=0 errno=0 [ 563.947552][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.954296][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.003319][ T8821] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 564.080499][ T8821] FAULT_INJECTION: forcing a failure. [ 564.080499][ T8821] name fail_futex, interval 1, probability 0, space 0, times 0 [ 564.158460][ T8821] CPU: 1 PID: 8821 Comm: syz.4.735 Not tainted syzkaller #0 [ 564.165881][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.175994][ T8821] Call Trace: [ 564.179314][ T8821] [ 564.182288][ T8821] dump_stack_lvl+0x18c/0x250 [ 564.187027][ T8821] ? show_regs_print_info+0x20/0x20 [ 564.192278][ T8821] ? load_image+0x420/0x420 [ 564.196837][ T8821] ? verify_lock_unused+0x140/0x140 [ 564.202097][ T8821] should_fail_ex+0x394/0x4c0 [ 564.206838][ T8821] get_futex_key+0x136/0x1030 [ 564.211567][ T8821] ? kasan_set_track+0x4e/0x70 [ 564.216382][ T8821] ? kasan_save_free_info+0x28/0x40 [ 564.221633][ T8821] ? ____kasan_slab_free+0x126/0x1f0 [ 564.226974][ T8821] ? __kmem_cache_free+0xba/0x1f0 [ 564.232060][ T8821] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.238188][ T8821] ? futex_setup_timer+0xc0/0xc0 [ 564.243187][ T8821] futex_wake+0x127/0x4f0 [ 564.247564][ T8821] ? task_mm_cid_work+0x31d/0x770 [ 564.252658][ T8821] ? futex_wake_mark+0x150/0x150 [ 564.257667][ T8821] do_futex+0x35d/0x3e0 [ 564.261888][ T8821] ? __ia32_sys_get_robust_list+0x110/0x110 [ 564.267869][ T8821] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 564.274031][ T8821] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.279288][ T8821] __se_sys_futex+0x3a9/0x440 [ 564.284028][ T8821] ? __x64_sys_futex+0xf0/0xf0 [ 564.288858][ T8821] ? __x64_sys_futex+0x21/0xf0 [ 564.293677][ T8821] do_syscall_64+0x55/0xb0 [ 564.298148][ T8821] ? clear_bhb_loop+0x40/0x90 [ 564.302870][ T8821] ? clear_bhb_loop+0x40/0x90 [ 564.307603][ T8821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.313567][ T8821] RIP: 0033:0x7f1089d9e159 [ 564.318024][ T8821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.338030][ T8821] RSP: 002b:00007f1087ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 564.346536][ T8821] RAX: ffffffffffffffda RBX: 00007f108a025fa8 RCX: 00007f1089d9e159 [ 564.354581][ T8821] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f108a025fac [ 564.362605][ T8821] RBP: 00007f108a025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 564.370644][ T8821] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 564.378667][ T8821] R13: 00007f108a026038 R14: 00007fff497ec150 R15: 00007fff497ec238 [ 564.386705][ T8821] [ 565.233705][ T8834] 9pnet_fd: p9_fd_create_tcp (8834): problem connecting socket to 127.0.0.1 [ 565.519321][ T8839] nvmet_tcp: address family 255 not supported [ 565.530983][ T28] audit: type=1800 audit(1788701658.689:56): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.739" name="addr_trtype" dev="configfs" ino=18869 res=0 errno=0 [ 565.930394][ T28] audit: type=1800 audit(1788701658.699:57): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.739" name="addr_traddr" dev="configfs" ino=18870 res=0 errno=0 [ 568.619238][ T8866] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 569.871232][ T8851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.110816][ T8884] comedi comedi1: reset error (fatal) [ 571.571618][ T8899] nvmet_tcp: address family 255 not supported [ 571.975377][ T28] audit: type=1800 audit(1788701664.749:58): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.750" name="addr_trtype" dev="configfs" ino=17907 res=0 errno=0 [ 572.310892][ T28] audit: type=1800 audit(1788701664.749:59): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.750" name="addr_traddr" dev="configfs" ino=17908 res=0 errno=0 [ 572.612611][ T8903] Cannot find add_set index 0 as target [ 575.652728][ T8922] nvmet: Invalid value 'tc' for trtype [ 575.667949][ T8922] nvmet_tcp: address family 255 not supported [ 575.691573][ T28] audit: type=1800 audit(1788701668.829:60): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.752" name="addr_trtype" dev="configfs" ino=18995 res=0 errno=0 [ 576.155696][ T28] audit: type=1800 audit(1788701668.849:61): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.752" name="addr_traddr" dev="configfs" ino=18996 res=0 errno=0 [ 576.522367][ T8925] 9pnet_fd: p9_fd_create_tcp (8925): problem connecting socket to 127.0.0.1 [ 578.216519][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 578.321194][ T8935] usb usb9: usbfs: process 8935 (syz.1.758) did not claim interface 0 before use [ 578.803481][ T8948] bridge0: entered promiscuous mode [ 578.809620][ T8948] vlan2: entered promiscuous mode [ 578.890858][ T5816] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 579.181317][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 579.397467][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 579.498350][ T5816] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 579.601806][ T5816] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 579.690964][ T971] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 579.753279][ T5816] usb 3-1: config 14 has no interface number 0 [ 579.760064][ T5816] usb 3-1: config 14 has no interface number 1 [ 579.766434][ T5816] usb 3-1: too many endpoints for config 14 interface 57 altsetting 216: 145, using maximum allowed: 30 [ 579.779015][ T5816] usb 3-1: config 14 interface 57 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 579.800848][ T5816] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 579.826116][ T5816] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 579.868260][ T5816] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 579.911184][ T5816] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 579.919297][ T971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.930824][ T5816] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.951619][ T971] usb 2-1: not running at top speed; connect to a high speed hub [ 579.971041][ T5816] usb 3-1: config 14 interface 57 has no altsetting 0 [ 579.981314][ T971] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 579.996438][ T5816] usb 3-1: config 14 interface 228 has no altsetting 0 [ 580.016139][ T971] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 580.032072][ T5816] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 580.040720][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.070814][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.079580][ T5816] usb 3-1: Product: syz [ 580.090843][ T971] usb 2-1: Product: syz [ 580.105482][ T971] usb 2-1: Manufacturer: syz [ 580.109679][ T5816] usb 3-1: Manufacturer: syz [ 580.110138][ T971] usb 2-1: SerialNumber: syz [ 580.126578][ T5816] usb 3-1: SerialNumber: syz [ 580.427311][ T971] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 580.623668][ T971] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 580.625977][ T5816] legousbtower 3-1:14.57: interrupt endpoints not found [ 580.653114][ T971] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 580.697572][ T971] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 580.741561][ T971] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 580.791141][ T971] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 580.833319][ T971] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 580.834679][ T5816] legousbtower 3-1:14.228: interrupt endpoints not found [ 581.101434][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 581.284536][ T28] audit: type=1800 audit(1788701674.459:62): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.759" name="addr_trtype" dev="configfs" ino=18018 res=0 errno=0 [ 581.315268][ T8973] nvmet_tcp: address family 255 not supported [ 581.499200][ T28] audit: type=1800 audit(1788701674.499:63): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.759" name="addr_traddr" dev="configfs" ino=18019 res=0 errno=0 [ 581.569989][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 582.067166][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 582.083890][ T5814] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 582.094262][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.106046][ T5814] usb 5-1: Product: syz [ 582.118151][ T5814] usb 5-1: Manufacturer: syz [ 582.124202][ T971] usb 2-1: USB disconnect, device number 10 [ 582.130851][ T5814] usb 5-1: SerialNumber: syz [ 582.142288][ T5814] usb 5-1: config 0 descriptor?? [ 582.362871][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.402978][ T5816] usb 5-1: USB disconnect, device number 8 [ 582.541385][ T8985] nvmet: Invalid value 'tc' for trtype [ 582.557407][ T8985] nvmet_tcp: address family 255 not supported [ 583.298599][ T28] audit: type=1800 audit(1788701675.719:64): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.766" name="addr_trtype" dev="configfs" ino=19055 res=0 errno=0 [ 583.450987][ T28] audit: type=1800 audit(1788701675.739:65): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.766" name="addr_traddr" dev="configfs" ino=19056 res=0 errno=0 [ 583.595702][ T8] usb 3-1: USB disconnect, device number 6 [ 585.372361][ T8997] usb usb9: usbfs: process 8997 (syz.2.770) did not claim interface 0 before use [ 585.661271][ T173] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 585.706829][ T28] audit: type=1800 audit(1788701678.889:66): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.774" name="addr_trtype" dev="configfs" ino=18053 res=0 errno=0 [ 585.737029][ T9009] nvmet_tcp: address family 255 not supported [ 585.905650][ T28] audit: type=1800 audit(1788701678.919:67): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.774" name="addr_traddr" dev="configfs" ino=18054 res=0 errno=0 [ 585.927362][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 586.804974][ T9017] nvmet: Invalid value 'tc' for trtype [ 586.817939][ T28] audit: type=1800 audit(1788701679.979:68): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.776" name="addr_trtype" dev="configfs" ino=18061 res=0 errno=0 [ 586.845931][ T9017] nvmet_tcp: address family 255 not supported [ 587.250019][ T28] audit: type=1800 audit(1788701679.999:69): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.776" name="addr_traddr" dev="configfs" ino=18062 res=0 errno=0 [ 587.821613][ T173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 587.829400][ T173] usb 2-1: no configurations [ 587.848104][ T173] usb 2-1: can't read configurations, error -22 [ 587.876457][ T9023] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.777'. [ 587.932010][ T9021] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.777'. [ 588.290011][ T9033] netlink: 