last executing test programs: 13.606109023s ago: executing program 0 (id=467): r0 = memfd_create(&(0x7f0000000b80)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) preadv(r3, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/58, 0x3a}, {&(0x7f0000000c80)=""/4112, 0x1010}], 0x2, 0x3, 0x9) 13.378975985s ago: executing program 0 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000240)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x1cfa, 0xd89, 0x8000008, 0x3, 0x32cbe4c5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000340)={0x800100, 0x101, 0x6, 0xe1d9, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000003c0)={0x800100, 0x1080, 0xde, 0x7, 0x3, 0xd3}) close_range(r0, 0xffffffffffffffff, 0x0) 13.025993011s ago: executing program 0 (id=472): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x3, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x5, 0x5, 0x7, 0x80000008, 0x4, 0x5, 0xeb]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x200040c4) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.091470543s ago: executing program 0 (id=478): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x34b, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x15c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bc3, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, 0x0) 9.67915329s ago: executing program 0 (id=488): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x3, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x5, 0x5, 0x7, 0x80000008, 0x4, 0x5, 0xeb]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x200040c4) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.719960323s ago: executing program 0 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = creat(&(0x7f0000000400)='./file0\x00', 0xc7) close(r1) socket$xdp(0x2c, 0x3, 0x0) 6.7880022s ago: executing program 1 (id=509): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000700)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000007c0)={r2, 0x0, 0x0}, 0x10) 6.617713519s ago: executing program 2 (id=511): mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004e0000b00000e00000119078000000000000000044249651e000000100000008e0000002000000037f00000100000ca1ac1e0101000000034e21000000789078a106000021856a477767deeb17606b6584ccebe6b252aef1c2c08edd3afeee0bbb1e4b9fa403ec3ca859313da94bdf9a34f3b9e3d92bd49b5b98460b420662963a3b014954a875fdf6296c09caf68d054475701848a07aa3390f18508594b63244951fc87eb6d09106a08db30f6a"], 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xffa4, 0x8, [@type_tag={0x80, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x61, 0x2e, 0x2e, 0x61, 0x61]}}, &(0x7f0000000c40)=""/151, 0xff57, 0x97, 0x1, 0xf0ac, 0x10000}, 0x28) openat$comedi(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/comedi0\x00', 0x4800, 0x0) r0 = io_uring_setup(0x37b0, &(0x7f0000000d40)={0x0, 0x20b034, 0x0, 0x2, 0x400022a}) prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e40)=0x7) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000ec0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000fc0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002000), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002040)=0x6) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000002080)={0x0}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000700)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x366, 0x10, &(0x7f0000000880), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r4}, 0x20) recvmsg$unix(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/179, 0x33fe0}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 6.567923937s ago: executing program 3 (id=512): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 6.288255132s ago: executing program 4 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000540)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000580)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}]}) 5.784258282s ago: executing program 1 (id=514): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.327605939s ago: executing program 3 (id=515): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0xa, 0x62080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x1, 0x100, 0x7}) 4.907300693s ago: executing program 2 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x48d, 0x0, 0x7f00000016}]}) 4.879919025s ago: executing program 1 (id=517): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x800, 0xfffffffffffffffb, 0x2}, 0x0, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x5}, 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 4.575375362s ago: executing program 4 (id=518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 4.287123043s ago: executing program 1 (id=519): syz_open_dev$MSR(&(0x7f0000000000), 0x82, 0x0) epoll_create1(0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, 0x0) 4.212943941s ago: executing program 4 (id=520): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000a00)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{0x0, 0xfffffffffffffcf2, 0x0}}], 0x1, 0x4000000) 4.177806204s ago: executing program 2 (id=521): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000480)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000940)=@ccm_128={{0x304}, "c6d560164376f018", "21e3655de63f34cfa1bd5c41e4c6ccfc", "655ceb10", "8f068e40342cf1d5"}, 0x28) r4 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000980)=""/4090, &(0x7f0000001980)=0xffa) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x1004040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x101002, 0x0) fallocate(r6, 0x10, 0x0, 0x1000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}]}, 0x60}, 0x1, 0x7}, 0x4004000) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xb0842, 0x63) write$P9_RLERRORu(r8, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 4.035489811s ago: executing program 4 (id=522): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0xe, 0x3c, 0x9, 0x0, 0x4}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40c0) writev(r1, &(0x7f0000000040), 0x8) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x1c39, &(0x7f0000000080)={0x0, 0x7b55, 0x42, 0x6, 0x354}, &(0x7f00000004c0), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f00000026c0)='\\', 0x1) r5 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.941775998s ago: executing program 1 (id=523): mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0xff3}}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x80, 0x2, 0x1}}, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x68}}, 0x0) 2.663481838s ago: executing program 3 (id=524): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001080)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069ed", 0x57}, {&(0x7f0000001180)="a68cde0db170df7710b54f17d9a3060098f3547090bbd2e0a04e02a054bff9257e5c355037395cf61add57b3977aa075ce6bacd6c3c268c0bf30fcc87d7ebc5d16a446a2c5ae490fd34b8e8d53287ea2423910340ec2c15503854c521ef20f4bbde635f36deff27f28553baca1e2c186b42fe2d21fe911560b40fcfb605a113c52d3fb41a491bc7c21ebd9bb941875aac07cbae9c9ee298298843eb418977929a403cc7c67e23edb6b75483cd2", 0xad}, {0x0}, {&(0x7f0000000300)="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", 0xc75}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x436a5abf, 0x8000000000000001}) r3 = socket$kcm(0x2b, 0x1, 0x0) listen(r3, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r4, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x4000009) write(r9, &(0x7f0000000380)='f', 0x1) socket$can_bcm(0x1d, 0x2, 0x2) 2.648520056s ago: executing program 2 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 1.20252341s ago: executing program 4 (id=526): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.1362824s ago: executing program 3 (id=527): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000012c0)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001300)={0xa, 0x4e1d, 0x9, @local, 0x40}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001340)='batadv_slave_0\x00', 0x14) bind$inet(r1, &(0x7f0000001380)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000013c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.025395019s ago: executing program 1 (id=528): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x24, &(0x7f00000001c0)={0x20, 0xc6cdb91b1c448aed, 0xb, "2c33bb55b5878989fe6d97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2b, 0x1, 0x1) 990.83483ms ago: executing program 3 (id=529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) 899.807805ms ago: executing program 3 (id=530): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000006880)='./dev\x00', &(0x7f00000068c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000006900)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff00000007058102400001070501024000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006980)='./dev/ttyUSB0\x00', 0x102, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x9000}], 0x1, 0xf) 699.783648ms ago: executing program 2 (id=531): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3, 0x6) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 45.532201ms ago: executing program 4 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b90, &(0x7f0000000200)="2800000000000000efbeadde0300000005") 0s ago: executing program 2 (id=533): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={0x0, 0x1d0}, 0x8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x3b96, 0x4) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): ksys_mmap_pgoff+0x4a6/0x720 [ 152.116448][ T6590] ? __x64_sys_mmap+0x7f/0x140 [ 152.116478][ T6590] do_syscall_64+0x166/0x520 [ 152.116504][ T6590] ? trace_irq_disable+0x3b/0x140 [ 152.116525][ T6590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.116547][ T6590] ? clear_bhb_loop+0x70/0xc0 [ 152.116573][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.116594][ T6590] RIP: 0033:0x7f7a1c7cf559 [ 152.116614][ T6590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.116632][ T6590] RSP: 002b:00007f7a1aa1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 152.116657][ T6590] RAX: ffffffffffffffda RBX: 00007f7a1ca55fa0 RCX: 00007f7a1c7cf559 [ 152.116673][ T6590] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 152.116687][ T6590] RBP: 00007f7a1c866b20 R08: 0000000000000003 R09: 0000000000000000 [ 152.116701][ T6590] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 152.116714][ T6590] R13: 00007f7a1ca56038 R14: 00007f7a1ca55fa0 R15: 00007ffca20e88d8 [ 152.116750][ T6590] [ 152.168038][ T35] audit: type=1800 audit(1793115068.324:3): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.253" name="file1" dev="tmpfs" ino=235 res=0 errno=-12 [ 152.327936][ T4932] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff8880317ca610 [ 152.327990][ T4932] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 10 08 1e 00 00 48 00 [ 152.337144][ T31] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff888027a37910 [ 152.337198][ T31] sd 0:0:1:0: [sda] tag#138 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 152.337573][ T31] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff8880317ca9d0 [ 152.337619][ T31] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 08 00 10 08 66 00 00 08 00 [ 153.679741][ T11] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff888031608810 [ 153.679795][ T11] sd 0:0:1:0: [sda] tag#140 CDB: Write(10) 2a 00 00 0c 41 36 00 00 08 00 [ 153.698573][ T11] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff888031608bd0 [ 153.698626][ T11] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 00 00 0c 61 16 00 00 08 00 [ 153.739909][ T171] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff888031608f90 [ 153.739971][ T171] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0c 61 1e 00 00 18 00 [ 153.758755][ T171] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff888031609350 [ 153.758814][ T171] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0c 70 66 00 00 d0 00 [ 153.826168][ T171] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff888031609710 [ 153.826229][ T171] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0c 11 36 00 00 10 00 [ 153.826303][ T171] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff888031609ad0 [ 153.826353][ T171] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0b 71 36 00 00 10 00 [ 154.120277][ T5880] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.232118][ T5880] usb 4-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 155.233723][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.233754][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.273014][ T5880] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 155.273042][ T5880] usb 4-1: Manufacturer: syz [ 155.305446][ T5880] usb 4-1: config 0 descriptor?? [ 155.329819][ T4932] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff8880317cad90 [ 155.329873][ T4932] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 10 08 6e 00 00 38 00 [ 155.337302][ T31] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff888027a37910 [ 155.337353][ T31] sd 0:0:1:0: [sda] tag#147 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 155.340376][ T31] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff8880317cb150 [ 155.340428][ T31] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 08 00 10 08 a6 00 00 08 00 [ 155.426774][ T11] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff888027a37910 [ 155.426828][ T11] sd 0:0:1:0: [sda] tag#149 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 155.437171][ T11] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff88803160a250 [ 155.437224][ T11] sd 0:0:1:0: [sda] tag#150 CDB: Write(10) 2a 08 00 10 01 36 00 00 08 00 [ 155.451822][ T6607] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff88803160a610 [ 155.451888][ T6607] sd 0:0:1:0: [sda] tag#151 CDB: Write(10) 2a 00 00 00 05 4e 00 00 08 00 [ 155.452024][ T6607] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff88803160a9d0 [ 155.452078][ T6607] sd 0:0:1:0: [sda] tag#152 CDB: Write(10) 2a 00 00 00 01 36 00 00 08 00 [ 155.457406][ T11] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff888027a37910 [ 155.457467][ T11] sd 0:0:1:0: [sda] tag#153 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 155.459831][ T11] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff88803160b150 [ 155.459879][ T11] sd 0:0:1:0: [sda] tag#154 CDB: Write(10) 2a 08 00 10 01 36 00 00 08 00 [ 155.461240][ T6607] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff88803160b510 [ 155.461300][ T6607] sd 0:0:1:0: [sda] tag#155 CDB: Write(10) 2a 00 00 00 09 ae 00 00 10 00 [ 155.461374][ T6607] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff88803160b8d0 [ 155.461425][ T6607] sd 0:0:1:0: [sda] tag#156 CDB: Write(10) 2a 00 00 00 05 56 00 00 08 00 [ 155.461504][ T6607] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff88803160bc90 [ 155.461555][ T6607] sd 0:0:1:0: [sda] tag#157 CDB: Write(10) 2a 00 00 00 01 3e 00 00 08 00 [ 155.461625][ T6607] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff88803160c050 [ 155.461690][ T6607] sd 0:0:1:0: [sda] tag#158 CDB: Write(10) 2a 00 00 00 05 46 00 00 08 00 [ 155.504034][ T11] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff888027a37910 [ 155.504090][ T11] sd 0:0:1:0: [sda] tag#159 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 155.504530][ T11] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff88803160bc90 [ 155.504577][ T11] sd 0:0:1:0: [sda] tag#160 CDB: Write(10) 2a 08 00 10 01 36 00 00 08 00 [ 155.505862][ T11] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff88803160c050 [ 155.505908][ T11] sd 0:0:1:0: [sda] tag#161 CDB: Write(10) 2a 08 00 10 01 36 00 00 08 00 [ 155.546465][ T11] sd 0:0:1:0: [sda] tag#162 Send: scmd 0xffff88803160c410 [ 155.546518][ T11] sd 0:0:1:0: [sda] tag#162 CDB: Unmap/Read sub-channel 42 00 00 00 00 00 00 00 18 00 [ 155.578974][ T11] sd 0:0:1:0: [sda] tag#163 Send: scmd 0xffff888027a37910 [ 155.579044][ T11] sd 0:0:1:0: [sda] tag#163 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 155.709023][ T35] audit: type=1326 audit(1793115071.