last executing test programs: 3m45.476195499s ago: executing program 1 (id=2): socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, &(0x7f0000000300)) dup(r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) getpid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) syz_open_procfs(0xffffffffffffffff, 0x0) 3m44.49328221s ago: executing program 1 (id=12): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x1e, 0x14fd, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000000000000a300081dbd69d546428b003c1f050000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 3m28.541033854s ago: executing program 32 (id=12): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x1e, 0x14fd, &(0x7f00000021c0)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU37I0PqkudqacGYn01CBuohqqRaqzewEdVUzUEm6nmqoV6XA3DodhKNfWt1VOqjRqFbdUzajQ+q9qrsdhBPa86qhdUJ/Wiekk1851VFzURu6nuagr2VL1Ub9VHzcDK6lLHqqjX1AA1UA1Sr6v5+IYaot5UQ9UwNVy9pUaokWqUGq3GqLFqnHpbjVfvqAnqXTVRTVKT1RQ1VU1T09V7aoaaqWap99Vs9YGao+aqeWq+WqA+VAvVIrVYfaSWqI/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1idqmtqsdaqfapXarPepTtVd9pvapz9V+9YU6oL5UB9VX6pD6WqWpb9Rh9a06or5TR9X36pj6QR1XJ9RJ9aM6pX5Sp9UZdVadU+fVz+qC+kVdVEGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36lRdSBfWRbTXRXUxfZMurm/WJfQtuqS+VZfSt+nSuowuq8vp23V5fYeuoO/UFfVdupKurKvoqvpuXU3fo6vre3UNfZ+uqe/XtfQDurb+i66jH9R19UO6nn5Y19eP6Aa6oW6kG+sm+lHdVD+mm+nmuoV+XLfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E76F31RB91Zd9FddTfdXffQPXUv3Vv30X31K7qfflX316/pAXqgHqRf14P1G3qIflMP1cP0cP2WHqFH6lF6tB6jx+px+m09Xr+jJ+h39UQ9SU/WU/RUPU33/m2mWf+F/Hf+SX7/X4++RW/Vn+hterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6TSdpg/rw/qIPqKP6qP6mD6mj+sT+pz+UZ/SP+nT+ow+o8/p8/q8vvDbawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gb87aRpCpsixpuippi56V/JNwXNjSbVFPq7/D+rr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqZTuYl85LpbDqbrqar6W56mJ6ml+lt+pi+5hXTz/Qz/U1/M8AMMIPMIDPYDDZDzBAz1Aw1w81wM8KMMKPMKDPGjDHjzDgz3ow3E8wEM9FMNJPNZDPVTDXTzXQzw8wws8wsM9vMNnPMHDPPzDMLzAKz0Cw0i81is8QsMUvNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJLM241Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDJpJs0cNofNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzXlz3lwwF8xFc/HSZV+kIhWZyEQZogxRSpQSZY4yR1miLFHWKGuUiBJRtihblD26PsoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMnohqhgdGOUGhWKCkdFIh8VjYpFN0XFo5ujEtEtUcno1qhUdFtUOioTlY3KRbdH5aM7ogrRnVHF6K6oUlQ5qhJVje6OqkX3RNWje6Ma0X1Rzej+qFb0QFQ7+ktUJ3owqhs9FNWLHo7qR49EDaKGUaOocdTk3zp/CKdzPuY72y62q+1mu9setqftZXvbPravfcX2s6/a/vY1O8AOtIPs63awfcMOsW/aoXaYHW7fsiPsSDvKjrZj7Fg7zr5tx9t37AT7rp1oJ9nJdoqdaqfZ6fY9O8POtLPs+3a2/cDOsXPtPDvfLrAf2oV2kV1sP7JL7Md2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9stdqv9xG6z2+0Ou9PusrvtHvup3Ws/s/vs53a//cIesF/ag/Yre8h+bdPsN/aw/dYesd/Zo/Z7e8z+YI/bE/ak/dGesj/Z0/aMPWvP2fP2Z3vB/mIv2nDp4v7S6Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkFIplQpTYfLkqRgVo+JUnEpQCSpJJakUlaLSVJrKUlm6nW6nO+gOupPupLvoLqpMlakqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADagRNaIm1ISaUlNqRs2oBbWgltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USd6iV6iztSZulJX6k7dqSf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtNbNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFtJiWkxLaAktpaW0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSNttEO2kG7aBftoT20l/bSPtpH+2k/HaADdJAO0iE6RGmURofpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaef6QL9QhcpUIrL5DK7q1wWd7XL6q5x/xjncrldHpfX5XPW5XA5/y4m51yqK+QKuyLOu6KumLvJpV66pfpdXNqVcWVdOXe7K+/ucBX+EFdz97jq7l5Xw93nqrq7/y6u6e53tdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/kO80C1ya906t95tcHvdZ+6sO+eOuO/cefez6+y6uL7uFdfPver6u9fcADfwD/Fw95Yb4Ua6UW60G+PG/iGe7Ka4qW6am+7eczPczD/EC9yHbrZb7Oa4uW6em/9rfKmmxe4jt8R97Ja6ZW65W+FWulVutVvzH7WucJvcZrfF7XGfum1uu9vhdrpdbvev8aV17HOfu/3uC3fYfesOuq/cIXfUpblvfo0vre+o+94dcz+44+6EO+l+dKfcT+60O/Pr+i+t/Uf3i7voggNGVqzZcMQZOCOncCbOzFdxFr6as/I1nOBrORtfx9n5es7BOTkX5+Y8nJfzsWVix8wx5+cCnOQbuCDfyKlciAtzEfZclIvxTVycb+YSfAuX5Fu5FN/GpbkMl+VyfDuX5zu4At/JFfkursSVuQpX5bu5Gt/D1flersH3cU2+n2vxA1yb/8J1+EGuyw9xPX6Y6/Mj3IAbciNuzE34UW7Kj3Ezbs4t+HFuyU9wK36SW/NT3Iaf5rb8DLfjZ7k9P8cd+HnuyC9wJ36RX+KXuTN34a7cjbtzD+7Jvbg39+G+/Ar341e5P7/GA3ggD+LXeTC/wUP4TR7Kw3g4v8UjeCSP4tE8hsfyOH6bx/M7PIHf5Yk8iSfzFJ7K03g6v8czeCbP4vd5Nn/Ac3guz+P5vIA/5IW8iBfzR7yEP+alvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4a38CW/j7byDd/Iu3s17+FPey5/xPv6c9/MXfIC/5IP8FR/irzmNv+HD/C0f4e/4KH/Px/gHPs4n+CT/yKf4Jz7NZ/gsn+Pz/DNf4F/4IgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrfE2ciK+Ns8XXxdnj6+Mccc44V5w7zhPnjfPFNqbYxRzHcf64QJyMb4gLxjfGqXGhuHBcJPZx0bhYfFNcPL45LhHfEpeMb41LxbfFpeMy8cP3lYtvj8vHd8QV4jvjivFdcaW4clwlrhrfHVeL74mrx/fGNeL74hLx/XGt+IEYfvu8St34obhe/HBcP34kbhA3jBvFjeMm8aNx0/ixuFncPG4RPx63jJ+IW8VPxq3jp+I28dN/ur9r3C3uHveIe8Qh3KvnJecnFyQ/TC5MLkouTn6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULVjODRK6+98ZHP4DP6FJ/JZ/ZX+Sz+ap/VX+MT/lqfzV/ns/vrfQ6f0+fyuX0en9fn89aTd5597PP7Aj7pb/AF/Y0+1RfyhX0R731RX8w39k18E9/UP+ab+ea+hX/cP+6f8E/4J/2T/infxj/t2/pnfDv/rG/vn/PP+ed9R/+C7+Rf9C/5l31n38V39V19d9/d9/Q9fW/f2/f1fX0/38/39/39AD/AD/KD/GA/2A/xQ/xQP9QP98P9CD/Cj/Kj/Bg/xo/z4/x4P95P8BP8RD/RT/aT/VQ/1U/30/0MP8PP8rP87NTZfo6f4+f5eX6BX+AX+oV+sV/sl/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/2qf5b/xh/60/4r/zR/33/pj/wR/3J/xJ/6M/5X/yp/0Zf9af8+f9z/6C/8Vf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiUWJz5KLEl8nFiaWJZYnliRWJlYlQgh77Y45A8FQjLcEAqGG0NqKBQKhyLBh6KhWLgpFA83hxLhllAy3BpKhdtC6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dPzbHVd4OXQOXULX0C10Dz1Cz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OisDh8FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQvgwHw1fhUPg6pIVvwuHwbTgSvgtHw/fhWPghHA8nwsnwYzgVfgqnw5lwNpwL58PP4UL4JVyUz6wJIYQQQvyX9PiT/d3+yWMGANRv4+4AcPX23Gm/368BYGOOv457qTwtEwDwVJcOD/5tq1Spa9euvz13qYaowFwASPzDAX6Ll0ELeAJaQ3Mo/k/r66VeOM9/Mn/yVoDMv8tJgcvx5fm//E/mf/Tx4QtLxWez/X/mnwuQWuByTia4HC+DFpdWA82hxH8yf86mf1J/pq/GATT7XU4WuBxfrr8YPAZPQ+u/e6YQQgghhBBCCPFXvVTZdn92/3zp/jyPuZyTES7Hf3Z/LoQQQgghhBBCiCvv2Rc6Pflo69bN28lABjKQwX8MrvRfJiGEEEIIIcS/2+WL/suPZbqSBQkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnQ7770KxMA/K98ndiVXqMQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//+7dzOa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000000000000a300081dbd69d546428b003c1f050000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 47.073456727s ago: executing program 4 (id=400): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000002}, &(0x7f0000001380)={0x0}) listen(r0, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) shutdown(r0, 0x1) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000000200000000000000bbd1d2f2c673ae02072af06fa3756009f4cc327e40ae5deff436b356d5db95ff44eb0025345922fa805f0bd6e0167172324ba4b78b7066c6768811a66f53d634f89d8906bb420a85b452a1f5b2ef38ab87415c1167fe070ed35e06963aa79413495f3e5e51c32606938bf5abfa5c87a085d9bf2eb2bb88a4b557b1b1715d047e12c7a39e5f553bb848049fbe92fdbf281cdd03622afe72570a13e6c9a824f483a5636a5ab8a4f9f6ca0525871fe359ecdece83d1eb1e02cc4abf2e397246"], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) 46.606038276s ago: executing program 4 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c0002"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2']) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r8) 44.540290733s ago: executing program 4 (id=406): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=""/76, &(0x7f0000000300)=""/233, &(0x7f0000000400)=""/122, 0xd000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x33, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[], 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 37.497729652s ago: executing program 4 (id=429): r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.110407208s ago: executing program 4 (id=435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 35.028960194s ago: executing program 4 (id=436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendfile(r6, r5, &(0x7f0000000280)=0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 22.217509235s ago: executing program 2 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300), 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 21.926808332s ago: executing program 3 (id=466): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5e3bc707d4841f58c7d7ccb88ad1d67c9e8afd32e1dc7a33f871e5c54c6e99710e7737eec2ad5d7", 0x55}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3cc83e3ee6731e557e7e62cc58", 0x4b}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000000000000000000007000000866a00000003050c92736e0206e2f2016c3d0102070583775c0009685d81da4073be0506b7431889050fa2a9f7b7ccac5ec0e50b0a9edd40113802fcc0cf678f0d5fd0a8f379f41f02041aca060fa00fa08c2e6a599804ec64bc7f050f0010f70000000000000000000001891fcae0000002000000000a010101ac1414bbffffffff0000000000000000072b177f0000017f00000100000000ac1414aaac1414aa0a010101ac141439ac1e00017f0000016401010183136a7f000001000000000a01010000000000"], 0xd8}}], 0x2, 0x2090) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320", 0x50}, {&(0x7f0000000400)="7f", 0x1}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x37b) 21.554447831s ago: executing program 3 (id=468): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 21.273499731s ago: executing program 3 (id=469): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=""/76, &(0x7f0000000300)=""/233, &(0x7f0000000400)=""/122, 0xd000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x33, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[], 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 20.045758136s ago: executing program 3 (id=470): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 19.085113972s ago: executing program 33 (id=436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendfile(r6, r5, &(0x7f0000000280)=0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 18.856342842s ago: executing program 5 (id=472): sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480), 0x29e15b2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4040050) 16.925105122s ago: executing program 2 (id=474): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 16.712344821s ago: executing program 5 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file *?ivers/hid/hid-core.c line 20', 0x23) 16.683178942s ago: executing program 0 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c0002"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', 0x0, 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2']) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r8) 16.453956107s ago: executing program 2 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='none', 0x4) 14.333746871s ago: executing program 0 (id=478): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xc99a, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x2, 0x80, 0x2, {0x2, @raw_data="eca4d397a6846ac809df9312a39301cda14d1be078eab89d726dfa58803d27c128e1d45efc7ae1f7b2a61dd86de86146700d5c2f71d7a3664f61d391360075df3c7b0d27fadfd06ba0225f22df3ef6056109ea84887d71d15bd41bcdc4f41ca867d0aec52da75d82e43a34cb0dc99af00ac5d3b23112d4b4ab52ea925e20a96498845ba805999cdbbb32169dc9ff285cf34e9d119ba136a8d2b727b38a062ecf3213bd7310c3513ad9ce4dbcee3dc1a4a2d896bc765eba9f02e23f8ed6cf907714227e2df4da2da2"}, 0x3}) 13.231109588s ago: executing program 5 (id=480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='external:t', 0xa) 13.112190671s ago: executing program 2 (id=482): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=""/76, &(0x7f0000000300)=""/233, &(0x7f0000000400)=""/122, 0xd000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x33, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[], 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 10.32707713s ago: executing program 0 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000002240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f0000002500)=ANY=[@ANYBLOB="6db5bf89c94b48f455d60cc233532f7a9754d809c576650c3b349af4bdc2d7f68a9f41d4090ae14021964f1a72cff121084c1789d9b1bce04214c938fc4acf437d177bf67a487dbe41394c7053b55ba2654564d7fb0c6301064d0d9e1a9be3de158b4637182b7264409da55583248dacc94004fe558664964f44ff8ea2df508721201c7de9d7ebf27655010f3aaeb5acee95f20477f86431ce68370b89cffe56dbdbc01a01df7e318276b46b0217631da81977a4", @ANYRES16=r1, @ANYBLOB="000225bd7000fbdbdf251f0000000400cc00"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008004) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) r5 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r7 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000240)=[0x7, 0x4]) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000004e40)={0xfb, 0x6, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) write(r5, &(0x7f00000000c0), 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r8, @ANYBLOB="0700000000000014ffffffffffffffff0800000000000000402d2f5c260d802d000000000000000002000000000000004f010000030000002f3e0d762f6375736500e5ecd80fdd50021b6eb8de7c927a51432aaf3dff0124ee573d3fc3947ef0da6e54b1f129e698838550a78552f3e512546b52e435d1d6892f69281e5d8fc8fdf94cc9f3571e2804166a0d9a7387dbff132259"], 0x198) r9 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x1, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 9.503633127s ago: executing program 2 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300), 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 9.427991818s ago: executing program 3 (id=486): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f217c2", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 9.341794144s ago: executing program 5 (id=487): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffa, 0x10041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1100, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 8.609714959s ago: executing program 6 (id=488): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.550951249s ago: executing program 5 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c0002"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', 0x0, 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2']) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r8) 8.463181594s ago: executing program 2 (id=490): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1ec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1d8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="02c90012000e00050017420a008000008200020a004000fde5e64210233096b1d5a6ad6ce14fb110c765c35840461ca80ba09befb3d5313a915100b6a1c9688ed2e5feb0dd0695306a29661c070f3813ebce7504667b984f0323c04664beb433e594c12fddfa3f433b49d932943060be7c43bffff40009126e9b7c4e30f59c0692d83ddde3c6e0055afebb796ad968b3dd5bd2752d33728a394fb5532255a0fdf85f117264e31524c86bd782a4b2f74ecc676bfcfaec"], 0x17) syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r4, 0xa, 0x11) fcntl$setlease(r4, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r4, 0x8, r7) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r4, 0x400, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) 8.365029454s ago: executing program 6 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file *?ivers/hid/hid-core.c line 2088', 0x25) 8.231377667s ago: executing program 6 (id=492): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000b00), 0x1000400, &(0x7f0000000580)={[{@redirect_dir_on}, {@workdir}], [{@euid_gt={'euid>', r2}}, {@flag='posixacl'}, {@dont_appraise}, {@measure}]}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac643378"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0xf84, 0x10000, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca56, 0x200, 0x1002000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x20, 0x0, 0x358}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x367, 0x800, 0x0, 0x8003e3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0xffffffff, 0x241}}], 0x1, &(0x7f0000000500)={0x2e, 0x55, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecb", @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x40000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.911422193s ago: executing program 5 (id=493): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x101000, 0x0, 0xf83, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 4.625053526s ago: executing program 3 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:t', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1:1', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='active', 0x6) 4.587331893s ago: executing program 0 (id=495): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 4.539516726s ago: executing program 6 (id=496): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=""/76, &(0x7f0000000300)=""/233, &(0x7f0000000400)=""/122, 0xd000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x33, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[], 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 3.715756705s ago: executing program 6 (id=497): ioperm(0x3, 0x4, 0x100000a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40800) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x3, 