8180 bytes leftover after parsing attributes in process `syz.5.772'. [ 589.019942][ T9065] usb usb9: usbfs: process 9065 (syz.2.782) did not claim interface 0 before use [ 589.508903][ T9074] nvmet_tcp: address family 255 not supported [ 589.539252][ T28] audit: type=1800 audit(1788701682.679:70): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.784" name="addr_trtype" dev="configfs" ino=18135 res=0 errno=0 [ 589.859685][ T28] audit: type=1800 audit(1788701682.689:71): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.784" name="addr_traddr" dev="configfs" ino=18136 res=0 errno=0 [ 590.464232][ T28] audit: type=1800 audit(1788701683.649:72): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.785" name="addr_trtype" dev="configfs" ino=19219 res=0 errno=0 [ 590.490425][ T9079] nvmet_tcp: address family 255 not supported [ 591.634578][ T9086] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 592.710526][ T9086] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 592.884472][ T9106] usb usb9: usbfs: process 9106 (syz.5.791) did not claim interface 0 before use [ 593.277134][ T28] audit: type=1800 audit(1788701686.459:73): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.793" name="addr_trtype" dev="configfs" ino=18175 res=0 errno=0 [ 593.307686][ T9117] nvmet_tcp: address family 255 not supported [ 595.641745][ T28] audit: type=1800 audit(1788701686.489:74): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.793" name="addr_traddr" dev="configfs" ino=18176 res=0 errno=0 [ 596.798561][ T9127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.797'. [ 597.155803][ T9138] usb usb9: usbfs: process 9138 (syz.5.801) did not claim interface 0 before use [ 597.379066][ T9146] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 598.329297][ T9158] nvmet_tcp: address family 255 not supported [ 598.343745][ T28] audit: type=1800 audit(1788701691.509:75): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.806" name="addr_trtype" dev="configfs" ino=19371 res=0 errno=0 [ 598.487870][ T28] audit: type=1800 audit(1788701691.509:76): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.806" name="addr_traddr" dev="configfs" ino=19372 res=0 errno=0 [ 598.646013][ T9164] autofs4:pid:9164:autofs_fill_super: called with bogus options [ 600.035248][ T9176] usb usb9: usbfs: process 9176 (syz.4.811) did not claim interface 0 before use [ 600.207289][ T28] audit: type=1800 audit(1788701693.389:77): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.795" name="addr_trtype" dev="configfs" ino=19397 res=0 errno=0 [ 600.240160][ T9180] nvmet_tcp: address family 255 not supported [ 601.198239][ T9191] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 601.330852][ T5815] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 601.584157][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 601.785112][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 601.906706][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.053086][ T5815] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 602.112072][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.174539][ T5815] usb 2-1: config 0 descriptor?? [ 602.207746][ T5815] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 603.375307][ T28] audit: type=1800 audit(1788701696.559:78): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.823" name="addr_trtype" dev="configfs" ino=18312 res=0 errno=0 [ 603.407533][ T9231] nvmet_tcp: address family 255 not supported [ 603.451638][ T5815] gspca_vc032x: reg_w err -71 [ 603.509276][ T5815] vc032x: probe of 2-1:0.0 failed with error -71 [ 603.704811][ T5815] usb 2-1: USB disconnect, device number 13 [ 604.244778][ T9236] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 604.318056][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.827'. [ 604.546301][ T28] audit: type=1800 audit(1788701697.729:79): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.828" name="addr_trtype" dev="configfs" ino=18331 res=0 errno=0 [ 604.571672][ T9247] nvmet: Invalid value 'tc' for trtype [ 604.579290][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 604.594366][ T9247] nvmet_tcp: address family 255 not supported [ 604.800075][ T28] audit: type=1800 audit(1788701697.769:80): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.828" name="addr_traddr" dev="configfs" ino=18332 res=0 errno=0 [ 604.941046][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 605.047943][ T5815] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 605.183440][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.351183][ T5815] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 605.417661][ T5815] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 605.510635][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.542877][ T5815] usb 3-1: Product: syz [ 605.547136][ T5815] usb 3-1: Manufacturer: syz [ 605.583656][ T5815] usb 3-1: SerialNumber: syz [ 605.634742][ T5815] usb 3-1: can't set config #1, error -71 [ 605.667587][ T5815] usb 3-1: USB disconnect, device number 7 [ 605.768178][ T9260] nvmet_tcp: address family 255 not supported [ 605.783703][ T28] audit: type=1800 audit(1788701698.939:81): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.833" name="addr_trtype" dev="configfs" ino=18348 res=0 errno=0 [ 605.891089][ T5816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 606.098039][ T28] audit: type=1800 audit(1788701698.949:82): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.833" name="addr_traddr" dev="configfs" ino=18349 res=0 errno=0 [ 606.262719][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.405967][ T5816] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 606.561151][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.628262][ T9264] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 606.890699][ T5816] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 606.966051][ T5816] wwan wwan0: port wwan0qmi0 attached [ 606.995663][ T9277] capability: warning: `syz.2.839' uses deprecated v2 capabilities in a way that may be insecure [ 607.185023][ T5816] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 2e:8a:4c:d4:3d:4f [ 607.321810][ T9285] nvmet: Invalid value 'tc' for trtype [ 607.329313][ T9285] nvmet_tcp: address family 255 not supported [ 607.337981][ T28] audit: type=1800 audit(1788701700.499:83): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.841" name="addr_trtype" dev="configfs" ino=19614 res=0 errno=0 [ 607.519291][ T28] audit: type=1800 audit(1788701700.509:84): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.841" name="addr_traddr" dev="configfs" ino=19615 res=0 errno=0 [ 607.806451][ T9292] nvmet_tcp: address family 255 not supported [ 608.441060][ T23] usb 2-1: USB disconnect, device number 14 [ 608.449698][ T23] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 608.715107][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 608.854407][ T9301] FAULT_INJECTION: forcing a failure. [ 608.854407][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 609.030955][ T9301] CPU: 0 PID: 9301 Comm: syz.5.846 Not tainted syzkaller #0 [ 609.038332][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.048451][ T9301] Call Trace: [ 609.051772][ T9301] [ 609.054741][ T9301] dump_stack_lvl+0x18c/0x250 [ 609.059481][ T9301] ? show_regs_print_info+0x20/0x20 [ 609.064737][ T9301] ? load_image+0x420/0x420 [ 609.069290][ T9301] ? __might_sleep+0xe0/0xe0 [ 609.073927][ T9301] ? __lock_acquire+0x7d80/0x7d80 [ 609.078996][ T9301] should_fail_ex+0x394/0x4c0 [ 609.083701][ T9301] should_failslab+0x9/0x20 [ 609.088267][ T9301] slab_pre_alloc_hook+0x59/0x300 [ 609.093332][ T9301] ? vfs_write+0x5de/0x9a0 [ 609.097810][ T9301] kmem_cache_alloc+0x5a/0x2c0 [ 609.102629][ T9301] ? getname_flags+0xbb/0x500 [ 609.107334][ T9301] getname_flags+0xbb/0x500 [ 609.111862][ T9301] do_sys_openat2+0xda/0x1d0 [ 609.116488][ T9301] ? do_sys_open+0xe0/0xe0 [ 609.120969][ T9301] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 609.127025][ T9301] ? lock_chain_count+0x20/0x20 [ 609.131985][ T9301] __x64_sys_openat+0x139/0x160 [ 609.136901][ T9301] do_syscall_64+0x55/0xb0 [ 609.141381][ T9301] ? clear_bhb_loop+0x40/0x90 [ 609.146115][ T9301] ? clear_bhb_loop+0x40/0x90 [ 609.150846][ T9301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.156798][ T9301] RIP: 0033:0x7ff20639e159 [ 609.161268][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.180940][ T9301] RSP: 002b:00007ff2071c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.189423][ T9301] RAX: ffffffffffffffda RBX: 00007ff206625fa0 RCX: 00007ff20639e159 [ 609.197524][ T9301] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 609.205531][ T9301] RBP: 00007ff206435024 R08: 0000000000000000 R09: 0000000000000000 [ 609.213626][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.221613][ T9301] R13: 00007ff206626038 R14: 00007ff206625fa0 R15: 00007ffdc3bc5428 [ 609.229617][ T9301] [ 611.534011][ T28] audit: type=1800 audit(1788701704.719:85): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="addr_trtype" dev="configfs" ino=18422 res=0 errno=0 [ 611.556008][ T9327] nvmet_tcp: address family 255 not supported [ 611.641950][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 611.831911][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 611.842780][ T5815] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 611.938231][ T9336] nvmet_tcp: address family 255 not supported [ 611.952775][ T28] audit: type=1800 audit(1788701705.109:86): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.853" name="addr_trtype" dev="configfs" ino=19686 res=0 errno=0 [ 612.208608][ T28] audit: type=1800 audit(1788701705.119:87): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.853" name="addr_traddr" dev="configfs" ino=19687 res=0 errno=0 [ 612.604397][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.624297][ T5815] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 612.637683][ T5815] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 612.657397][ T9338] FAULT_INJECTION: forcing a failure. [ 612.657397][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 612.661375][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.684260][ T5815] usb 5-1: Product: syz [ 612.688519][ T5815] usb 5-1: Manufacturer: syz [ 612.693331][ T5815] usb 5-1: SerialNumber: syz [ 612.699448][ T9338] CPU: 0 PID: 9338 Comm: syz.2.856 Not tainted syzkaller #0 [ 612.706844][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.716943][ T9338] Call Trace: [ 612.720275][ T9338] [ 612.723249][ T9338] dump_stack_lvl+0x18c/0x250 [ 612.727964][ T9338] ? show_regs_print_info+0x20/0x20 [ 612.733192][ T9338] ? load_image+0x420/0x420 [ 612.737722][ T9338] ? __might_fault+0xaa/0x120 [ 612.742443][ T9338] ? __lock_acquire+0x7d80/0x7d80 [ 612.747513][ T9338] should_fail_ex+0x394/0x4c0 [ 612.752234][ T9338] strncpy_from_user+0x36/0x2f0 [ 612.757133][ T9338] getname_flags+0xf6/0x500 [ 612.761694][ T9338] do_sys_openat2+0xda/0x1d0 [ 612.766321][ T9338] ? do_sys_open+0xe0/0xe0 [ 612.770777][ T9338] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 612.776794][ T9338] ? lock_chain_count+0x20/0x20 [ 612.781677][ T9338] __x64_sys_openat+0x139/0x160 [ 612.786562][ T9338] do_syscall_64+0x55/0xb0 [ 612.791004][ T9338] ? clear_bhb_loop+0x40/0x90 [ 612.795711][ T9338] ? clear_bhb_loop+0x40/0x90 [ 612.800416][ T9338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.806343][ T9338] RIP: 0033:0x7f0f4cd9e159 [ 612.810789][ T9338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.830419][ T9338] RSP: 002b:00007f0f4dd34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 612.838860][ T9338] RAX: ffffffffffffffda RBX: 00007f0f4d025fa0 RCX: 00007f0f4cd9e159 [ 612.846859][ T9338] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 612.854886][ T9338] RBP: 00007f0f4ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 612.862880][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.870876][ T9338] R13: 00007f0f4d026038 R14: 00007f0f4d025fa0 R15: 00007ffed1460f38 [ 612.878888][ T9338] [ 614.737119][ T5815] usb 5-1: can't set config #1, error -71 [ 614.754688][ T5815] usb 5-1: USB disconnect, device number 9 [ 614.900492][ T28] audit: type=1800 audit(1788701708.079:88): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.862" name="addr_trtype" dev="configfs" ino=19769 res=0 errno=0 [ 614.929141][ T9360] nvmet_tcp: address family 255 not supported [ 615.102063][ T9367] syz.4.865 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 615.225678][ T9371] nvmet_tcp: address family 255 not supported [ 615.255007][ T28] audit: type=1800 audit(1788701708.389:89): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.866" name="addr_trtype" dev="configfs" ino=20494 res=0 errno=0 [ 615.618974][ T28] audit: type=1800 audit(1788701708.399:90): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.866" name="addr_traddr" dev="configfs" ino=20495 res=0 errno=0 [ 616.163534][ T9373] FAULT_INJECTION: forcing a failure. [ 616.163534][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.210830][ T9373] CPU: 1 PID: 9373 Comm: syz.5.867 Not tainted syzkaller #0 [ 616.218220][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.228329][ T9373] Call Trace: [ 616.231660][ T9373] [ 616.234638][ T9373] dump_stack_lvl+0x18c/0x250 [ 616.239391][ T9373] ? show_regs_print_info+0x20/0x20 [ 616.244661][ T9373] ? load_image+0x420/0x420 [ 616.249229][ T9373] ? __might_fault+0xaa/0x120 [ 616.253982][ T9373] ? __lock_acquire+0x7d80/0x7d80 [ 616.259082][ T9373] should_fail_ex+0x394/0x4c0 [ 616.263832][ T9373] strncpy_from_user+0x36/0x2f0 [ 616.268752][ T9373] getname_flags+0xf6/0x500 [ 616.273341][ T9373] do_sys_openat2+0xda/0x1d0 [ 616.278011][ T9373] ? do_sys_open+0xe0/0xe0 [ 616.282507][ T9373] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 616.288572][ T9373] ? lock_chain_count+0x20/0x20 [ 616.293508][ T9373] __x64_sys_openat+0x139/0x160 [ 616.298464][ T9373] do_syscall_64+0x55/0xb0 [ 616.303042][ T9373] ? clear_bhb_loop+0x40/0x90 [ 616.307791][ T9373] ? clear_bhb_loop+0x40/0x90 [ 616.312547][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.318517][ T9373] RIP: 0033:0x7ff20639e159 [ 616.323020][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.342708][ T9373] RSP: 002b:00007ff2071c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 616.351189][ T9373] RAX: ffffffffffffffda RBX: 00007ff206625fa0 RCX: 00007ff20639e159 [ 616.359229][ T9373] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 616.367261][ T9373] RBP: 00007ff206435024 R08: 0000000000000000 R09: 0000000000000000 [ 616.375295][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.383324][ T9373] R13: 00007ff206626038 R14: 00007ff206625fa0 R15: 00007ffdc3bc5428 [ 616.391379][ T9373] [ 617.013237][ T28] audit: type=1800 audit(1788701710.199:91): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.874" name="addr_trtype" dev="configfs" ino=19812 res=0 errno=0 [ 617.039541][ T9392] nvmet_tcp: address family 255 not supported [ 617.351240][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 617.611217][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 617.699566][ T23] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 617.780295][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.835408][ T23] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 617.873609][ T23] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 617.904243][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.012109][ T9397] nvmet_tcp: address family 255 not supported [ 618.025306][ T28] audit: type=1800 audit(1788701711.189:92): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.876" name="addr_trtype" dev="configfs" ino=20564 res=0 errno=0 [ 618.801348][ T23] usb 5-1: Product: syz [ 618.805598][ T23] usb 5-1: Manufacturer: syz [ 618.810198][ T23] usb 5-1: SerialNumber: syz [ 618.824002][ T28] audit: type=1800 audit(1788701711.189:93): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.876" name="addr_traddr" dev="configfs" ino=20565 res=0 errno=0 [ 619.068662][ T23] usb 5-1: USB disconnect, device number 10 [ 619.098177][ T8390] udevd[8390]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 621.911078][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 622.143462][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 622.153801][ T23] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 622.164368][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.184642][ T23] usb 5-1: Product: syz [ 622.188886][ T23] usb 5-1: Manufacturer: syz [ 622.202551][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 622.228557][ T23] usb 5-1: SerialNumber: syz [ 622.237805][ T23] usb 5-1: config 0 descriptor?? [ 622.252809][ T23] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 622.277930][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 622.291008][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 622.322040][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 622.327889][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 622.374089][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.395950][ T23] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 622.415864][ T23] usb 5-1: media controller created [ 622.503459][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.573831][ T23] usb 5-1: selecting invalid altsetting 3 [ 622.596381][ T23] ttusb2: set interface to alts=3 failed [ 622.665242][ T23] DVB: Unable to find symbol tda10086_attach() [ 622.677381][ T23] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 622.702598][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 622.708431][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 622.741908][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 622.747754][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 622.796047][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 622.851194][ T23] usb 5-1: USB disconnect, device number 11 [ 622.976359][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 623.054062][ T8390] udevd[8390]: setting mode of /dev/bus/usb/005/011 to 020664 failed: No such file or directory [ 623.125019][ T8390] udevd[8390]: setting owner of /dev/bus/usb/005/011 to uid=0, gid=0 failed: No such file or directory [ 623.303061][ T9422] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 623.993947][ T9424] nvmet_tcp: address family 255 not supported [ 624.021715][ T28] audit: type=1800 audit(1788701717.179:94): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.883" name="addr_trtype" dev="configfs" ino=19859 res=0 errno=0 [ 624.155020][ T28] audit: type=1800 audit(1788701717.179:95): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.883" name="addr_traddr" dev="configfs" ino=19860 res=0 errno=0 [ 624.508315][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.514869][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.871207][ T5815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 627.926150][ T9444] FAULT_INJECTION: forcing a failure. [ 627.926150][ T9444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.941311][ T9444] CPU: 1 PID: 9444 Comm: syz.1.879 Not tainted syzkaller #0 [ 627.948677][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.958773][ T9444] Call Trace: [ 627.962070][ T9444] [ 627.965033][ T9444] dump_stack_lvl+0x18c/0x250 [ 627.969732][ T9444] ? show_regs_print_info+0x20/0x20 [ 627.974965][ T9444] ? load_image+0x420/0x420 [ 627.979509][ T9444] ? __might_fault+0xaa/0x120 [ 627.984222][ T9444] ? __lock_acquire+0x7d80/0x7d80 [ 627.989280][ T9444] should_fail_ex+0x394/0x4c0 [ 627.993998][ T9444] strncpy_from_user+0x36/0x2f0 [ 627.998889][ T9444] getname_flags+0xf6/0x500 [ 628.003448][ T9444] do_sys_openat2+0xda/0x1d0 [ 628.008072][ T9444] ? do_sys_open+0xe0/0xe0 [ 628.012523][ T9444] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 628.018534][ T9444] ? lock_chain_count+0x20/0x20 [ 628.023419][ T9444] __x64_sys_openat+0x139/0x160 [ 628.028400][ T9444] do_syscall_64+0x55/0xb0 [ 628.032856][ T9444] ? clear_bhb_loop+0x40/0x90 [ 628.037566][ T9444] ? clear_bhb_loop+0x40/0x90 [ 628.042274][ T9444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.048204][ T9444] RIP: 0033:0x7f80f779e159 [ 628.052644][ T9444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.072277][ T9444] RSP: 002b:00007f80f86f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 628.080716][ T9444] RAX: ffffffffffffffda RBX: 00007f80f7a25fa0 RCX: 00007f80f779e159 [ 628.088738][ T9444] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 628.096753][ T9444] RBP: 00007f80f7835024 R08: 0000000000000000 R09: 0000000000000000 [ 628.104781][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.112814][ T9444] R13: 00007f80f7a26038 R14: 00007f80f7a25fa0 R15: 00007ffc868807f8 [ 628.120844][ T9444] [ 628.132247][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.173150][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.330274][ T5815] usb 5-1: string descriptor 0 read error: -71 [ 628.360248][ T5815] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.400978][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.444280][ T5815] usb 5-1: can't set config #1, error -71 [ 628.465743][ T5815] usb 5-1: USB disconnect, device number 12 [ 628.716045][ T9451] nvmet_tcp: address family 255 not supported [ 628.725625][ T28] audit: type=1800 audit(1788701721.889:96): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.892" name="addr_trtype" dev="configfs" ino=19903 res=0 errno=0 [ 628.999715][ T28] audit: type=1800 audit(1788701721.889:97): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.892" name="addr_traddr" dev="configfs" ino=19904 res=0 errno=0 [ 629.562816][ T9454] nvmet_tcp: address family 255 not supported [ 629.570825][ T28] audit: type=1800 audit(1788701722.729:98): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.894" name="addr_trtype" dev="configfs" ino=20650 res=0 errno=0 [ 630.039175][ T28] audit: type=1800 audit(1788701722.739:99): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.894" name="addr_traddr" dev="configfs" ino=20651 res=0 errno=0 [ 632.581078][ T9467] FAULT_INJECTION: forcing a failure. [ 632.581078][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 632.615430][ T9467] CPU: 0 PID: 9467 Comm: syz.2.899 Not tainted syzkaller #0 [ 632.622838][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.632954][ T9467] Call Trace: [ 632.636277][ T9467] [ 632.639254][ T9467] dump_stack_lvl+0x18c/0x250 [ 632.644008][ T9467] ? show_regs_print_info+0x20/0x20 [ 632.649269][ T9467] ? load_image+0x420/0x420 [ 632.653813][ T9467] ? __might_sleep+0xe0/0xe0 [ 632.658422][ T9467] ? __lock_acquire+0x7d80/0x7d80 [ 632.663503][ T9467] should_fail_ex+0x394/0x4c0 [ 632.668249][ T9467] should_failslab+0x9/0x20 [ 632.672830][ T9467] slab_pre_alloc_hook+0x59/0x300 [ 632.677927][ T9467] ? vfs_write+0x5de/0x9a0 [ 632.682425][ T9467] kmem_cache_alloc+0x5a/0x2c0 [ 632.687282][ T9467] ? getname_flags+0xbb/0x500 [ 632.692038][ T9467] getname_flags+0xbb/0x500 [ 632.696614][ T9467] do_sys_openat2+0xda/0x1d0 [ 632.701271][ T9467] ? do_sys_open+0xe0/0xe0 [ 632.705739][ T9467] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 632.711782][ T9467] ? lock_chain_count+0x20/0x20 [ 632.716695][ T9467] __x64_sys_openat+0x139/0x160 [ 632.721605][ T9467] do_syscall_64+0x55/0xb0 [ 632.726073][ T9467] ? clear_bhb_loop+0x40/0x90 [ 632.730807][ T9467] ? clear_bhb_loop+0x40/0x90 [ 632.735549][ T9467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.741498][ T9467] RIP: 0033:0x7f0f4cd9e159 [ 632.745967][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.765631][ T9467] RSP: 002b:00007f0f4dd34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.774108][ T9467] RAX: ffffffffffffffda RBX: 00007f0f4d025fa0 RCX: 00007f0f4cd9e159 [ 632.782128][ T9467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 632.790145][ T9467] RBP: 00007f0f4ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 632.798161][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.806186][ T9467] R13: 00007f0f4d026038 R14: 00007f0f4d025fa0 R15: 00007ffed1460f38 [ 632.814235][ T9467] [ 633.451943][ T9476] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 634.011742][ T28] audit: type=1800 audit(1788701727.199:100): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.903" name="addr_trtype" dev="configfs" ino=20678 res=0 errno=0 [ 634.042122][ T9487] nvmet_tcp: address family 255 not supported [ 634.796123][ T28] audit: type=1800 audit(1788701727.219:101): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.903" name="addr_traddr" dev="configfs" ino=20679 res=0 errno=0 [ 635.197058][ T9490] nvmet_tcp: address family 255 not supported [ 635.206905][ T28] audit: type=1800 audit(1788701728.369:102): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.904" name="addr_trtype" dev="configfs" ino=20008 res=0 errno=0 [ 635.951759][ T28] audit: type=1800 audit(1788701728.379:103): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.904" name="addr_traddr" dev="configfs" ino=20009 res=0 errno=0 [ 638.357246][ T28] audit: type=1800 audit(1788701731.539:104): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.912" name="addr_trtype" dev="configfs" ino=20039 res=0 errno=0 [ 638.382903][ T9512] nvmet_tcp: address family 255 not supported [ 638.517040][ T28] audit: type=1800 audit(1788701731.559:105): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.912" name="addr_traddr" dev="configfs" ino=20040 res=0 errno=0 [ 639.402062][ T9515] FAULT_INJECTION: forcing a failure. [ 639.402062][ T9515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.424329][ T9515] CPU: 0 PID: 9515 Comm: syz.5.908 Not tainted syzkaller #0 [ 639.431713][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.441806][ T9515] Call Trace: [ 639.445123][ T9515] [ 639.448067][ T9515] dump_stack_lvl+0x18c/0x250 [ 639.452765][ T9515] ? show_regs_print_info+0x20/0x20 [ 639.457978][ T9515] ? load_image+0x420/0x420 [ 639.462499][ T9515] ? __might_fault+0xaa/0x120 [ 639.467204][ T9515] ? __lock_acquire+0x7d80/0x7d80 [ 639.472382][ T9515] should_fail_ex+0x394/0x4c0 [ 639.477109][ T9515] strncpy_from_user+0x36/0x2f0 [ 639.481997][ T9515] getname_flags+0xf6/0x500 [ 639.486537][ T9515] do_sys_openat2+0xda/0x1d0 [ 639.491174][ T9515] ? do_sys_open+0xe0/0xe0 [ 639.495612][ T9515] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 639.501612][ T9515] ? lock_chain_count+0x20/0x20 [ 639.506482][ T9515] __x64_sys_openat+0x139/0x160 [ 639.511354][ T9515] do_syscall_64+0x55/0xb0 [ 639.515789][ T9515] ? clear_bhb_loop+0x40/0x90 [ 639.520482][ T9515] ? clear_bhb_loop+0x40/0x90 [ 639.525177][ T9515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.531095][ T9515] RIP: 0033:0x7ff20639e159 [ 639.535561][ T9515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.555185][ T9515] RSP: 002b:00007ff2071c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.563639][ T9515] RAX: ffffffffffffffda RBX: 00007ff206625fa0 RCX: 00007ff20639e159 [ 639.571634][ T9515] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 639.579625][ T9515] RBP: 00007ff206435024 R08: 0000000000000000 R09: 0000000000000000 [ 639.587615][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.595605][ T9515] R13: 00007ff206626038 R14: 00007ff206625fa0 R15: 00007ffdc3bc5428 [ 639.603606][ T9515] [ 639.949570][ T9525] nvmet_tcp: address family 255 not supported [ 640.684416][ T9498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.711476][ T28] audit: type=1800 audit(1788701733.129:106): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.915" name="addr_trtype" dev="configfs" ino=20734 res=0 errno=0 [ 640.849341][ T28] audit: type=1800 audit(1788701733.129:107): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.915" name="addr_traddr" dev="configfs" ino=20735 res=0 errno=0 [ 640.937787][ T9518] tipc: Enabling of bearer rejected, already enabled [ 641.914713][ T28] audit: type=1800 audit(1788701735.099:108): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.921" name="addr_trtype" dev="configfs" ino=20100 res=0 errno=0 [ 641.946952][ T9542] nvmet_tcp: address family 255 not supported [ 642.751260][ T9540] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 642.790912][ T28] audit: type=1800 audit(1788701735.129:109): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.921" name="addr_traddr" dev="configfs" ino=20101 res=0 errno=0 [ 643.237450][ T28] audit: type=1800 audit(1788701736.419:110): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.924" name="addr_trtype" dev="configfs" ino=20114 res=0 errno=0 [ 643.272955][ T9552] nvmet_tcp: address family 255 not supported [ 643.348791][ T28] audit: type=1800 audit(1788701736.449:111): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.924" name="addr_traddr" dev="configfs" ino=20115 res=0 errno=0 [ 644.410843][ T9554] overlayfs: missing 'lowerdir' [ 645.226849][ T9569] nvmet_tcp: address family 255 not supported [ 645.235152][ T28] audit: type=1800 audit(1788701738.399:112): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.932" name="addr_trtype" dev="configfs" ino=20148 res=0 errno=0 [ 645.540987][ T28] audit: type=1800 audit(1788701738.409:113): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.932" name="addr_traddr" dev="configfs" ino=20150 res=0 errno=0 [ 646.182717][ T9573] FAULT_INJECTION: forcing a failure. [ 646.182717][ T9573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.248668][ T9573] CPU: 0 PID: 9573 Comm: syz.5.933 Not tainted syzkaller #0 [ 646.256057][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.266175][ T9573] Call Trace: [ 646.269504][ T9573] [ 646.272483][ T9573] dump_stack_lvl+0x18c/0x250 [ 646.277244][ T9573] ? show_regs_print_info+0x20/0x20 [ 646.282504][ T9573] ? load_image+0x420/0x420 [ 646.287023][ T9573] ? __might_fault+0xaa/0x120 [ 646.291730][ T9573] ? __lock_acquire+0x7d80/0x7d80 [ 646.296798][ T9573] should_fail_ex+0x394/0x4c0 [ 646.301499][ T9573] strncpy_from_user+0x36/0x2f0 [ 646.306366][ T9573] getname_flags+0xf6/0x500 [ 646.310912][ T9573] do_sys_openat2+0xda/0x1d0 [ 646.315563][ T9573] ? do_sys_open+0xe0/0xe0 [ 646.320018][ T9573] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 646.326032][ T9573] ? lock_chain_count+0x20/0x20 [ 646.330947][ T9573] __x64_sys_openat+0x139/0x160 [ 646.335885][ T9573] do_syscall_64+0x55/0xb0 [ 646.340322][ T9573] ? clear_bhb_loop+0x40/0x90 [ 646.345017][ T9573] ? clear_bhb_loop+0x40/0x90 [ 646.349740][ T9573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.355655][ T9573] RIP: 0033:0x7ff20639e159 [ 646.360105][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.379730][ T9573] RSP: 002b:00007ff2071c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.388166][ T9573] RAX: ffffffffffffffda RBX: 00007ff206625fa0 RCX: 00007ff20639e159 [ 646.396177][ T9573] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 646.404197][ T9573] RBP: 00007ff206435024 R08: 0000000000000000 R09: 0000000000000000 [ 646.412219][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.420260][ T9573] R13: 00007ff206626038 R14: 00007ff206625fa0 R15: 00007ffdc3bc5428 [ 646.428292][ T9573] [ 646.699128][ T28] audit: type=1800 audit(1788701739.879:114): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.934" name="addr_trtype" dev="configfs" ino=20179 res=0 errno=0 [ 646.726436][ T9583] nvmet_tcp: address family 255 not supported [ 647.724471][ T9586] overlayfs: missing 'lowerdir' [ 648.016359][ T28] audit: type=1800 audit(1788701739.909:115): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.934" name="addr_traddr" dev="configfs" ino=20180 res=0 errno=0 [ 650.140030][ T5785] Bluetooth: hci0: unexpected event for opcode 0x203d [ 652.405318][ T28] audit: type=1800 audit(1788701745.589:116): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.948" name="addr_trtype" dev="configfs" ino=20893 res=0 errno=0 [ 652.434001][ T9627] nvmet_tcp: address