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6612 comm="syz.0.262" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc1f6af559 code=0x0 [ 157.227752][ T5880] uclogic 0003:256C:006D.0005: v1 frame probing failed: -71 [ 157.227841][ T5880] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 157.227944][ T5880] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 157.311231][ T5880] usb 4-1: USB disconnect, device number 6 [ 157.776917][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 158.238930][ T5880] kernel read not supported for file /swaps (pid: 5880 comm: kworker/1:6) [ 158.768164][ T6647] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.435432][ T6684] FAULT_INJECTION: forcing a failure. [ 159.435432][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 159.435469][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.435494][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.435507][ T6684] Call Trace: [ 159.435524][ T6684] [ 159.435533][ T6684] dump_stack_lvl+0xe8/0x150 [ 159.435573][ T6684] should_fail_ex+0x46b/0x600 [ 159.435608][ T6684] ? alloc_slab_obj_exts+0x5c/0x180 [ 159.435636][ T6684] should_failslab+0xa8/0x100 [ 159.435658][ T6684] ? alloc_slab_obj_exts+0x5c/0x180 [ 159.435683][ T6684] __kmalloc_flags_noprof+0x123/0x800 [ 159.435716][ T6684] ? alloc_slab_obj_exts+0x5c/0x180 [ 159.435750][ T6684] alloc_slab_obj_exts+0x5c/0x180 [ 159.435779][ T6684] __memcg_slab_post_alloc_hook+0x63d/0xe00 [ 159.435830][ T6684] __kmalloc_cache_noprof+0x429/0x670 [ 159.435860][ T6684] ? alloc_fs_context+0x66/0xd00 [ 159.435889][ T6684] ? alloc_fs_context+0x66/0xd00 [ 159.435922][ T6684] alloc_fs_context+0x66/0xd00 [ 159.435950][ T6684] ? __get_fs_type+0x267/0x280 [ 159.435975][ T6684] ? __get_fs_type+0x21/0x280 [ 159.436009][ T6684] do_new_mount+0x177/0xb00 [ 159.436031][ T6684] ? cap_capable+0x123/0x460 [ 159.436057][ T6684] ? __pfx_do_new_mount+0x10/0x10 [ 159.436085][ T6684] ? ns_capable+0x84/0xe0 [ 159.436115][ T6684] ? path_mount+0x647/0x1050 [ 159.436142][ T6684] ? user_path_at+0xd4/0x160 [ 159.436172][ T6684] __se_sys_mount+0x31d/0x420 [ 159.436202][ T6684] ? __pfx___se_sys_mount+0x10/0x10 [ 159.436232][ T6684] ? __x64_sys_mount+0x20/0xc0 [ 159.436258][ T6684] do_syscall_64+0x166/0x520 [ 159.436281][ T6684] ? trace_irq_disable+0x3b/0x140 [ 159.436301][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.436322][ T6684] ? clear_bhb_loop+0x70/0xc0 [ 159.436347][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.436368][ T6684] RIP: 0033:0x7f9d0e48f559 [ 159.436388][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.436406][ T6684] RSP: 002b:00007f9d0c6de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.436431][ T6684] RAX: ffffffffffffffda RBX: 00007f9d0e715fa0 RCX: 00007f9d0e48f559 [ 159.436446][ T6684] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 159.436461][ T6684] RBP: 00007f9d0e526b20 R08: 0000000000000000 R09: 0000000000000000 [ 159.436475][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.436487][ T6684] R13: 00007f9d0e716038 R14: 00007f9d0e715fa0 R15: 00007fff72778d68 [ 159.436528][ T6684] [ 159.600209][ T5758] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.751218][ T5758] usb 3-1: Using ep0 maxpacket: 8 [ 159.755076][ T5758] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.761841][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.761968][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.795751][ T5758] usb 3-1: config 0 descriptor?? [ 160.106472][ T5758] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.359451][ T6687] syz.1.288 (6687) used greatest stack depth: 17664 bytes left [ 160.537420][ T1168] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.565664][ T5744] usb 3-1: USB disconnect, device number 4 [ 160.763735][ T31] sd 0:0:1:0: [sda] tag#164 Send: scmd 0xffff8880317cb510 [ 160.763795][ T31] sd 0:0:1:0: [sda] tag#164 CDB: Write(10) 2a 00 00 10 01 36 00 00 08 00 [ 160.765567][ T4932] sd 0:0:1:0: [sda] tag#165 Send: scmd 0xffff8880317cb8d0 [ 160.765620][ T4932] sd 0:0:1:0: [sda] tag#165 CDB: Write(10) 2a 00 00 10 08 ae 00 00 18 00 [ 160.790518][ T11] sd 0:0:1:0: [sda] tag#166 Send: scmd 0xffff888027a37910 [ 160.790575][ T11] sd 0:0:1:0: [sda] tag#166 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 160.792607][ T31] sd 0:0:1:0: [sda] tag#167 Send: scmd 0xffff88803160cb90 [ 160.792694][ T31] sd 0:0:1:0: [sda] tag#167 CDB: Write(10) 2a 08 00 10 08 c6 00 00 08 00 [ 160.948547][ T6698] device-mapper: raid: Choosing default region size of 4MiB [ 161.252239][ T6698] mdX: WARNING: ram2 appears to be on the same physical disk as ram2. [ 161.252267][ T6698] True protection against single-disk failure might be compromised. [ 161.252283][ T6698] md/raid:mdX: not clean -- starting background reconstruction [ 161.252305][ T6698] md/raid:mdX: not enough configured devices (3, minimum 4) [ 161.252318][ T6698] md: pers->run() failed ... [ 161.281679][ T5744] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.430196][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.441314][ T5744] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 161.444296][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.444348][ T5744] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 161.444373][ T5744] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 161.444400][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 161.444439][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.459799][ T6701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.459971][ T6701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.521828][ T5744] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 161.563719][ T5744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 161.563809][ T5744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 161.590383][ T5744] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 161.606550][ T5744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 161.606639][ T5744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 161.624314][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 161.625144][ T5884] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2d51, bcdDevice=0.00 [ 161.627792][ T5744] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 161.628261][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.628290][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.628327][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.783076][ T5884] usb 3-1: config 0 descriptor?? [ 161.985639][ T5744] usb 5-1: USB disconnect, device number 4 [ 162.068664][ T5744] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 162.118457][ T5744] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 162.119558][ T5744] keyspan 5-1:1.0: device disconnected [ 162.153159][ T6698] device-mapper: table: 248:1: raid: Failed to run raid array (-EINVAL) [ 162.153185][ T6698] device-mapper: ioctl: error adding target to table [ 162.236817][ T5884] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 162.236851][ T5884] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 162.236881][ T5884] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 162.236904][ T5884] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 162.236929][ T5884] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 162.317077][ T5884] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 162.432493][ T5884] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 162.432551][ T5884] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 162.470303][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.496931][ T5884] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 162.524118][ T5884] usb 3-1: USB disconnect, device number 5 [ 162.530835][ T6712] fido_id[6712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 162.566442][ T6714] sd 0:0:1:0: [sg0] sg_open: flags=0x28102 [ 162.566517][ T6714] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88803bbd8000 [ 162.566561][ T6714] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 162.566605][ T6714] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 162.566698][ T6714] sd 0:0:1:0: [sg0] sg_build_indirect: k=0, num=32768, ret_sz=32768 [ 162.566742][ T6714] sd 0:0:1:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=0 [ 162.566786][ T6714] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 162.578524][ T6714] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x227b [ 162.589706][ T6714] sd 0:0:1:0: [sg0] sg_write: count=105 [ 162.590270][ T6714] sd 0:0:1:0: [sg0] sg_write: scsi opcode=0x00, cmd_size=6 [ 162.590316][ T6714] sd 0:0:1:0: [sg0] sg_common_write: scsi opcode=0x00, cmd_size=6 [ 162.590353][ T6714] sd 0:0:1:0: [sg0] sg_start_req: dxfer_len=63 [ 162.590528][ T6714] sd 0:0:1:0: [sg0] sg_link_reserve: size=63 [ 162.634784][ T6714] sd 0:0:1:0: [sda] tag#168 Send: scmd 0xffff888031600110 [ 162.634840][ T6714] sd 0:0:1:0: [sda] tag#168 CDB: Test Unit Ready 00 00 00 00 0a 00 [ 162.635040][ C1] sd 0:0:1:0: [sg0] sg_cmd_done: pack_id=0, res=0x2 [ 162.638562][ T6714] sd 0:0:1:0: [sg0] sg_read: count=132 [ 162.797685][ T3344] IPVS: starting estimator thread 0... [ 162.812815][ T6721] IPVS: ovf: TCP 127.0.0.1:5376 - no destination available [ 162.894293][ T6720] IPVS: using max 10 ests per chain, 24000 per kthread [ 163.380803][ T6714] sd 0:0:1:0: [sg0] sg_release [ 163.380991][ T5744] sd 0:0:1:0: [sg0] sg_finish_rem_req: res_used=1 [ 163.381045][ T5744] sd 0:0:1:0: [sg0] sg_unlink_reserve: req->k_use_sg=1 [ 163.381093][ T5744] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 163.381131][ T5744] sd 0:0:1:0: [sg0] sg_remove_scat: k=0, pg=0xffffea00019ae400 [ 163.403979][ T6730] device-mapper: ioctl: Invalid target message parameters. [ 163.579155][ T6736] process 'syz.1.305' launched '/dev/fd/4' with NULL argv: empty string added [ 164.017361][ T6745] netlink: 52 bytes leftover after parsing attributes in process `syz.1.308'. [ 164.017389][ T6745] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 164.130221][ T5884] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 164.281506][ T5884] usb 4-1: not running at top speed; connect to a high speed hub [ 164.281549][ T5884] usb 4-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 164.282958][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 164.342408][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.342438][ T5884] usb 4-1: Product: syz [ 164.342453][ T5884] usb 4-1: Manufacturer: syz [ 164.342466][ T5884] usb 4-1: SerialNumber: syz [ 164.409597][ T5884] oti6858 4-1:1.0: oti6858 converter detected [ 164.424763][ T5884] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 164.525536][ T5612] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.070849][ T5612] usb 5-1: Using ep0 maxpacket: 8 [ 165.540312][ T5612] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.541814][ T5612] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 165.541870][ T5612] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.541893][ T5612] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.541916][ T5612] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.541939][ T5612] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.541976][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.802807][ T4932] sd 0:0:1:0: [sda] tag#169 Send: scmd 0xffff8880316004d0 [ 165.802926][ T4932] sd 0:0:1:0: [sda] tag#169 CDB: Write(10) 2a 00 00 10 08 ce 00 00 18 00 [ 165.826490][ T31] sd 0:0:1:0: [sda] tag#170 Send: scmd 0xffff888027a37910 [ 165.826546][ T31] sd 0:0:1:0: [sda] tag#170 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 165.826968][ T31] sd 0:0:1:0: [sda] tag#171 Send: scmd 0xffff8880317cbc90 [ 165.827070][ T31] sd 0:0:1:0: [sda] tag#171 CDB: Write(10) 2a 08 00 10 08 e6 00 00 08 00 [ 166.344918][ T6776] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 166.344944][ T6776] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 166.667067][ T6786] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 166.799150][ T5758] usb 5-1: USB disconnect, device number 5 [ 167.009985][ T6794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.322'. [ 167.010012][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 167.015172][ T5757] usb 4-1: USB disconnect, device number 7 [ 167.067570][ T5757] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 167.068477][ T5757] oti6858 4-1:1.0: device disconnected [ 167.800246][ T5612] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.950197][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 167.955462][ T5612] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 167.957085][ T5612] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 167.957110][ T5612] usb 1-1: config 0 has no interface number 0 [ 167.957152][ T5612] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 167.957177][ T5612] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 167.982508][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.982536][ T5612] usb 1-1: Product: syz [ 167.982551][ T5612] usb 1-1: Manufacturer: syz [ 167.982566][ T5612] usb 1-1: SerialNumber: syz [ 168.042824][ T5612] usb 1-1: config 0 descriptor?? [ 168.045148][ T6803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.045274][ T6803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.162522][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.256153][ T6803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.268400][ T6803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.491633][ T5612] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 168.536438][ T6822] netlink: 52 bytes leftover after parsing attributes in process `syz.2.333'. [ 168.536466][ T6822] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 168.876720][ T6828] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 168.876745][ T6828] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 168.910914][ T5612] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 168.911621][ T5612] asix 1-1:0.34: probe with driver asix failed with error -71 [ 168.973465][ T5612] usb 1-1: USB disconnect, device number 5 [ 169.127201][ T6844] capability: warning: `syz.1.340' uses 32-bit capabilities (legacy support in use) [ 169.480227][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.870171][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 169.870936][ T10] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 169.874825][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.874859][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.874900][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.954727][ T10] usb 5-1: config 0 descriptor?? [ 170.373605][ T6879] FAULT_INJECTION: forcing a failure. [ 170.373605][ T6879] name fail_futex, interval 1, probability 0, space 0, times 1 [ 170.373641][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.1.353 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.373666][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.373679][ T6879] Call Trace: [ 170.373688][ T6879] [ 170.373697][ T6879] dump_stack_lvl+0xe8/0x150 [ 170.373735][ T6879] should_fail_ex+0x46b/0x600 [ 170.373774][ T6879] get_futex_key+0x1ab/0x1410 [ 170.373801][ T6879] ? kasan_save_track+0x4f/0x80 [ 170.373832][ T6879] ? __kasan_slab_free+0x5c/0x80 [ 170.373863][ T6879] ? do_syscall_64+0x166/0x520 [ 170.373890][ T6879] ? __pfx_get_futex_key+0x10/0x10 [ 170.373932][ T6879] futex_wake+0x119/0x600 [ 170.373968][ T6879] ? __pfx_futex_wake+0x10/0x10 [ 170.374016][ T6879] do_futex+0x458/0x4e0 [ 170.374049][ T6879] ? __pfx_do_futex+0x10/0x10 [ 170.374073][ T6879] ? kfree+0x1c5/0x6d0 [ 170.374108][ T6879] __se_sys_futex+0x3a8/0x450 [ 170.374138][ T6879] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 170.374161][ T6879] ? __pfx___se_sys_futex+0x10/0x10 [ 170.374187][ T6879] ? rcu_is_watching+0x16/0xb0 [ 170.374217][ T6879] ? __x64_sys_futex+0x21/0xf0 [ 170.374247][ T6879] do_syscall_64+0x166/0x520 [ 170.374269][ T6879] ? trace_irq_disable+0x3b/0x140 [ 170.374289][ T6879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.374311][ T6879] ? clear_bhb_loop+0x70/0xc0 [ 170.374336][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.374357][ T6879] RIP: 0033:0x7f9d0e48f559 [ 170.374377][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.374395][ T6879] RSP: 002b:00007f9d0c6de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.374418][ T6879] RAX: ffffffffffffffda RBX: 00007f9d0e715fa8 RCX: 00007f9d0e48f559 [ 170.374433][ T6879] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9d0e715fac [ 170.374450][ T6879] RBP: 00007f9d0e715fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 170.374464][ T6879] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 170.374478][ T6879] R13: 00007f9d0e716038 R14: 00007fff72778c80 R15: 00007fff72778d68 [ 170.374511][ T6879] [ 170.518645][ T6880] FAULT_INJECTION: forcing a failure. [ 170.518645][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 170.518682][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.3.352 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.518705][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.518718][ T6880] Call Trace: [ 170.518726][ T6880] [ 170.518734][ T6880] dump_stack_lvl+0xe8/0x150 [ 170.518770][ T6880] should_fail_ex+0x46b/0x600 [ 170.518807][ T6880] should_failslab+0xa8/0x100 [ 170.518828][ T6880] ? security_file_alloc+0x34/0x310 [ 170.518850][ T6880] kmem_cache_alloc_noprof+0x99/0x680 [ 170.518878][ T6880] ? rcu_is_watching+0x16/0xb0 [ 170.518901][ T6880] ? security_file_alloc+0x34/0x310 [ 170.518923][ T6880] ? alloc_empty_file+0x5b/0x1d0 [ 170.518948][ T6880] security_file_alloc+0x34/0x310 [ 170.518981][ T6880] init_file+0x96/0x2d0 [ 170.519004][ T6880] alloc_empty_file+0x74/0x1d0 [ 170.519027][ T6880] alloc_file_pseudo+0x110/0x1e0 [ 170.519050][ T6880] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 170.519086][ T6880] __anon_inode_getfile+0x129/0x210 [ 170.519113][ T6880] io_uring_create+0x57a/0x980 [ 170.519141][ T6880] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 170.519178][ T6880] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 170.519224][ T6880] ? rcu_is_watching+0x16/0xb0 [ 170.519260][ T6880] do_syscall_64+0x166/0x520 [ 170.519282][ T6880] ? trace_irq_disable+0x3b/0x140 [ 170.519302][ T6880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.519327][ T6880] ? clear_bhb_loop+0x70/0xc0 [ 170.519352][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.519372][ T6880] RIP: 0033:0x7f7a1c7cf559 [ 170.519396][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.519413][ T6880] RSP: 002b:00007f7a1aa1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 170.519436][ T6880] RAX: ffffffffffffffda RBX: 00007f7a1ca55fa0 RCX: 00007f7a1c7cf559 [ 170.519452][ T6880] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000000068f6 [ 170.519466][ T6880] RBP: 00007f7a1c866b20 R08: 0000000000000000 R09: 0000000000000000 [ 170.519480][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.519492][ T6880] R13: 00007f7a1ca56038 R14: 00007f7a1ca55fa0 R15: 00007ffca20e88d8 [ 170.519524][ T6880] [ 170.866711][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 170.890701][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input10 [ 170.969482][ T4932] sd 0:0:1:0: [sda] tag#172 Send: scmd 0xffff8880317cc050 [ 170.969533][ T4932] sd 0:0:1:0: [sda] tag#172 CDB: Write(10) 2a 00 00 10 08 ee 00 00 18 00 [ 170.977744][ T31] sd 0:0:1:0: [sda] tag#173 Send: scmd 0xffff888027a37910 [ 170.977799][ T31] sd 0:0:1:0: [sda] tag#173 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 170.978122][ T31] sd 0:0:1:0: [sda] tag#174 Send: scmd 0xffff8880317cc050 [ 170.978169][ T31] sd 0:0:1:0: [sda] tag#174 CDB: Write(10) 2a 08 00 10 09 06 00 00 08 00 [ 171.145042][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 171.514234][ T6519] usb 5-1: USB disconnect, device number 6 [ 171.589957][ T6907] batman_adv: batadv0: Adding interface: syz_tun [ 171.589976][ T6907] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.590006][ T6907] batman_adv: batadv0: Interface activated: syz_tun [ 171.666041][ T6898] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 171.666066][ T6898] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 171.686629][ T6909] FAULT_INJECTION: forcing a failure. [ 171.686629][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 171.686669][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.686694][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.686707][ T6909] Call Trace: [ 171.686714][ T6909] [ 171.686722][ T6909] dump_stack_lvl+0xe8/0x150 [ 171.686760][ T6909] should_fail_ex+0x46b/0x600 [ 171.686797][ T6909] should_failslab+0xa8/0x100 [ 171.686820][ T6909] __kvmalloc_node_noprof+0x171/0x880 [ 171.686854][ T6909] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 171.686883][ T6909] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 171.686918][ T6909] bpf_test_run_xdp_live+0x220/0x1c20 [ 171.686949][ T6909] ? __pfx_stack_trace_save+0x10/0x10 [ 171.686983][ T6909] ? stack_depot_save_flags+0x33/0x7f0 [ 171.687019][ T6909] ? kasan_save_track+0x4f/0x80 [ 171.687046][ T6909] ? kasan_save_track+0x3e/0x80 [ 171.687071][ T6909] ? __kasan_kmalloc+0x93/0xb0 [ 171.687098][ T6909] ? __kmalloc_noprof+0x418/0x790 [ 171.687128][ T6909] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 171.687154][ T6909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.687210][ T6909] ? lock_acquire+0x115/0x350 [ 171.687250][ T6909] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 171.687287][ T6909] ? _copy_from_user+0x94/0xb0 [ 171.687327][ T6909] ? bpf_test_init+0x113/0x150 [ 171.687352][ T6909] ? xdp_convert_md_to_buff+0x5b/0x330 [ 171.687383][ T6909] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 171.687428][ T6909] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 171.687461][ T6909] ? __fget_files+0x2a/0x420 [ 171.687492][ T6909] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 171.687521][ T6909] bpf_prog_test_run+0x2cb/0x340 [ 171.687551][ T6909] __sys_bpf+0xb1e/0xe00 [ 171.687582][ T6909] ? __pfx___sys_bpf+0x10/0x10 [ 171.687610][ T6909] ? do_futex+0x3e7/0x4e0 [ 171.687664][ T6909] ? rcu_is_watching+0x16/0xb0 [ 171.687693][ T6909] __x64_sys_bpf+0xba/0xd0 [ 171.687718][ T6909] do_syscall_64+0x166/0x520 [ 171.687740][ T6909] ? trace_irq_disable+0x3b/0x140 [ 171.687760][ T6909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.687780][ T6909] ? clear_bhb_loop+0x70/0xc0 [ 171.687803][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.687824][ T6909] RIP: 0033:0x7f9fdf8df559 [ 171.687843][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.687861][ T6909] RSP: 002b:00007f9fddb2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.687885][ T6909] RAX: ffffffffffffffda RBX: 00007f9fdfb65fa0 RCX: 00007f9fdf8df559 [ 171.687900][ T6909] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 171.687913][ T6909] RBP: 00007f9fdf976b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.687944][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.687956][ T6909] R13: 00007f9fdfb66038 R14: 00007f9fdfb65fa0 R15: 00007ffd1de19808 [ 171.687992][ T6909] [ 172.804126][ T6938] FAULT_INJECTION: forcing a failure. [ 172.804126][ T6938] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.804165][ T6938] CPU: 1 UID: 0 PID: 6938 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.804190][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.804202][ T6938] Call Trace: [ 172.804211][ T6938] [ 172.804219][ T6938] dump_stack_lvl+0xe8/0x150 [ 172.804257][ T6938] should_fail_ex+0x46b/0x600 [ 172.804288][ T6938] prepare_alloc_pages+0x21e/0x650 [ 172.804361][ T6938] __alloc_frozen_pages_noprof+0x19f/0x440 [ 172.804392][ T6938] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 172.804424][ T6938] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.804462][ T6938] ? policy_nodemask+0x2cc/0x8e0 [ 172.804489][ T6938] alloc_pages_mpol+0xd4/0x280 [ 172.804513][ T6938] alloc_pages_noprof+0xd2/0x2f0 [ 172.804538][ T6938] kimage_alloc_pages+0xbe/0x3c0 [ 172.804562][ T6938] kimage_alloc_control_pages+0x49b/0xbc0 [ 172.804608][ T6938] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 172.804649][ T6938] do_kexec_load+0x4d6/0x7c0 [ 172.804677][ T6938] ? __pfx_do_kexec_load+0x10/0x10 [ 172.804704][ T6938] ? _copy_from_user+0x94/0xb0 [ 172.804734][ T6938] __se_sys_kexec_load+0x134/0x160 [ 172.804760][ T6938] do_syscall_64+0x166/0x520 [ 172.804783][ T6938] ? trace_irq_disable+0x3b/0x140 [ 172.804803][ T6938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.804825][ T6938] ? clear_bhb_loop+0x70/0xc0 [ 172.804850][ T6938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.804872][ T6938] RIP: 0033:0x7fdc1f6af559 [ 172.804891][ T6938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.804908][ T6938] RSP: 002b:00007fdc1d906028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 172.804932][ T6938] RAX: ffffffffffffffda RBX: 00007fdc1f935fa0 RCX: 00007fdc1f6af559 [ 172.804947][ T6938] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 0000000000000000 [ 172.804960][ T6938] RBP: 00007fdc1f746b20 R08: 0000000000000000 R09: 0000000000000000 [ 172.804973][ T6938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.804985][ T6938] R13: 00007fdc1f936038 R14: 00007fdc1f935fa0 R15: 00007fff511dc778 [ 172.805018][ T6938] [ 172.805871][ T6938] kexec: Could not allocate swap buffer [ 173.204657][ T35] audit: type=1326 audit(1793115090.408:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e48f559 code=0x0 [ 173.327379][ T6946] loop0: detected capacity change from 0 to 7 [ 173.344647][ T6946] Dev loop0: unable to read RDB block 7 [ 173.344706][ T6946] loop0: unable to read partition table [ 173.344907][ T6946] loop0: partition table beyond EOD, truncated [ 173.350899][ T6946] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.381083][ T11] sd 0:0:1:0: [sda] tag#175 Send: scmd 0xffff88803179d310 [ 174.381146][ T11] sd 0:0:1:0: [sda] tag#175 CDB: Write(10) 2a 00 00 0b 81 56 00 00 20 00 [ 174.381236][ T11] sd 0:0:1:0: [sda] tag#176 Send: scmd 0xffff88803179d6d0 [ 174.381279][ T11] sd 0:0:1:0: [sda] tag#176 CDB: Write(10) 2a 00 00 0b 81 7e 00 00 18 00 [ 174.381345][ T11] sd 0:0:1:0: [sda] tag#177 Send: scmd 0xffff88803179da90 [ 174.381387][ T11] sd 0:0:1:0: [sda] tag#177 CDB: Write(10) 2a 00 00 0b 81 9e 00 00 10 00 [ 174.381447][ T11] sd 0:0:1:0: [sda] tag#178 Send: scmd 0xffff88803179de50 [ 174.381491][ T11] sd 0:0:1:0: [sda] tag#178 CDB: Write(10) 2a 00 00 0b 81 b6 00 00 08 00 [ 174.381567][ T11] sd 0:0:1:0: [sda] tag#179 Send: scmd 0xffff88803179e210 [ 174.381608][ T11] sd 0:0:1:0: [sda] tag#179 CDB: Write(10) 2a 00 00 0b 81 c6 00 00 10 00 [ 174.381660][ T11] sd 0:0:1:0: [sda] tag#180 Send: scmd 0xffff88803179e5d0 [ 174.381697][ T11] sd 0:0:1:0: [sda] tag#180 CDB: Write(10) 2a 00 00 0b 81 fe 00 00 10 00 [ 174.381757][ T11] sd 0:0:1:0: [sda] tag#181 Send: scmd 0xffff88803179e990 [ 174.381810][ T11] sd 0:0:1:0: [sda] tag#181 CDB: Write(10) 2a 00 00 0b 82 16 00 00 08 00 [ 174.381869][ T11] sd 0:0:1:0: [sda] tag#182 Send: scmd 0xffff88803179ed50 [ 174.381907][ T11] sd 0:0:1:0: [sda] tag#182 CDB: Write(10) 2a 00 00 0b 82 26 00 00 10 00 [ 174.535165][ T11] sd 0:0:1:0: [sda] tag#183 Send: scmd 0xffff888031600890 [ 174.535220][ T11] sd 0:0:1:0: [sda] tag#183 CDB: Write(10) 2a 00 00 0b 82 56 00 00 20 00 [ 174.535291][ T11] sd 0:0:1:0: [sda] tag#184 Send: scmd 0xffff888031600c50 [ 174.535334][ T11] sd 0:0:1:0: [sda] tag#184 CDB: Write(10) 2a 00 00 0b 82 86 00 00 08 00 [ 174.535396][ T11] sd 0:0:1:0: [sda] tag#185 Send: scmd 0xffff888031601010 [ 174.535455][ T11] sd 0:0:1:0: [sda] tag#185 CDB: Write(10) 2a 00 00 0b 82 96 00 00 08 00 [ 174.535536][ T11] sd 0:0:1:0: [sda] tag#186 Send: scmd 0xffff8880316013d0 [ 174.535576][ T11] sd 0:0:1:0: [sda] tag#186 CDB: Write(10) 2a 00 00 0b 82 b6 00 00 20 00 [ 174.535659][ T11] sd 0:0:1:0: [sda] tag#187 Send: scmd 0xffff888031601790 [ 174.535698][ T11] sd 0:0:1:0: [sda] tag#187 CDB: Write(10) 2a 00 00 0b 82 de 00 00 18 00 [ 174.535759][ T11] sd 0:0:1:0: [sda] tag#189 Send: scmd 0xffff888031601b50 [ 174.535802][ T11] sd 0:0:1:0: [sda] tag#189 CDB: Write(10) 2a 00 00 0b 82 fe 00 00 08 00 [ 174.535891][ T11] sd 0:0:1:0: [sda] tag#190 Send: scmd 0xffff888031601f10 [ 174.535934][ T11] sd 0:0:1:0: [sda] tag#190 CDB: Write(10) 2a 00 00 0b 83 0e 00 00 18 00 [ 174.535996][ T11] sd 0:0:1:0: [sda] tag#191 Send: scmd 0xffff8880316022d0 [ 174.536039][ T11] sd 0:0:1:0: [sda] tag#191 CDB: Write(10) 2a 00 00 0b 83 2e 00 00 08 00 [ 174.536099][ T11] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff888031602690 [ 174.536139][ T11] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0b 83 3e 00 00 08 00 [ 174.536216][ T11] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff888031602a50 [ 174.536259][ T11] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0b 83 56 00 00 18 00 [ 174.536343][ T11] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff888031602e10 [ 174.536385][ T11] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0b 83 7e 00 00 30 00 [ 174.536488][ T11] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff8880316031d0 [ 174.536530][ T11] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0b 83 b6 00 00 10 00 [ 174.536590][ T11] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff888031603590 [ 174.536699][ T11] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 0b 83 ce 00 00 08 00 [ 174.536785][ T11] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff888031603950 [ 174.536827][ T11] sd 0:0:1:0: [sda] tag#133 CDB: Write(10) 2a 00 00 0b 83 de 00 00 38 00 [ 174.536899][ T11] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff888031603d10 [ 174.536940][ T11] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 00 00 0b 84 36 00 00 08 00 [ 174.537000][ T11] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff8880316040d0 [ 174.537041][ T11] sd 0:0:1:0: [sda] tag#135 CDB: Write(10) 2a 00 00 0b 84 56 00 00 08 00 [ 174.615515][ T31] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff88803179f110 [ 174.615568][ T31] sd 0:0:1:0: [sda] tag#136 CDB: Write(10) 2a 00 00 0b 84 6e 00 00 18 00 [ 174.616632][ T31] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff88803179f4d0 [ 174.616679][ T31] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 0b 84 96 00 00 18 00 [ 174.616744][ T31] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff88803179f890 [ 174.616784][ T31] sd 0:0:1:0: [sda] tag#138 CDB: Write(10) 2a 00 00 0b 84 be 00 00 10 00 [ 174.616874][ T31] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff88803179fc50 [ 174.616914][ T31] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 00 00 0b 84 ee 00 00 18 00 [ 174.616999][ T31] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff8880317c0110 [ 174.617039][ T31] sd 0:0:1:0: [sda] tag#140 CDB: Write(10) 2a 00 00 0b 85 16 00 00 40 00 [ 174.617126][ T31] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff8880317c04d0 [ 174.617166][ T31] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 00 00 0b 85 5e 00 00 18 00 [ 174.617226][ T31] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff8880317c0890 [ 174.617266][ T31] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0b 85 86 00 00 08 00 [ 174.617347][ T31] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff8880317c0c50 [ 174.617386][ T31] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0b 85 9e 00 00 38 00 [ 174.617453][ T31] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff8880317c1010 [ 174.617493][ T31] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0b 85 de 00 00 10 00 [ 174.617550][ T31] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff8880317c13d0 [ 174.617589][ T31] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0b 85 fe 00 00 08 00 [ 174.617747][ T31] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff8880317c1790 [ 174.617789][ T31] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 0b 86 16 00 00 50 00 [ 174.617877][ T31] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff8880317c1b50 [ 174.617916][ T31] sd 0:0:1:0: [sda] tag#147 CDB: Write(10) 2a 00 00 0b 86 7e 00 00 20 00 [ 174.617977][ T31] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff8880317c1f10 [ 174.618016][ T31] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 00 00 0b 86 ae 00 00 08 00 [ 174.618073][ T31] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff8880317c22d0 [ 174.618112][ T31] sd 0:0:1:0: [sda] tag#149 CDB: Write(10) 2a 00 00 0b 86 be 00 00 08 00 [ 174.618202][ T31] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff8880317c2690 [ 174.618242][ T31] sd 0:0:1:0: [sda] tag#150 CDB: Write(10) 2a 00 00 0b 86 ce 00 00 50 00 [ 174.618310][ T31] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff8880317c2a50 [ 174.618350][ T31] sd 0:0:1:0: [sda] tag#151 CDB: Write(10) 2a 00 00 0b 87 2e 00 00 10 00 [ 174.618409][ T31] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff8880317c2e10 [ 174.618450][ T31] sd 0:0:1:0: [sda] tag#152 CDB: Write(10) 2a 00 00 0b 87 46 00 00 10 00 [ 174.618510][ T31] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff8880317c31d0 [ 174.618550][ T31] sd 0:0:1:0: [sda] tag#153 CDB: Write(10) 2a 00 00 0b 87 66 00 00 10 00 [ 174.618607][ T31] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff8880317c3590 [ 174.618647][ T31] sd 0:0:1:0: [sda] tag#154 CDB: Write(10) 2a 00 00 0b 87 86 00 00 10 00 [ 174.618698][ T31] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff8880317c3950 [ 174.618739][ T31] sd 0:0:1:0: [sda] tag#155 CDB: Write(10) 2a 00 00 0b 87 ce 00 00 10 00 [ 174.618798][ T31] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff8880317c3d10 [ 174.618837][ T31] sd 0:0:1:0: [sda] tag#156 CDB: Write(10) 2a 00 00 0b 87 e6 00 00 10 00 [ 174.618913][ T31] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff8880317c40d0 [ 174.618952][ T31] sd 0:0:1:0: [sda] tag#157 CDB: Write(10) 2a 00 00 0b 87 fe 00 00 18 00 [ 174.619011][ T31] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff8880317c4490 [ 174.619052][ T31] sd 0:0:1:0: [sda] tag#158 CDB: Write(10) 2a 00 00 0b 88 3e 00 00 10 00 [ 174.619107][ T31] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff8880317c4850 [ 174.619155][ T31] sd 0:0:1:0: [sda] tag#159 CDB: Write(10) 2a 00 00 0b 88 66 00 00 08 00 [ 174.619302][ T31] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff8880317c4c10 [ 174.619343][ T31] sd 0:0:1:0: [sda] tag#160 CDB: Write(10) 2a 00 00 0b 88 7e 00 00 18 00 [ 174.619423][ T31] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff8880317c4fd0 [ 174.619463][ T31] sd 0:0:1:0: [sda] tag#161 CDB: Write(10) 2a 00 00 0b 88 9e 00 00 18 00 [ 174.619522][ T31] sd 0:0:1:0: [sda] tag#162 Send: scmd 0xffff8880317c5390 [ 174.619563][ T31] sd 0:0:1:0: [sda] tag#162 CDB: Write(10) 2a 00 00 0b 88 c6 00 00 10 00 [ 174.619618][ T31] sd 0:0:1:0: [sda] tag#163 Send: scmd 0xffff8880317c5750 [ 174.619659][ T31] sd 0:0:1:0: [sda] tag#163 CDB: Write(10) 2a 00 00 0b 88 e6 00 00 08 00 [ 174.619729][ T31] sd 0:0:1:0: [sda] tag#164 Send: scmd 0xffff8880317c5b10 [ 174.619770][ T31] sd 0:0:1:0: [sda] tag#164 CDB: Write(10) 2a 00 00 0b 88 f6 00 00 18 00 [ 174.619827][ T31] sd 0:0:1:0: [sda] tag#165 Send: scmd 0xffff8880317c5ed0 [ 174.619867][ T31] sd 0:0:1:0: [sda] tag#165 CDB: Write(10) 2a 00 00 0b 89 3e 00 00 08 00 [ 174.619924][ T31] sd 0:0:1:0: [sda] tag#166 Send: scmd 0xffff8880317c6290 [ 174.619964][ T31] sd 0:0:1:0: [sda] tag#166 CDB: Write(10) 2a 00 00 0b 89 56 00 00 10 00 [ 174.653597][ T31] sd 0:0:1:0: [sda] tag#167 Send: scmd 0xffff8880317c6650 [ 174.653649][ T31] sd 0:0:1:0: [sda] tag#167 CDB: Write(10) 2a 00 00 0b 89 76 00 00 20 00 [ 174.653718][ T31] sd 0:0:1:0: [sda] tag#168 Send: scmd 0xffff8880317c6a10 [ 174.653757][ T31] sd 0:0:1:0: [sda] tag#168 CDB: Write(10) 2a 00 00 0b 89 9e 00 00 08 00 [ 174.653832][ T31] sd 0:0:1:0: [sda] tag#169 Send: scmd 0xffff8880317c6dd0 [ 174.653876][ T31] sd 0:0:1:0: [sda] tag#169 CDB: Write(10) 2a 00 00 0b 89 d6 00 00 18 00 [ 174.653938][ T31] sd 0:0:1:0: [sda] tag#170 Send: scmd 0xffff8880317c7190 [ 174.653978][ T31] sd 0:0:1:0: [sda] tag#170 CDB: Write(10) 2a 00 00 0b 89 f6 00 00 10 00 [ 174.654034][ T31] sd 0:0:1:0: [sda] tag#171 Send: scmd 0xffff8880317c7550 [ 174.654074][ T31] sd 0:0:1:0: [sda] tag#171 CDB: Write(10) 2a 00 00 0b 8a 0e 00 00 08 00 [ 174.654130][ T31] sd 0:0:1:0: [sda] tag#172 Send: scmd 0xffff8880317c7910 [ 174.654219][ T31] sd 0:0:1:0: [sda] tag#172 CDB: Write(10) 2a 00 00 0b 8a 3e 00 00 08 00 [ 174.654275][ T31] sd 0:0:1:0: [sda] tag#173 Send: scmd 0xffff8880317c7cd0 [ 174.654314][ T31] sd 0:0:1:0: [sda] tag#173 CDB: Write(10) 2a 