0xfffffa64) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)) 2.365843541s ago: executing program 0 (id=498): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 1.205659926s ago: executing program 6 (id=499): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/22, 0x16) 0s ago: executing program 0 (id=500): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x48d, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): 5619] team0: Port device team_slave_1 added [ 94.758585][ T5616] hsr_slave_0: entered promiscuous mode [ 94.759501][ T5616] hsr_slave_1: entered promiscuous mode [ 94.760118][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 94.760147][ T5616] Cannot create hsr debugfs directory [ 94.761068][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.761088][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.761128][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.841395][ T5627] hsr_slave_0: entered promiscuous mode [ 94.842298][ T5627] hsr_slave_1: entered promiscuous mode [ 94.842996][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 94.843027][ T5627] Cannot create hsr debugfs directory [ 94.858379][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.858405][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.858449][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.032850][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.043683][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.100486][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.105137][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.128720][ T5619] hsr_slave_0: entered promiscuous mode [ 95.129650][ T5619] hsr_slave_1: entered promiscuous mode [ 95.130310][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 95.130340][ T5619] Cannot create hsr debugfs directory [ 95.174612][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.180968][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.206702][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.213794][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.449050][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.453101][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.454163][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.470040][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.491399][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.495476][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.524669][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.530580][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.662792][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.669621][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.670684][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.678921][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.686647][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.699862][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.700821][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.705975][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.839724][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.850088][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.852680][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.860002][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.873165][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.885407][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.901932][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.909379][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.989156][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.042618][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.048775][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.072403][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.075989][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.088635][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.113959][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.122204][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.138325][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.144223][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.153669][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.161050][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.161272][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.213336][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.213506][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.236720][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.295161][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.307531][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.311333][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.336187][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.343167][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.347904][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.376504][ T5626] Bluetooth: hci0: command tx timeout [ 96.381880][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.387419][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.404438][ T5623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.404473][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.421500][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.421625][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.448250][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.452823][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.456913][ T5626] Bluetooth: hci1: command tx timeout [ 96.456950][ T5626] Bluetooth: hci5: command tx timeout [ 96.456983][ T5626] Bluetooth: hci2: command tx timeout [ 96.457015][ T5626] Bluetooth: hci4: command tx timeout [ 96.465530][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.465653][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.523098][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.523230][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.573615][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.573741][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.617517][ T52] Bluetooth: hci3: command tx timeout [ 96.665580][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.819120][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.864267][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.864368][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.982011][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.982159][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.040968][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.195330][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.285300][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.285428][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.352756][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.352950][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.406667][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.552679][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.577407][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.605740][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.605868][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.663547][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.663673][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.954866][ T5623] veth0_vlan: entered promiscuous mode [ 98.053041][ T5623] veth1_vlan: entered promiscuous mode [ 98.281913][ T5623] veth0_macvtap: entered promiscuous mode [ 98.318955][ T5623] veth1_macvtap: entered promiscuous mode [ 98.431168][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.457744][ T52] Bluetooth: hci0: command tx timeout [ 98.517995][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.547403][ T52] Bluetooth: hci4: command tx timeout [ 98.547446][ T52] Bluetooth: hci2: command tx timeout [ 98.547479][ T52] Bluetooth: hci5: command tx timeout [ 98.547511][ T52] Bluetooth: hci1: command tx timeout [ 98.573234][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.696695][ T5626] Bluetooth: hci3: command tx timeout [ 98.749344][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.787505][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800305][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800683][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.861446][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.219375][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.274149][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.274183][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.490086][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.490117][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.682972][ T5616] veth0_vlan: entered promiscuous mode [ 99.745263][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.775160][ T5623] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.779804][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.784198][ T5616] veth1_vlan: entered promiscuous mode [ 99.785971][ T5630] veth0_vlan: entered promiscuous mode [ 99.839999][ T5630] veth1_vlan: entered promiscuous mode [ 100.007822][ T5616] veth0_macvtap: entered promiscuous mode [ 100.071800][ T5851] loop3: detected capacity change from 0 to 128 [ 100.073552][ T5851] ======================================================= [ 100.073552][ T5851] WARNING: The mand mount option has been deprecated and [ 100.073552][ T5851] and is ignored by this kernel. Remove the mand [ 100.073552][ T5851] option from the mount to silence this warning. [ 100.073552][ T5851] ======================================================= [ 100.096983][ T5616] veth1_macvtap: entered promiscuous mode [ 100.187800][ T5627] veth0_vlan: entered promiscuous mode [ 100.194918][ T5615] veth0_vlan: entered promiscuous mode [ 100.224292][ T5630] veth0_macvtap: entered promiscuous mode [ 100.239028][ T5619] veth0_vlan: entered promiscuous mode [ 100.239879][ T5627] veth1_vlan: entered promiscuous mode [ 100.270678][ T5630] veth1_macvtap: entered promiscuous mode [ 100.275834][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.283931][ T5615] veth1_vlan: entered promiscuous mode [ 100.314139][ T5619] veth1_vlan: entered promiscuous mode [ 100.332500][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.422460][ T5853] zram0: detected capacity change from 0 to 8 [ 100.442432][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.514190][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.536851][ T5627] veth0_macvtap: entered promiscuous mode [ 100.586661][ T5627] veth1_macvtap: entered promiscuous mode [ 100.659110][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659184][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659245][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659310][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659371][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659431][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659490][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.659549][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.789858][ T5615] veth0_macvtap: entered promiscuous mode [ 100.813507][ T5619] veth0_macvtap: entered promiscuous mode [ 102.108234][ T5615] veth1_macvtap: entered promiscuous mode [ 103.120946][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.129699][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.152270][ T5619] veth1_macvtap: entered promiscuous mode [ 103.219502][ T1033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.290633][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.290662][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.336382][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.336458][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.336523][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.341292][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.398051][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.402620][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.402648][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.424669][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.442350][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.486607][ T1025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.486676][ T1025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.486734][ T1025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.486794][ T1025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.519065][ T975] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.523907][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.523937][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.634970][ T3279] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.654871][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.654947][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.654971][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.655403][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.677228][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 103.678993][ T975] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 103.689188][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.689237][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.689291][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.736306][ T975] usb 4-1: config 0 descriptor?? [ 103.852592][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.852655][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.868588][ T3279] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.541695][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.541728][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.715345][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.715377][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.741106][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 104.741262][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.777221][ T975] usb 4-1: USB disconnect, device number 2 [ 105.816318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.925892][ T5872] loop1: detected capacity change from 0 to 256 [ 106.945770][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.945803][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.051207][ T5872] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 107.051881][ T5872] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 107.293238][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.293271][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.412389][ T5878] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1'. [ 107.412414][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 107.426740][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.426768][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.705107][ T5896] loop2: detected capacity change from 0 to 64 [ 111.106376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.020584][ T5909] loop5: detected capacity change from 0 to 256 [ 112.037802][ T5909] vfat: Unknown parameter 'shortname}win95' [ 113.086852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.427293][ T5626] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 114.317339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.646704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.056263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.796887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.206645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.542903][ T5915] syz.3.20 (5915) used greatest stack depth: 20336 bytes left [ 120.227526][ T5922] loop4: detected capacity change from 0 to 512 [ 120.265845][ T5922] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.265881][ T5922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.379621][ T5928] loop5: detected capacity change from 0 to 256 [ 120.391070][ T5922] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.24: corrupted in-inode xattr: invalid ea_ino [ 120.391623][ T5922] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.393420][ T5928] exfat: Deprecated parameter 'utf8' [ 120.415856][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 120.415886][ C0] EXT4-fs (loop4): initial error at time 1789736202: ext4_iget_extra_inode:5209: inode 15 [ 120.415936][ C0] EXT4-fs (loop4): last error at time 1789736202: ext4_iget_extra_inode:5209: inode 15 [ 120.416838][ T5922] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.24: couldn't read orphan inode 15 (err -117) [ 120.417005][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 120.432256][ T5758] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.511240][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.600242][ T5928] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 120.629540][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 120.636440][ T5758] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 