last executing test programs: 41.812094621s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000608)="0900000004000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 41.650453487s ago: executing program 1 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10}, {0x1, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x101}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x10}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 41.411714088s ago: executing program 1 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000c00)="00000000010000000000a000000000000300040000000000766f6c3000") nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000e00)=@filename='ubi0_0\x00', &(0x7f0000000d00)='./mnt\x00', &(0x7f0000000f00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/test\x00', 0x42, 0x1ff) 40.321431011s ago: executing program 1 (id=9): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000003140500000000000000000009000200727865300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000900)={0x15, 0x110, 0xfa00, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 39.021016029s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0/firmware-usb-6.bin\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000400)="5143412d41544831304b0000020000000400000000000800", 0x18) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b11342000000000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000700)=@random='syz\x00', 0x4, 0x0) 34.543830367s ago: executing program 0 (id=28): r0 = syz_io_uring_setup(0x8, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind(r5, &(0x7f0000000200)=@generic={0x21, "01000200100002001b5800"}, 0x80) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)='\x00'/260, 0x104}, {&(0x7f0000002200)="00000001", 0x4}, {&(0x7f0000002300)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000002400)='\x00'/632, 0x278}, {&(0x7f0000002500)="00000004", 0x4}, {&(0x7f0000002600)='\x00'/64, 0x40}, {&(0x7f0000002700)="00001000", 0x4}, {&(0x7f0000002800)='\x00'/36, 0x24}], 0x8, &(0x7f0000000400)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000620)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003100)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000003200)="0000000100000001000000017f000001", 0x10}], 0x2, &(0x7f0000000420)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000550)=""/1024, 0x400}], 0x1, &(0x7f0000000440)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000004100)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000440)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000360)={0x0, 0x0, &(0x7f0000000560)=[{&(0x7f0000000570)=""/1024, 0x400}], 0x1, &(0x7f0000000460)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000660)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000005100)="0000000100000002", 0x8}, {&(0x7f0000005200)='\x00'/112, 0x70}], 0x2, &(0x7f0000000460)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='#127.0.0.1:root.cell\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000900)='afs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/test\x00', 0x40, 0x1ff) 34.411794586s ago: executing program 0 (id=29): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022b0001010080320904000002030000000921000000012222000705810308000007050203080000"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000100)=""/31) 34.161450385s ago: executing program 4 (id=31): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='1', 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000005c0)='0\x00', 0x2) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='none\x00', 0x5) 33.635112133s ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='auto\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='auto\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='auto\n', 0x5) 33.440996185s ago: executing program 4 (id=36): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000300)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 33.187760918s ago: executing program 1 (id=37): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/129, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 31.292319597s ago: executing program 0 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) lseek(r0, 0x1000, 0x0) write(r0, &(0x7f0000000080)='$BLOB_9b83ee659970', 0x100) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='none\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000300), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='raid1\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='+8\x00', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='readonly\x00', 0x9) 31.02161882s ago: executing program 0 (id=46): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='rd_pages=1024\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/target/usb_gadget/naa.1234567890\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000500)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0/virtual_device\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./config/target/usb_gadget/naa.1234567890/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000001800)='naa.1234567890\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 30.887916315s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='auto\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='auto\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='auto\n', 0x5) 30.76518085s ago: executing program 0 (id=49): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000600)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x70}], 0x1) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 26.487778254s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='auto\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='auto\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='auto\n', 0x5) 26.385284747s ago: executing program 3 (id=62): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='1', 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000005c0)='0\x00', 0x2) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='none\x00', 0x5) 26.177278978s ago: executing program 3 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/kallsyms\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) 26.109824284s ago: executing program 3 (id=64): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000110)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000120)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}}, &(0x7f0000000200)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x1, '\x00'}, &(0x7f0000000210)={0x0, 0x0, 0x1}, &(0x7f0000000220)={0x0, 0x0, 0x1}, &(0x7f0000000230)={0x20, 0x81, 0x3, '\x00\x00\x00'}, &(0x7f0000000240)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000250)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000260)={0x20, 