00 00 0b 8a 4e 00 00 08 00 [ 174.654389][ T31] sd 0:0:1:0: [sda] tag#174 Send: scmd 0xffff8880317c8090 [ 174.654428][ T31] sd 0:0:1:0: [sda] tag#174 CDB: Write(10) 2a 00 00 0b 8a 66 00 00 18 00 [ 174.654508][ T31] sd 0:0:1:0: [sda] tag#175 Send: scmd 0xffff8880317c8450 [ 174.654547][ T31] sd 0:0:1:0: [sda] tag#175 CDB: Write(10) 2a 00 00 0b 8a 96 00 00 30 00 [ 174.654633][ T31] sd 0:0:1:0: [sda] tag#176 Send: scmd 0xffff8880317c8810 [ 174.654674][ T31] sd 0:0:1:0: [sda] tag#176 CDB: Write(10) 2a 00 00 0b 8a ce 00 00 18 00 [ 174.654731][ T31] sd 0:0:1:0: [sda] tag#177 Send: scmd 0xffff8880317c8bd0 [ 174.654784][ T31] sd 0:0:1:0: [sda] tag#177 CDB: Write(10) 2a 00 00 0b 8a f6 00 00 08 00 [ 174.654860][ T31] sd 0:0:1:0: [sda] tag#178 Send: scmd 0xffff8880317c8f90 [ 174.654904][ T31] sd 0:0:1:0: [sda] tag#178 CDB: Write(10) 2a 00 00 0b 8b 06 00 00 18 00 [ 174.655079][ T31] sd 0:0:1:0: [sda] tag#179 Send: scmd 0xffff8880317c9350 [ 174.655118][ T31] sd 0:0:1:0: [sda] tag#179 CDB: Write(10) 2a 00 00 0b 8b 2e 00 00 18 00 [ 174.655177][ T31] sd 0:0:1:0: [sda] tag#180 Send: scmd 0xffff8880317c9710 [ 174.655216][ T31] sd 0:0:1:0: [sda] tag#180 CDB: Write(10) 2a 00 00 0b 8b 4e 00 00 10 00 [ 174.655272][ T31] sd 0:0:1:0: [sda] tag#181 Send: scmd 0xffff8880317c9ad0 [ 174.655311][ T31] sd 0:0:1:0: [sda] tag#181 CDB: Write(10) 2a 00 00 0b 8b 66 00 00 28 00 [ 174.655367][ T31] sd 0:0:1:0: [sda] tag#182 Send: scmd 0xffff8880317c9e90 [ 174.655406][ T31] sd 0:0:1:0: [sda] tag#182 CDB: Write(10) 2a 00 00 0b 8b 96 00 00 08 00 [ 174.655462][ T31] sd 0:0:1:0: [sda] tag#188 Send: scmd 0xffff8880317ca250 [ 174.655503][ T31] sd 0:0:1:0: [sda] tag#188 CDB: Write(10) 2a 00 00 0b 8b be 00 00 08 00 [ 174.655558][ T31] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff8880317ca610 [ 174.655605][ T31] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0b 8b d6 00 00 08 00 [ 174.724288][ T58] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff8880317ca9d0 [ 174.724348][ T58] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0b 8c 1e 00 00 20 00 [ 174.724419][ T58] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff8880317cad90 [ 174.724913][ T58] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0b 8c 56 00 00 28 00 [ 174.724987][ T58] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff8880317cb150 [ 174.725035][ T58] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0b 8c 96 00 00 10 00 [ 174.725096][ T58] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff8880317cb510 [ 174.725143][ T58] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 0b 8c b6 00 00 18 00 [ 174.725203][ T58] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff8880317cb8d0 [ 174.725248][ T58] sd 0:0:1:0: [sda] tag#133 CDB: Write(10) 2a 00 00 0b 8d 06 00 00 20 00 [ 174.725310][ T58] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff8880317cbc90 [ 174.725357][ T58] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 00 00 0b 8d 66 00 00 10 00 [ 174.741003][ T58] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff8880317c9ad0 [ 174.741063][ T58] sd 0:0:1:0: [sda] tag#135 CDB: Write(10) 2a 00 00 0b 8d 96 00 00 08 00 [ 174.741127][ T58] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff8880317c9e90 [ 174.741174][ T58] sd 0:0:1:0: [sda] tag#136 CDB: Write(10) 2a 00 00 0b 8d be 00 00 08 00 [ 174.741240][ T58] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff8880317ca250 [ 174.741286][ T58] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 0b 8d de 00 00 08 00 [ 174.741349][ T58] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff8880317ca610 [ 174.741396][ T58] sd 0:0:1:0: [sda] tag#138 CDB: Write(10) 2a 00 00 0b 8d f6 00 00 10 00 [ 174.741458][ T58] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff8880317cc050 [ 174.741504][ T58] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 00 00 0b 8e 16 00 00 10 00 [ 174.741567][ T58] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff88803179d310 [ 174.741622][ T58] sd 0:0:1:0: [sda] tag#140 CDB: Write(10) 2a 00 00 0b 8e 2e 00 00 08 00 [ 174.741682][ T58] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff88803179d6d0 [ 174.741729][ T58] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 00 00 0b 8e 7e 00 00 08 00 [ 174.741790][ T58] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff88803179da90 [ 174.741837][ T58] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0b 8f 46 00 00 08 00 [ 174.741894][ T58] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff88803179de50 [ 174.741939][ T58] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0b 8f 56 00 00 10 00 [ 174.742003][ T58] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff88803179e210 [ 174.770213][ T58] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0b 8f b6 00 00 08 00 [ 174.770309][ T58] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff88803179e5d0 [ 174.770357][ T58] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0b 8f e6 00 00 08 00 [ 174.770420][ T58] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff88803179e990 [ 174.770466][ T58] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 0b 90 06 00 00 08 00 [ 174.770529][ T58] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff88803179ed50 [ 174.770583][ T58] sd 0:0:1:0: [sda] tag#147 CDB: Write(10) 2a 00 00 0b 90 16 00 00 08 00 [ 174.770648][ T58] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff88803179f110 [ 174.770694][ T58] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 00 00 0b 90 36 00 00 08 00 [ 174.770757][ T58] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff88803179f4d0 [ 174.770816][ T58] sd 0:0:1:0: [sda] tag#149 CDB: Write(10) 2a 00 00 0b 90 66 00 00 10 00 [ 174.770879][ T58] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff88803179f890 [ 174.770925][ T58] sd 0:0:1:0: [sda] tag#150 CDB: Write(10) 2a 00 00 0b 91 06 00 00 18 00 [ 174.770987][ T58] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff88803179fc50 [ 174.771033][ T58] sd 0:0:1:0: [sda] tag#151 CDB: Write(10) 2a 00 00 0b 91 56 00 00 08 00 [ 174.771097][ T58] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff8880317c0110 [ 174.771144][ T58] sd 0:0:1:0: [sda] tag#152 CDB: Write(10) 2a 00 00 0b 91 76 00 00 10 00 [ 174.771205][ T58] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff8880317c04d0 [ 174.771252][ T58] sd 0:0:1:0: [sda] tag#153 CDB: Write(10) 2a 00 00 0b 91 ce 00 00 08 00 [ 174.971649][ T6975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.382'. [ 174.971674][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'. [ 175.146315][ T6976] netlink: 'syz.3.384': attribute type 2 has an invalid length. [ 175.146343][ T6976] netlink: 'syz.3.384': attribute type 2 has an invalid length. [ 176.070908][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.105923][ T4932] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff888031604490 [ 176.105981][ T4932] sd 0:0:1:0: [sda] tag#154 CDB: Write(10) 2a 00 00 10 09 0e 00 00 18 00 [ 176.109110][ T11] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff888027a37910 [ 176.109167][ T11] sd 0:0:1:0: [sda] tag#155 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 176.109404][ T31] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff888031604850 [ 176.109434][ T31] sd 0:0:1:0: [sda] tag#156 CDB: Write(10) 2a 08 00 10 09 26 00 00 08 00 [ 176.261778][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 176.265394][ T5880] usb 5-1: New USB device found: idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 176.266746][ T5880] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 176.266773][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.266792][ T5880] usb 5-1: config 0 has no interface number 0 [ 176.266846][ T5880] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 176.266872][ T5880] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.266896][ T5880] usb 5-1: config 0 interface 98 has no altsetting 0 [ 176.269403][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.269429][ T5880] usb 5-1: Product: syz [ 176.269443][ T5880] usb 5-1: Manufacturer: syz [ 176.269458][ T5880] usb 5-1: SerialNumber: syz [ 176.302277][ T5880] usb 5-1: config 0 descriptor?? [ 176.317373][ T6982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.317553][ T6982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.568211][ T6982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.568400][ T6982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.634177][ T6990] FAULT_INJECTION: forcing a failure. [ 176.634177][ T6990] name failslab, interval 1, probability 0, space 0, times 0 [ 176.647555][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.647587][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.647601][ T6990] Call Trace: [ 176.647614][ T6990] [ 176.647624][ T6990] dump_stack_lvl+0xe8/0x150 [ 176.647665][ T6990] should_fail_ex+0x46b/0x600 [ 176.647702][ T6990] should_failslab+0xa8/0x100 [ 176.647725][ T6990] __kmalloc_cache_noprof+0x9c/0x670 [ 176.647755][ T6990] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 176.647781][ T6990] ? shrinker_alloc+0x59/0xbc0 [ 176.647800][ T6990] ? shrinker_alloc+0x59/0xbc0 [ 176.647827][ T6990] shrinker_alloc+0x59/0xbc0 [ 176.647849][ T6990] ? __rt_spin_lock_init+0x3e/0x50 [ 176.647887][ T6990] sget_fc+0xe8d/0x1a70 [ 176.647911][ T6990] ? __pfx_kernfs_test_super+0x10/0x10 [ 176.647948][ T6990] ? __pfx_kernfs_set_super+0x10/0x10 [ 176.647979][ T6990] ? __pfx_sget_fc+0x10/0x10 [ 176.648003][ T6990] ? __kasan_kmalloc+0x93/0xb0 [ 176.648039][ T6990] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 176.648086][ T6990] ? kernfs_get_tree+0xc4/0x980 [ 176.648112][ T6990] ? kernfs_get_tree+0xc4/0x980 [ 176.648148][ T6990] kernfs_get_tree+0x1e9/0x980 [ 176.648177][ T6990] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 176.648206][ T6990] ? rt_spin_unlock+0x165/0x200 [ 176.648238][ T6990] ? __pfx_kernfs_get_tree+0x10/0x10 [ 176.648266][ T6990] ? cap_capable+0x123/0x460 [ 176.648291][ T6990] ? bpf_lsm_capable+0x9/0x20 [ 176.648320][ T6990] vfs_get_tree+0x92/0x2a0 [ 176.648360][ T6990] do_new_mount+0x325/0xb00 [ 176.648384][ T6990] ? cap_capable+0x123/0x460 [ 176.648403][ T6990] ? lockdep_hardirqs_on+0x7b/0x110 [ 176.648430][ T6990] ? __pfx_do_new_mount+0x10/0x10 [ 176.648456][ T6990] ? ns_capable+0x84/0xe0 [ 176.648487][ T6990] ? path_mount+0x647/0x1050 [ 176.648510][ T6990] ? __se_sys_mount+0x2fe/0x420 [ 176.648541][ T6990] __se_sys_mount+0x31d/0x420 [ 176.648572][ T6990] ? __pfx___se_sys_mount+0x10/0x10 [ 176.648603][ T6990] ? __x64_sys_mount+0x20/0xc0 [ 176.648629][ T6990] do_syscall_64+0x166/0x520 [ 176.648652][ T6990] ? trace_irq_disable+0x3b/0x140 [ 176.648672][ T6990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.648693][ T6990] ? clear_bhb_loop+0x70/0xc0 [ 176.648719][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.648740][ T6990] RIP: 0033:0x7fdc1f6af559 [ 176.648760][ T6990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.648778][ T6990] RSP: 002b:00007fdc1d906028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.648807][ T6990] RAX: ffffffffffffffda RBX: 00007fdc1f935fa0 RCX: 00007fdc1f6af559 [ 176.648823][ T6990] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 176.648837][ T6990] RBP: 00007fdc1f746b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.648850][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.648862][ T6990] R13: 00007fdc1f936038 R14: 00007fdc1f935fa0 R15: 00007fff511dc778 [ 176.648896][ T6990] [ 176.650245][ T6519] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.875201][ T6519] usb 2-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 176.882757][ T6519] usb 2-1: config 0 has no interfaces? [ 176.882795][ T6519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.975421][ T6519] usb 2-1: config 0 descriptor?? [ 177.197928][ T5880] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 177.198220][ T5880] asix 5-1:0.98: probe with driver asix failed with error -71 [ 177.370421][ T5757] usb 2-1: USB disconnect, device number 4 [ 177.388449][ T5880] usb 5-1: USB disconnect, device number 7 [ 178.431721][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.543875][ T35] audit: type=1326 audit(1793115095.738:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.4.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd23358f559 code=0x0 [ 178.594595][ T10] usb 4-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 178.597025][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.937713][ T11] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff888031604c10 [ 178.940420][ T11] sd 0:0:1:0: [sda] tag#157 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 179.608935][ T7014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.398'. [ 179.608961][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.398'. [ 179.778957][ T7024] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff8880317c0890 [ 179.779015][ T7024] sd 0:0:1:0: [sda] tag#158 CDB: Inquiry 12 00 00 00 fe 00 [ 179.790272][ T7024] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff8880317c0c50 [ 179.790329][ T7024] sd 0:0:1:0: [sda] tag#159 CDB: Inquiry 12 01 00 00 fe 00 [ 179.792423][ T7024] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff8880317c1010 [ 179.792475][ T7024] sd 0:0:1:0: [sda] tag#160 CDB: Inquiry 12 01 80 00 fe 00 [ 179.793024][ T7024] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff8880317c13d0 [ 179.793071][ T7024] sd 0:0:1:0: [sda] tag#161 CDB: Inquiry 12 01 83 00 fe 00 [ 179.840380][ T5608] sd 0:0:1:0: [sda] tag#162 Send: scmd 0xffff8880317c1790 [ 179.840439][ T5608] sd 0:0:1:0: [sda] tag#162 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 179.862226][ T31] sd 0:0:1:0: [sda] tag#163 Send: scmd 0xffff8880317c1b50 [ 179.862281][ T31] sd 0:0:1:0: [sda] tag#163 CDB: Write(10) 2a 00 00 0c 81 36 00 00 08 00 [ 179.862347][ T31] sd 0:0:1:0: [sda] tag#164 Send: scmd 0xffff8880317c1f10 [ 179.862389][ T31] sd 0:0:1:0: [sda] tag#164 CDB: Write(10) 2a 00 00 0c a0 9e 00 00 98 00 [ 179.862449][ T31] sd 0:0:1:0: [sda] tag#165 Send: scmd 0xffff8880317c22d0 [ 179.862489][ T31] sd 0:0:1:0: [sda] tag#165 CDB: Write(10) 2a 00 00 0c b0 7e 00 00 b8 00 [ 179.862584][ T31] sd 0:0:1:0: [sda] tag#166 Send: scmd 0xffff8880317c2690 [ 179.862625][ T31] sd 0:0:1:0: [sda] tag#166 CDB: Write(10) 2a 00 00 0c c1 36 00 00 08 00 [ 179.867401][ T31] sd 0:0:1:0: [sda] tag#183 Send: scmd 0xffff8880317c2a50 [ 179.867454][ T31] sd 0:0:1:0: [sda] tag#183 CDB: Write(10) 2a 00 00 0c e1 16 00 00 20 00 [ 179.874041][ T31] sd 0:0:1:0: [sda] tag#184 Send: scmd 0xffff8880317c2e10 [ 179.874104][ T31] sd 0:0:1:0: [sda] tag#184 CDB: Write(10) 2a 00 00 0c f0 76 00 00 c0 00 [ 179.874177][ T31] sd 0:0:1:0: [sda] tag#185 Send: scmd 0xffff8880317c31d0 [ 179.874216][ T31] sd 0:0:1:0: [sda] tag#185 CDB: Write(10) 2a 00 00 0d 41 36 00 00 08 00 [ 179.874276][ T31] sd 0:0:1:0: [sda] tag#186 Send: scmd 0xffff8880317c3590 [ 179.874318][ T31] sd 0:0:1:0: [sda] tag#186 CDB: Write(10) 2a 00 00 0d 61 16 00 00 20 00 [ 179.881635][ T31] sd 0:0:1:0: [sda] tag#187 Send: scmd 0xffff8880317c3950 [ 179.881687][ T31] sd 0:0:1:0: [sda] tag#187 CDB: Write(10) 2a 00 00 0d 70 5e 00 00 d8 00 [ 179.881769][ T31] sd 0:0:1:0: [sda] tag#189 Send: scmd 0xffff8880317c3d10 [ 179.881812][ T31] sd 0:0:1:0: [sda] tag#189 CDB: Write(10) 2a 00 00 0b c1 36 00 00 08 00 [ 179.881870][ T31] sd 0:0:1:0: [sda] tag#190 Send: scmd 0xffff8880317c40d0 [ 179.882695][ T31] sd 0:0:1:0: [sda] tag#190 CDB: Write(10) 2a 00 00 0b e1 1e 00 00 18 00 [ 179.900265][ T31] sd 0:0:1:0: [sda] tag#191 Send: scmd 0xffff8880317c4490 [ 179.900316][ T31] sd 0:0:1:0: [sda] tag#191 CDB: Write(10) 2a 00 00 0b f0 b6 00 00 80 00 [ 179.900552][ T31] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff8880317c4850 [ 179.900594][ T31] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0d 01 3e 00 00 30 00 [ 179.904331][ T31] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff8880317c4c10 [ 179.904385][ T31] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0d 01 36 00 00 08 00 [ 179.904453][ T31] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff8880317c4fd0 [ 179.904492][ T31] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0c 31 36 00 00 08 00 [ 179.905708][ T48] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff8880317c5390 [ 179.905764][ T48] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0c 21 36 00 00 28 00 [ 180.775395][ T10] usb 4-1: Cannot set autoneg [ 180.775584][ T10] MOSCHIP usb-ethernet driver 4-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 180.799471][ T10] usb 4-1: USB disconnect, device number 8 [ 181.421123][ T4932] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff8880317c5750 [ 181.421181][ T4932] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 10 09 2e 00 00 28 00 [ 181.423773][ T31] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff888027a37910 [ 181.423826][ T31] sd 0:0:1:0: [sda] tag#133 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 181.424123][ T31] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff8880317c5b10 [ 181.424171][ T31] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 08 00 10 09 56 00 00 08 00 [ 181.964839][ T11] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff888031604fd0 [ 181.965183][ T11] sd 0:0:1:0: [sda] tag#135 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 183.140274][ T7075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.413'. [ 183.140301][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'. [ 183.176722][ T7074] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff888031605390 [ 183.176779][ T7074] sd 0:0:1:0: [sda] tag#136 CDB: Inquiry 12 00 00 00 fe 00 [ 183.177642][ T7074] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff8880317c5ed0 [ 183.180324][ T7074] sd 0:0:1:0: [sda] tag#137 CDB: Inquiry 12 01 00 00 fe 00 [ 183.180681][ T7074] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff8880317c6290 [ 183.180729][ T7074] sd 0:0:1:0: [sda] tag#138 CDB: Inquiry 12 01 80 00 fe 00 [ 183.181047][ T7074] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff8880317c6650 [ 183.181092][ T7074] sd 0:0:1:0: [sda] tag#139 CDB: Inquiry 12 01 83 00 fe 00 [ 183.265444][ T5608] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff8880317c6a10 [ 183.265549][ T5608] sd 0:0:1:0: [sda] tag#140 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 183.300202][ T5737] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.451138][ T5737] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 183.452850][ T5737] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 183.452884][ T5737] usb 5-1: config 0 has no interface number 0 [ 183.452933][ T5737] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.458595][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.458623][ T5737] usb 5-1: Product: syz [ 183.458638][ T5737] usb 5-1: Manufacturer: syz [ 183.458653][ T5737] usb 5-1: SerialNumber: syz [ 183.539521][ T5737] usb 5-1: config 0 descriptor?? [ 183.569609][ T5737] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 183.790254][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.837195][ T5737] usb 5-1: USB disconnect, device number 8 [ 183.852921][ T5737] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 183.940996][ T5884] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 183.942390][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.942445][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 183.942475][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 183.942518][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.415737][ T5884] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 184.415855][ T5884] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 184.415869][ T5884] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 184.518052][ T5884] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 184.544132][ T5884] usb 2-1: USB disconnect, device number 5 [ 184.936510][ T31] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff8880317c6dd0 [ 184.936832][ T31] sd 0:0:1:0: [sda] tag#141 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 185.729184][ T31] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff8880317c7190 [ 185.729241][ T31] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0c 41 36 00 00 08 00 [ 185.795803][ T31] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff8880317c7550 [ 185.795857][ T31] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0c 60 8e 00 00 a8 00 [ 185.795979][ T31] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff8880317c7910 [ 185.796022][ T31] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0c 70 a6 00 00 90 00 [ 185.796184][ T31] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff8880317c7cd0 [ 185.796228][ T31] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0c 11 3e 00 00 08 00 [ 185.869685][ T171] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff8880317c8090 [ 185.869747][ T171] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 0c 11 46 00 00 08 00 [ 185.869822][ T171] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff8880317c8450 [ 185.869873][ T171] sd 0:0:1:0: [sda] tag#147 CDB: Write(10) 2a 00 00 0c 11 36 00 00 08 00 [ 185.869939][ T171] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff8880317c8810 [ 185.869989][ T171] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 00 00 0b 71 36 00 00 10 00 [ 186.174134][ T7114] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff8880317c8bd0 [ 186.174189][ T7114] sd 0:0:1:0: [sda] tag#149 CDB: Inquiry 12 00 00 00 fe 00 [ 186.177310][ T7114] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff8880317c8f90 [ 186.177459][ T7114] sd 0:0:1:0: [sda] tag#150 CDB: Inquiry 12 01 00 00 fe 00 [ 186.178118][ T7114] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff8880317c9350 [ 186.178168][ T7114] sd 0:0:1:0: [sda] tag#151 CDB: Inquiry 12 01 80 00 fe 00 [ 186.179878][ T7114] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff8880317c9710 [ 186.179927][ T7114] sd 0:0:1:0: [sda] tag#152 CDB: Inquiry 12 01 83 00 fe 00 [ 186.453612][ T5608] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff88803179d310 [ 186.453685][ T5608] sd 0:0:1:0: [sda] tag#153 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 186.485535][ T4932] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff88803179d6d0 [ 186.485609][ T4932] sd 0:0:1:0: [sda] tag#154 CDB: Write(10) 2a 00 00 10 09 5e 00 00 28 00 [ 186.509950][ T31] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff888027a37910 [ 186.510006][ T31] sd 0:0:1:0: [sda] tag#155 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 186.516885][ T31] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff88803179da90 [ 186.516939][ T31] sd 0:0:1:0: [sda] tag#156 CDB: Write(10) 2a 08 00 10 09 86 00 00 08 00 [ 187.742538][ T7133] FAULT_INJECTION: forcing a failure. [ 187.742538][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 187.742579][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.0.437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.742608][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.742622][ T7133] Call Trace: [ 187.742630][ T7133] [ 187.742639][ T7133] dump_stack_lvl+0xe8/0x150 [ 187.742677][ T7133] should_fail_ex+0x46b/0x600 [ 187.742713][ T7133] should_failslab+0xa8/0x100 [ 187.742737][ T7133] ? mas_alloc_nodes+0x291/0x350 [ 187.742763][ T7133] kmem_cache_alloc_noprof+0x99/0x680 [ 187.742793][ T7133] ? mas_alloc_nodes+0x291/0x350 [ 187.742825][ T7133] mas_alloc_nodes+0x291/0x350 [ 187.742853][ T7133] mas_preallocate+0x42d/0x840 [ 187.742878][ T7133] ? __pfx_mas_preallocate+0x10/0x10 [ 187.742895][ T7133] ? trace_kmem_cache_alloc+0x29/0xe0 [ 187.742924][ T7133] ? vma_set_pgoff+0x163/0x2a0 [ 187.742946][ T7133] ? vma_set_range+0x136/0x2a0 [ 187.742965][ T7133] mmap_region+0x1339/0x23a0 [ 187.742996][ T7133] ? __pfx_mmap_region+0x10/0x10 [ 187.743019][ T7133] ? __lock_acquire+0x747/0x2de0 [ 187.743048][ T7133] ? mas_ascend+0x2f9/0x8b0 [ 187.743162][ T7133] ? __lock_acquire+0x747/0x2de0 [ 187.743195][ T7133] ? cap_mmap_addr+0xaa/0xf0 [ 187.743215][ T7133] ? bpf_lsm_mmap_addr+0x9/0x50 [ 187.743233][ T7133] ? security_mmap_addr+0x71/0x240 [ 187.743254][ T7133] ? shmem_mapping+0xd/0x50 [ 187.743270][ T7133] ? memfd_check_seals_mmap+0xcb/0x230 [ 187.743292][ T7133] do_mmap+0xe0e/0x1310 [ 187.743320][ T7133] ? __pfx_do_mmap+0x10/0x10 [ 187.743347][ T7133] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.743370][ T7133] ? rwbase_write_lock+0x5ad/0x780 [ 187.743402][ T7133] aio_setup_ring+0x8b2/0xe20 [ 187.743429][ T7133] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 187.743460][ T7133] ? __pfx_aio_setup_ring+0x10/0x10 [ 187.743494][ T7133] ioctx_alloc+0x323/0x840 [ 187.743517][ T7133] ? __might_fault+0xaf/0x130 [ 187.743543][ T7133] __se_sys_io_setup+0x7b/0x1d0 [ 187.743568][ T7133] do_syscall_64+0x166/0x520 [ 187.743585][ T7133] ? trace_irq_disable+0x3b/0x140 [ 187.743602][ T7133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.743619][ T7133] ? clear_bhb_loop+0x70/0xc0 [ 187.743640][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.743656][ T7133] RIP: 0033:0x7fdc1f6af559 [ 187.743674][ T7133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.743690][ T7133] RSP: 002b:00007fdc1d906028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 187.743712][ T7133] RAX: ffffffffffffffda RBX: 00007fdc1f935fa0 RCX: 00007fdc1f6af559 [ 187.743725][ T7133] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000000003fd [ 187.743737][ T7133] RBP: 00007fdc1f746b20 R08: 0000000000000000 R09: 0000000000000000 [ 187.743749][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.743760][ T7133] R13: 00007fdc1f936038 R14: 00007fdc1f935fa0 R15: 00007fff511dc778 [ 187.743788][ T7133] [ 188.187964][ T31] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff88803179de50 [ 188.188398][ T31] sd 0:0:1:0: [sda] tag#157 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 189.116657][ T7121] syz.3.432 (7121): drop_caches: 2 [ 189.612640][ T7154] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff888031605750 [ 189.612695][ T7154] sd 0:0:1:0: [sda] tag#158 CDB: Inquiry 12 00 00 00 fe 00 [ 189.614073][ T7154] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff888031605b10 [ 189.614118][ T7154] sd 0:0:1:0: [sda] tag#159 CDB: Inquiry 12 01 00 00 fe 00 [ 189.616903][ T7154] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff888031605ed0 [ 189.616956][ T7154] sd 0:0:1:0: [sda] tag#160 CDB: Inquiry 12 01 80 00 fe 00 [ 189.617457][ T7154] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff888031606290 [ 189.617500][ T7154] sd 0:0:1:0: [sda] tag#161 CDB: Inquiry 12 01 83 00 fe 00 [ 189.718919][ T5608] sd 0:0:1:0: [sda] tag#162 Send: scmd 0xffff88803179e210 [ 189.718984][ T5608] sd 0:0:1:0: [sda] tag#162 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 189.945811][ T7172] FAULT_INJECTION: forcing a failure. [ 189.945811][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 189.945852][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.4.446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.945877][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.945890][ T7172] Call Trace: [ 189.945899][ T7172] [ 189.945907][ T7172] dump_stack_lvl+0xe8/0x150 [ 189.945958][ T7172] should_fail_ex+0x46b/0x600 [ 189.946004][ T7172] should_failslab+0xa8/0x100 [ 189.946028][ T7172] __kmalloc_cache_noprof+0x9c/0x670 [ 189.946059][ T7172] ? landlock_restrict_sibling_threads+0x676/0x11f0 [ 189.946089][ T7172] ? landlock_restrict_sibling_threads+0x676/0x11f0 [ 189.946127][ T7172] landlock_restrict_sibling_threads+0x676/0x11f0 [ 189.946162][ T7172] ? landlock_restrict_sibling_threads+0x2bb/0x11f0 [ 189.946216][ T7172] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 189.946288][ T7172] ? landlock_put_domain+0x10/0xa0 [ 189.946326][ T7172] __se_sys_landlock_restrict_self+0x5f6/0xd40 [ 189.946365][ T7172] do_syscall_64+0x166/0x520 [ 189.946389][ T7172] ? trace_irq_disable+0x3b/0x140 [ 189.946410][ T7172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.946432][ T7172] ? clear_bhb_loop+0x70/0xc0 [ 189.946458][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.946478][ T7172] RIP: 0033:0x7fd23358f559 [ 189.946497][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.946516][ T7172] RSP: 002b:00007fd2317e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 189.946539][ T7172] RAX: ffffffffffffffda RBX: 00007fd233815fa0 RCX: 00007fd23358f559 [ 189.946555][ T7172] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 189.946568][ T7172] RBP: 00007fd233626b20 R08: 0000000000000000 R09: 0000000000000000 [ 189.946582][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.946595][ T7172] R13: 00007fd233816038 R14: 00007fd233815fa0 R15: 00007ffe068f7878 [ 189.946630][ T7172] [ 190.041358][ T7174] netlink: 'syz.1.448': attribute type 15 has an invalid length. [ 190.041383][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 190.522413][ T7180] sd 0:0:1:0: [sg0] sg_open: flags=0x8002 [ 190.553547][ T7180] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff888033608000 [ 190.553603][ T7180] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768 [ 190.553651][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 190.553745][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: k=0, num=32768, ret_sz=32768 [ 190.553793][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=0 [ 190.553838][ T7180] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 191.385079][ T7180] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2285 [ 191.388446][ T7180] sd 0:0:1:0: [sg0] sg_write: count=56 [ 191.388525][ T7180] sd 0:0:1:0: [sg0] sg_write: scsi opcode=0x00, cmd_size=6 [ 191.388568][ T7180] sd 0:0:1:0: [sg0] sg_common_write: scsi opcode=0x00, cmd_size=6 [ 191.388608][ T7180] sd 0:0:1:0: [sg0] sg_start_req: dxfer_len=14 [ 191.388661][ T7180] sd 0:0:1:0: [sg0] sg_link_reserve: size=14 [ 191.388761][ T7180] sd 0:0:1:0: [sda] tag#163 Send: scmd 0xffff888031606650 [ 191.388812][ T7180] sd 0:0:1:0: [sda] tag#163 CDB: Test Unit Ready 00 00 00 00 00 00 [ 191.388995][ C1] sd 0:0:1:0: [sg0] sg_cmd_done: pack_id=23138, res=0x0 [ 191.403867][ T7180] sd 0:0:1:0: [sg0] sg_write: count=196 [ 191.403929][ T7180] sd 0:0:1:0: [sg0] sg_write: scsi opcode=0x00, cmd_size=6 [ 191.403971][ T7180] sd 0:0:1:0: [sg0] sg_common_write: scsi opcode=0x00, cmd_size=6 [ 191.404009][ T7180] sd 0:0:1:0: [sg0] sg_start_req: dxfer_len=154 [ 191.404067][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=154, blk_size=512 [ 191.404713][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: k=0, num=512, ret_sz=32768 [ 191.404760][ T7180] sd 0:0:1:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=-32256 [ 191.404962][ T7180] sd 0:0:1:0: [sda] tag#164 Send: scmd 0xffff888031606a10 [ 191.405014][ T7180] sd 0:0:1:0: [sda] tag#164 CDB: Test Unit Ready 00 00 00 00 00 00 [ 191.405210][ C1] sd 0:0:1:0: [sg0] sg_cmd_done: pack_id=0, res=0x0 [ 191.416499][ T7180] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x227d [ 191.644597][ T4932] sd 0:0:1:0: [sda] tag#165 Send: scmd 0xffff88803179e5d0 [ 191.644643][ T4932] sd 0:0:1:0: [sda] tag#165 CDB: Write(10) 2a 00 00 10 09 8e 00 00 18 00 [ 191.653955][ T31] sd 0:0:1:0: [sda] tag#166 Send: scmd 0xffff888027a37910 [ 191.654012][ T31] sd 0:0:1:0: [sda] tag#166 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 191.654319][ T31] sd 0:0:1:0: [sda] tag#167 Send: scmd 0xffff88803179e990 [ 191.654361][ T31] sd 0:0:1:0: [sda] tag#167 CDB: Write(10) 2a 08 00 10 09 a6 00 00 08 00 [ 191.665918][ T7178] sd 0:0:1:0: [sg0] sg_release [ 191.666039][ T5737] sd 0:0:1:0: [sg0] sg_finish_rem_req: res_used=1 [ 191.666823][ T5737] sd 0:0:1:0: [sg0] sg_unlink_reserve: req->k_use_sg=1 [ 191.666873][ T5737] sd 0:0:1:0: [sg0] sg_finish_rem_req: res_used=0 [ 191.666921][ T5737] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 191.666960][ T5737] sd 0:0:1:0: [sg0] sg_remove_scat: k=0, pg=0xffffea0001981000 [ 191.667045][ T5737] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1 [ 191.667081][ T5737] sd 0:0:1:0: [sg0] sg_remove_scat: k=0, pg=0xffffea0000e37800 [ 191.818448][ T7174] netlink: 'syz.1.448': attribute type 15 has an invalid length. [ 191.818473][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 191.818719][ T7174] Zero length message leads to an empty skb [ 191.831016][ T1472] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.831063][ T1472] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.831098][ T1472] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.831132][ T1472] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 192.060783][ T5737] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.228445][ T31] sd 0:0:1:0: [sda] tag#168 Send: scmd 0xffff88803179ed50 [ 192.229183][ T31] sd 0:0:1:0: [sda] tag#168 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 193.231306][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 193.236379][ T5737] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.250659][ T5737] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 193.250719][ T5737] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.250741][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.250766][ T5737] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.250790][ T5737] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.250832][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.609460][ T7208] FAULT_INJECTION: forcing a failure. [ 193.609460][ T7208] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.609500][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.0.459 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.609546][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.609560][ T7208] Call Trace: [ 193.609568][ T7208] [ 193.609577][ T7208] dump_stack_lvl+0xe8/0x150 [ 193.609615][ T7208] should_fail_ex+0x46b/0x600 [ 193.609658][ T7208] get_futex_key+0x1ab/0x1410 [ 193.609686][ T7208] ? kasan_save_track+0x4f/0x80 [ 193.609714][ T7208] ? __kasan_slab_free+0x5c/0x80 [ 193.609749][ T7208] ? __x64_sys_openat+0x138/0x170 [ 193.609773][ T7208] ? __pfx_get_futex_key+0x10/0x10 [ 193.609803][ T7208] futex_wake+0x119/0x600 [ 193.609838][ T7208] ? __pfx_futex_wake+0x10/0x10 [ 193.609883][ T7208] do_futex+0x458/0x4e0 [ 193.609913][ T7208] ? __pfx_do_futex+0x10/0x10 [ 193.609936][ T7208] ? kmem_cache_free+0x187/0x6d0 [ 193.609965][ T7208] ? do_sys_openat2+0x18d/0x200 [ 193.609994][ T7208] __se_sys_futex+0x3a8/0x450 [ 193.610029][ T7208] ? __pfx___se_sys_futex+0x10/0x10 [ 193.610052][ T7208] ? rcu_is_watching+0x16/0xb0 [ 193.610079][ T7208] ? __x64_sys_futex+0x21/0xf0 [ 193.610105][ T7208] do_syscall_64+0x166/0x520 [ 193.610128][ T7208] ? trace_irq_disable+0x3b/0x140 [ 193.610148][ T7208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.610170][ T7208] ? clear_bhb_loop+0x70/0xc0 [ 193.610200][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.610222][ T7208] RIP: 0033:0x7fdc1f6af559 [ 193.610241][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.610262][ T7208] RSP: 002b:00007fdc1d9060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.610286][ T7208] RAX: ffffffffffffffda RBX: 00007fdc1f935fa8 RCX: 00007fdc1f6af559 [ 193.610302][ T7208] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc1f935fac [ 193.610316][ T7208] RBP: 00007fdc1f935fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 193.610330][ T7208] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 193.610342][ T7208] R13: 00007fdc1f936038 R14: 00007fff511dc690 R15: 00007fff511dc778 [ 193.610372][ T7208] [ 193.776436][ T7206] sd 0:0:1:0: [sda] tag#169 Send: scmd 0xffff888031606dd0 [ 193.776519][ T7206] sd 0:0:1:0: [sda] tag#169 CDB: Inquiry 12 00 00 00 fe 00 [ 193.777947][ T7206] sd 0:0:1:0: [sda] tag#170 Send: scmd 0xffff888031607190 [ 193.777996][ T7206] sd 0:0:1:0: [sda] tag#170 CDB: Inquiry 12 01 00 00 fe 00 [ 193.779621][ T7206] sd 0:0:1:0: [sda] tag#171 Send: scmd 0xffff888031607550 [ 193.779669][ T7206] sd 0:0:1:0: [sda] tag#171 CDB: Inquiry 12 01 80 00 fe 00 [ 193.781084][ T7206] sd 0:0:1:0: [sda] tag#172 Send: scmd 0xffff888031607910 [ 193.781162][ T7206] sd 0:0:1:0: [sda] tag#172 CDB: Inquiry 12 01 83 00 fe 00 [ 193.835351][ T5609] sd 0:0:1:0: [sda] tag#173 Send: scmd 0xffff888031607cd0 [ 193.835418][ T5609] sd 0:0:1:0: [sda] tag#173 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 194.004010][ T7214] FAULT_INJECTION: forcing a failure. [ 194.004010][ T7214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.004049][ T7214] CPU: 1 UID: 0 PID: 7214 Comm: syz.0.461 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.004074][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.004087][ T7214] Call Trace: [ 194.004096][ T7214] [ 194.004104][ T7214] dump_stack_lvl+0xe8/0x150 [ 194.004143][ T7214] should_fail_ex+0x46b/0x600 [ 194.004182][ T7214] strncpy_from_user+0x36/0x2c0 [ 194.004210][ T7214] ? __local_bh_enable+0x1e3/0x2f0 [ 194.004244][ T7214] strncpy_from_user_nofault+0x71/0x150 [ 194.004281][ T7214] bpf_probe_read_user_str+0x2a/0x70 [ 194.004310][ T7214] ? bpf_test_run+0x1d1/0x830 [ 194.004339][ T7214] bpf_prog_cfa99fad6bc279b8+0x43/0x49 [ 194.004362][ T7214] bpf_test_run+0x354/0x830 [ 194.004416][ T7214] ? __pfx_bpf_test_run+0x10/0x10 [ 194.004457][ T7214] ? slab_build_skb+0x4f/0x400 [ 194.004492][ T7214] ? __kasan_krealloc+0xec/0x110 [ 194.004516][ T7214] ? eth_type_trans+0x33f/0x640 [ 194.004549][ T7214] ? convert___skb_to_skb+0x3d/0x5b0 [ 194.004578][ T7214] bpf_prog_test_run_skb+0xe56/0x22c0 [ 194.004629][ T7214] ? __fget_files+0x2a/0x420 [ 194.004655][ T7214] ? __fget_files+0x3a8/0x420 [ 194.004681][ T7214] ? __fget_files+0x2a/0x420 [ 194.004712][ T7214] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 194.004741][ T7214] bpf_prog_test_run+0x2cb/0x340 [ 194.004770][ T7214] __sys_bpf+0xb1e/0xe00 [ 194.004806][ T7214] ? __pfx___sys_bpf+0x10/0x10 [ 194.004834][ T7214] ? do_futex+0x3e7/0x4e0 [ 194.004890][ T7214] ? rcu_is_watching+0x16/0xb0 [ 194.004919][ T7214] __x64_sys_bpf+0xba/0xd0 [ 194.004942][ T7214] do_syscall_64+0x166/0x520 [ 194.004965][ T7214] ? trace_irq_disable+0x3b/0x140 [ 194.004984][ T7214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.005005][ T7214] ? clear_bhb_loop+0x70/0xc0 [ 194.005032][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.005054][ T7214] RIP: 0033:0x7fdc1f6af559 [ 194.005074][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.005093][ T7214] RSP: 002b:00007fdc1d906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.005116][ T7214] RAX: ffffffffffffffda RBX: 00007fdc1f935fa0 RCX: 00007fdc1f6af559 [ 194.005131][ T7214] RDX: 0000000000000050 RSI: 0000200000000e00 RDI: 000000000000000a [ 194.005143][ T7214] RBP: 00007fdc1f746b20 R08: 0000000000000000 R09: 0000000000000000 [ 194.005155][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.005167][ T7214] R13: 00007fdc1f936038 R14: 00007fdc1f935fa0 R15: 00007fff511dc778 [ 194.005196][ T7214] [ 194.184042][ T7216] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 194.360249][ T6519] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.392489][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392558][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395847][ T5612] usb 3-1: USB disconnect, device number 6 [ 194.731153][ T6519] usb 5-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 194.732391][ T6519] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 194.732423][ T6519] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 194.734971][ T6519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.734999][ T6519] usb 5-1: Product: syz [ 194.735014][ T6519] usb 5-1: Manufacturer: syz [ 194.735029][ T6519] usb 5-1: SerialNumber: syz [ 195.463176][ T6519] usb 5-1: config 0 descriptor?? [ 195.636301][ T7212] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.636426][ T7212] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.870374][ T7212] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.870480][ T7212] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 196.280588][ T6519] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 196.425668][ T2093] sd 0:0:1:0: [sda] tag#174 Send: scmd 0xffff88803179f110 [ 196.425731][ T2093] sd 0:0:1:0: [sda] tag#174 CDB: Write(10) 2a 00 00 00 01 3e 00 00 08 00 [ 196.426868][ T2093] sd 0:0:1:0: [sda] tag#175 Send: scmd 0xffff88803179f4d0 [ 196.426924][ T2093] sd 0:0:1:0: [sda] tag#175 CDB: Write(10) 2a 00 00 00 05 56 00 00 08 00 [ 196.606301][ T4932] sd 0:0:1:0: [sda] tag#176 Send: scmd 0xffff888031608090 [ 196.606359][ T4932] sd 0:0:1:0: [sda] tag#176 CDB: Write(10) 2a 00 00 10 09 ae 00 00 18 00 [ 196.608458][ T11] sd 0:0:1:0: [sda] tag#177 Send: scmd 0xffff888027a37910 [ 196.608513][ T11] sd 0:0:1:0: [sda] tag#177 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 196.609190][ T31] sd 0:0:1:0: [sda] tag#178 Send: scmd 0xffff888031608450 [ 196.609303][ T31] sd 0:0:1:0: [sda] tag#178 CDB: Write(10) 2a 08 00 10 09 c6 00 00 08 00 [ 196.903314][ T6519] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 196.929438][ T6519] usb 5-1: USB disconnect, device number 9 [ 197.020293][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.171931][ T10] usb 3-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 197.176069][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.176095][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 197.176118][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.223925][ T10] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 197.257085][ T10] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 197.600386][ T7240] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 197.602254][ T7240] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 197.612655][ T7240] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 198.582797][ T7239] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 198.599976][ T30] usb 3-1: USB disconnect, device number 7 [ 198.672157][ T30] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 198.693198][ T30] spcp8x5 3-1:1.0: device disconnected [ 198.760357][ T7261] cgroup: fork rejected by pids controller in /syz0 [ 198.913026][ T5737] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.060204][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 199.061029][ T5737] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 199.062992][ T5737] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 199.063017][ T5737] usb 4-1: config 0 has no interface number 0 [ 199.063058][ T5737] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 199.063083][ T5737] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 199.068927][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.068954][ T5737] usb 4-1: Product: syz [ 199.068969][ T5737] usb 4-1: Manufacturer: syz [ 199.068984][ T5737] usb 4-1: SerialNumber: syz [ 199.103610][ T5737] usb 4-1: config 0 descriptor?? [ 199.109630][ T7263] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.109939][ T7263] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.336490][ T7263] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.336607][ T7263] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.537192][ T7299] input: syz0 as /devices/virtual/input/input11 [ 199.559503][ T5737] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 200.154689][ T7307] input: syz0 as /devices/virtual/input/input12 [ 200.394202][ T5737] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 200.394515][ T5737] asix 4-1:0.34: probe with driver asix failed with error -71 [ 200.464958][ T5737] usb 4-1: USB disconnect, device number 9 [ 200.604826][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 200.923501][ T6883] batman_adv: batadv0: Interface deactivated: syz_tun [ 201.195503][ T6883] batman_adv: batadv0: Removing interface: syz_tun [ 201.422753][ T7336] FAULT_INJECTION: forcing a failure. [ 201.422753][ T7336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.422792][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.3.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.422817][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.422830][ T7336] Call Trace: [ 201.422839][ T7336] [ 201.422848][ T7336] dump_stack_lvl+0xe8/0x150 [ 201.422886][ T7336] should_fail_ex+0x46b/0x600 [ 201.422922][ T7336] prepare_alloc_pages+0x21e/0x650 [ 201.422965][ T7336] __alloc_frozen_pages_noprof+0x19f/0x440 [ 201.423000][ T7336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.423029][ T7336] ? __alloc_frozen_pages_noprof+0x277/0x440 [ 201.423071][ T7336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.423108][ T7336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 201.423142][ T7336] __alloc_pages_noprof+0x10/0x100 [ 201.423174][ T7336] alloc_pages_bulk_noprof+0x6f5/0x950 [ 201.423210][ T7336] ? alloc_pages_noprof+0x161/0x2f0 [ 201.423234][ T7336] __kasan_populate_vmalloc+0xb7/0x1c0 [ 201.423262][ T7336] ? rt_spin_unlock+0x165/0x200 [ 201.423290][ T7336] alloc_vmap_area+0xd10/0x1410 [ 201.423325][ T7336] ? __pfx_alloc_vmap_area+0x10/0x10 [ 201.423350][ T7336] ? __get_vm_area_node+0x155/0x2f0 [ 201.423379][ T7336] __get_vm_area_node+0x200/0x2f0 [ 201.423410][ T7336] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 201.423437][ T7336] ? copy_process+0x7ea/0x44c0 [ 201.423463][ T7336] ? lock_acquire+0x115/0x350 [ 201.423491][ T7336] ? percpu_ref_get_many+0x19/0x140 [ 201.423531][ T7336] ? __memcg_slab_post_alloc_hook+0x4ce/0xe00 [ 201.423570][ T7336] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.423595][ T7336] ? rcu_is_watching+0x16/0xb0 [ 201.423622][ T7336] ? memcpy_and_pad+0x48/0x80 [ 201.423654][ T7336] __vmalloc_node_noprof+0xc2/0x100 [ 201.423678][ T7336] ? copy_process+0x7ea/0x44c0 [ 201.423699][ T7336] ? copy_process+0x7ea/0x44c0 [ 201.423725][ T7336] dup_task_struct+0x2c6/0xa00 [ 201.423753][ T7336] ? rt_spin_unlock+0x165/0x200 [ 201.423786][ T7336] copy_process+0x7ea/0x44c0 [ 201.423818][ T7336] ? __lock_acquire+0x747/0x2de0 [ 201.423868][ T7336] ? __pfx_copy_process+0x10/0x10 [ 201.423893][ T7336] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.423928][ T7336] ? __pfx_io_sq_thread+0x10/0x10 [ 201.423957][ T7336] create_io_thread+0x14e/0x1e0 [ 201.423989][ T7336] ? __pfx_create_io_thread+0x10/0x10 [ 201.424015][ T7336] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 201.424063][ T7336] ? __pfx_io_sq_thread+0x10/0x10 [ 201.424095][ T7336] ? rt_spin_unlock+0x159/0x200 [ 201.424125][ T7336] ? rt_spin_unlock+0x165/0x200 [ 201.424154][ T7336] io_sq_offload_create+0xa40/0x1050 [ 201.424186][ T7336] ? __pfx_io_sq_offload_create+0x10/0x10 [ 201.424212][ T7336] ? security_capable+0x7e/0x2c0 [ 201.424242][ T7336] io_uring_create+0x485/0x980 [ 201.424266][ T7336] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 201.424301][ T7336] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 201.424347][ T7336] ? rcu_is_watching+0x16/0xb0 [ 201.424383][ T7336] do_syscall_64+0x166/0x520 [ 201.424405][ T7336] ? trace_irq_disable+0x3b/0x140 [ 201.424426][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.424448][ T7336] ? clear_bhb_loop+0x70/0xc0 [ 201.424474][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.424496][ T7336] RIP: 0033:0x7f7a1c7cf559 [ 201.424517][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.424536][ T7336] RSP: 002b:00007f7a1aa1dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 201.424561][ T7336] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007f7a1c7cf559 [ 201.424575][ T7336] RDX: 00002000000004c0 RSI: 0000200000000280 RDI: 0000000000000efe [ 201.424587][ T7336] RBP: 00007f7a1c866b20 R08: 0000000000000000 R09: 0000000000000000 [ 201.424600][ T7336] R10: 0000200000000500 R11: 0000000000000206 R12: 00002000000004c0 [ 201.424614][ T7336] R13: 0000200000000500 R14: 0000200000000300 R15: 00007ffca20e88d8 [ 201.424646][ T7336] [ 201.428773][ T7336] syz.3.502: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 201.428898][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.3.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.428922][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.428936][ T7336] Call Trace: [ 201.428944][ T7336] [ 201.428953][ T7336] dump_stack_lvl+0xe8/0x150 [ 201.428991][ T7336] warn_alloc+0x24d/0x270 [ 201.429022][ T7336] ? lockdep_hardirqs_on+0x7b/0x110 [ 201.429057][ T7336] ? __pfx_warn_alloc+0x10/0x10 [ 201.429085][ T7336] ? kfree+0x1c5/0x6d0 [ 201.429118][ T7336] ? __get_vm_area_node+0x219/0x2f0 [ 201.429149][ T7336] __vmalloc_node_range_noprof+0x396/0x16f0 [ 201.429175][ T7336] ? lock_acquire+0x115/0x350 [ 201.429199][ T7336] ? percpu_ref_get_many+0x19/0x140 [ 201.429233][ T7336] ? __memcg_slab_post_alloc_hook+0x4ce/0xe00 [ 201.429265][ T7336] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.429287][ T7336] ? rcu_is_watching+0x16/0xb0 [ 201.429308][ T7336] ? memcpy_and_pad+0x48/0x80 [ 201.429331][ T7336] __vmalloc_node_noprof+0xc2/0x100 [ 201.429354][ T7336] ? copy_process+0x7ea/0x44c0 [ 201.429379][ T7336] ? copy_process+0x7ea/0x44c0 [ 201.429405][ T7336] dup_task_struct+0x2c6/0xa00 [ 201.429429][ T7336] ? rt_spin_unlock+0x165/0x200 [ 201.429458][ T7336] copy_process+0x7ea/0x44c0 [ 201.429492][ T7336] ? __lock_acquire+0x747/0x2de0 [ 201.429544][ T7336] ? __pfx_copy_process+0x10/0x10 [ 201.429569][ T7336] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.429602][ T7336] ? __pfx_io_sq_thread+0x10/0x10 [ 201.429628][ T7336] create_io_thread+0x14e/0x1e0 [ 201.429656][ T7336] ? __pfx_create_io_thread+0x10/0x10 [ 201.429680][ T7336] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 201.429714][ T7336] ? __pfx_io_sq_thread+0x10/0x10 [ 201.429746][ T7336] ? rt_spin_unlock+0x159/0x200 [ 201.429775][ T7336] ? rt_spin_unlock+0x165/0x200 [ 201.429804][ T7336] io_sq_offload_create+0xa40/0x1050 [ 201.429834][ T7336] ? __pfx_io_sq_offload_create+0x10/0x10 [ 201.429856][ T7336] ? security_capable+0x7e/0x2c0 [ 201.429889][ T7336] io_uring_create+0x485/0x980 [ 201.429916][ T7336] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 201.429953][ T7336] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 201.430000][ T7336] ? rcu_is_watching+0x16/0xb0 [ 201.430035][ T7336] do_syscall_64+0x166/0x520 [ 201.430066][ T7336] ? trace_irq_disable+0x3b/0x140 [ 201.430085][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.430106][ T7336] ? clear_bhb_loop+0x70/0xc0 [ 201.430126][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.430144][ T7336] RIP: 0033:0x7f7a1c7cf559 [ 201.430162][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.430179][ T7336] RSP: 002b:00007f7a1aa1dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 201.430198][ T7336] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007f7a1c7cf559 [ 201.430212][ T7336] RDX: 00002000000004c0 RSI: 0000200000000280 RDI: 0000000000000efe [ 201.430225][ T7336] RBP: 00007f7a1c866b20 R08: 0000000000000000 R09: 0000000000000000 [ 201.430236][ T7336] R10: 0000200000000500 R11: 0000000000000206 R12: 00002000000004c0 [ 201.430249][ T7336] R13: 0000200000000500 R14: 0000200000000300 R15: 00007ffca20e88d8 [ 201.430279][ T7336] [ 201.627995][ T7336] Mem-Info: [ 201.628011][ T7336] active_anon:219 inactive_anon:5971 isolated_anon:0 [ 201.628011][ T7336] active_file:5993 inactive_file:37390 isolated_file:0 [ 201.628011][ T7336] unevictable:0 dirty:413 writeback:0 [ 201.628011][ T7336] slab_reclaimable:12074 slab_unreclaimable:102541 [ 201.628011][ T7336] mapped:30463 shmem:558 pagetables:1156 [ 201.628011][ T7336] sec_pagetables:0 bounce:0 [ 201.628011][ T7336] kernel_misc_reclaimable:0 [ 201.628011][ T7336] free:1315924 free_pcp:5232 free_cma:0 [ 201.628071][ T7336] Node 0 active_anon:876kB inactive_anon:23884kB active_file:23776kB inactive_file:149560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121852kB dirty:1652kB writeback:0kB shmem:2232kB kernel_stack:13156kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 201.628124][ T7336] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 201.628174][ T7336] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.634200][ T7336] lowmem_reserve[]: 0 2478 2480 2480 2480 [ 201.634246][ T7336] Node 0 DMA32 free:1317248kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:876kB inactive_anon:23884kB active_file:23776kB inactive_file:149560kB unevictable:0kB writepending:1652kB zspages:0kB present:3129332kB managed:2538288kB mlocked:0kB bounce:0kB free_pcp:20920kB local_pcp:5232kB free_cma:0kB [ 201.634313][ T7336] lowmem_reserve[]: 0 0 1 1 1 [ 201.634350][ T7336] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1480kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 201.634413][ T7336] lowmem_reserve[]: 0 0 0 0 0 [ 