120.643835][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.643883][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.643937][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.691924][ T5758] usb 3-1: config 0 descriptor?? [ 121.530495][ T5935] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 121.800366][ T5758] usbhid 3-1:0.0: can't add hid device: -71 [ 121.800499][ T5758] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.853395][ T5758] usb 3-1: USB disconnect, device number 2 [ 122.010421][ T5937] loop0: detected capacity change from 0 to 32768 [ 122.039468][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.399264][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.402086][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.402831][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.428705][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.436255][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.741855][ T5951] loop5: detected capacity change from 0 to 64 [ 123.447694][ T5953] netlink: 328 bytes leftover after parsing attributes in process `syz.4.33'. [ 123.447721][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 124.146291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.630933][ T5626] Bluetooth: hci6: command tx timeout [ 124.879084][ T5953] 9pnet_fd: p9_fd_create_tcp (5953): problem connecting socket to 127.0.0.1 [ 126.591568][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.696617][ T52] Bluetooth: hci6: command tx timeout [ 126.850029][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.001344][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.006224][ T5758] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.158304][ T5758] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 127.163325][ T5758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.163366][ T5758] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.163423][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.165355][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.270546][ T5758] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 127.978981][ T5758] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 128.219796][ T975] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 128.367719][ T975] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 128.374199][ T975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.374248][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.374296][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 128.439505][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.439550][ T975] usb 1-1: Product: syz [ 128.439576][ T975] usb 1-1: Manufacturer: syz [ 128.439603][ T975] usb 1-1: SerialNumber: syz [ 128.498037][ T975] usb 1-1: config 0 descriptor?? [ 128.499602][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.697858][ T5626] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 128.776258][ T5626] Bluetooth: hci6: command tx timeout [ 129.249732][ T5984] Zero length message leads to an empty skb [ 130.856283][ T5626] Bluetooth: hci6: command tx timeout [ 130.877625][ T975] rc_core: IR keymap rc-streamzap not found [ 130.877649][ T975] Registered IR keymap rc-empty [ 130.952788][ T975] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 130.955363][ T975] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 131.034961][ T38] bridge_slave_1: left allmulticast mode [ 131.035017][ T38] bridge_slave_1: left promiscuous mode [ 131.035468][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.062727][ T975] usb 1-1: USB disconnect, device number 2 [ 131.158036][ T10] usb 3-1: USB disconnect, device number 3 [ 131.232820][ T6001] loop5: detected capacity change from 0 to 256 [ 131.234067][ T6001] exfat: Deprecated parameter 'utf8' [ 131.247359][ T38] bridge_slave_0: left allmulticast mode [ 131.247391][ T38] bridge_slave_0: left promiscuous mode [ 131.248042][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.285461][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 131.320167][ T6001] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 131.327807][ T10] spcp8x5 3-1:1.0: device disconnected [ 131.687583][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.646366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.688226][ T6014] 9pnet_virtio: no channels available for device 127.0.0.1 [ 133.833432][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.833536][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.106935][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 134.111868][ T975] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 134.163616][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.163672][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.163729][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.210229][ T975] usb 1-1: config 0 descriptor?? [ 134.478451][ T975] usbhid 1-1:0.0: can't add hid device: -71 [ 134.478587][ T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.519862][ T975] usb 1-1: USB disconnect, device number 3 [ 135.393639][ T6028] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 135.406795][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.421752][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.440638][ T38] bond0 (unregistering): Released all slaves [ 135.452593][ T6029] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 135.698659][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.735879][ T6028] team0: Port device netdevsim1 added [ 135.783307][ T6029] team0: Port device netdevsim1 removed [ 135.815826][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.856426][ T6029] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 136.979363][ T6043] loop2: detected capacity change from 0 to 256 [ 136.980761][ T6043] exfat: Deprecated parameter 'namecase' [ 137.011782][ T6043] exfat: Deprecated parameter 'namecase' [ 137.073685][ T6043] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 138.903192][ T6055] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 138.903229][ T6055] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 139.034976][ T38] hsr_slave_0: left promiscuous mode [ 139.048519][ T38] hsr_slave_1: left promiscuous mode [ 139.049695][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.049736][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.075624][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.075654][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.253104][ T6034] syz.4.46 (6034): drop_caches: 2 [ 139.271886][ T38] veth1_macvtap: left promiscuous mode [ 139.271961][ T38] veth0_macvtap: left promiscuous mode [ 139.272096][ T38] veth1_vlan: left promiscuous mode [ 139.272216][ T38] veth0_vlan: left promiscuous mode [ 140.039415][ T6062] 9pnet_virtio: no channels available for device 127.0.0.1 [ 141.372678][ T5619] exFAT-fs (loop2): start_clu is invalid cluster(0xff000008) [ 141.732437][ T6071] netlink: 'syz.0.56': attribute type 11 has an invalid length. [ 141.732506][ T6071] netlink: 220 bytes leftover after parsing attributes in process `syz.0.56'. [ 144.616229][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.767264][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 144.769361][ T25] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 144.773430][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.773479][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.773534][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.801586][ T25] usb 1-1: config 0 descriptor?? [ 144.847903][ T38] team0 (unregistering): Port device team_slave_1 removed [ 144.960740][ T38] team0 (unregistering): Port device team_slave_0 removed [ 145.262168][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 145.262640][ T25] usbhid 1-1:0.0: can't add hid device: -32 [ 145.262765][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 145.295069][ T25] usb 1-1: USB disconnect, device number 4 [ 145.398070][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.474490][ T6090] loop3: detected capacity change from 0 to 256 [ 146.494499][ T6090] exfat: Deprecated parameter 'utf8' [ 146.502951][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.513469][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.526564][ T5939] bridge_slave_0: entered allmulticast mode [ 146.551343][ T5939] bridge_slave_0: entered promiscuous mode [ 146.585731][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.588230][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.594343][ T5939] bridge_slave_1: entered allmulticast mode [ 146.630472][ T6090] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 146.655836][ T5939] bridge_slave_1: entered promiscuous mode [ 148.676909][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.002886][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.315653][ T6112] loop5: detected capacity change from 0 to 512 [ 149.451713][ T5939] team0: Port device team_slave_0 added [ 149.462001][ T6112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 149.462608][ T6112] System zones: 1-12 [ 149.483414][ T6112] EXT4-fs error (device loop5): ext4_xattr_inode_iget:470: comm syz.5.66: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 149.483467][ T6112] loop5: lost filesystem error report for type 5 error -117 [ 149.489560][ T5939] team0: Port device team_slave_1 added [ 149.499591][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 149.499622][ C1] EXT4-fs (loop5): initial error at time 1789736231: ext4_xattr_inode_iget:470 [ 149.499661][ C1] EXT4-fs (loop5): last error at time 1789736231: ext4_xattr_inode_iget:470 [ 149.502742][ T6112] EXT4-fs (loop5): 1 orphan inode deleted [ 149.797900][ T6112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.879856][ T6120] loop4: detected capacity change from 0 to 256 [ 149.881373][ T6120] exfat: Deprecated parameter 'namecase' [ 149.881425][ T6120] exfat: Deprecated parameter 'namecase' [ 150.002348][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.109744][ T6120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 150.680479][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.680506][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.680550][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.707049][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.707069][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.707112][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.836758][ T6126] loop7: detected capacity change from 0 to 16384 [ 150.940481][ T6127] netlink: 'syz.4.71': attribute type 11 has an invalid length. [ 150.940589][ T6127] netlink: 220 bytes leftover after parsing attributes in process `syz.4.71'. [ 152.334610][ T6128] loop7: detected capacity change from 16384 to 0 [ 152.343850][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 154.242021][ T5939] hsr_slave_0: entered promiscuous mode [ 154.261918][ T5939] hsr_slave_1: entered promiscuous mode [ 154.282743][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 154.282777][ T5939] Cannot create hsr debugfs directory [ 154.349742][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 157.123329][ T6157] loop5: detected capacity change from 0 to 256 [ 157.136893][ T6157] exfat: Deprecated parameter 'namecase' [ 157.136946][ T6157] exfat: Deprecated parameter 'namecase' [ 157.172967][ T6157] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 157.225836][ T6161] tmpfs: Group quota inode hardlimit too large. [ 157.989088][ T6166] 9pnet_virtio: no channels available for device 127.0.0.1 [ 159.358089][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.363651][ T6172] loop3: detected capacity change from 0 to 256 [ 159.373677][ T6170] netlink: 284 bytes leftover after parsing attributes in process `syz.0.80'. [ 159.399920][ T6172] exfat: Deprecated parameter 'namecase' [ 159.399975][ T6172] exfat: Deprecated parameter 'namecase' [ 159.435080][ T6172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 159.450686][ T5615] exFAT-fs (loop5): start_clu is invalid cluster(0xff000008) [ 159.541128][ T6162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.811444][ T6180] loop5: detected capacity change from 0 to 256 [ 160.832162][ T6180] exfat: Deprecated parameter 'utf8' [ 160.893469][ T6180] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 161.394880][ T5939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.396419][ T6184] tmpfs: Using encoding : utf8-12.1.0 [ 161.891912][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.895436][ T5939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.532718][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.627724][ T5939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.700622][ T6194] netlink: 'syz.4.86': attribute type 11 has an invalid length. [ 163.700688][ T6194] netlink: 220 bytes leftover after parsing attributes in process `syz.4.86'. [ 164.315188][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.334252][ T5939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.390048][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.350254][ T6212] FAULT_INJECTION: forcing a failure. [ 165.350254][ T6212] name failslab, interval 1, probability 0, space 0, times 1 [ 165.350305][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT(full) [ 165.350356][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 165.350379][ T6212] Call Trace: [ 165.350391][ T6212] [ 165.350405][ T6212] dump_stack_lvl+0x100/0x190 [ 165.350466][ T6212] should_fail_ex.cold+0x5/0xa [ 165.350510][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.350569][ T6212] should_failslab+0xc2/0x120 [ 165.350609][ T6212] __kmalloc_noprof+0xfc/0x840 [ 165.350665][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.350712][ T6212] ? lsm_blob_alloc+0x68/0x90 [ 165.350764][ T6212] lsm_blob_alloc+0x68/0x90 [ 165.350808][ T6212] security_sk_alloc+0x2d/0x290 [ 165.350864][ T6212] sk_prot_alloc+0x1d1/0x2a0 [ 165.350908][ T6212] sk_alloc+0x36/0xe80 [ 165.350963][ T6212] inet_create+0x3a0/0x1060 [ 165.351007][ T6212] ? inet_create+0x94/0x1060 [ 165.351055][ T6212] __sock_create+0x339/0x860 [ 165.351106][ T6212] udp_sock_create4+0xa6/0x450 [ 165.351165][ T6212] ? __pfx_udp_sock_create4+0x10/0x10 [ 165.351228][ T6212] ? lockdep_hardirqs_on+0x7d/0x110 [ 165.351293][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.351347][ T6212] ? crng_make_state+0x2b0/0x6c0 [ 165.351394][ T6212] rxrpc_open_socket+0x512/0x6e0 [ 165.351451][ T6212] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 165.351515][ T6212] ? net_generic+0x25/0x2a0 [ 165.351571][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.351618][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.351664][ T6212] ? rcu_is_watching+0x13/0xc0 [ 165.351714][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.351767][ T6212] rxrpc_lookup_local+0xac7/0x1220 [ 165.351831][ T6212] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 165.351887][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.351937][ T6212] ? __local_bh_enable_ip+0xa5/0x120 [ 165.351982][ T6212] rxrpc_sendmsg+0x34a/0x680 [ 165.352049][ T6212] ____sys_sendmsg+0xa4d/0xbe0 [ 165.352086][ T6212] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 165.352148][ T6212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.352211][ T6212] ___sys_sendmsg+0x190/0x1e0 [ 165.352256][ T6212] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.352300][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.352353][ T6212] ? futex_wait+0x11e/0x370 [ 165.352429][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.352475][ T6212] ? find_held_lock+0x2b/0x80 [ 165.352560][ T6212] __sys_sendmsg+0x160/0x210 [ 165.352617][ T6212] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.352690][ T6212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.352745][ T6212] do_syscall_64+0x123/0x790 [ 165.352787][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.352827][ T6212] RIP: 0033:0x7f9152d9e159 [ 165.352857][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.352893][ T6212] RSP: 002b:00007f9153c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.352929][ T6212] RAX: ffffffffffffffda RBX: 00007f9153025fa0 RCX: 00007f9152d9e159 [ 165.352954][ T6212] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 165.352978][ T6212] RBP: 00007f9152e3506b R08: 0000000000000000 R09: 0000000000000000 [ 165.353001][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.353024][ T6212] R13: 00007f9153026038 R14: 00007f9153025fa0 R15: 00007fff3d75a968 [ 165.353075][ T6212] [ 165.465577][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.285369][ T6218] 9pnet_fd: p9_fd_create_tcp (6218): problem connecting socket to 127.0.0.1 [ 167.511125][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.613191][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.613326][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.727734][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.727870][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.113865][ T6226] loop4: detected capacity change from 0 to 256 [ 168.142346][ T6226] exfat: Deprecated parameter 'namecase' [ 168.142401][ T6226] exfat: Deprecated parameter 'namecase' [ 168.167453][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.292389][ T6226] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 168.365108][ T6230] netlink: 284 bytes leftover after parsing attributes in process `syz.3.96'. [ 169.466309][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.347848][ T10] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 170.350574][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.954119][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.097886][ T6268] loop4: detected capacity change from 0 to 256 [ 172.134625][ T6268] exfat: Deprecated parameter 'utf8' [ 172.280064][ T6268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 172.390613][ T10] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 172.390782][ T10] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -71 [ 172.403934][ T10] usb 4-1: USB disconnect, device number 3 [ 175.308742][ T6284] .: renamed from bond0 (while UP) [ 175.357101][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.732995][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.762587][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 175.793520][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 175.799298][ T5903] usb 4-1: can't read configurations, error -71 [ 176.243017][ T5939] veth0_vlan: entered promiscuous mode [ 176.348001][ T5939] veth1_vlan: entered promiscuous mode [ 176.399324][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.581815][ T5939] veth0_macvtap: entered promiscuous mode [ 176.620667][ T5939] veth1_macvtap: entered promiscuous mode [ 176.725410][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.504745][ T6312] 9pnet_fd: p9_fd_create_tcp (6312): problem connecting socket to 127.0.0.1 [ 178.485555][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.676543][ T3288] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.696229][ T3288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.696299][ T3288] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.696356][ T3288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.948979][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.954958][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.973387][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.986520][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.989304][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.920233][ T6343] loop5: detected capacity change from 0 to 256 [ 183.923254][ T6343] exfat: Deprecated parameter 'utf8' [ 183.992661][ T6343] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 184.056320][ T5626] Bluetooth: hci1: command tx timeout [ 185.143074][ T6350] netlink: 'syz.2.103': attribute type 11 has an invalid length. [ 185.143157][ T6350] netlink: 220 bytes leftover after parsing attributes in process `syz.2.103'. [ 186.136188][ T5626] Bluetooth: hci1: command tx timeout [ 186.703292][ T3288] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.121166][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 188.216612][ T5626] Bluetooth: hci1: command tx timeout [ 188.296232][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 188.296979][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.298337][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.298404][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.301778][ T25] usb 6-1: config 0 descriptor?? [ 188.601765][ T3288] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.681130][ T25] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 188.730545][ T25] usb 6-1: USB disconnect, device number 2 [ 188.882488][ T3288] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.935874][ T6373] netlink: 'syz.3.121': attribute type 4 has an invalid length. [ 189.212052][ T3288] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.968738][ T3288] bridge_slave_1: left allmulticast mode [ 189.968776][ T3288] bridge_slave_1: left promiscuous mode [ 189.969022][ T3288] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.017715][ T3288] bridge_slave_0: left allmulticast mode [ 190.017752][ T3288] bridge_slave_0: left promiscuous mode [ 190.022983][ T3288] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.297115][ T5626] Bluetooth: hci1: command tx timeout [ 190.882658][ T3288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.929081][ T3288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.947126][ T3288] bond0 (unregistering): Released all slaves [ 191.095768][ T6408] loop5: detected capacity change from 0 to 64 [ 193.658229][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196150][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.862245][ T3288] hsr_slave_0: left promiscuous mode [ 194.895716][ T3288] hsr_slave_1: left promiscuous mode [ 194.896869][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.896897][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.925257][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.925290][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.008831][ T3288] veth1_macvtap: left promiscuous mode [ 195.008885][ T3288] veth0_macvtap: left promiscuous mode [ 195.009009][ T3288] veth1_vlan: left promiscuous mode [ 195.009177][ T3288] veth0_vlan: left promiscuous mode [ 195.688238][ T6440] jffs2: notice: (6440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.636282][ T5751] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.652659][ T3288] team0 (unregistering): Port device team_slave_1 removed [ 198.741464][ T3288] team0 (unregistering): Port device team_slave_0 removed [ 198.806222][ T5751] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 198.807946][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.808008][ T5751] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 198.808048][ T5751] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.816510][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 198.816549][ T5751] usb 5-1: Product: syz [ 198.816575][ T5751] usb 5-1: Manufacturer: syz [ 198.883625][ T6451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.926575][ T5751] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 198.963198][ T5751] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 199.460057][ T10] usb 5-1: USB disconnect, device number 2 [ 199.518409][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 199.523824][ T10] garmin_gps 5-1:1.0: device disconnected [ 199.947523][ T6461] FAULT_INJECTION: forcing a failure. [ 199.947523][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 199.947576][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 199.947624][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 199.947648][ T6461] Call Trace: [ 199.947661][ T6461] [ 199.947676][ T6461] dump_stack_lvl+0x100/0x190 [ 199.947737][ T6461] should_fail_ex.cold+0x5/0xa [ 199.947784][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.947840][ T6461] should_failslab+0xc2/0x120 [ 199.947882][ T6461] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.947938][ T6461] ? open_substream+0xec/0x970 [ 199.947990][ T6461] open_substream+0xec/0x970 [ 199.948038][ T6461] rawmidi_open_priv+0x595/0x6f0 [ 199.948096][ T6461] snd_rawmidi_open+0x4b4/0xb90 [ 199.948150][ T6461] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 199.948197][ T6461] ? lock_acquire+0x1d1/0x380 [ 199.948241][ T6461] ? __pfx_default_wake_function+0x10/0x10 [ 199.948291][ T6461] ? soundcore_open+0x231/0x5a0 [ 199.948366][ T6461] ? soundcore_open+0x231/0x5a0 [ 199.948425][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.948483][ T6461] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 199.948536][ T6461] soundcore_open+0x2e3/0x5a0 [ 199.948601][ T6461] ? __pfx_soundcore_open+0x10/0x10 [ 199.948664][ T6461] chrdev_open+0x234/0x6a0 [ 199.948711][ T6461] ? __pfx_chrdev_open+0x10/0x10 [ 199.948752][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.948802][ T6461] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 199.948923][ T6461] do_dentry_open+0x6ab/0x14d0 [ 199.949023][ T6461] ? __pfx_chrdev_open+0x10/0x10 [ 199.949092][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.949185][ T6461] vfs_open+0x82/0x3f0 [ 199.949250][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.949362][ T6461] path_openat+0x19fa/0x2440 [ 199.949443][ T6461] ? __pfx_path_openat+0x10/0x10 [ 199.949533][ T6461] do_file_open+0x20e/0x430 [ 199.949604][ T6461] ? __pfx_do_file_open+0x10/0x10 [ 199.949728][ T6461] ? _raw_spin_unlock+0x28/0x50 [ 199.949813][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.949886][ T6461] ? alloc_fd+0x471/0x7a0 [ 199.949975][ T6461] do_sys_openat2+0x10f/0x1e0 [ 199.950048][ T6461] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.950114][ T6461] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 199.950240][ T6461] __x64_sys_openat+0x12d/0x210 [ 199.950315][ T6461] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.950398][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.950483][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.950567][ T6461] do_syscall_64+0x123/0x790 [ 199.950615][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.950661][ T6461] RIP: 0033:0x7fe0ae15e98e [ 199.950694][ T6461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.950736][ T6461] RSP: 002b:00007fe0ac3f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.950776][ T6461] RAX: ffffffffffffffda RBX: 00007fe0ac3f66c0 RCX: 00007fe0ae15e98e [ 199.950806][ T6461] RDX: 000000000000003f RSI: 00007fe0ac3f5c00 RDI: ffffffffffffff9c [ 199.950835][ T6461] RBP: 00007fe0ac3f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 199.950863][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 199.950890][ T6461] R13: 00007fe0ae426038 R14: 00007fe0ae425fa0 R15: 00007fff2c3cbcf8 [ 199.950931][ T6461] [ 200.233093][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.668456][ T6481] 9pnet_fd: p9_fd_create_tcp (6481): problem connecting socket to 127.0.0.1 [ 202.937764][ T5626] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 203.194255][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.194382][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.195013][ T6333] bridge_slave_0: entered allmulticast mode [ 203.201410][ T6333] bridge_slave_0: entered promiscuous mode [ 203.218385][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.220187][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.220369][ T6333] bridge_slave_1: entered allmulticast mode [ 203.248152][ T6333] bridge_slave_1: entered promiscuous mode [ 203.499703][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.547762][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.791296][ T6496] netlink: 'syz.4.143': attribute type 11 has an invalid length. [ 203.791393][ T6496] netlink: 220 bytes leftover after parsing attributes in process `syz.4.143'. [ 204.680886][ T6333] team0: Port device team_slave_0 added [ 204.732397][ T6333] team0: Port device team_slave_1 added [ 204.981973][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.982000][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.982045][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.995836][ T6507] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 204.999517][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.999538][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.999581][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.279722][ T6508] loop2: detected capacity change from 0 to 64 [ 205.774382][ T6511] FAULT_INJECTION: forcing a failure. [ 205.774382][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 205.774434][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 205.774478][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 205.774500][ T6511] Call Trace: [ 205.774517][ T6511] [ 205.774531][ T6511] dump_stack_lvl+0x100/0x190 [ 205.774589][ T6511] should_fail_ex.cold+0x5/0xa [ 205.774633][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.774686][ T6511] should_failslab+0xc2/0x120 [ 205.774726][ T6511] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 205.774791][ T6511] ? key_alloc+0xc6d/0x1310 [ 205.774860][ T6511] kmemdup_noprof+0x29/0x60 [ 205.774912][ T6511] key_alloc+0xc6d/0x1310 [ 205.774978][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.775026][ T6511] ? sprintf+0xcc/0x100 [ 205.775089][ T6511] ? __pfx_sprintf+0x10/0x10 [ 205.775153][ T6511] ? __pfx_key_alloc+0x10/0x10 [ 205.775213][ T6511] ? request_key_auth_new+0x172/0xb50 [ 205.775286][ T6511] request_key_auth_new+0x6e0/0xb50 [ 205.775362][ T6511] ? __pfx_request_key_auth_new+0x10/0x10 [ 205.775428][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.775479][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.775533][ T6511] request_key_and_link+0x1089/0x1330 [ 205.775600][ T6511] ? __pfx_request_key_and_link+0x10/0x10 [ 205.775658][ T6511] ? __pfx___might_resched+0x10/0x10 [ 205.775720][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.775766][ T6511] ? find_held_lock+0x2b/0x80 [ 205.775823][ T6511] ? __pfx_key_default_cmp+0x10/0x10 [ 205.775866][ T6511] ? __pfx_keyring_search_iterator+0x10/0x10 [ 205.775912][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.775958][ T6511] ? _copy_from_user+0x59/0xd0 [ 205.776015][ T6511] __do_sys_request_key+0x2a2/0x3c0 [ 205.776064][ T6511] ? __pfx___do_sys_request_key+0x10/0x10 [ 205.776119][ T6511] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.776174][ T6511] do_syscall_64+0x123/0x790 [ 205.776216][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.776256][ T6511] RIP: 0033:0x7f3d8879e159 [ 205.776286][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.776322][ T6511] RSP: 002b:00007f3d8962e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 205.776365][ T6511] RAX: ffffffffffffffda RBX: 00007f3d88a25fa0 RCX: 00007f3d8879e159 [ 205.776391][ T6511] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 205.776416][ T6511] RBP: 00007f3d8883506b R08: 0000000000000000 R09: 0000000000000000 [ 205.776439][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.776462][ T6511] R13: 00007f3d88a26038 R14: 00007f3d88a25fa0 R15: 00007fff2104a348 [ 205.776513][ T6511] [ 205.883341][ T6333] hsr_slave_0: entered promiscuous mode [ 205.894240][ T6333] hsr_slave_1: entered promiscuous mode [ 205.902014][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 205.902042][ T6333] Cannot create hsr debugfs directory [ 206.657853][ T5758] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.807188][ T5758] usb 3-1: Using ep0 maxpacket: 8 [ 206.807934][ T5758] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.809250][ T5758] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.809287][ T5758] usb 3-1: config 0 has no interface number 0 [ 206.809341][ T5758] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.809409][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.869470][ T5758] usb 3-1: config 0 descriptor?? [ 206.888863][ T5758] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 206.984123][ T6532] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.015508][ T6529] FAULT_INJECTION: forcing a failure. [ 207.015508][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 207.015547][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 207.015580][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 207.015598][ T6529] Call Trace: [ 207.015607][ T6529] [ 207.015618][ T6529] dump_stack_lvl+0x100/0x190 [ 207.015664][ T6529] should_fail_ex.cold+0x5/0xa [ 207.015696][ T6529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.015736][ T6529] should_failslab+0xc2/0x120 [ 207.015767][ T6529] __kmalloc_noprof+0xfc/0x840 [ 207.015808][ T6529] ? __might_fault+0xc5/0x140 [ 207.015851][ T6529] ? set_mcast_msfilter+0x3d/0x340 [ 207.015888][ T6529] set_mcast_msfilter+0x3d/0x340 [ 207.015923][ T6529] do_ip_setsockopt+0x1a6e/0x3310 [ 207.015961][ T6529] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 207.015997][ T6529] ? rcu_is_watching+0x13/0xc0 [ 207.016040][ T6529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.016090][ T6529] ? trace_contention_end+0x126/0x160 [ 207.016139][ T6529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.016191][ T6529] ? lock_acquire+0x1d1/0x380 [ 207.016227][ T6529] ip_setsockopt+0x5a/0xf0 [ 207.016263][ T6529] udp_setsockopt+0x64/0xb0 [ 207.016308][ T6529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.016345][ T6529] do_sock_setsockopt+0xf3/0x1d0 [ 207.016397][ T6529] __sys_setsockopt+0x195/0x220 [ 207.016445][ T6529] __x64_sys_setsockopt+0xbd/0x160 [ 207.016485][ T6529] ? do_syscall_64+0xae/0x790 [ 207.016512][ T6529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.016546][ T6529] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.016594][ T6529] do_syscall_64+0x123/0x790 [ 207.016625][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.016655][ T6529] RIP: 0033:0x7f3d8879e159 [ 207.016678][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.016706][ T6529] RSP: 002b:00007f3d8962e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.016734][ T6529] RAX: ffffffffffffffda RBX: 00007f3d88a25fa0 RCX: 00007f3d8879e159 [ 207.016754][ T6529] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 207.016771][ T6529] RBP: 00007f3d8883506b R08: 0000000000000110 R09: 0000000000000000 [ 207.016789][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.016807][ T6529] R13: 00007f3d88a26038 R14: 00007f3d88a25fa0 R15: 00007fff2104a348 [ 207.016852][ T6529] [ 207.306779][ T5758] usb 3-1: USB disconnect, device number 4 [ 209.169915][ T6544] FAULT_INJECTION: forcing a failure. [ 209.169915][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 209.169966][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.4.157 Not tainted syzkaller #0 PREEMPT(full) [ 209.170010][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 209.170033][ T6544] Call Trace: [ 209.170045][ T6544] [ 209.170059][ T6544] dump_stack_lvl+0x100/0x190 [ 209.170120][ T6544] should_fail_ex.cold+0x5/0xa [ 209.170164][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.170219][ T6544] should_failslab+0xc2/0x120 [ 209.170259][ T6544] __kmalloc_cache_noprof+0x91/0x6d0 [ 209.170308][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.170356][ T6544] ? ima_d_path+0xc9/0x260 [ 209.170419][ T6544] ima_d_path+0xc9/0x260 [ 209.170476][ T6544] ? __pfx_ima_d_path+0x10/0x10 [ 209.170539][ T6544] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 209.170585][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.170636][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.170689][ T6544] process_measurement+0x1b25/0x2350 [ 209.170757][ T6544] ? __pfx_process_measurement+0x10/0x10 [ 209.170806][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.170862][ T6544] ? kasan_save_stack+0x30/0x50 [ 209.170922][ T6544] ? __kasan_slab_alloc+0x89/0x90 [ 209.170958][ T6544] ? security_file_alloc+0x34/0x2c0 [ 209.171028][ T6544] ? lock_acquire+0x1d1/0x380 [ 209.171065][ T6544] ? aa_file_perm+0x197/0x14d0 [ 209.171108][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.171154][ T6544] ? find_held_lock+0x2b/0x80 [ 209.171206][ T6544] ? aa_file_perm+0x7e4/0x14d0 [ 209.171250][ T6544] ? aa_file_perm+0x7e4/0x14d0 [ 209.171334][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.171380][ T6544] ? rcu_is_watching+0x13/0xc0 [ 209.171436][ T6544] ima_file_mmap+0x1c4/0x1f0 [ 209.171489][ T6544] ? __pfx_ima_file_mmap+0x10/0x10 [ 209.171554][ T6544] security_mmap_file+0x278/0x9b0 [ 209.171620][ T6544] vm_mmap_pgoff+0xec/0x470 [ 209.171684][ T6544] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 209.171740][ T6544] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 209.171787][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.171843][ T6544] ? hugetlbfs_get_inode+0x3f5/0x700 [ 209.171913][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.171967][ T6544] ksys_mmap_pgoff+0x285/0x610 [ 209.172037][ T6544] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 209.172098][ T6544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.172145][ T6544] ? xfd_validate_state+0x129/0x190 [ 209.172198][ T6544] __x64_sys_mmap+0x125/0x190 [ 209.172250][ T6544] do_syscall_64+0x123/0x790 [ 209.172294][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.172333][ T6544] RIP: 0033:0x7f9152d9e159 [ 209.172363][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.172399][ T6544] RSP: 002b:00007f9153c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 209.172436][ T6544] RAX: ffffffffffffffda RBX: 00007f9153025fa0 RCX: 00007f9152d9e159 [ 209.172462][ T6544] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000 [ 209.172486][ T6544] RBP: 00007f9152e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 209.172511][ T6544] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000000 [ 209.172539][ T6544] R13: 00007f9153026038 R14: 00007f9153025fa0 R15: 00007fff3d75a968 [ 209.172589][ T6544] [ 210.158513][ T6333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.185936][ T6562] netlink: 328 bytes leftover after parsing attributes in process `syz.2.162'. [ 210.185985][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 210.942312][ T6565] 9pnet_fd: p9_fd_create_tcp (6565): problem connecting socket to 127.0.0.1 [ 212.006226][ T5758] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.011444][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.040605][ T6333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.093230][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.114412][ T6333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.158504][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.159564][ T6333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.212590][ T5758] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 212.224633][ T5758] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.224698][ T5758] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 212.224740][ T5758] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 212.224781][ T5758] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.224850][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.233906][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.288850][ T6553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.289033][ T6553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.321779][ T5758] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 212.363906][ T5758] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 212.364017][ T5758] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 212.379898][ T5758] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 212.438470][ T5758] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 212.438574][ T5758] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 212.478706][ T5758] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 212.513481][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.565312][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.590717][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.590845][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.639558][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.639694][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.147259][ T5738] usb 5-1: USB disconnect, device number 3 [ 213.205810][ T5738] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 213.236384][ T5738] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 213.237341][ T5738] keyspan 5-1:1.0: device disconnected [ 216.631742][ T6620] netlink: 'syz.5.158': attribute type 11 has an invalid length. [ 216.631809][ T6620] netlink: 220 bytes leftover after parsing attributes in process `syz.5.158'. [ 217.338695][ T6598] Bluetooth: hci0: command 0x0406 tx timeout [ 217.338781][ T6598] Bluetooth: hci4: command 0x0406 tx timeout [ 217.338823][ T6598] Bluetooth: hci5: command 0x0406 tx timeout [ 217.338873][ T6598] Bluetooth: hci2: command 0x0406 tx timeout [ 217.338921][ T6598] Bluetooth: hci3: command 0x0406 tx timeout [ 217.762246][ T6623] netlink: 328 bytes leftover after parsing attributes in process `syz.0.175'. [ 217.762273][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 218.502756][ T6628] 9pnet_fd: p9_fd_create_tcp (6628): problem connecting socket to 127.0.0.1 [ 219.935271][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.293900][ T6605] kexec: Could not allocate control_code_buffer [ 223.146742][ T5615] svc: failed to register nfsdv3 RPC service (errno 111). [ 223.149295][ T5615] svc: failed to register nfsaclv3 RPC service (errno 111). [ 223.149322][ T5615] failed to unregister tcp with rpcbind [ 223.154063][ T5615] svc: failed to register nfsdv3 RPC service (errno 97). [ 223.154094][ T5615] svc: failed to register nfsaclv3 RPC service (errno 97). [ 223.154117][ T5615] failed to unregister tcp with rpcbind [ 223.255514][ T6333] veth0_vlan: entered promiscuous mode [ 223.315548][ T6333] veth1_vlan: entered promiscuous mode [ 223.525343][ T6333] veth0_macvtap: entered promiscuous mode [ 223.545141][ T6333] veth1_macvtap: entered promiscuous mode [ 223.591023][ T6669] loop5: detected capacity change from 0 to 256 [ 223.603071][ T6669] exfat: Deprecated parameter 'namecase' [ 223.603129][ T6669] exfat: Deprecated parameter 'namecase' [ 223.688489][ T6669] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 223.697311][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.769511][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.827316][ T3301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.827414][ T3301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.847210][ T3339] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.850547][ T1025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.289461][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.289493][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.402063][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.402088][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.468889][ T6679] netlink: 328 bytes leftover after parsing attributes in process `syz.4.188'. [ 224.468916][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 225.215682][ T6683] 9pnet_fd: p9_fd_create_tcp (6683): problem connecting socket to 127.0.0.1 [ 226.836222][ T25] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 227.012051][ T25] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 227.014918][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.014966][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 227.015013][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 227.050762][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.050804][ T25] usb 4-1: Product: syz [ 227.050830][ T25] usb 4-1: Manufacturer: syz [ 227.050855][ T25] usb 4-1: SerialNumber: syz [ 227.097503][ T25] usb 4-1: config 0 descriptor?? [ 227.100593][ T6677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.951070][ T6698] netlink: 284 bytes leftover after parsing attributes in process `syz.5.195'. [ 229.214601][ T6706] netlink: 'syz.6.197': attribute type 11 has an invalid length. [ 229.214663][ T6706] netlink: 220 bytes leftover after parsing attributes in process `syz.6.197'. [ 230.137429][ T25] rc_core: IR keymap rc-streamzap not found [ 230.137456][ T25] Registered IR keymap rc-empty [ 230.138740][ T25] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 230.142324][ T25] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 230.210662][ T25] usb 4-1: USB disconnect, device number 6 [ 230.595965][ T6713] loop6: detected capacity change from 0 to 256 [ 230.607083][ T6713] exfat: Deprecated parameter 'namecase' [ 230.607136][ T6713] exfat: Deprecated parameter 'namecase' [ 230.716791][ T6713] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 230.974423][ T6715] loop2: detected capacity change from 0 to 256 [ 230.984546][ T6715] exfat: Deprecated parameter 'namecase' [ 230.984600][ T6715] exfat: Deprecated parameter 'namecase' [ 231.081950][ T6715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 231.155396][ T6719] netlink: 328 bytes leftover after parsing attributes in process `syz.5.202'. [ 231.155421][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.202'. [ 231.911723][ T6723] 9pnet_fd: p9_fd_create_tcp (6723): problem connecting socket to 127.0.0.1 [ 233.569040][ T5619] exFAT-fs (loop2): start_clu is invalid cluster(0xff000008) [ 234.391658][ T6746] netlink: 284 bytes leftover after parsing attributes in process `syz.2.211'. [ 234.679906][ T6754] loop4: detected capacity change from 0 to 256 [ 234.688436][ T6754] exfat: Deprecated parameter 'namecase' [ 234.688488][ T6754] exfat: Deprecated parameter 'namecase' [ 234.725135][ T6754] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 235.531289][ T6760] 9pnet_fd: p9_fd_create_tcp (6760): problem connecting socket to 127.0.0.1 [ 236.840937][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 237.027876][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 237.029378][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.029424][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.029469][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 237.032161][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.032199][ T10] usb 4-1: Product: syz [ 237.032224][ T10] usb 4-1: Manufacturer: syz [ 237.032250][ T10] usb 4-1: SerialNumber: syz [ 237.043573][ T6766] jffs2: notice: (6766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.083970][ T10] usb 4-1: config 0 descriptor?? [ 237.086266][ T6748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.196974][ T5758] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 237.356703][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 237.358412][ T5758] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 237.360326][ T5758] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 237.380739][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.380781][ T5758] usb 5-1: Product: syz [ 237.380808][ T5758] usb 5-1: Manufacturer: syz [ 237.380834][ T5758] usb 5-1: SerialNumber: syz [ 237.417840][ T5758] usb 5-1: config 0 descriptor?? [ 237.432739][ T5758] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 237.433191][ T5758] dvb-usb: bulk message failed: -22 (2/0) [ 237.440261][ T10] rc_core: IR keymap rc-streamzap not found [ 237.440280][ T10] Registered IR keymap rc-empty [ 237.441604][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 237.477317][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 237.528066][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.530625][ T5758] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 237.530689][ T5758] usb 5-1: media controller created [ 237.612427][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.613730][ T10] usb 4-1: USB disconnect, device number 7 [ 237.724595][ T6763] cxusb: i2c rd: len=119 is too big! [ 237.724595][ T6763] [ 237.761386][ T5758] usb 5-1: selecting invalid altsetting 7 [ 237.761420][ T5758] cxusb: set interface failed [ 237.761440][ T5758] dvb-usb: bulk message failed: -22 (1/0) [ 238.029311][ T5758] DVB: Unable to find symbol lgdt330x_attach() [ 238.029335][ T5758] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 238.143777][ T6783] .: renamed from bond0 (while UP) [ 238.296345][ T5758] rc_core: IR keymap rc-dvico-portable not found [ 238.296455][ T5758] Registered IR keymap rc-empty [ 238.297801][ T5758] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 238.339707][ T5758] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 238.345442][ T5758] dvb-usb: schedule remote query interval to 100 msecs. [ 238.345468][ T5758] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 238.382881][ T5758] usb 5-1: USB disconnect, device number 4 [ 238.493968][ T5758] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 238.673831][ T6793] netlink: 284 bytes leftover after parsing attributes in process `syz.2.227'. [ 238.728377][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 238.886180][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 238.887118][ T25] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 238.888512][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.888562][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.888619][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.984223][ T25] usb 6-1: config 0 descriptor?? [ 240.073915][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 240.074090][ T25] usbhid 6-1:0.0: can't add hid device: -32 [ 240.074214][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 240.733796][ T6803] 9pnet_fd: p9_fd_create_tcp (6803): problem connecting socket to 127.0.0.1 [ 241.903298][ T25] usb 6-1: USB disconnect, device number 3 [ 242.061723][ T6806] loop4: detected capacity change from 0 to 256 [ 242.062967][ T6806] exfat: Deprecated parameter 'namecase' [ 242.063018][ T6806] exfat: Deprecated parameter 'namecase' [ 242.107412][ T6808] jffs2: notice: (6808) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.156131][ T6806] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 242.423716][ T6814] netlink: 328 bytes leftover after parsing attributes in process `syz.0.216'. [ 242.423742][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 243.173119][ T6817] 9pnet_fd: p9_fd_create_tcp (6817): problem connecting socket to 127.0.0.1 [ 244.568499][ T6824] Bluetooth: MGMT ver 1.23 [ 245.161699][ T6834] netlink: 284 bytes leftover after parsing attributes in process `syz.6.242'. [ 245.175297][ T6833] FAULT_INJECTION: forcing a failure. [ 245.175297][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 245.175352][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.4.241 Not tainted syzkaller #0 PREEMPT(full) [ 245.175396][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 245.175418][ T6833] Call Trace: [ 245.175430][ T6833] [ 245.175444][ T6833] dump_stack_lvl+0x100/0x190 [ 245.175503][ T6833] should_fail_ex.cold+0x5/0xa [ 245.175545][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.175598][ T6833] should_failslab+0xc2/0x120 [ 245.175636][ T6833] __kvmalloc_node_noprof+0x113/0x9b0 [ 245.175695][ T6833] ? __pfx___mutex_lock+0x10/0x10 [ 245.175737][ T6833] ? nf_hook_entries_grow+0x255/0x870 [ 245.175795][ T6833] nf_hook_entries_grow+0x255/0x870 [ 245.175846][ T6833] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 245.175904][ T6833] __nf_register_net_hook+0x112/0x780 [ 245.175962][ T6833] nf_register_net_hook+0xdb/0x170 [ 245.176018][ T6833] nf_register_net_hooks+0x5d/0xd0 [ 245.176076][ T6833] ip_vs_register_hooks+0xe3/0x150 [ 245.176135][ T6833] ip_vs_add_service+0x515/0x2240 [ 245.176176][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176229][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176275][ T6833] ? __ip_vs_service_find+0x4d0/0x9c0 [ 245.176359][ T6833] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 245.176400][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176447][ T6833] do_ip_vs_set_ctl+0xb86/0xc90 [ 245.176497][ T6833] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 245.176539][ T6833] ? rcu_is_watching+0x13/0xc0 [ 245.176587][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176643][ T6833] ? find_held_lock+0x2b/0x80 [ 245.176689][ T6833] ? nf_sockopt_find.isra.0+0x222/0x290 [ 245.176746][ T6833] ? nf_sockopt_find.isra.0+0x222/0x290 [ 245.176802][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176853][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.176913][ T6833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.176980][ T6833] ? nf_setsockopt+0x8d/0xf0 [ 245.177036][ T6833] nf_setsockopt+0x8d/0xf0 [ 245.177099][ T6833] ip_setsockopt+0xcb/0xf0 [ 245.177147][ T6833] udp_setsockopt+0x64/0xb0 [ 245.177208][ T6833] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 245.177253][ T6833] do_sock_setsockopt+0xf3/0x1d0 [ 245.177323][ T6833] __sys_setsockopt+0x195/0x220 [ 245.177392][ T6833] __x64_sys_setsockopt+0xbd/0x160 [ 245.177445][ T6833] ? do_syscall_64+0xae/0x790 [ 245.177481][ T6833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.177526][ T6833] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.177589][ T6833] do_syscall_64+0x123/0x790 [ 245.177630][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.177669][ T6833] RIP: 0033:0x7f9152d9e159 [ 245.177700][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.177733][ T6833] RSP: 002b:00007f9153c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 245.177766][ T6833] RAX: ffffffffffffffda RBX: 00007f9153025fa0 RCX: 00007f9152d9e159 [ 245.177793][ T6833] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 245.177816][ T6833] RBP: 00007f9152e3506b R08: 000000000000002c R09: 0000000000000000 [ 245.177840][ T6833] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 245.177864][ T6833] R13: 00007f9153026038 R14: 00007f9153025fa0 R15: 00007fff3d75a968 [ 245.177914][ T6833] [ 245.807958][ T56] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 245.911307][ T6842] netlink: 'syz.3.243': attribute type 11 has an invalid length. [ 245.911380][ T6842] netlink: 220 bytes leftover after parsing attributes in process `syz.3.243'. [ 245.992303][ T56] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 246.076745][ T56] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.076885][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 246.076978][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 246.262905][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.263006][ T56] usb 6-1: Product: syz [ 246.263072][ T56] usb 6-1: Manufacturer: syz [ 246.263117][ T56] usb 6-1: SerialNumber: syz [ 246.920707][ T56] usb 6-1: config 0 descriptor?? [ 247.013863][ T6830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.126113][ T56] rc_core: IR keymap rc-streamzap not found [ 247.126138][ T56] Registered IR keymap rc-empty [ 247.149993][ T56] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 247.170261][ T56] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 247.372691][ T6830] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 247.372722][ T6830] CUSE: DEVNAME unspecified [ 247.415226][ T6848] jffs2: notice: (6848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.474679][ T5758] usb 6-1: USB disconnect, device number 4 [ 247.896779][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.958772][ T6860] netlink: 328 bytes leftover after parsing attributes in process `syz.6.250'. [ 247.958797][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.250'. [ 248.703708][ T6863] 9pnet_fd: p9_fd_create_tcp (6863): problem connecting socket to 127.0.0.1 [ 249.892559][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 249.909674][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 249.917789][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.917837][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.917892][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.936593][ T10] usb 4-1: config 0 descriptor?? [ 250.634774][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 250.634903][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.695200][ T6873] loop2: detected capacity change from 0 to 512 [ 250.716177][ T6873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 250.716330][ T6873] System zones: 1-12 [ 250.719928][ T10] usb 4-1: USB disconnect, device number 8 [ 250.720129][ T6873] EXT4-fs error (device loop2): ext4_xattr_inode_iget:470: comm syz.2.256: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 250.720179][ T6873] loop2: lost filesystem error report for type 5 error -117 [ 250.723072][ T6873] EXT4-fs (loop2): 1 orphan inode deleted [ 250.738299][ T6873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.921827][ T6879] netlink: 5 bytes leftover after parsing attributes in process `syz.5.257'. [ 250.924269][ T6879] 0ªî{X¹¦: renamed from eql (while UP) [ 250.997600][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.063792][ T6879] 0ªî{X¹¦: entered allmulticast mode [ 251.064221][ T6879] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 251.599422][ T6887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.829464][ T6896] jffs2: notice: (6896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.103383][ T6904] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 252.567972][ T6914] loop3: detected capacity change from 0 to 256 [ 252.576505][ T6914] exfat: Deprecated parameter 'namecase' [ 252.576558][ T6914] exfat: Deprecated parameter 'namecase' [ 252.623942][ T6914] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 252.769485][ T6920] loop2: detected capacity change from 0 to 256 [ 252.770670][ T6920] vfat: Unknown parameter 'shortname}win95' [ 252.799741][ T6916] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 252.799778][ T6916] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 253.218121][ T6929] loop4: detected capacity change from 0 to 512 [ 253.263426][ T6929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 253.263577][ T6929] System zones: 1-12 [ 253.264448][ T6929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:470: comm syz.4.271: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 253.264497][ T6929] loop4: lost filesystem error report for type 5 error -117 [ 253.265069][ T6929] EXT4-fs (loop4): 1 orphan inode deleted [ 253.268714][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.565025][ T6936] loop5: detected capacity change from 0 to 256 [ 253.582358][ T6936] exfat: Deprecated parameter 'namecase' [ 253.582414][ T6936] exfat: Deprecated parameter 'namecase' [ 253.633342][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.641747][ T6936] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 253.795355][ T6944] mac80211_hwsim hwsim12 ..ãc¤±: renamed from wlan1 (while UP) [ 254.077812][ T5615] exFAT-fs (loop5): start_clu is invalid cluster(0xff000008) [ 254.281545][ T6953] jffs2: notice: (6953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.880533][ T6972] loop2: detected capacity change from 0 to 256 [ 254.894745][ T6972] vfat: Unknown parameter 'shortname}win95' [ 255.099743][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.099820][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.132412][ T6974] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 255.132450][ T6974] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 255.285625][ T6976] loop6: detected capacity change from 0 to 256 [ 255.294625][ T6976] exfat: Deprecated parameter 'namecase' [ 255.294689][ T6976] exfat: Deprecated parameter 'namecase' [ 255.398204][ T6976] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 256.949633][ T6999] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 256.967343][ T7000] jffs2: notice: (7000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.387793][ T7007] tipc: Started in network mode [ 257.387840][ T7007] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 257.389638][ T7007] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 257.480428][ T7007] tipc: Enabled bearer , priority 10 [ 257.644847][ T7015] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 257.695105][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.705798][ T7015] team0: Port device netdevsim1 added [ 257.800926][ T7015] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 257.881482][ T7015] team0: Port device netdevsim1 removed [ 258.024619][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.057398][ T7015] .: (slave netdevsim1): Enslaving as an active interface with an up link [ 258.281176][ T7022] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 258.284714][ T7022] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 258.318457][ T7023] netlink: 284 bytes leftover after parsing attributes in process `syz.0.302'. [ 258.388139][ T5758] tipc: Node number set to 1 [ 258.443945][ T7027] loop4: detected capacity change from 0 to 256 [ 258.474119][ T7027] exfat: Deprecated parameter 'namecase' [ 258.474175][ T7027] exfat: Deprecated parameter 'namecase' [ 258.604151][ T7027] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 259.677808][ T7039] loop5: detected capacity change from 0 to 512 [ 260.558686][ T7047] loop5: detected capacity change from 0 to 256 [ 260.564381][ T7047] exfat: Deprecated parameter 'namecase' [ 260.564443][ T7047] exfat: Deprecated parameter 'namecase' [ 260.590300][ T5626] Bluetooth: hci1: link tx timeout [ 260.590387][ T5626] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.694539][ T7047] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 260.831232][ T7051] capability: warning: `syz.0.313' uses 32-bit capabilities (legacy support in use) [ 261.404040][ T5615] exFAT-fs (loop5): start_clu is invalid cluster(0xff000008) [ 262.482569][ T7071] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 262.482607][ T7071] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 262.609200][ T7026] syz.6.304 (7026): drop_caches: 2 [ 262.626158][ T4932] Bluetooth: hci1: command 0x0406 tx timeout [ 262.694296][ T7075] syzkaller1: entered promiscuous mode [ 262.694330][ T7075] syzkaller1: entered allmulticast mode [ 263.044153][ T7067] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 263.296623][ T7081] loop6: detected capacity change from 0 to 256 [ 263.317953][ T7081] exfat: Deprecated parameter 'namecase' [ 263.318005][ T7081] exfat: Deprecated parameter 'namecase' [ 263.404708][ T7081] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 264.699797][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 264.758032][ T56] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 264.856311][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 264.857105][ T10] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 264.859142][ T10] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 264.863408][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.863443][ T10] usb 7-1: Product: syz [ 264.863467][ T10] usb 7-1: Manufacturer: syz [ 264.863493][ T10] usb 7-1: SerialNumber: syz [ 264.917138][ T10] usb 7-1: config 0 descriptor?? [ 264.939547][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 264.939602][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 264.977452][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.978510][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 264.978572][ T10] usb 7-1: media controller created [ 264.987062][ T7103] loop3: detected capacity change from 0 to 64 [ 265.043781][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.146261][ T10] usb 7-1: selecting invalid altsetting 7 [ 265.146292][ T10] cxusb: set interface failed [ 265.146308][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 265.151608][ T56] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 265.217310][ T7088] cxusb: i2c rd: len=119 is too big! [ 265.217310][ T7088] [ 265.402862][ T7095] ceph: No mds server is up or the cluster is laggy [ 265.527446][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 265.527469][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 265.830199][ T7119] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 265.886109][ T10] rc_core: IR keymap rc-dvico-portable not found [ 265.886134][ T10] Registered IR keymap rc-empty [ 265.889237][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 265.898780][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input10 [ 265.951987][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 265.952016][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 265.974442][ T10] usb 7-1: USB disconnect, device number 2 [ 266.135504][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 267.956502][ T7149] FAULT_INJECTION: forcing a failure. [ 267.956502][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 267.956557][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.3.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.956611][ T7149] Tainted: [L]=SOFTLOCKUP [ 267.956625][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 267.956647][ T7149] Call Trace: [ 267.956659][ T7149] [ 267.956674][ T7149] dump_stack_lvl+0x100/0x190 [ 267.956733][ T7149] should_fail_ex.cold+0x5/0xa [ 267.956777][ T7149] ? rcu_is_watching+0x13/0xc0 [ 267.956832][ T7149] should_failslab+0xc2/0x120 [ 267.956877][ T7149] __kmalloc_noprof+0xfc/0x840 [ 267.956933][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.956981][ T7149] ? vmci_handle_arr_create+0x6c/0x150 [ 267.957036][ T7149] vmci_handle_arr_create+0x6c/0x150 [ 267.957082][ T7149] vmci_ctx_create+0x2b6/0x730 [ 267.957148][ T7149] vmci_host_unlocked_ioctl+0x2d7/0x2070 [ 267.957204][ T7149] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 267.957255][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.957302][ T7149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.957346][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.957392][ T7149] ? do_vfs_ioctl+0x226/0x13e0 [ 267.957449][ T7149] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.957514][ T7149] ? __fget_files+0x34/0x3d0 [ 267.957551][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.957598][ T7149] ? find_held_lock+0x2b/0x80 [ 267.957649][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.957696][ T7149] ? hook_file_ioctl_common+0x140/0x440 [ 267.957770][ T7149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.957817][ T7149] ? __fget_files+0x21f/0x3d0 [ 267.957869][ T7149] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 267.957922][ T7149] __x64_sys_ioctl+0x18e/0x210 [ 267.957981][ T7149] do_syscall_64+0x123/0x790 [ 267.958025][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.958065][ T7149] RIP: 0033:0x7f4e11d9e159 [ 267.958095][ T7149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.958130][ T7149] RSP: 002b:00007f4e12d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.958168][ T7149] RAX: ffffffffffffffda RBX: 00007f4e12025fa0 RCX: 00007f4e11d9e159 [ 267.958195][ T7149] RDX: 0000200000000140 RSI: 00000000000007a0 RDI: 0000000000000004 [ 267.958219][ T7149] RBP: 00007f4e11e3506b R08: 0000000000000000 R09: 0000000000000000 [ 267.958243][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.958267][ T7149] R13: 00007f4e12026038 R14: 00007f4e12025fa0 R15: 00007fffbd5b42e8 [ 267.958318][ T7149] [ 268.133949][ T7152] process 'syz.4.345' launched './file1' with NULL argv: empty string added [ 268.256187][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 268.406963][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 268.408469][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.408533][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 268.408579][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 268.408641][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.950008][ T10] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 268.950076][ T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 268.950098][ T10] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 269.027101][ T10] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 269.078641][ T7167] FAULT_INJECTION: forcing a failure. [ 269.078641][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 269.078696][ T7167] CPU: 1 UID: 0 PID: 7167 Comm: syz.3.