family 255 not supported [ 653.178099][ T28] audit: type=1800 audit(1788701745.609:117): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.948" name="addr_traddr" dev="configfs" ino=20894 res=0 errno=0 [ 653.387079][ T9629] overlay: Unknown parameter '/' [ 654.617884][ T9641] nvmet_tcp: address family 255 not supported [ 654.886008][ T28] audit: type=1800 audit(1788701747.789:118): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.943" name="addr_trtype" dev="configfs" ino=20344 res=0 errno=0 [ 655.395275][ T28] audit: type=1800 audit(1788701747.799:119): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.943" name="addr_traddr" dev="configfs" ino=20345 res=0 errno=0 [ 657.483821][ T5785] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 658.097853][ T9665] nvmet_tcp: address family 255 not supported [ 658.851168][ T28] audit: type=1800 audit(1788701751.269:120): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.958" name="addr_trtype" dev="configfs" ino=20934 res=0 errno=0 [ 658.970888][ T28] audit: type=1800 audit(1788701751.279:121): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.958" name="addr_traddr" dev="configfs" ino=20935 res=0 errno=0 [ 659.390845][ T27] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 660.419160][ T27] usb 5-1: not running at top speed; connect to a high speed hub [ 660.485288][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 660.537094][ T27] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 660.600971][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 660.609125][ T27] usb 5-1: Product: syz [ 660.653042][ T27] usb 5-1: Manufacturer: syz [ 660.730193][ T27] hub 5-1:1.0: USB hub found [ 661.277605][ T27] hub 5-1:1.0: config failed, can't read hub descriptor (err -22) [ 661.498947][ T27] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 661.543968][ T5785] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 661.553817][ T5785] Bluetooth: hci4: Injecting HCI hardware error event [ 661.569923][ T5084] Bluetooth: hci4: hardware error 0x00 [ 661.783593][ T27] usb 5-1: Failed to suspend device, error -71 [ 661.856413][ T27] usb 5-1: USB disconnect, device number 13 [ 663.859525][ T28] audit: type=1800 audit(1788701757.039:122): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.968" name="addr_trtype" dev="configfs" ino=20971 res=0 errno=0 [ 663.888339][ T9707] nvmet_tcp: address family 255 not supported [ 664.276531][ T28] audit: type=1800 audit(1788701757.069:123): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.968" name="addr_traddr" dev="configfs" ino=20972 res=0 errno=0 [ 664.501035][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 665.111119][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 665.302348][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.324997][ T28] audit: type=1800 audit(1788701758.509:124): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.965" name="addr_trtype" dev="configfs" ino=20984 res=0 errno=0 [ 665.354277][ T9715] nvmet_tcp: address family 255 not supported [ 666.101252][ T23] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 666.111356][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.151348][ T28] audit: type=1800 audit(1788701758.539:125): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.965" name="addr_traddr" dev="configfs" ino=20985 res=0 errno=0 [ 666.397706][ T28] audit: type=1800 audit(1788701759.569:126): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.978" name="addr_trtype" dev="configfs" ino=21534 res=0 errno=0 [ 666.441096][ T9718] nvmet_tcp: address family 255 not supported [ 667.207350][ T28] audit: type=1800 audit(1788701759.609:127): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.978" name="addr_traddr" dev="configfs" ino=21535 res=0 errno=0 [ 667.266672][ T23] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 667.356687][ T23] wwan wwan0: port wwan0qmi0 attached [ 667.465212][ T23] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, e2:dc:2f:1c:ef:c9 [ 667.498454][ T23] usb 5-1: USB disconnect, device number 14 [ 667.535921][ T23] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 667.632666][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 669.495000][ T5084] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 669.908981][ T9746] nvmet_tcp: address family 255 not supported [ 670.670917][ T28] audit: type=1800 audit(1788701763.079:128): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.977" name="addr_trtype" dev="configfs" ino=21006 res=0 errno=0 [ 670.776761][ T28] audit: type=1800 audit(1788701763.089:129): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.977" name="addr_traddr" dev="configfs" ino=21007 res=0 errno=0 [ 671.112102][ T28] audit: type=1800 audit(1788701764.289:130): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.980" name="addr_trtype" dev="configfs" ino=21606 res=0 errno=0 [ 671.133055][ T9755] nvmet_tcp: address family 255 not supported [ 671.186796][ T28] audit: type=1800 audit(1788701764.299:131): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.980" name="addr_traddr" dev="configfs" ino=21607 res=0 errno=0 [ 671.757321][ T9757] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 672.716144][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.781425][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 672.976527][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 673.019614][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.040456][ T23] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 673.094981][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.303629][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.377228][ T23] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 673.421733][ T23] wwan wwan0: port wwan0qmi0 attached [ 673.535487][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.551427][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 673.562510][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 673.582423][ T5785] Bluetooth: hci2: hardware error 0x00 [ 673.671091][ T9789] nvmet_tcp: address family 255 not supported [ 674.402377][ T28] audit: type=1800 audit(1788701766.849:132): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.988" name="addr_trtype" dev="configfs" ino=21666 res=0 errno=0 [ 674.493464][ T28] audit: type=1800 audit(1788701766.849:133): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.988" name="addr_traddr" dev="configfs" ino=21667 res=0 errno=0 [ 674.717689][ T23] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 26:fb:16:a4:2f:a7 [ 674.797640][ T23] usb 5-1: USB disconnect, device number 15 [ 674.916959][ T23] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 674.938341][ T28] audit: type=1800 audit(1788701768.099:134): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.989" name="addr_trtype" dev="configfs" ino=21037 res=0 errno=0 [ 675.662551][ T28] audit: type=1800 audit(1788701768.119:135): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.989" name="addr_traddr" dev="configfs" ino=21038 res=0 errno=0 [ 675.710952][ T5785] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 676.063198][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 676.522191][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.550532][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.560581][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.579607][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.591173][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 676.598630][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 676.881223][ T9817] nvmet_tcp: address family 255 not supported [ 676.892394][ T28] audit: type=1800 audit(1788701770.049:136): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.996" name="addr_trtype" dev="configfs" ino=21842 res=0 errno=0 [ 677.196533][ T28] audit: type=1800 audit(1788701770.059:137): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.996" name="addr_traddr" dev="configfs" ino=21843 res=0 errno=0 [ 677.990351][ T28] audit: type=1800 audit(1788701771.169:138): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.998" name="addr_trtype" dev="configfs" ino=21865 res=0 errno=0 [ 678.023318][ T5814] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 678.274874][ T28] audit: type=1800 audit(1788701771.169:139): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.998" name="addr_traddr" dev="configfs" ino=21866 res=0 errno=0 [ 678.299764][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 678.397692][ T5814] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 678.510452][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.639633][ T5814] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 678.663130][ T5084] Bluetooth: hci1: command tx timeout [ 678.777635][ T5814] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 678.830956][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.839047][ T5814] usb 2-1: Product: syz [ 678.893636][ T5814] usb 2-1: Manufacturer: syz [ 678.898325][ T5814] usb 2-1: SerialNumber: syz [ 679.123823][ T5814] usb 2-1: USB disconnect, device number 15 [ 679.312891][ T173] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 679.630003][ T173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.001734][ T173] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 680.130990][ T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.476630][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 680.561325][ T173] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 680.590407][ T173] wwan wwan0: port wwan0qmi0 attached [ 680.742120][ T5084] Bluetooth: hci1: command tx timeout [ 680.875027][ T28] audit: type=1800 audit(1788701774.059:140): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1004" name="addr_trtype" dev="configfs" ino=21144 res=0 errno=0 [ 680.907205][ T9862] nvmet_tcp: address family 255 not supported [ 681.760864][ T28] audit: type=1800 audit(1788701774.089:141): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1004" name="addr_traddr" dev="configfs" ino=21145 res=0 errno=0 [ 681.802110][ T173] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 4e:08:99:28:eb:81 [ 681.825652][ T173] usb 5-1: USB disconnect, device number 16 [ 681.854029][ T173] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 681.921403][ T42] hsr_slave_0: left promiscuous mode [ 681.986342][ T42] hsr_slave_1: left promiscuous mode [ 682.001473][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.021782][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.071829][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.079293][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.158508][ T42] bridge_slave_1: left allmulticast mode [ 682.171946][ T42] bridge_slave_1: left promiscuous mode [ 682.203696][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.711156][ T5084] Bluetooth: hci1: command tx timeout [ 683.779346][ T42] bridge_slave_0: left allmulticast mode [ 683.793424][ T42] bridge_slave_0: left promiscuous mode [ 683.799438][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.001244][ T42] veth1_macvtap: left promiscuous mode [ 684.006849][ T42] veth0_macvtap: left promiscuous mode [ 684.041211][ T42] veth1_vlan: left promiscuous mode [ 684.060928][ T42] veth0_vlan: left promiscuous mode [ 686.090741][ T5084] Bluetooth: hci1: command tx timeout [ 686.096703][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.111371][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.929022][ T28] audit: type=1800 audit(1788701780.109:142): pid=9901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1007" name="addr_trtype" dev="configfs" ino=21171 res=0 errno=0 [ 687.182452][ T28] audit: type=1800 audit(1788701780.139:143): pid=9901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1007" name="addr_traddr" dev="configfs" ino=21172 res=0 errno=0 [ 689.439250][ T5814] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 689.655485][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 689.681090][ T5814] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 689.710581][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.957732][ T5814] qmi_wwan 2-1:1.0: cdc-wdm1: USB WDM device [ 689.991323][ T5814] wwan wwan1: port wwan1qmi0 attached [ 690.059882][ T42] team0 (unregistering): Port device team_slave_1 removed [ 690.196897][ T42] team0 (unregistering): Port device team_slave_0 removed [ 690.335166][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.527123][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.738603][ T42] bond0 (unregistering): Released all slaves [ 695.360554][ T173] wwan wwan0: port wwan0qmi0 disconnected [ 695.386824][ T5814] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 3e:ec:f6:6f:5a:7c [ 695.456512][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.483076][ T5814] usb 2-1: USB disconnect, device number 16 [ 695.492465][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.499772][ T9806] bridge_slave_0: entered allmulticast mode [ 695.531229][ T5814] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 695.541260][ T9806] bridge_slave_0: entered promiscuous mode [ 695.564168][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.580934][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.600116][ T9806] bridge_slave_1: entered allmulticast mode [ 695.621587][ T9806] bridge_slave_1: entered promiscuous mode [ 695.773008][ T5814] wwan wwan1: port wwan1qmi0 disconnected [ 695.872583][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.911560][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.045643][ T9806] team0: Port device team_slave_0 added [ 696.096192][ T9806] team0: Port device team_slave_1 added [ 696.110958][ T971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 696.174304][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.192746][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.227134][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.242902][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.251269][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.294330][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.306808][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.370928][ T28] audit: type=1800 audit(1788701789.549:144): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1023" name="addr_trtype" dev="configfs" ino=21335 res=0 errno=0 [ 696.589785][ T28] audit: type=1800 audit(1788701789.549:145): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1023" name="addr_traddr" dev="configfs" ino=21336 res=0 errno=0 [ 697.055436][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.072014][ T971] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 697.081535][ T971] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 697.089743][ T971] usb 3-1: Manufacturer: syz [ 697.097836][ T971] usb 3-1: config 0 descriptor?? [ 697.199451][ T9806] hsr_slave_0: entered promiscuous mode [ 697.237144][ T9806] hsr_slave_1: entered promiscuous mode [ 697.264532][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.464273][ T9806] Cannot create hsr debugfs directory [ 698.304632][ T28] audit: type=1800 audit(1788701791.479:146): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1036" name="addr_trtype" dev="configfs" ino=21353 res=0 errno=0 [ 698.434640][ T28] audit: type=1800 audit(1788701791.479:147): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1036" name="addr_traddr" dev="configfs" ino=21354 res=0 errno=0 [ 698.469281][ T971] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input13 [ 698.793442][ T971] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input14 [ 699.059714][ T971] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input15 [ 699.121639][ T971] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input16 [ 699.473125][ T971] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 699.686361][ T971] usb 3-1: USB disconnect, device number 8 [ 700.987171][ T9978] fido_id[9978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 701.164383][ T9806] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.366658][ T9806] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.551122][ T9806] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.642171][ T9806] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 702.083001][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.209678][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.306656][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.313998][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.401899][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.409219][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.249588][ T28] audit: type=1800 audit(1788701797.429:148): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1039" name="addr_trtype" dev="configfs" ino=22593 res=0 errno=0 [ 704.487815][ T28] audit: type=1800 audit(1788701797.469:149): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1039" name="addr_traddr" dev="configfs" ino=22594 res=0 errno=0 [ 705.890108][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.216404][T10043] e1000e: probe of 0000:00:00.0 failed with error -5 [ 707.873229][ T9806] veth0_vlan: entered promiscuous mode [ 707.894292][ T9806] veth1_vlan: entered promiscuous mode [ 708.014146][ T9806] veth0_macvtap: entered promiscuous mode [ 708.053608][ T9806] veth1_macvtap: entered promiscuous mode [ 708.118136][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.141105][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.160778][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.201299][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.215478][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.226187][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.252512][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.302374][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.333854][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.363768][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.390790][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.410911][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.426492][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.438824][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.464613][ T9806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.474739][ T9806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.485901][ T9806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.495075][ T9806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.595430][T10055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.001436][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.009342][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.128909][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.158180][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.301855][T10094] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 710.527103][T10100] FAULT_INJECTION: forcing a failure. [ 710.527103][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 710.561128][T10100] CPU: 1 PID: 10100 Comm: syz.6.987 Not tainted syzkaller #0 [ 710.568601][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.578803][T10100] Call Trace: [ 710.582142][T10100] [ 710.585122][T10100] dump_stack_lvl+0x18c/0x250 [ 710.589871][T10100] ? show_regs_print_info+0x20/0x20 [ 710.595168][T10100] ? load_image+0x420/0x420 [ 710.599728][T10100] ? __might_sleep+0xe0/0xe0 [ 710.604365][T10100] ? __lock_acquire+0x7d80/0x7d80 [ 710.609459][T10100] should_fail_ex+0x394/0x4c0 [ 710.614183][T10100] should_failslab+0x9/0x20 [ 710.618728][T10100] slab_pre_alloc_hook+0x59/0x300 [ 710.623801][T10100] kmem_cache_alloc+0x5a/0x2c0 [ 710.628600][T10100] ? security_inode_alloc+0x34/0x110 [ 710.633943][T10100] security_inode_alloc+0x34/0x110 [ 710.639096][T10100] inode_init_always+0x914/0xc90 [ 710.644082][T10100] new_inode_pseudo+0x95/0x1d0 [ 710.648882][T10100] new_inode+0x22/0x1d0 [ 710.653078][T10100] shmem_get_inode+0x34d/0xcd0 [ 710.657888][T10100] __shmem_file_setup+0x167/0x2c0 [ 710.662951][T10100] big_key_preparse+0x287/0x4f0 [ 710.667835][T10100] ? keyctl_pkey_verify+0x270/0x270 [ 710.673069][T10100] __key_create_or_update+0x3a6/0xa60 [ 710.678483][T10100] ? key_create_or_update+0x60/0x60 [ 710.683712][T10100] ? bpf_lsm_key_permission+0x9/0x10 [ 710.689040][T10100] ? lookup_user_key+0xb66/0x1140 [ 710.694148][T10100] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 710.700221][T10100] key_create_or_update+0x42/0x60 [ 710.705301][T10100] __se_sys_add_key+0x34f/0x410 [ 710.710196][T10100] ? __x64_sys_add_key+0xc0/0xc0 [ 710.715180][T10100] ? lockdep_hardirqs_on+0x98/0x150 [ 710.720420][T10100] ? __x64_sys_add_key+0x20/0xc0 [ 710.725401][T10100] do_syscall_64+0x55/0xb0 [ 710.729853][T10100] ? clear_bhb_loop+0x40/0x90 [ 710.734565][T10100] ? clear_bhb_loop+0x40/0x90 [ 710.739282][T10100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.745225][T10100] RIP: 0033:0x7fc87fb9e159 [ 710.749672][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.769314][T10100] RSP: 002b:00007fc87ddf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 710.777759][T10100] RAX: ffffffffffffffda RBX: 00007fc87fe25fa0 RCX: 00007fc87fb9e159 [ 