201.634450][ T7336] Node 1 Normal free:3931088kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.634514][ T7336] lowmem_reserve[]: 0 0 0 0 0 [ 201.634558][ T7336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.634681][ T7336] Node 0 DMA32: 368*4kB (UM) 920*8kB (UM) 682*16kB (UME) 345*32kB (UME) 37*64kB (UME) 4*128kB (UME) 6*256kB (UME) 12*512kB (UME) 4*1024kB (ME) 7*2048kB (ME) 307*4096kB (UM) = 1317248kB [ 201.634849][ T7336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.634956][ T7336] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 9*16kB (UM) 9*32kB (UM) 10*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931088kB [ 201.635137][ T7336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.635157][ T7336] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.635175][ T7336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.635193][ T7336] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.635210][ T7336] 43944 total pagecache pages [ 201.635218][ T7336] 0 pages in swap cache [ 201.635225][ T7336] Free swap = 124996kB [ 201.635233][ T7336] Total swap = 124996kB [ 201.635241][ T7336] 2097051 pages RAM [ 201.635248][ T7336] 0 pages HighMem/MovableOnly [ 201.635255][ T7336] 430493 pages reserved [ 201.635262][ T7336] 0 pages cma reserved [ 201.804212][ T4932] sd 0:0:1:0: [sda] tag#179 Send: scmd 0xffff888031608810 [ 201.804265][ T4932] sd 0:0:1:0: [sda] tag#179 CDB: Write(10) 2a 00 00 10 09 ce 00 00 18 00 [ 201.811000][ T11] sd 0:0:1:0: [sda] tag#180 Send: scmd 0xffff888027a37910 [ 201.811055][ T11] sd 0:0:1:0: [sda] tag#180 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 201.812000][ T31] sd 0:0:1:0: [sda] tag#181 Send: scmd 0xffff888031608bd0 [ 201.812052][ T31] sd 0:0:1:0: [sda] tag#181 CDB: Write(10) 2a 08 00 10 09 e6 00 00 08 00 [ 202.824791][ T7347] loop5: detected capacity change from 0 to 7 [ 202.835630][ T7347] Dev loop5: unable to read RDB block 7 [ 202.835674][ T7347] loop5: unable to read partition table [ 202.835862][ T7347] loop5: partition table beyond EOD, truncated [ 202.835881][ T7347] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.132062][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.196128][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.210666][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.211909][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.212876][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.425245][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.561149][ T5737] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.720153][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 204.720952][ T5737] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 204.723051][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.723102][ T5737] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.723130][ T5737] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.723153][ T5737] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.723181][ T5737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.723214][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.754142][ T5737] usb 4-1: config 0 descriptor?? [ 205.358313][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.510244][ T61] Bluetooth: hci2: command tx timeout [ 205.664878][ T5737] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 205.794108][ T31] sd 0:0:1:0: [sda] tag#182 Send: scmd 0xffff88803179f890 [ 205.794470][ T31] sd 0:0:1:0: [sda] tag#182 CDB: Write same(16) 93 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 206.685071][ T5737] usb 4-1: USB disconnect, device number 10 [ 206.688215][ T11] sd 0:0:1:0: [sda] tag#183 Send: scmd 0xffff888031608f90 [ 206.688269][ T11] sd 0:0:1:0: [sda] tag#183 CDB: Write(10) 2a 00 00 0b 93 ae 00 00 08 00 [ 206.688351][ T11] sd 0:0:1:0: [sda] tag#184 Send: scmd 0xffff888031609350 [ 206.688395][ T11] sd 0:0:1:0: [sda] tag#184 CDB: Write(10) 2a 00 00 0b 93 c6 00 00 08 00 [ 206.688482][ T11] sd 0:0:1:0: [sda] tag#185 Send: scmd 0xffff888031609710 [ 206.688524][ T11] sd 0:0:1:0: [sda] tag#185 CDB: Write(10) 2a 00 00 0b 81 56 00 00 20 00 [ 206.688608][ T11] sd 0:0:1:0: [sda] tag#186 Send: scmd 0xffff888031609ad0 [ 206.688650][ T11] sd 0:0:1:0: [sda] tag#186 CDB: Write(10) 2a 00 00 0b 81 7e 00 00 18 00 [ 206.688740][ T11] sd 0:0:1:0: [sda] tag#187 Send: scmd 0xffff888031609e90 [ 206.688783][ T11] sd 0:0:1:0: [sda] tag#187 CDB: Write(10) 2a 00 00 0b 81 9e 00 00 40 00 [ 206.688881][ T11] sd 0:0:1:0: [sda] tag#188 Send: scmd 0xffff88803160a250 [ 206.688924][ T11] sd 0:0:1:0: [sda] tag#188 CDB: Write(10) 2a 00 00 0b 81 fe 00 00 20 00 [ 206.689012][ T11] sd 0:0:1:0: [sda] tag#189 Send: scmd 0xffff88803160a610 [ 206.689055][ T11] sd 0:0:1:0: [sda] tag#189 CDB: Write(10) 2a 00 00 0b 82 26 00 00 08 00 [ 206.689127][ T11] sd 0:0:1:0: [sda] tag#190 Send: scmd 0xffff88803160a9d0 [ 206.689171][ T11] sd 0:0:1:0: [sda] tag#190 CDB: Write(10) 2a 00 00 0b 82 3e 00 00 08 00 [ 206.879528][ T11] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff88803160ad90 [ 206.879594][ T11] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0b 82 56 00 00 28 00 [ 206.879684][ T11] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff88803160b150 [ 206.879728][ T11] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0b 82 86 00 00 18 00 [ 206.879807][ T11] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff88803160b510 [ 206.879848][ T11] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0b 82 b6 00 00 18 00 [ 206.879946][ T11] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff88803160cf50 [ 206.879989][ T11] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0b 82 de 00 00 58 00 [ 206.881094][ T11] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff88803160d310 [ 206.881140][ T11] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 0b 83 3e 00 00 08 00 [ 206.881218][ T11] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff88803160d6d0 [ 206.881258][ T11] sd 0:0:1:0: [sda] tag#133 CDB: Write(10) 2a 00 00 0b 83 56 00 00 18 00 [ 206.881352][ T11] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff88803160da90 [ 206.881401][ T11] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 00 00 0b 83 7e 00 00 40 00 [ 206.881465][ T11] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff88803160de50 [ 206.881504][ T11] sd 0:0:1:0: [sda] tag#135 CDB: Write(10) 2a 00 00 0b 83 de 00 00 08 00 [ 206.881583][ T11] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff88803160e210 [ 206.881621][ T11] sd 0:0:1:0: [sda] tag#136 CDB: Write(10) 2a 00 00 0b 83 ee 00 00 28 00 [ 206.881700][ T11] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff88803160e5d0 [ 206.881740][ T11] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 0b 84 1e 00 00 20 00 [ 206.881817][ T11] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff88803160e990 [ 206.881856][ T11] sd 0:0:1:0: [sda] tag#138 CDB: Write(10) 2a 00 00 0b 84 56 00 00 18 00 [ 206.881932][ T11] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff88803160ed50 [ 206.881972][ T11] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 00 00 0b 84 76 00 00 18 00 [ 206.882031][ T11] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff888031609ad0 [ 206.882070][ T11] sd 0:0:1:0: [sda] tag#140 CDB: Write(10) 2a 00 00 0b 84 96 00 00 08 00 [ 206.882139][ T11] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff888031609e90 [ 206.882180][ T11] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 00 00 0b 84 a6 00 00 08 00 [ 206.882237][ T11] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff88803160a250 [ 206.882277][ T11] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0b 84 be 00 00 08 00 [ 206.882331][ T11] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff88803160a610 [ 206.882379][ T11] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0b 84 d6 00 00 08 00 [ 206.882454][ T11] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff88803160a9d0 [ 206.882494][ T11] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0b 84 ee 00 00 20 00 [ 206.882555][ T11] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff88803160b8d0 [ 206.882595][ T11] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0b 85 1e 00 00 08 00 [ 206.882650][ T11] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff88803160bc90 [ 206.882717][ T11] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 0b 85 2e 00 00 08 00 [ 206.882775][ T11] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff88803160c050 [ 206.882815][ T11] sd 0:0:1:0: [sda] tag#147 CDB: Write(10) 2a 00 00 0b 85 4e 00 00 08 00 [ 206.882888][ T11] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff88803160c410 [ 206.882927][ T11] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 00 00 0b 85 5e 00 00 18 00 [ 206.882985][ T11] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff88803160c7d0 [ 206.883025][ T11] sd 0:0:1:0: [sda] tag#149 CDB: Write(10) 2a 00 00 0b 85 96 00 00 08 00 [ 206.883103][ T11] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff88803160cb90 [ 206.883142][ T11] sd 0:0:1:0: [sda] tag#150 CDB: Write(10) 2a 00 00 0b 85 a6 00 00 18 00 [ 206.883202][ T11] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff888031600110 [ 206.883242][ T11] sd 0:0:1:0: [sda] tag#151 CDB: Write(10) 2a 00 00 0b 85 c6 00 00 10 00 [ 206.883300][ T11] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff8880316004d0 [ 206.883340][ T11] sd 0:0:1:0: [sda] tag#152 CDB: Write(10) 2a 00 00 0b 85 de 00 00 08 00 [ 206.883402][ T11] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff888031600890 [ 206.883443][ T11] sd 0:0:1:0: [sda] tag#153 CDB: Write(10) 2a 00 00 0b 85 ee 00 00 10 00 [ 206.883517][ T11] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff888031600c50 [ 206.883559][ T11] sd 0:0:1:0: [sda] tag#154 CDB: Write(10) 2a 00 00 0b 86 16 00 00 18 00 [ 206.883630][ T11] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff888031601010 [ 206.883670][ T11] sd 0:0:1:0: [sda] tag#155 CDB: Write(10) 2a 00 00 0b 86 36 00 00 08 00 [ 206.883726][ T11] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff8880316013d0 [ 206.883765][ T11] sd 0:0:1:0: [sda] tag#156 CDB: Write(10) 2a 00 00 0b 86 46 00 00 08 00 [ 206.883827][ T11] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff888031601790 [ 206.883865][ T11] sd 0:0:1:0: [sda] tag#157 CDB: Write(10) 2a 00 00 0b 86 56 00 00 10 00 [ 206.883944][ T11] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff888031601b50 [ 206.883983][ T11] sd 0:0:1:0: [sda] tag#158 CDB: Write(10) 2a 00 00 0b 86 76 00 00 28 00 [ 206.893687][ T4932] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff888031601f10 [ 206.893742][ T4932] sd 0:0:1:0: [sda] tag#159 CDB: Write(10) 2a 00 00 10 09 ee 00 00 48 00 [ 206.901452][ T11] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff888027a37910 [ 206.901506][ T11] sd 0:0:1:0: [sda] tag#160 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 206.901794][ T31] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff8880316022d0 [ 206.901844][ T31] sd 0:0:1:0: [sda] tag#161 CDB: Write(10) 2a 08 00 10 0a 36 00 00 08 00 [ 206.989100][ T1472] sd 0:0:1:0: [sda] tag#162 Send: scmd 0xffff888031602690 [ 206.989590][ T1472] sd 0:0:1:0: [sda] tag#162 CDB: Write(10) 2a 00 00 0b 86 a6 00 00 10 00 [ 206.989703][ T1472] sd 0:0:1:0: [sda] tag#163 Send: scmd 0xffff888031602a50 [ 206.989766][ T1472] sd 0:0:1:0: [sda] tag#163 CDB: Write(10) 2a 00 00 0b 86 d6 00 00 08 00 [ 206.989880][ T1472] sd 0:0:1:0: [sda] tag#164 Send: scmd 0xffff888031602e10 [ 206.989938][ T1472] sd 0:0:1:0: [sda] tag#164 CDB: Write(10) 2a 00 00 0b 86 e6 00 00 20 00 [ 207.001528][ T1472] sd 0:0:1:0: [sda] tag#165 Send: scmd 0xffff8880316031d0 [ 207.001602][ T1472] sd 0:0:1:0: [sda] tag#165 CDB: Write(10) 2a 00 00 0b 87 0e 00 00 48 00 [ 207.001730][ T1472] sd 0:0:1:0: [sda] tag#166 Send: scmd 0xffff888031603590 [ 207.001791][ T1472] sd 0:0:1:0: [sda] tag#166 CDB: Write(10) 2a 00 00 0b 87 66 00 00 18 00 [ 207.001870][ T1472] sd 0:0:1:0: [sda] tag#167 Send: scmd 0xffff888031603950 [ 207.001945][ T1472] sd 0:0:1:0: [sda] tag#167 CDB: Write(10) 2a 00 00 0b 87 8e 00 00 08 00 [ 207.002022][ T1472] sd 0:0:1:0: [sda] tag#168 Send: scmd 0xffff888031603d10 [ 207.002081][ T1472] sd 0:0:1:0: [sda] tag#168 CDB: Write(10) 2a 00 00 0b 87 ae 00 00 08 00 [ 207.002188][ T1472] sd 0:0:1:0: [sda] tag#169 Send: scmd 0xffff8880316040d0 [ 207.002247][ T1472] sd 0:0:1:0: [sda] tag#169 CDB: Write(10) 2a 00 00 0b 87 c6 00 00 28 00 [ 207.002328][ T1472] sd 0:0:1:0: [sda] tag#170 Send: scmd 0xffff888031604490 [ 207.002489][ T1472] sd 0:0:1:0: [sda] tag#170 CDB: Write(10) 2a 00 00 0b 88 06 00 00 10 00 [ 207.002571][ T1472] sd 0:0:1:0: [sda] tag#171 Send: scmd 0xffff888031604850 [ 207.002631][ T1472] sd 0:0:1:0: [sda] tag#171 CDB: Write(10) 2a 00 00 0b 88 36 00 00 08 00 [ 207.002709][ T1472] sd 0:0:1:0: [sda] tag#172 Send: scmd 0xffff888031604c10 [ 207.002768][ T1472] sd 0:0:1:0: [sda] tag#172 CDB: Write(10) 2a 00 00 0b 88 46 00 00 10 00 [ 207.023338][ T1472] sd 0:0:1:0: [sda] tag#173 Send: scmd 0xffff888031604fd0 [ 207.023409][ T1472] sd 0:0:1:0: [sda] tag#173 CDB: Write(10) 2a 00 00 0b 88 7e 00 00 18 00 [ 207.023505][ T1472] sd 0:0:1:0: [sda] tag#174 Send: scmd 0xffff888031605390 [ 207.023566][ T1472] sd 0:0:1:0: [sda] tag#174 CDB: Write(10) 2a 00 00 0b 88 b6 00 00 08 00 [ 207.023645][ T1472] sd 0:0:1:0: [sda] tag#175 Send: scmd 0xffff888031605750 [ 207.023703][ T1472] sd 0:0:1:0: [sda] tag#175 CDB: Write(10) 2a 00 00 0b 88 c6 00 00 10 00 [ 207.023781][ T1472] sd 0:0:1:0: [sda] tag#176 Send: scmd 0xffff888031605b10 [ 207.023841][ T1472] sd 0:0:1:0: [sda] tag#176 CDB: Write(10) 2a 00 00 0b 88 de 00 00 08 00 [ 207.023946][ T1472] sd 0:0:1:0: [sda] tag#177 Send: scmd 0xffff888031605ed0 [ 207.024005][ T1472] sd 0:0:1:0: [sda] tag#177 CDB: Write(10) 2a 00 00 0b 88 f6 00 00 18 00 [ 207.024116][ T1472] sd 0:0:1:0: [sda] tag#178 Send: scmd 0xffff888031606290 [ 207.024175][ T1472] sd 0:0:1:0: [sda] tag#178 CDB: Write(10) 2a 00 00 0b 89 3e 00 00 20 00 [ 207.024384][ T1472] sd 0:0:1:0: [sda] tag#179 Send: scmd 0xffff888031606650 [ 207.024451][ T1472] sd 0:0:1:0: [sda] tag#179 CDB: Write(10) 2a 00 00 0b 89 76 00 00 30 00 [ 207.024552][ T1472] sd 0:0:1:0: [sda] tag#180 Send: scmd 0xffff888031606a10 [ 207.024612][ T1472] sd 0:0:1:0: [sda] tag#180 CDB: Write(10) 2a 00 00 0b 89 f6 00 00 10 00 [ 207.032097][ T1472] sd 0:0:1:0: [sda] tag#181 Send: scmd 0xffff888031606dd0 [ 207.032175][ T1472] sd 0:0:1:0: [sda] tag#181 CDB: Write(10) 2a 00 00 0b 8a 2e 00 00 18 00 [ 207.032276][ T1472] sd 0:0:1:0: [sda] tag#182 Send: scmd 0xffff888031607190 [ 207.032335][ T1472] sd 0:0:1:0: [sda] tag#182 CDB: Write(10) 2a 00 00 0b 8a 4e 00 00 08 00 [ 207.032413][ T1472] sd 0:0:1:0: [sda] tag#183 Send: scmd 0xffff888031607550 [ 207.032482][ T1472] sd 0:0:1:0: [sda] tag#183 CDB: Write(10) 2a 00 00 0b 8a 66 00 00 08 00 [ 207.032555][ T1472] sd 0:0:1:0: [sda] tag#184 Send: scmd 0xffff888031607910 [ 207.032615][ T1472] sd 0:0:1:0: [sda] tag#184 CDB: Write(10) 2a 00 00 0b 8a 76 00 00 08 00 [ 207.032724][ T1472] sd 0:0:1:0: [sda] tag#185 Send: scmd 0xffff888031607cd0 [ 207.032783][ T1472] sd 0:0:1:0: [sda] tag#185 CDB: Write(10) 2a 00 00 0b 8a 96 00 00 18 00 [ 207.032954][ T1472] sd 0:0:1:0: [sda] tag#186 Send: scmd 0xffff888031608090 [ 207.033012][ T1472] sd 0:0:1:0: [sda] tag#186 CDB: Write(10) 2a 00 00 0b 8a be 00 00 28 00 [ 207.033095][ T1472] sd 0:0:1:0: [sda] tag#187 Send: scmd 0xffff888031608450 [ 207.033154][ T1472] sd 0:0:1:0: [sda] tag#187 CDB: Write(10) 2a 00 00 0b 8a ee 00 00 08 00 [ 207.033257][ T1472] sd 0:0:1:0: [sda] tag#188 Send: scmd 0xffff888031608810 [ 207.033316][ T1472] sd 0:0:1:0: [sda] tag#188 CDB: Write(10) 2a 00 00 0b 8b 06 00 00 18 00 [ 207.033421][ T1472] sd 0:0:1:0: [sda] tag#189 Send: scmd 0xffff888031608bd0 [ 207.033489][ T1472] sd 0:0:1:0: [sda] tag#189 CDB: Write(10) 2a 00 00 0b 8b 2e 00 00 18 00 [ 207.081995][ T1472] sd 0:0:1:0: [sda] tag#190 Send: scmd 0xffff888031608f90 [ 207.082069][ T1472] sd 0:0:1:0: [sda] tag#190 CDB: Write(10) 2a 00 00 0b 8b 56 00 00 30 00 [ 207.082170][ T1472] sd 0:0:1:0: [sda] tag#191 Send: scmd 0xffff888031609350 [ 207.082231][ T1472] sd 0:0:1:0: [sda] tag#191 CDB: Write(10) 2a 00 00 0b 8b b6 00 00 10 00 [ 207.082398][ T1472] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff888031609710 [ 207.082461][ T1472] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0b 8c 16 00 00 18 00 [ 207.082552][ T1472] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff88803160cf50 [ 207.082611][ T1472] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0b 8c 5e 00 00 08 00 [ 207.113123][ T1472] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff88803160d310 [ 207.115521][ T1472] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0b 8c 6e 00 00 18 00 [ 207.115642][ T1472] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff88803160d6d0 [ 207.115692][ T1472] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0b 8c 96 00 00 20 00 [ 207.115772][ T1472] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff88803160da90 [ 207.115820][ T1472] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 0b 8c c6 00 00 08 00 [ 207.115904][ T1472] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff888031609ad0 [ 207.115953][ T1472] sd 0:0:1:0: [sda] tag#133 CDB: Write(10) 2a 00 00 0b 8d 06 00 00 10 00 [ 207.116102][ T1472] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff888031609e90 [ 207.116150][ T1472] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 00 00 0b 8d 1e 00 00 08 00 [ 207.116214][ T1472] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff88803160a250 [ 207.116261][ T1472] sd 0:0:1:0: [sda] tag#135 CDB: Write(10) 2a 00 00 0b 8d 5e 00 00 10 00 [ 207.116324][ T1472] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff88803160a610 [ 207.116370][ T1472] sd 0:0:1:0: [sda] tag#136 CDB: Write(10) 2a 00 00 0b 8d 96 00 00 08 00 [ 207.116432][ T1472] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff88803160a9d0 [ 207.116478][ T1472] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 0b 8d de 00 00 08 00 [ 207.120651][ T1472] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff88803160ad90 [ 207.120703][ T1472] sd 0:0:1:0: [sda] tag#138 CDB: Write(10) 2a 00 00 0b 8d f6 00 00 10 00 [ 207.120769][ T1472] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff88803160b150 [ 207.120817][ T1472] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 00 00 0b 8e 16 00 00 28 00 [ 207.120888][ T1472] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff88803160b510 [ 207.120936][ T1472] sd 0:0:1:0: [sda] tag#140 CDB: Write(10) 2a 00 00 0b 8e 7e 00 00 08 00 [ 207.131930][ T1472] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff88803160b8d0 [ 207.132004][ T1472] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 00 00 0b 8f 36 00 00 08 00 [ 207.132078][ T1472] sd 0:0:1:0: [sda] tag#142 Send: scmd 0xffff88803160bc90 [ 207.132125][ T1472] sd 0:0:1:0: [sda] tag#142 CDB: Write(10) 2a 00 00 0b 8f 46 00 00 20 00 [ 207.132192][ T1472] sd 0:0:1:0: [sda] tag#143 Send: scmd 0xffff88803160c050 [ 207.132238][ T1472] sd 0:0:1:0: [sda] tag#143 CDB: Write(10) 2a 00 00 0b 8f a6 00 00 10 00 [ 207.132301][ T1472] sd 0:0:1:0: [sda] tag#144 Send: scmd 0xffff88803160c410 [ 207.132348][ T1472] sd 0:0:1:0: [sda] tag#144 CDB: Write(10) 2a 00 00 0b 8f f6 00 00 08 00 [ 207.132410][ T1472] sd 0:0:1:0: [sda] tag#145 Send: scmd 0xffff88803160c7d0 [ 207.132456][ T1472] sd 0:0:1:0: [sda] tag#145 CDB: Write(10) 2a 00 00 0b 90 06 00 00 08 00 [ 207.132520][ T1472] sd 0:0:1:0: [sda] tag#146 Send: scmd 0xffff88803160cb90 [ 207.132566][ T1472] sd 0:0:1:0: [sda] tag#146 CDB: Write(10) 2a 00 00 0b 90 16 00 00 08 00 [ 207.132631][ T1472] sd 0:0:1:0: [sda] tag#147 Send: scmd 0xffff88803160de50 [ 207.132677][ T1472] sd 0:0:1:0: [sda] tag#147 CDB: Write(10) 2a 00 00 0b 90 56 00 00 08 00 [ 207.132740][ T1472] sd 0:0:1:0: [sda] tag#148 Send: scmd 0xffff88803160e210 [ 207.132788][ T1472] sd 0:0:1:0: [sda] tag#148 CDB: Write(10) 2a 00 00 0b 90 66 00 00 10 00 [ 207.132857][ T1472] sd 0:0:1:0: [sda] tag#149 Send: scmd 0xffff88803160e5d0 [ 207.133029][ T1472] sd 0:0:1:0: [sda] tag#149 CDB: Write(10) 2a 00 00 0b 90 9e 00 00 08 00 [ 207.133096][ T1472] sd 0:0:1:0: [sda] tag#150 Send: scmd 0xffff88803160e990 [ 207.133142][ T1472] sd 0:0:1:0: [sda] tag#150 CDB: Write(10) 2a 00 00 0b 90 be 00 00 08 00 [ 207.133205][ T1472] sd 0:0:1:0: [sda] tag#151 Send: scmd 0xffff88803160ed50 [ 207.133251][ T1472] sd 0:0:1:0: [sda] tag#151 CDB: Write(10) 2a 00 00 0b 91 16 00 00 08 00 [ 207.133315][ T1472] sd 0:0:1:0: [sda] tag#152 Send: scmd 0xffff888031600110 [ 207.133373][ T1472] sd 0:0:1:0: [sda] tag#152 CDB: Write(10) 2a 00 00 0b 91 46 00 00 08 00 [ 207.528505][ T7416] netlink: 52 bytes leftover after parsing attributes in process `syz.3.524'. [ 207.528532][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'. [ 207.539445][ T7415] sd 0:0:1:0: [sda] tag#153 Send: scmd 0xffff8880316004d0 [ 207.539509][ T7415] sd 0:0:1:0: [sda] tag#153 CDB: Inquiry 12 00 00 00 fe 00 [ 207.562645][ T7415] sd 0:0:1:0: [sda] tag#154 Send: scmd 0xffff888031600890 [ 207.562715][ T7415] sd 0:0:1:0: [sda] tag#154 CDB: Inquiry 12 01 00 00 fe 00 [ 207.572347][ T7415] sd 0:0:1:0: [sda] tag#155 Send: scmd 0xffff888031600c50 [ 207.572408][ T7415] sd 0:0:1:0: [sda] tag#155 CDB: Inquiry 12 01 80 00 fe 00 [ 207.574381][ T7415] sd 0:0:1:0: [sda] tag#156 Send: scmd 0xffff888031601010 [ 207.574432][ T7415] sd 0:0:1:0: [sda] tag#156 CDB: Inquiry 12 01 83 00 fe 00 [ 207.590196][ T61] Bluetooth: hci2: command tx timeout [ 207.727474][ T5609] sd 0:0:1:0: [sda] tag#157 Send: scmd 0xffff8880316013d0 [ 207.727538][ T5609] sd 0:0:1:0: [sda] tag#157 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 207.843671][ T7407] fido_id[7407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.748615][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.904281][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.930157][ T5880] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.945969][ T7356] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.053773][ T10] usb 2-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 209.058714][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.058772][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.100913][ T5880] usb 4-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 209.102319][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.102363][ T5880] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.102384][ T5880] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 209.102406][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 209.104507][ T5880] usb 4-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 209.104531][ T5880] usb 4-1: Product: syz [ 209.104546][ T5880] usb 4-1: Manufacturer: syz [ 209.104560][ T5880] usb 4-1: SerialNumber: syz [ 209.223231][ T7432] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.223571][ T7432] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.335893][ T5880] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 209.336375][ T5880] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 209.360778][ T5880] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 209.360907][ T5880] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 209.360994][ T5880] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 209.361080][ T5880] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 209.479712][ T5880] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 209.485002][ T10] as10x_usb: device has been detected [ 209.485943][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 209.608691][ T5880] usb 4-1: USB disconnect, device number 11 [ 209.638755][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.671472][ T61] Bluetooth: hci2: command tx timeout [ 209.906711][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 209.908958][ T5880] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 209.985128][ T7440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.076694][ T5880] keyspan 4-1:1.0: device disconnected [ 210.083067][ T7443] INFO: trying to register non-static key. [ 210.086299][ T11] sd 0:0:1:0: [sda] tag#158 Send: scmd 0xffff888031601790 [ 210.086341][ T11] sd 0:0:1:0: [sda] tag#158 CDB: Read(10) 28 00 00 01 66 4e 00 00 08 00 [ 210.109864][ T7443] The code is fine but needs lockdep annotation, or maybe [ 210.116974][ T7443] you didn't initialize this object before use? [ 210.123213][ T7443] turning off the locking correctness validator. [ 210.129549][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.139273][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.149338][ T7443] Call Trace: [ 210.152624][ T7443] [ 210.155556][ T7443] dump_stack_lvl+0xe8/0x150 [ 210.160158][ T7443] assign_lock_key+0x133/0x150 [ 210.164927][ T7443] register_lock_class+0xcc/0x2e0 [ 210.169974][ T7443] __lock_acquire+0x10c/0x2de0 [ 210.174763][ T7443] ? add_lock_to_list+0xc7/0x100 [ 210.179705][ T7443] ? lockdep_unlock+0x5c/0xd0 [ 210.184394][ T7443] ? __lock_acquire+0x1511/0x2de0 [ 210.189448][ T7443] lock_acquire+0x115/0x350 [ 210.193967][ T7443] ? as102_stream_ctrl+0x27/0xc0 [ 210.198922][ T7443] ? as102_stream_ctrl+0x27/0xc0 [ 210.203877][ T7443] ? as102_stream_ctrl+0x27/0xc0 [ 210.208826][ T7443] mutex_lock_interruptible_nested+0x55/0x1c0 [ 210.215003][ T7443] ? as102_stream_ctrl+0x27/0xc0 [ 210.219955][ T7443] as102_stream_ctrl+0x27/0xc0 [ 210.224742][ T7443] __dvb_frontend_open+0x2ef/0xcb0 [ 210.229869][ T7443] ? dvb_frontend_open+0x1d4/0x880 [ 210.234995][ T7443] ? mutex_lock_nested+0x14d/0x1d0 [ 210.240131][ T7443] ? __pfx_dvb_frontend_open+0x10/0x10 [ 210.245611][ T7443] dvb_device_open+0x258/0x350 [ 210.250393][ T7443] chrdev_open+0x4dc/0x600 [ 210.254827][ T7443] ? __pfx_chrdev_open+0x10/0x10 [ 210.259769][ T7443] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 210.266116][ T7443] ? __pfx_chrdev_open+0x10/0x10 [ 210.271194][ T7443] do_dentry_open+0x841/0x1410 [ 210.276061][ T7443] vfs_open_consume+0x4a/0x360 [ 210.280826][ T7443] ? path_openat+0x16e6/0x2100 [ 210.285594][ T7443] path_openat+0x1701/0x2100 [ 210.290198][ T7443] do_file_open+0x23e/0x4a0 [ 210.294807][ T7443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 210.300616][ T7443] ? __pfx_do_file_open+0x10/0x10 [ 210.305660][ T7443] ? alloc_fd+0x6b2/0x760 [ 210.309996][ T7443] do_sys_openat2+0x115/0x200 [ 210.314688][ T7443] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.319893][ T7443] __x64_sys_openat+0x138/0x170 [ 210.324751][ T7443] do_syscall_64+0x166/0x520 [ 210.329363][ T7443] ? trace_irq_disable+0x3b/0x140 [ 210.334385][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.340445][ T7443] ? clear_bhb_loop+0x70/0xc0 [ 210.345147][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.351046][ T7443] RIP: 0033:0x7f9d0e44fd8e [ 210.355461][ T7443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.375062][ T7443] RSP: 002b:00007f9d0c69bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.383483][ T7443] RAX: ffffffffffffffda RBX: 00007f9d0c69c6c0 RCX: 00007f9d0e44fd8e [ 210.391453][ T7443] RDX: 0000000000000802 RSI: 00007f9d0c69bc00 RDI: ffffffffffffff9c [ 210.399422][ T7443] RBP: 00007f9d0c69bc00 R08: 0000000000000000 R09: 0000000000000000 [ 210.407393][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 210.415365][ T7443] R13: 00007f9d0e716218 R14: 00007f9d0e716180 R15: 00007fff72778d68 [ 210.423346][ T7443] [ 210.431344][ T10] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:1: No space for directory leaf checksum. Please run e2fsck -D. [ 210.431378][ T10] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:1: checksumming directory block 0 [ 210.431650][ T10] usb 2-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 210.431782][ T10] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:1: No space for directory leaf checksum. Please run e2fsck -D. [ 210.431808][ T10] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:1: checksumming directory block 0 [ 210.431985][ T10] usb 2-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 210.432095][ T10] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:1: No space for directory leaf checksum. Please run e2fsck -D. [ 210.432120][ T10] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:1: checksumming directory block 0 [ 210.432323][ T10] usb 2-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 210.432448][ T10] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:1: No space for directory leaf checksum. Please run e2fsck -D. [ 210.432474][ T10] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:1: checksumming directory block 0 [ 210.432657][ T10] usb 2-1: loading /lib/firmware/as102_data1_st.hex failed with error -74 [ 210.432691][ T10] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -74 [ 210.432712][ T10] usb 2-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 211.193739][ T3430] bridge_slave_1: left allmulticast mode [ 211.193767][ T3430] bridge_slave_1: left promiscuous mode [ 211.193935][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.349223][ T3430] bridge_slave_0: left allmulticast mode [ 211.349251][ T3430] bridge_slave_0: left promiscuous mode [ 211.349421][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.830120][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 211.990835][ T4932] sd 0:0:1:0: [sda] tag#159 Send: scmd 0xffff888031601b50 [ 211.990925][ T4932] sd 0:0:1:0: [sda] tag#159 CDB: Write(10) 2a 00 00 10 0a 3e 00 00 40 00 [ 211.992966][ T11] sd 0:0:1:0: [sda] tag#160 Send: scmd 0xffff888027a37910 [ 211.992991][ T11] sd 0:0:1:0: [sda] tag#160 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 211.993184][ T31] sd 0:0:1:0: [sda] tag#161 Send: scmd 0xffff888031601f10 [ 211.993213][ T31] sd 0:0:1:0: [sda] tag#161 CDB: Write(10) 2a 08 00 10 0a 7e 00 00 08 00 [ 212.050560][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.110600][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.151049][ T31] sd 0:0:1:0: [sda] tag#128 Send: scmd 0xffff88803179fc50 [ 212.151092][ T31] sd 0:0:1:0: [sda] tag#128 CDB: Write(10) 2a 00 00 0c b1 2e 00 00 08 00 [ 212.151143][ T31] sd 0:0:1:0: [sda] tag#129 Send: scmd 0xffff8880317c0110 [ 212.151168][ T31] sd 0:0:1:0: [sda] tag#129 CDB: Write(10) 2a 00 00 0b c1 36 00 00 08 00 [ 212.152216][ T31] sd 0:0:1:0: [sda] tag#130 Send: scmd 0xffff8880317c04d0 [ 212.152249][ T31] sd 0:0:1:0: [sda] tag#130 CDB: Write(10) 2a 00 00 0b e0 96 00 00 a0 00 [ 212.152323][ T31] sd 0:0:1:0: [sda] tag#131 Send: scmd 0xffff8880317c0890 [ 212.152365][ T31] sd 0:0:1:0: [sda] tag#131 CDB: Write(10) 2a 00 00 0b f0 9e 00 00 98 00 [ 212.152419][ T31] sd 0:0:1:0: [sda] tag#132 Send: scmd 0xffff8880317c0c50 [ 212.152450][ T31] sd 0:0:1:0: [sda] tag#132 CDB: Write(10) 2a 00 00 0c c1 36 00 00 08 00 [ 212.153456][ T3430] bond0 (unregistering): Released all slaves [ 212.153601][ T31] sd 0:0:1:0: [sda] tag#133 Send: scmd 0xffff8880317c1010 [ 212.153635][ T31] sd 0:0:1:0: [sda] tag#133 CDB: Write(10) 2a 00 00 0c e0 96 00 00 a0 00 [ 212.154124][ T31] sd 0:0:1:0: [sda] tag#134 Send: scmd 0xffff8880317c13d0 [ 212.154157][ T31] sd 0:0:1:0: [sda] tag#134 CDB: Write(10) 2a 00 00 0c f0 5e 00 00 d8 00 [ 212.154205][ T31] sd 0:0:1:0: [sda] tag#135 Send: scmd 0xffff8880317c1790 [ 212.154242][ T31] sd 0:0:1:0: [sda] tag#135 CDB: Write(10) 2a 00 00 0d 41 36 00 00 08 00 [ 212.155188][ T3417] sd 0:0:1:0: [sda] tag#136 Send: scmd 0xffff8880317c1b50 [ 212.155339][ T3417] sd 0:0:1:0: [sda] tag#136 CDB: Write(10) 2a 00 00 0d 60 e6 00 00 50 00 [ 212.155438][ T3417] sd 0:0:1:0: [sda] tag#137 Send: scmd 0xffff8880317c1f10 [ 212.155474][ T3417] sd 0:0:1:0: [sda] tag#137 CDB: Write(10) 2a 00 00 0d 70 7e 00 00 b8 00 [ 212.155618][ T3417] sd 0:0:1:0: [sda] tag#138 Send: scmd 0xffff8880317c22d0 [ 212.155653][ T3417] sd 0:0:1:0: [sda] tag#138 CDB: Write(10) 2a 00 00 0d 01 36 00 00 18 00 [ 212.871150][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.173109][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.812448][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.190256][ T3430] hsr_slave_0: left promiscuous mode [ 214.230659][ T3430] hsr_slave_1: left promiscuous mode [ 214.231818][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.231838][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.271156][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.271171][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.330683][ T3430] veth1_macvtap: left promiscuous mode [ 214.330723][ T3430] veth0_macvtap: left promiscuous mode [ 214.330823][ T3430] veth1_vlan: left promiscuous mode [ 214.330875][ T3430] veth0_vlan: left promiscuous mode [ 214.830545][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 214.872243][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 214.972361][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 216.191946][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.591964][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.831139][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.051218][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.432905][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.481452][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 217.682552][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.731136][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 217.971151][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.021598][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 218.070697][ T4932] sd 0:0:1:0: [sda] tag#139 Send: scmd 0xffff8880317c2690 [ 218.070742][ T4932] sd 0:0:1:0: [sda] tag#139 CDB: Write(10) 2a 00 00 10 0a 86 00 00 58 00 [ 218.073055][ T31] sd 0:0:1:0: [sda] tag#140 Send: scmd 0xffff888027a37910 [ 218.073097][ T31] sd 0:0:1:0: [sda] tag#140 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 218.073298][ T31] sd 0:0:1:0: [sda] tag#141 Send: scmd 0xffff8880317c2a50 [ 218.073332][ T31] sd 0:0:1:0: [sda] tag#141 CDB: Write(10) 2a 08 00 10 0a de 00 00 08 00 [ 218.301142][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.351237][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 218.740313][ T3430] bridge_slave_1: left allmulticast mode [ 218.740331][ T3430] bridge_slave_1: left promiscuous mode [ 218.740436][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.891296][ T3430] bridge_slave_0: left allmulticast mode [ 218.891317][ T3430] bridge_slave_0: left promiscuous mode [ 218.891409][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.120406][ T3430] bridge_slave_1: left allmulticast mode [ 219.120427][ T3430] bridge_slave_1: left promiscuous mode [ 219.120546][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.240949][ T3430] bridge_slave_0: left allmulticast mode [ 219.240981][ T3430] bridge_slave_0: left promiscuous mode [ 219.241144][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.880680][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.961241][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.981377][ T3430] bond0 (unregistering): Released all slaves [ 220.142841][ T3430] bond0 (unregistering): Released all slaves