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.078751][ T7167] Tainted: [L]=SOFTLOCKUP [ 269.078765][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 269.078788][ T7167] Call Trace: [ 269.078800][ T7167] [ 269.078815][ T7167] dump_stack_lvl+0x100/0x190 [ 269.078884][ T7167] should_fail_ex.cold+0x5/0xa [ 269.078929][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.078984][ T7167] should_failslab+0xc2/0x120 [ 269.079025][ T7167] __kmalloc_cache_noprof+0x91/0x6d0 [ 269.079075][ T7167] ? nf_register_net_hooks+0xb1/0xd0 [ 269.079130][ T7167] ? ip_vs_add_service+0x565/0x2240 [ 269.079185][ T7167] ip_vs_add_service+0x565/0x2240 [ 269.079233][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079288][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079336][ T7167] ? __ip_vs_service_find+0x4d0/0x9c0 [ 269.079417][ T7167] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 269.079460][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079507][ T7167] do_ip_vs_set_ctl+0xb86/0xc90 [ 269.079560][ T7167] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 269.079603][ T7167] ? rcu_is_watching+0x13/0xc0 [ 269.079654][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079713][ T7167] ? find_held_lock+0x2b/0x80 [ 269.079766][ T7167] ? nf_sockopt_find.isra.0+0x222/0x290 [ 269.079827][ T7167] ? nf_sockopt_find.isra.0+0x222/0x290 [ 269.079894][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.079947][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080008][ T7167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.080077][ T7167] ? nf_setsockopt+0x8d/0xf0 [ 269.080134][ T7167] nf_setsockopt+0x8d/0xf0 [ 269.080199][ T7167] ip_setsockopt+0xcb/0xf0 [ 269.080248][ T7167] udp_setsockopt+0x64/0xb0 [ 269.080311][ T7167] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 269.080357][ T7167] do_sock_setsockopt+0xf3/0x1d0 [ 269.080428][ T7167] __sys_setsockopt+0x195/0x220 [ 269.080493][ T7167] __x64_sys_setsockopt+0xbd/0x160 [ 269.080548][ T7167] ? do_syscall_64+0xae/0x790 [ 269.080585][ T7167] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.080632][ T7167] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.080698][ T7167] do_syscall_64+0x123/0x790 [ 269.080741][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.080781][ T7167] RIP: 0033:0x7f4e11d9e159 [ 269.080812][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.080849][ T7167] RSP: 002b:00007f4e12d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.080894][ T7167] RAX: ffffffffffffffda RBX: 00007f4e12025fa0 RCX: 00007f4e11d9e159 [ 269.080920][ T7167] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 269.080944][ T7167] RBP: 00007f4e11e3506b R08: 000000000000002c R09: 0000000000000000 [ 269.080969][ T7167] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 269.080993][ T7167] R13: 00007f4e12026038 R14: 00007f4e12025fa0 R15: 00007fffbd5b42e8 [ 269.081045][ T7167] [ 269.288186][ T10] usb 1-1: USB disconnect, device number 5 [ 269.706527][ T5738] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.856877][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 269.858894][ T5738] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 269.864007][ T5738] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 269.988978][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.989026][ T5738] usb 6-1: Product: syz [ 269.989053][ T5738] usb 6-1: Manufacturer: syz [ 269.989079][ T5738] usb 6-1: SerialNumber: syz [ 269.995595][ T5738] usb 6-1: config 0 descriptor?? [ 270.056752][ T5738] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 270.056811][ T5738] dvb-usb: bulk message failed: -22 (2/0) [ 270.095776][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.108712][ T5738] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 270.108776][ T5738] usb 6-1: media controller created [ 270.203276][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.164812][ T7193] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 272.164858][ T7193] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 272.250255][ T5738] usb 6-1: selecting invalid altsetting 7 [ 272.250285][ T5738] cxusb: set interface failed [ 272.250302][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 272.475974][ T7200] loop3: detected capacity change from 0 to 256 [ 272.505487][ T7200] exfat: Deprecated parameter 'namecase' [ 272.509705][ T7200] exfat: Deprecated parameter 'namecase' [ 272.600619][ T7200] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 272.901476][ T50] IPVS: starting estimator thread 0... [ 273.026291][ T7205] IPVS: using max 23 ests per chain, 55200 per kthread [ 273.112012][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 273.161297][ T5738] DVB: Unable to find symbol lgdt330x_attach() [ 273.161319][ T5738] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 273.254951][ T7215] .: renamed from bond0 (while UP) [ 273.291904][ T5623] exFAT-fs (loop3): start_clu is invalid cluster(0xff000008) [ 273.628485][ T5738] rc_core: IR keymap rc-dvico-portable not found [ 273.628512][ T5738] Registered IR keymap rc-empty [ 273.629840][ T5738] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 273.669812][ T5738] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 274.460370][ T5738] dvb-usb: schedule remote query interval to 100 msecs. [ 274.460402][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 274.470676][ T5738] usb 6-1: USB disconnect, device number 5 [ 275.216883][ T7230] dyndbg: bad flag-op *, at start of *?ivers/hid/hid [ 275.216909][ T7230] dyndbg: flags parse failed [ 275.952060][ T7243] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 275.952099][ T7243] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 276.196218][ T5758] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 276.377534][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 276.378437][ T5758] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 276.379771][ T5758] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 276.381914][ T7249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.383169][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.383206][ T5758] usb 3-1: Product: syz [ 276.383232][ T5758] usb 3-1: Manufacturer: syz [ 276.383258][ T5758] usb 3-1: SerialNumber: syz [ 276.456779][ T5758] usb 3-1: config 0 descriptor?? [ 276.487796][ T5758] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 276.487851][ T5758] dvb-usb: bulk message failed: -22 (2/0) [ 276.521037][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.535533][ T5758] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 276.535628][ T5758] usb 3-1: media controller created [ 276.593581][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.614969][ T7249] md: array md0 already has disks! [ 276.698690][ T7250] md: could not open device unknown-block(7,0). [ 276.698764][ T7250] md: error, md_import_device() returned -16 [ 276.701000][ T5758] usb 3-1: selecting invalid altsetting 7 [ 276.703645][ T5758] cxusb: set interface failed [ 276.703664][ T5758] dvb-usb: bulk message failed: -22 (1/0) [ 276.968698][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 276.973314][ T7249] md/raid1:md0: active with 1 out of 2 mirrors [ 277.079625][ T5758] DVB: Unable to find symbol lgdt330x_attach() [ 277.079648][ T5758] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 277.186857][ T5758] rc_core: IR keymap rc-dvico-portable not found [ 277.186884][ T5758] Registered IR keymap rc-empty [ 277.193978][ T5758] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 277.269618][ T5758] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 277.271096][ T7259] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 277.299092][ T5758] dvb-usb: schedule remote query interval to 100 msecs. [ 277.299115][ T5758] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 277.325757][ T5758] usb 3-1: USB disconnect, device number 5 [ 277.450498][ T5758] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 277.512688][ T7265] netlink: 328 bytes leftover after parsing attributes in process `syz.5.388'. [ 277.512714][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 279.605701][ T7272] .: renamed from bond0 (while UP) [ 281.970379][ T7287] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 281.970417][ T7287] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 282.767132][ T5738] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.885243][ T7309] netlink: 328 bytes leftover after parsing attributes in process `syz.4.404'. [ 282.885267][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 284.686140][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 284.694065][ T5738] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 284.703997][ T5738] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 284.763637][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.763683][ T5738] usb 3-1: Product: syz [ 284.763712][ T5738] usb 3-1: Manufacturer: syz [ 284.763740][ T5738] usb 3-1: SerialNumber: syz [ 284.828219][ T5738] usb 3-1: config 0 descriptor?? [ 284.872151][ T5738] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 284.872207][ T5738] dvb-usb: bulk message failed: -22 (2/0) [ 284.900837][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.913859][ T5738] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 284.913930][ T5738] usb 3-1: media controller created [ 285.050805][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.203224][ T5738] usb 3-1: selecting invalid altsetting 7 [ 285.203256][ T5738] cxusb: set interface failed [ 285.203272][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 285.266955][ T7317] loop3: detected capacity change from 0 to 512 [ 286.084026][ T5738] DVB: Unable to find symbol lgdt330x_attach() [ 286.084049][ T5738] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 286.407000][ T5738] rc_core: IR keymap rc-dvico-portable not found [ 286.407026][ T5738] Registered IR keymap rc-empty [ 286.439593][ T5738] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 286.454723][ T5738] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 286.475694][ T5738] dvb-usb: schedule remote query interval to 100 msecs. [ 286.475714][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 286.505385][ T7329] dyndbg: bad flag-op l, at start of li [ 286.505409][ T7329] dyndbg: flags parse failed [ 286.517831][ T5738] usb 3-1: USB disconnect, device number 6 [ 286.852280][ T5738] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 286.964715][ T7336] loop6: detected capacity change from 0 to 64 [ 287.316480][ T5738] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 287.465808][ T7345] netlink: 328 bytes leftover after parsing attributes in process `syz.6.418'. [ 287.465834][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'. [ 289.278136][ T5738] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 289.287007][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.287049][ T5738] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 289.287104][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.345302][ T5738] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 289.411220][ T5738] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 290.061014][ T7359] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 290.068141][ T7359] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 290.074630][ T7359] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 290.272743][ T7338] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 290.275612][ T56] usb 4-1: USB disconnect, device number 9 [ 290.873109][ T56] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 290.873968][ T56] spcp8x5 4-1:1.0: device disconnected [ 291.745302][ T7372] loop2: detected capacity change from 0 to 512 [ 291.822011][ T7375] dyndbg: bad flag-op l, at start of li [ 291.822036][ T7375] dyndbg: flags parse failed [ 292.269715][ T7389] netlink: 328 bytes leftover after parsing attributes in process `syz.5.432'. [ 292.269742][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.432'. [ 294.343705][ T7397] tmpfs: Using encoding : utf8-12.1.0 [ 297.055470][ T7412] sg_write: data in/out 491484/136 bytes for SCSI command 0x0-- guessing data in; [ 297.055470][ T7412] program syz.3.442 not setting count and/or reply_len properly [ 299.502658][ T7422] dyndbg: bad flag-op 2, at start of 20 [ 299.502682][ T7422] dyndbg: flags parse failed [ 299.893183][ T7426] netlink: 328 bytes leftover after parsing attributes in process `syz.0.446'. [ 299.893210][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 301.737015][ T975] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 302.181899][ T7435] tmpfs: Using encoding : utf8-12.1.0 [ 302.327779][ T7438] dummy0: entered allmulticast mode [ 302.383105][ T7438] dummy0: left allmulticast mode [ 304.785731][ T7453] loop6: detected capacity change from 0 to 512 [ 304.883086][ T7455] dyndbg: bad flag-op 2, at start of 20 [ 304.883111][ T7455] dyndbg: flags parse failed [ 305.242735][ T7463] netlink: 328 bytes leftover after parsing attributes in process `syz.2.461'. [ 305.242761][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 307.526101][ T975] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 307.690793][ T975] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 307.692125][ T975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.692173][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.692221][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 307.746470][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.746514][ T975] usb 6-1: Product: syz [ 307.746541][ T975] usb 6-1: Manufacturer: syz [ 307.746567][ T975] usb 6-1: SerialNumber: syz [ 307.781605][ T975] usb 6-1: config 0 descriptor?? [ 307.782612][ T7468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.006109][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.036488][ T7468] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 308.036519][ T7468] CUSE: DEVNAME unspecified [ 308.086161][ T975] rc_core: IR keymap rc-streamzap not found [ 308.086186][ T975] Registered IR keymap rc-empty [ 308.090057][ T975] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 308.093502][ T975] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 308.164773][ T56] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 308.181539][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.182477][ T975] usb 6-1: USB disconnect, device number 6 [ 308.210945][ T56] usb 7-1: config 0 descriptor?? [ 309.586223][ T4932] Bluetooth: hci1: command 0x0406 tx timeout [ 309.591123][ T56] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 310.011876][ T56] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 310.011917][ T56] [drm] Initialized udl on minor 1 [ 310.771054][ T4932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.774408][ T4932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.793804][ T4932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.807598][ T4932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.809502][ T4932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.826386][ T975] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 310.978866][ T975] usb 1-1: not running at top speed; connect to a high speed hub [ 310.978916][ T975] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 310.980723][ T975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.980788][ T975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.980828][ T975] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 310.980892][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.012234][ T975] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 311.078820][ T975] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 311.097510][ T975] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 311.102488][ T975] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 311.155790][ T975] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 311.234022][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053615000: rx timeout, send abort [ 311.734472][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053614c00: rx timeout, send abort [ 311.735476][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053615000: abort rx timeout. Force session deactivation [ 311.824894][ T25] usb 1-1: USB disconnect, device number 6 [ 311.879127][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 311.898921][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 311.932822][ T25] keyspan 1-1:1.0: device disconnected [ 312.234605][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053614c00: abort rx timeout. Force session deactivation [ 312.456139][ T5738] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 312.607569][ T5738] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 312.609217][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.609294][ T5738] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 312.609355][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.677647][ T5738] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 312.782633][ T5738] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 312.856336][ T4932] Bluetooth: hci6: command tx timeout [ 312.884699][ T7513] netlink: 328 bytes leftover after parsing attributes in process `syz.0.476'. [ 312.884725][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 314.909378][ T7512] dyndbg: bad flag-op 2, at start of 20 [ 314.909402][ T7512] dyndbg: flags parse failed [ 314.936386][ T4932] Bluetooth: hci6: command tx timeout [ 315.636143][ T56] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 315.639514][ T56] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 315.642852][ T5738] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 315.759331][ T5738] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 315.790040][ T5738] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 315.793047][ T5738] usb 7-1: USB disconnect, device number 4 [ 316.186748][ T7527] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 316.187095][ T7527] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 316.187761][ T7527] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 317.000252][ T7531] 9pnet_fd: p9_fd_create_tcp (7531): problem connecting socket to 127.0.0.1 [ 318.347570][ T4932] Bluetooth: hci6: command tx timeout [ 318.356822][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.356907][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.373933][ T7502] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 318.379811][ T5751] usb 4-1: USB disconnect, device number 10 [ 319.003135][ T5751] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 319.031611][ T5751] spcp8x5 4-1:1.0: device disconnected [ 320.103321][ T7546] FAULT_INJECTION: forcing a failure. [ 320.103321][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 320.103384][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz.5.