710.785761][T10100] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 710.793766][T10100] RBP: 00007fc87fc35024 R08: fffffffffffffffe R09: 0000000000000000 [ 710.801765][T10100] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 710.809758][T10100] R13: 00007fc87fe26038 R14: 00007fc87fe25fa0 R15: 00007fff4643b178 [ 710.817774][T10100] [ 712.111964][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 712.320839][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 712.335984][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 712.365056][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 712.411048][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 712.440895][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 712.480803][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.514637][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 712.540816][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.775188][ T9] usb 3-1: usb_control_msg returned -32 [ 712.790852][ T9] usbtmc 3-1:16.0: can't read capabilities [ 714.334606][ T9] usb 3-1: USB disconnect, device number 9 [ 716.182541][T10119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.754283][T10147] FAULT_INJECTION: forcing a failure. [ 716.754283][T10147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.794631][T10147] CPU: 1 PID: 10147 Comm: syz.4.1066 Not tainted syzkaller #0 [ 716.802200][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.812317][T10147] Call Trace: [ 716.815650][T10147] [ 716.818639][T10147] dump_stack_lvl+0x18c/0x250 [ 716.823382][T10147] ? show_regs_print_info+0x20/0x20 [ 716.828636][T10147] ? load_image+0x420/0x420 [ 716.833205][T10147] ? __lock_acquire+0x7d80/0x7d80 [ 716.838300][T10147] should_fail_ex+0x394/0x4c0 [ 716.843043][T10147] prepare_alloc_pages+0x1e1/0x5b0 [ 716.848226][T10147] __alloc_pages+0x134/0x460 [ 716.852885][T10147] ? zone_statistics+0x170/0x170 [ 716.857897][T10147] __folio_alloc+0x10/0x20 [ 716.862378][T10147] vma_alloc_folio+0x474/0x8f0 [ 716.867198][T10147] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 716.873066][T10147] shmem_alloc_folio+0x1a9/0x2a0 [ 716.878066][T10147] ? folio_put+0xd0/0xd0 [ 716.882406][T10147] ? shmem_inode_acct_block+0x324/0x460 [ 716.888030][T10147] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 716.893817][T10147] ? put_swap_device+0x230/0x230 [ 716.898816][T10147] ? filemap_get_entry+0xce/0x3f0 [ 716.903904][T10147] ? xas_load+0x11d/0x140 [ 716.908338][T10147] ? filemap_get_entry+0xce/0x3f0 [ 716.913411][T10147] ? filemap_get_entry+0xce/0x3f0 [ 716.918496][T10147] ? filemap_get_entry+0x375/0x3f0 [ 716.923680][T10147] ? page_cache_prev_miss+0x390/0x390 [ 716.929125][T10147] shmem_get_folio_gfp+0xe1d/0x2b40 [ 716.934415][T10147] shmem_write_begin+0xf2/0x430 [ 716.939349][T10147] generic_perform_write+0x2fe/0x5c0 [ 716.944810][T10147] ? generic_file_direct_write+0x3e0/0x3e0 [ 716.950679][T10147] ? down_write+0x16e/0x200 [ 716.955258][T10147] ? file_update_time+0x98/0x1a0 [ 716.960259][T10147] shmem_file_write_iter+0xfb/0x120 [ 716.965523][T10147] __kernel_write_iter+0x29f/0x6d0 [ 716.970708][T10147] ? vfs_read+0x990/0x990 [ 716.975093][T10147] ? rcu_read_lock_any_held+0xb4/0x140 [ 716.980618][T10147] ? __asan_memset+0x22/0x40 [ 716.985270][T10147] ? iov_iter_kvec+0xd4/0x1b0 [ 716.990018][T10147] kernel_write+0x1b5/0x350 [ 716.994592][T10147] ? __kernel_write+0x170/0x170 [ 716.999530][T10147] ? shmem_get_inode+0xa7a/0xcd0 [ 717.004542][T10147] ? __shmem_file_setup+0x268/0x2c0 [ 717.009844][T10147] big_key_preparse+0x3bf/0x4f0 [ 717.014757][T10147] ? keyctl_pkey_verify+0x270/0x270 [ 717.020028][T10147] __key_create_or_update+0x3a6/0xa60 [ 717.025565][T10147] ? key_create_or_update+0x60/0x60 [ 717.030846][T10147] ? bpf_lsm_key_permission+0x9/0x10 [ 717.036207][T10147] ? lookup_user_key+0xb66/0x1140 [ 717.041404][T10147] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 717.047473][T10147] key_create_or_update+0x42/0x60 [ 717.052573][T10147] __se_sys_add_key+0x34f/0x410 [ 717.057504][T10147] ? __x64_sys_add_key+0xc0/0xc0 [ 717.062510][T10147] ? lockdep_hardirqs_on+0x98/0x150 [ 717.067779][T10147] ? __x64_sys_add_key+0x20/0xc0 [ 717.072797][T10147] do_syscall_64+0x55/0xb0 [ 717.077276][T10147] ? clear_bhb_loop+0x40/0x90 [ 717.082020][T10147] ? clear_bhb_loop+0x40/0x90 [ 717.086822][T10147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.092786][T10147] RIP: 0033:0x7f1089d9e159 [ 717.097277][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.116941][T10147] RSP: 002b:00007f1087ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 717.125427][T10147] RAX: ffffffffffffffda RBX: 00007f108a025fa0 RCX: 00007f1089d9e159 [ 717.133471][T10147] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 717.141500][T10147] RBP: 00007f1089e35024 R08: fffffffffffffffe R09: 0000000000000000 [ 717.149532][T10147] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 717.157572][T10147] R13: 00007f108a026038 R14: 00007f108a025fa0 R15: 00007fff497ec238 [ 717.165635][T10147] [ 722.424385][T10204] binder: 10203:10204 ioctl c00c6211 0 returned -14 [ 724.912801][T10234] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 726.548864][T10251] binder: 10246:10251 ioctl c00c6211 0 returned -14 [ 727.686516][T10268] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 729.739103][T10296] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1109'. [ 729.777832][T10298] FAULT_INJECTION: forcing a failure. [ 729.777832][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 729.836709][T10298] CPU: 0 PID: 10298 Comm: syz.2.1097 Not tainted syzkaller #0 [ 729.844262][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.854466][T10298] Call Trace: [ 729.857778][T10298] [ 729.860739][T10298] dump_stack_lvl+0x18c/0x250 [ 729.865476][T10298] ? show_regs_print_info+0x20/0x20 [ 729.870754][T10298] ? load_image+0x420/0x420 [ 729.875309][T10298] ? __might_sleep+0xe0/0xe0 [ 729.879926][T10298] ? __lock_acquire+0x7d80/0x7d80 [ 729.884965][T10298] ? mark_lock+0x94/0x320 [ 729.889326][T10298] should_fail_ex+0x394/0x4c0 [ 729.894043][T10298] should_failslab+0x9/0x20 [ 729.898609][T10298] slab_pre_alloc_hook+0x59/0x300 [ 729.903698][T10298] ? snd_seq_port_connect+0x6b/0x420 [ 729.909123][T10298] __kmem_cache_alloc_node+0x53/0x250 [ 729.914540][T10298] ? snd_seq_port_connect+0x6b/0x420 [ 729.919863][T10298] kmalloc_trace+0x2a/0xe0 [ 729.924304][T10298] snd_seq_port_connect+0x6b/0x420 [ 729.929433][T10298] ? do_raw_read_unlock+0x3d/0x80 [ 729.934474][T10298] ? _raw_read_unlock+0x28/0x40 [ 729.939363][T10298] snd_seq_ioctl_subscribe_port+0x318/0x6e0 [ 729.945361][T10298] ? snd_seq_oss_midi_open+0x19a/0x800 [ 729.950876][T10298] ? snd_seq_ioctl_set_port_info+0x1a0/0x1a0 [ 729.956882][T10298] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 729.962790][T10298] ? _raw_spin_unlock+0x40/0x40 [ 729.967650][T10298] ? chrdev_open+0x58c/0x600 [ 729.972275][T10298] ? path_openat+0x284f/0x3270 [ 729.977099][T10298] ? do_filp_open+0x1f2/0x430 [ 729.981806][T10298] ? do_sys_openat2+0x134/0x1d0 [ 729.986697][T10298] snd_seq_oss_midi_open+0x4f7/0x800 [ 729.992023][T10298] ? snd_seq_oss_midi_open_all+0xc0/0xc0 [ 729.997702][T10298] snd_seq_oss_synth_setup_midi+0x12d/0x520 [ 730.003629][T10298] snd_seq_oss_open+0x956/0xf10 [ 730.008501][T10298] ? snd_seq_oss_delete_client+0x50/0x50 [ 730.014198][T10298] ? trace_raw_output_contention_end+0xd0/0xd0 [ 730.020403][T10298] ? soundcore_open+0x274/0x4c0 [ 730.025367][T10298] ? odev_open+0x5c/0xa0 [ 730.029630][T10298] ? __lock_acquire+0x7d80/0x7d80 [ 730.034709][T10298] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 730.040739][T10298] ? async_call_lookup_ports+0x20/0x20 [ 730.046247][T10298] ? do_raw_spin_unlock+0x121/0x230 [ 730.051473][T10298] ? soundcore_open+0x310/0x4c0 [ 730.056361][T10298] odev_open+0x67/0xa0 [ 730.060447][T10298] chrdev_open+0x58c/0x600 [ 730.064990][T10298] ? cd_forget+0x160/0x160 [ 730.069437][T10298] ? fsnotify_perm+0x3ed/0x5e0 [ 730.074229][T10298] do_dentry_open+0x880/0x14b0 [ 730.079015][T10298] ? cd_forget+0x160/0x160 [ 730.083453][T10298] path_openat+0x284f/0x3270 [ 730.088096][T10298] ? do_sys_openat2+0xda/0x1d0 [ 730.092995][T10298] ? __x64_sys_openat+0x139/0x160 [ 730.098082][T10298] ? verify_lock_unused+0x140/0x140 [ 730.103303][T10298] ? do_filp_open+0x430/0x430 [ 730.108033][T10298] do_filp_open+0x1f2/0x430 [ 730.112568][T10298] ? vfs_tmpfile+0x620/0x620 [ 730.117195][T10298] ? _raw_spin_unlock+0x28/0x40 [ 730.122060][T10298] ? alloc_fd+0x590/0x640 [ 730.126445][T10298] do_sys_openat2+0x134/0x1d0 [ 730.131163][T10298] ? do_sys_open+0xe0/0xe0 [ 730.135593][T10298] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 730.141609][T10298] ? lock_chain_count+0x20/0x20 [ 730.146514][T10298] __x64_sys_openat+0x139/0x160 [ 730.151394][T10298] do_syscall_64+0x55/0xb0 [ 730.155822][T10298] ? clear_bhb_loop+0x40/0x90 [ 730.160531][T10298] ? clear_bhb_loop+0x40/0x90 [ 730.165239][T10298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.171254][T10298] RIP: 0033:0x7f0f4cd9e159 [ 730.175692][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.195337][T10298] RSP: 002b:00007f0f4dd34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.203786][T10298] RAX: ffffffffffffffda RBX: 00007f0f4d025fa0 RCX: 00007f0f4cd9e159 [ 730.211771][T10298] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 730.219771][T10298] RBP: 00007f0f4ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 730.227787][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.235776][T10298] R13: 00007f0f4d026038 R14: 00007f0f4d025fa0 R15: 00007ffed1460f38 [ 730.243785][T10298] [ 731.569522][T10304] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 733.380989][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 733.611724][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.643605][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.684277][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 733.728084][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.970088][T10335] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1119'. [ 735.131138][T10339] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 735.798487][ T23] hid-sensor-hub 0003:8086:0000.0004: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.4-1/input0 [ 735.975073][T10344] input: syz0 as /devices/virtual/input/input17 [ 737.024134][ T23] usb 5-1: USB disconnect, device number 17 [ 737.151631][T10347] fido_id[10347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 737.634757][T10364] binder: 10363:10364 ioctl c00c6211 0 returned -14 [ 