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.103442][ T7546] Tainted: [L]=SOFTLOCKUP [ 320.103456][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 320.103480][ T7546] Call Trace: [ 320.103492][ T7546] [ 320.103506][ T7546] dump_stack_lvl+0x100/0x190 [ 320.103567][ T7546] should_fail_ex.cold+0x5/0xa [ 320.103610][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.103663][ T7546] should_failslab+0xc2/0x120 [ 320.103702][ T7546] __kmalloc_noprof+0xfc/0x840 [ 320.103761][ T7546] ? binder_open+0x146/0xde0 [ 320.103816][ T7546] binder_open+0x146/0xde0 [ 320.103862][ T7546] ? __pfx_apparmor_file_open+0x10/0x10 [ 320.103928][ T7546] ? __pfx_binder_open+0x10/0x10 [ 320.103977][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104022][ T7546] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 320.104083][ T7546] do_dentry_open+0x6ab/0x14d0 [ 320.104139][ T7546] ? __pfx_binder_open+0x10/0x10 [ 320.104188][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104241][ T7546] vfs_open+0x82/0x3f0 [ 320.104280][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104334][ T7546] path_openat+0x19fa/0x2440 [ 320.104388][ T7546] ? __pfx_path_openat+0x10/0x10 [ 320.104440][ T7546] do_file_open+0x20e/0x430 [ 320.104482][ T7546] ? __pfx_do_file_open+0x10/0x10 [ 320.104555][ T7546] ? _raw_spin_unlock+0x28/0x50 [ 320.104613][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104659][ T7546] ? alloc_fd+0x471/0x7a0 [ 320.104712][ T7546] do_sys_openat2+0x10f/0x1e0 [ 320.104756][ T7546] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.104801][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104848][ T7546] ? find_held_lock+0x2b/0x80 [ 320.104898][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.104958][ T7546] __x64_sys_openat+0x12d/0x210 [ 320.105003][ T7546] ? __pfx___x64_sys_openat+0x10/0x10 [ 320.105057][ T7546] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.105114][ T7546] do_syscall_64+0x123/0x790 [ 320.105156][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.105196][ T7546] RIP: 0033:0x7f900eb9e159 [ 320.105227][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.105264][ T7546] RSP: 002b:00007f900f9ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.105301][ T7546] RAX: ffffffffffffffda RBX: 00007f900ee25fa0 RCX: 00007f900eb9e159 [ 320.105328][ T7546] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 320.105353][ T7546] RBP: 00007f900ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 320.105384][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.105407][ T7546] R13: 00007f900ee26038 R14: 00007f900ee25fa0 R15: 00007ffc25eff1e8 [ 320.105458][ T7546] [ 320.377564][ T4932] Bluetooth: hci6: command tx timeout [ 320.924423][ T7559] dyndbg: bad flag-op 2, at start of 2088 [ 320.924448][ T7559] dyndbg: flags parse failed [ 321.343078][ T7552] dummy0: entered allmulticast mode [ 321.492609][ T7568] netlink: 328 bytes leftover after parsing attributes in process `syz.5.489'. [ 321.492635][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.489'. [ 323.427122][ T7550] dummy0: left allmulticast mode [ 323.595902][ T7578] netlink: 'syz.6.492': attribute type 11 has an invalid length. [ 323.595970][ T7578] netlink: 220 bytes leftover after parsing attributes in process `syz.6.492'. [ 324.520120][ T7557] syz.2.490 (7557): drop_caches: 2 [ 324.802710][ T7580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.825248][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.825381][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.825575][ T7492] bridge_slave_0: entered allmulticast mode [ 324.844859][ T7492] bridge_slave_0: entered promiscuous mode [ 324.862576][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.867856][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.868050][ T7492] bridge_slave_1: entered allmulticast mode [ 324.889564][ T7492] bridge_slave_1: entered promiscuous mode [ 326.872723][ T7580] md/raid:md0: device ram1 operational as raid disk 1 [ 329.056565][ T7580] md/raid:md0: couldn't allocate thread. [ 329.308575][ T3339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.408279][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.523218][ T7580] ============================================================================= [ 329.523248][ T7580] BUG raid5-md0 (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 329.523282][ T7580] ----------------------------------------------------------------------------- [ 329.523282][ T7580] [ 329.523937][ T7580] Object 0xffff8880760c4000 @offset=0 [ 329.523961][ T7580] Object 0xffff8880760c44d8 @offset=1240 [ 329.523981][ T7580] Object 0xffff8880760c49b0 @offset=2480 [ 329.524001][ T7580] Object 0xffff8880760c4e88 @offset=3720 [ 329.524021][ T7580] Slab 0xffffea0001d83100 objects=13 used=4 fp=0xffff8880760c5360 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 329.524072][ T7580] Disabling lock debugging due to kernel taint [ 329.524500][ T7580] ------------[ cut here ]------------ [ 329.524514][ T7580] 1 [ 329.524523][ T7580] WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20, CPU#0: syz.3.494/7580 [ 329.531312][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.623299][ T7580] Modules linked in: [ 329.627211][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.3.494 Tainted: G B L syzkaller #0 PREEMPT(full) [ 329.637998][ T7580] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 329.643534][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 329.653592][ T7580] RIP: 0010:__slab_err+0x15/0x20 [ 329.658554][ T7580] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 fc f4 a3 00 90 <0f> 0b 90 e9 0e f4 eb ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 329.678181][ T7580] RSP: 0018:ffffc90004cd7848 EFLAGS: 00010087 [ 329.684267][ T7580] RAX: 0000000000017fa9 RBX: ffffc90004cd7898 RCX: ffffc900065c1000 [ 329.692242][ T7580] RDX: 0000000000080000 RSI: ffffffff81c8425d RDI: ffff88803642ddc0 [ 329.700222][ T7580] RBP: ffff888058570498 R08: 0000000000000007 R09: 0000000000000000 [ 329.708203][ T7580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000003a20 [ 329.716180][ T7580] R13: ffff8880760c7ef8 R14: ffff888058570480 R15: ffffea0001d83100 [ 329.724166][ T7580] FS: 00007f4e12d2e6c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 329.733104][ T7580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.739694][ T7580] CR2: 00007f3d8962dff8 CR3: 000000005b6f3000 CR4: 0000000000350ef0 [ 329.747673][ T7580] Call Trace: [ 329.750946][ T7580] [ 329.753873][ T7580] __kmem_cache_shutdown.cold+0x16e/0x177 [ 329.759636][ T7580] kmem_cache_destroy+0x7d/0x1a0 [ 329.764596][ T7580] free_conf+0x1cb/0x710 [ 329.768898][ T7580] setup_conf+0xd80/0x2a20 [ 329.773345][ T7580] ? __pfx_setup_conf+0x10/0x10 [ 329.778206][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.783862][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.789525][ T7580] ? _raw_spin_unlock+0x28/0x50 [ 329.794576][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.800226][ T7580] ? get_pers+0x227/0x2e0 [ 329.804575][ T7580] ? __pfx_get_pers+0x10/0x10 [ 329.809306][ T7580] ? __pfx_kstrtoll+0x10/0x10 [ 329.814021][ T7580] raid5_takeover+0x2b3/0x590 [ 329.818707][ T7580] ? __pfx_raid5_takeover+0x10/0x10 [ 329.823919][ T7580] level_store+0x890/0x1f60 [ 329.828534][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.834185][ T7580] ? __lock_acquire+0x5c0/0x1f40 [ 329.839135][ T7580] ? __pfx_level_store+0x10/0x10 [ 329.844095][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.849744][ T7580] ? lock_acquire+0x1d1/0x380 [ 329.854429][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.860082][ T7580] ? do_raw_spin_lock+0x128/0x260 [ 329.865121][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.870776][ T7580] ? find_held_lock+0x2b/0x80 [ 329.875482][ T7580] ? md_attr_store+0x195/0x330 [ 329.880274][ T7580] ? md_attr_store+0x195/0x330 [ 329.885063][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.890718][ T7580] md_attr_store+0x1c5/0x330 [ 329.895513][ T7580] ? __pfx_md_attr_store+0x10/0x10 [ 329.900651][ T7580] sysfs_kf_write+0xf2/0x150 [ 329.905278][ T7580] kernfs_fop_write_iter+0x3e0/0x5f0 [ 329.910592][ T7580] ? __pfx_sysfs_kf_write+0x10/0x10 [ 329.915867][ T7580] vfs_write+0x6af/0x1050 [ 329.920234][ T7580] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 329.926077][ T7580] ? __pfx_vfs_write+0x10/0x10 [ 329.930864][ T7580] ? find_held_lock+0x2b/0x80 [ 329.935582][ T7580] ksys_write+0x12a/0x250 [ 329.939937][ T7580] ? __pfx_ksys_write+0x10/0x10 [ 329.944815][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.950472][ T7580] do_syscall_64+0x123/0x790 [ 329.955077][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.960982][ T7580] RIP: 0033:0x7f4e11d9e159 [ 329.965407][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.985033][ T7580] RSP: 002b:00007f4e12d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.993463][ T7580] RAX: ffffffffffffffda RBX: 00007f4e12025fa0 RCX: 00007f4e11d9e159 [ 330.001442][ T7580] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 330.009418][ T7580] RBP: 00007f4e11e3506b R08: 0000000000000000 R09: 0000000000000000 [ 330.017393][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.025366][ T7580] R13: 00007f4e12026038 R14: 00007f4e12025fa0 R15: 00007fffbd5b42e8 [ 330.033354][ T7580] [ 330.036374][ T7580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.043745][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.3.494 Tainted: G B L syzkaller #0 PREEMPT(full) [ 330.054527][ T7580] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 330.060063][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 330.070120][ T7580] Call Trace: [ 330.073403][ T7580] [ 330.076336][ T7580] dump_stack_lvl+0x100/0x190 [ 330.081054][ T7580] vpanic+0x553/0x970 [ 330.085047][ T7580] ? __pfx_vpanic+0x10/0x10 [ 330.089559][ T7580] ? lock_release+0x24d/0x310 [ 330.094250][ T7580] panic+0xd1/0xe0 [ 330.097980][ T7580] ? __pfx_panic+0x10/0x10 [ 330.102500][ T7580] check_panic_on_warn.cold+0x19/0x34 [ 330.107888][ T7580] ? __slab_err+0x15/0x20 [ 330.112228][ T7580] __warn.cold+0x191/0x318 [ 330.116656][ T7580] __report_bug+0x30f/0x440 [ 330.121169][ T7580] ? __slab_err+0x15/0x20 [ 330.125513][ T7580] ? __pfx___report_bug+0x10/0x10 [ 330.130541][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.136192][ T7580] ? irq_work_queue+0xd1/0x100 [ 330.140977][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.146633][ T7580] ? __wake_up_klogd+0xe5/0x140 [ 330.151497][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.157166][ T7580] ? vprintk_emit+0x1c9/0x6b0 [ 330.161871][ T7580] ? __pfx_vprintk_emit+0x10/0x10 [ 330.166926][ T7580] ? __pfx_vprintk_emit+0x10/0x10 [ 330.171978][ T7580] ? __slab_err+0x15/0x20 [ 330.176412][ T7580] report_bug+0xb3/0x220 [ 330.180677][ T7580] ? __slab_err+0x15/0x20 [ 330.185018][ T7580] handle_bug+0x16a/0x2a0 [ 330.189361][ T7580] exc_invalid_op+0x17/0x50 [ 330.193967][ T7580] asm_exc_invalid_op+0x1a/0x20 [ 330.198830][ T7580] RIP: 0010:__slab_err+0x15/0x20 [ 330.203789][ T7580] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 fc f4 a3 00 90 <0f> 0b 90 e9 0e f4 eb ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 330.223534][ T7580] RSP: 0018:ffffc90004cd7848 EFLAGS: 00010087 [ 330.229617][ T7580] RAX: 0000000000017fa9 RBX: ffffc90004cd7898 RCX: ffffc900065c1000 [ 330.237594][ T7580] RDX: 0000000000080000 RSI: ffffffff81c8425d RDI: ffff88803642ddc0 [ 330.245568][ T7580] RBP: ffff888058570498 R08: 0000000000000007 R09: 0000000000000000 [ 330.253551][ T7580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000003a20 [ 330.261527][ T7580] R13: ffff8880760c7ef8 R14: ffff888058570480 R15: ffffea0001d83100 [ 330.269514][ T7580] ? add_taint+0x6d/0xb0 [ 330.273789][ T7580] ? __slab_err+0x14/0x20 [ 330.278131][ T7580] __kmem_cache_shutdown.cold+0x16e/0x177 [ 330.283883][ T7580] kmem_cache_destroy+0x7d/0x1a0 [ 330.288841][ T7580] free_conf+0x1cb/0x710 [ 330.293128][ T7580] setup_conf+0xd80/0x2a20 [ 330.297561][ T7580] ? __pfx_setup_conf+0x10/0x10 [ 330.302417][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.308074][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.313750][ T7580] ? _raw_spin_unlock+0x28/0x50 [ 330.318628][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.324283][ T7580] ? get_pers+0x227/0x2e0 [ 330.328635][ T7580] ? __pfx_get_pers+0x10/0x10 [ 330.333336][ T7580] ? __pfx_kstrtoll+0x10/0x10 [ 330.338050][ T7580] raid5_takeover+0x2b3/0x590 [ 330.344942][ T7580] ? __pfx_raid5_takeover+0x10/0x10 [ 330.350154][ T7580] level_store+0x890/0x1f60 [ 330.354703][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.360443][ T7580] ? __lock_acquire+0x5c0/0x1f40 [ 330.365393][ T7580] ? __pfx_level_store+0x10/0x10 [ 330.370354][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.376010][ T7580] ? lock_acquire+0x1d1/0x380 [ 330.380700][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.386353][ T7580] ? do_raw_spin_lock+0x128/0x260 [ 330.391406][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.397057][ T7580] ? find_held_lock+0x2b/0x80 [ 330.401760][ T7580] ? md_attr_store+0x195/0x330 [ 330.406549][ T7580] ? md_attr_store+0x195/0x330 [ 330.411340][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.416997][ T7580] md_attr_store+0x1c5/0x330 [ 330.421620][ T7580] ? __pfx_md_attr_store+0x10/0x10 [ 330.426762][ T7580] sysfs_kf_write+0xf2/0x150 [ 330.431389][ T7580] kernfs_fop_write_iter+0x3e0/0x5f0 [ 330.436725][ T7580] ? __pfx_sysfs_kf_write+0x10/0x10 [ 330.441963][ T7580] vfs_write+0x6af/0x1050 [ 330.446317][ T7580] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 330.452184][ T7580] ? __pfx_vfs_write+0x10/0x10 [ 330.456972][ T7580] ? find_held_lock+0x2b/0x80 [ 330.461691][ T7580] ksys_write+0x12a/0x250 [ 330.466047][ T7580] ? __pfx_ksys_write+0x10/0x10 [ 330.470929][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.476671][ T7580] do_syscall_64+0x123/0x790 [ 330.481278][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.487192][ T7580] RIP: 0033:0x7f4e11d9e159 [ 330.491615][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.511233][ T7580] RSP: 002b:00007f4e12d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.519660][ T7580] RAX: ffffffffffffffda RBX: 00007f4e12025fa0 RCX: 00007f4e11d9e159 [ 330.527638][ T7580] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 330.535612][ T7580] RBP: 00007f4e11e3506b R08: 0000000000000000 R09: 0000000000000000 [ 330.543589][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.551562][ T7580] R13: 00007f4e12026038 R14: 00007f4e12025fa0 R15: 00007fffbd5b42e8 [ 330.559553][ T7580] [ 330.562938][ T7580] Kernel Offset: disabled [ 330.567278][ T7580] Rebooting in 86400 seconds..