740.165493][T10374] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1129'. [ 742.186791][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 742.487630][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 742.613186][T10395] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1133'. [ 742.637942][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 742.680659][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.286240][ T9] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 743.330607][ T9] wwan wwan0: port wwan0qmi0 attached [ 743.513342][ T9] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, e6:db:ca:ad:fb:25 [ 743.694593][ T9] usb 5-1: USB disconnect, device number 18 [ 743.732749][ T9] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 743.929016][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 748.398504][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.405076][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.545030][T10422] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 748.552654][T10424] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1139'. [ 755.155508][T10470] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1150'. [ 755.631492][ T971] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 755.851986][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 755.940763][ T971] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 756.012288][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.118036][ T971] spcp8x5 5-1:1.0: required endpoints missing [ 757.334128][ T971] usb 5-1: USB disconnect, device number 19 [ 763.651395][T10520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1159'. [ 765.302269][T10532] block nbd4: shutting down sockets [ 767.505102][T10559] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1169'. [ 772.896478][T10592] gadgetfs: bound to dummy_udc driver [ 773.202394][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 773.223661][ C0] gadgetfs: connected [ 773.230539][T10591] gadgetfs: suspended from state 3 [ 773.236743][T10591] gadgetfs: disconnected [ 773.457108][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1179'. [ 773.484331][T10606] netlink: 'syz.6.1179': attribute type 7 has an invalid length. [ 773.510766][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1179'. [ 775.287234][T10606] ip6gretap0: entered promiscuous mode [ 776.100096][T10606] syz_tun: entered promiscuous mode [ 787.482984][T10721] CIFS: Attempting to mount //127.0.0.1/share [ 790.435893][T10721] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 790.513495][T10721] ------------[ cut here ]------------ [ 790.519525][T10721] WARNING: CPU: 0 PID: 10721 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 790.529864][T10721] Modules linked in: [ 790.533898][T10721] CPU: 0 PID: 10721 Comm: syz.4.1199 Not tainted syzkaller #0 [ 790.541499][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.551854][T10721] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 790.557748][T10721] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 790.577950][T10721] RSP: 0018:ffffc900102a7400 EFLAGS: 00010283 [ 790.585270][T10721] RAX: ffffffff82a35255 RBX: ffff888030dd22c0 RCX: 0000000000080000 [ 790.593380][T10721] RDX: ffffc9001862c000 RSI: 0000000000064d9c RDI: 0000000000064d9d [ 790.601504][T10721] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 790.610593][T10721] R10: dffffc0000000000 R11: fffff52002054e70 R12: 1ffff110061ba458 [ 790.618877][T10721] R13: dffffc0000000000 R14: ffff888030dd2000 R15: 0000000000000000 [ 790.626959][T10721] FS: 00007f1087ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 790.636327][T10721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.643178][T10721] CR2: 000055556f1ed9f8 CR3: 00000000698c9000 CR4: 00000000003506f0 [ 790.651277][T10721] Call Trace: [ 790.654617][T10721] [ 790.657619][T10721] compound_send_recv+0x1254/0x3040 [ 790.663010][T10721] ? cifs_pick_channel+0x320/0x320 [ 790.668227][T10721] ? __rwlock_init+0x150/0x150 [ 790.673146][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 790.678436][T10721] cifs_send_recv+0x40/0x50 [ 790.683121][T10721] SMB2_negotiate+0x16b5/0x4270 [ 790.688069][T10721] ? preempt_schedule_common+0x82/0xc0 [ 790.693708][T10721] ? smb3_encryption_required+0x2f0/0x2f0 [ 790.699549][T10721] ? smb2_negotiate+0x5c/0x70 [ 790.704400][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 790.709688][T10721] ? _raw_spin_unlock+0x28/0x40 [ 790.715699][T10721] cifs_negotiate_protocol+0x445/0x670 [ 790.721489][T10721] cifs_get_smb_ses+0x8d6/0x1b00 [ 790.726632][T10721] cifs_mount_get_session+0xef/0x440 [ 790.732157][T10721] dfs_mount_share+0x1e9/0x7b0 [ 790.737020][T10721] cifs_mount+0xbc/0x650 [ 790.741490][T10721] ? __rwlock_init+0x150/0x150 [ 790.746331][T10721] ? cifs_is_path_remote+0x6f0/0x6f0 [ 790.751727][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 790.757005][T10721] ? smb3_update_mnt_flags+0x52f/0xc10 [ 790.762643][T10721] ? cifs_setup_cifs_sb+0x52f/0x840 [ 790.768003][T10721] cifs_smb3_do_mount+0x2e5/0x710 [ 790.773196][T10721] ? cifs_sb_deactive+0x80/0x80 [ 790.778127][T10721] ? vfs_parse_fs_string+0x10f/0x170 [ 790.783655][T10721] smb3_get_tree+0x5a5/0xa90 [ 790.788419][T10721] vfs_get_tree+0x8c/0x280 [ 790.792980][T10721] do_new_mount+0x24a/0xa40 [ 790.797544][T10721] __se_sys_mount+0x2e7/0x3d0 [ 790.802303][T10721] ? __x64_sys_mount+0xc0/0xc0 [ 790.807100][T10721] ? lockdep_hardirqs_on+0x98/0x150 [ 790.812362][T10721] ? __x64_sys_mount+0x20/0xc0 [ 790.817938][T10721] do_syscall_64+0x55/0xb0 [ 790.822706][T10721] ? clear_bhb_loop+0x40/0x90 [ 790.827447][T10721] ? clear_bhb_loop+0x40/0x90 [ 790.832222][T10721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.838169][T10721] RIP: 0033:0x7f1089d9e159 [ 790.842673][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.862436][T10721] RSP: 002b:00007f1087ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 790.871069][T10721] RAX: ffffffffffffffda RBX: 00007f108a025fa0 RCX: 00007f1089d9e159 [ 790.879103][T10721] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 790.887213][T10721] RBP: 00007f1089e35024 R08: 0000200000000300 R09: 0000000000000000 [ 790.895236][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.903334][T10721] R13: 00007f108a026038 R14: 00007f108a025fa0 R15: 00007fff497ec238 [ 790.911445][T10721] [ 790.914504][T10721] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 790.921798][T10721] CPU: 0 PID: 10721 Comm: syz.4.1199 Not tainted syzkaller #0 [ 790.929263][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.939335][T10721] Call Trace: [ 790.942626][T10721] [ 790.945566][T10721] dump_stack_lvl+0x18c/0x250 [ 790.950282][T10721] ? show_regs_print_info+0x20/0x20 [ 790.955606][T10721] ? load_image+0x420/0x420 [ 790.960127][T10721] panic+0x2ca/0x720 [ 790.964047][T10721] ? bpf_jit_dump+0xd0/0xd0 [ 790.968600][T10721] __warn+0x2e0/0x470 [ 790.972627][T10721] ? smb2_add_credits+0x1365/0x2600 [ 790.977848][T10721] ? smb2_add_credits+0x1365/0x2600 [ 790.983094][T10721] report_bug+0x2be/0x4f0 [ 790.987489][T10721] ? smb2_add_credits+0x1365/0x2600 [ 790.992818][T10721] ? smb2_add_credits+0x1365/0x2600 [ 790.998031][T10721] ? smb2_add_credits+0x1367/0x2600 [ 791.003254][T10721] handle_bug+0xcf/0x120 [ 791.007510][T10721] exc_invalid_op+0x1a/0x50 [ 791.012026][T10721] asm_exc_invalid_op+0x1a/0x20 [ 791.016896][T10721] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 791.022766][T10721] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 791.042481][T10721] RSP: 0018:ffffc900102a7400 EFLAGS: 00010283 [ 791.048646][T10721] RAX: ffffffff82a35255 RBX: ffff888030dd22c0 RCX: 0000000000080000 [ 791.056632][T10721] RDX: ffffc9001862c000 RSI: 0000000000064d9c RDI: 0000000000064d9d [ 791.064620][T10721] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 791.072641][T10721] R10: dffffc0000000000 R11: fffff52002054e70 R12: 1ffff110061ba458 [ 791.080623][T10721] R13: dffffc0000000000 R14: ffff888030dd2000 R15: 0000000000000000 [ 791.088643][T10721] ? smb2_add_credits+0x1365/0x2600 [ 791.093884][T10721] compound_send_recv+0x1254/0x3040 [ 791.099112][T10721] ? cifs_pick_channel+0x320/0x320 [ 791.104376][T10721] ? __rwlock_init+0x150/0x150 [ 791.109171][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 791.114395][T10721] cifs_send_recv+0x40/0x50 [ 791.118920][T10721] SMB2_negotiate+0x16b5/0x4270 [ 791.123800][T10721] ? preempt_schedule_common+0x82/0xc0 [ 791.129302][T10721] ? smb3_encryption_required+0x2f0/0x2f0 [ 791.135068][T10721] ? smb2_negotiate+0x5c/0x70 [ 791.139790][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 791.145025][T10721] ? _raw_spin_unlock+0x28/0x40 [ 791.149888][T10721] cifs_negotiate_protocol+0x445/0x670 [ 791.155365][T10721] cifs_get_smb_ses+0x8d6/0x1b00 [ 791.160324][T10721] cifs_mount_get_session+0xef/0x440 [ 791.165625][T10721] dfs_mount_share+0x1e9/0x7b0 [ 791.170406][T10721] cifs_mount+0xbc/0x650 [ 791.174669][T10721] ? __rwlock_init+0x150/0x150 [ 791.179455][T10721] ? cifs_is_path_remote+0x6f0/0x6f0 [ 791.184776][T10721] ? do_raw_spin_unlock+0x121/0x230 [ 791.189993][T10721] ? smb3_update_mnt_flags+0x52f/0xc10 [ 791.195506][T10721] ? cifs_setup_cifs_sb+0x52f/0x840 [ 791.200735][T10721] cifs_smb3_do_mount+0x2e5/0x710 [ 791.205794][T10721] ? cifs_sb_deactive+0x80/0x80 [ 791.210678][T10721] ? vfs_parse_fs_string+0x10f/0x170 [ 791.215999][T10721] smb3_get_tree+0x5a5/0xa90 [ 791.220628][T10721] vfs_get_tree+0x8c/0x280 [ 791.225132][T10721] do_new_mount+0x24a/0xa40 [ 791.229662][T10721] __se_sys_mount+0x2e7/0x3d0 [ 791.234358][T10721] ? __x64_sys_mount+0xc0/0xc0 [ 791.239151][T10721] ? lockdep_hardirqs_on+0x98/0x150 [ 791.244368][T10721] ? __x64_sys_mount+0x20/0xc0 [ 791.249144][T10721] do_syscall_64+0x55/0xb0 [ 791.253582][T10721] ? clear_bhb_loop+0x40/0x90 [ 791.258376][T10721] ? clear_bhb_loop+0x40/0x90 [ 791.263080][T10721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.269006][T10721] RIP: 0033:0x7f1089d9e159 [ 791.273436][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.293054][T10721] RSP: 002b:00007f1087ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 791.301475][T10721] RAX: ffffffffffffffda RBX: 00007f108a025fa0 RCX: 00007f1089d9e159 [ 791.309454][T10721] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 791.317440][T10721] RBP: 00007f1089e35024 R08: 0000200000000300 R09: 0000000000000000 [ 791.325433][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.333430][T10721] R13: 00007f108a026038 R14: 00007f108a025fa0 R15: 00007fff497ec238 [ 791.341445][T10721] [ 791.345065][T10721] Kernel Offset: disabled [ 791.349488][T10721] Rebooting in 86400 seconds..