0x84, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000270)={0x20, 0x85, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000310)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000320)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}, &(0x7f0000000330)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000350)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x1, '\x00'}, &(0x7f0000000410)={0x0, 0x0, 0x1}, &(0x7f0000000420)={0x0, 0x0, 0x1}, &(0x7f0000000430)={0x0, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000000450)={0x0, 0x0, 0x2}, &(0x7f0000000460)={0x0, 0x0, 0x1}, &(0x7f0000000470)={0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000490)={0x0, 0x0, 0x6, @random}, &(0x7f00000004a0)={0x0, 0x0, 0x6, @random}, &(0x7f00000004b0)={0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x2}, &(0x7f00000004d0)={0x0, 0x0, 0x1}, &(0x7f00000004e0)={0x0, 0x0, 0x1}, &(0x7f00000004f0)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 23.400995531s ago: executing program 3 (id=69): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x7, &(0x7f0000000100)=@raw=[@generic={0xb7}, @generic={0x18, 0x1, 0x0, 0x0, 0x1234}, @generic, @generic={0x15, 0x1, 0x0, 0x1, 0x1234}, @generic={0x95}, @generic={0xb7}, @generic={0x95}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.350536109s ago: executing program 3 (id=70): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r1, &(0x7f0000001080)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000001100)=""/128, 0x80) write(r2, &(0x7f0000001180)="01008000800000000000000200004000"/32, 0x20) read(r2, &(0x7f00000011c0)=""/4096, 0x1000) 18.294929189s ago: executing program 32 (id=36): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000300)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 18.099991713s ago: executing program 33 (id=37): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/129, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 15.119673421s ago: executing program 34 (id=49): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000600)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x70}], 0x1) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 11.330007183s ago: executing program 2 (id=104): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write(r0, &(0x7f0000000100)='-1000\x00', 0x5) r1 = memfd_create(&(0x7f0000000200)='test\x00', 0x4) fallocate(r1, 0x0, 0x0, 0x1000000000) 11.044927922s ago: executing program 2 (id=105): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902200001010080320904000002080601000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000100)="058005021f000000544f53484942412043442d524f4d20202020202020202020312e3020") syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 9.956517958s ago: executing program 5 (id=106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=445,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) close(r1) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 9.010269441s ago: executing program 5 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0xb7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xe, &(0x7f0000000340)='\x00'/14, &(0x7f0000000380)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.936606827s ago: executing program 2 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000000100200000102030405060708090a0b0c0d0e0f1000000000000010000000100000001000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a", 0xa2, 0x0, 0x0, 0x0) 8.79850414s ago: executing program 5 (id=109): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) listen(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) sendto$rxrpc(r1, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000200), 0x4, 0x0, 0x0, 0x0) 7.780966728s ago: executing program 35 (id=70): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r1, &(0x7f0000001080)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000001100)=""/128, 0x80) write(r2, &(0x7f0000001180)="01008000800000000000000200004000"/32, 0x20) read(r2, &(0x7f00000011c0)=""/4096, 0x1000) 7.761009007s ago: executing program 5 (id=111): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000140)="6269746d03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000001000000100"/228, 0x100, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='7:0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/level\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='1', 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000005c0)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000640)='acti', 0x4) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='none\x00', 0x5) 7.758681969s ago: executing program 2 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='auto\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='auto\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='auto\n', 0x5) 7.325174045s ago: executing program 5 (id=113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/video17\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000640)) 7.324857677s ago: executing program 2 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r7, &(0x7f0000001000)=""/1034, 0x40a) write(r7, &(0x7f0000001000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000002000)=""/1034, 0x40a) write(r7, &(0x7f0000002000)='\x00'/1034, 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) read(r7, &(0x7f0000003000)=""/1034, 0x40a) write(r7, &(0x7f0000003000)='\x00'/1034, 0x40a) read(r7, &(0x7f0000004000)=""/1034, 0x40a) write(r7, &(0x7f0000004000)='\x00'/1034, 0x40a) 6.937728082s ago: executing program 5 (id=115): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x47) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x7f, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 5.450193055s ago: executing program 2 (id=116): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 3.673484659s ago: executing program 6 (id=117): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae1210001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 2.699927062s ago: executing program 8 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000002000)="010400000100000001", 0x40a) read(r8, &(0x7f0000003000), 0x40a) write(r8, &(0x7f0000004000)="0105000002000000", 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 2.327623355s ago: executing program 7 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sysrq-trigger\x00', 0x0, 0x0) 2.17308889s ago: executing program 7 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)="020000007f00000100"/121, 0x80) 2.105963449s ago: executing program 7 (id=119): r0 = syz_open_dev$mtd(&(0x7f0000001100), 0x1, 0x2) close(r0) 1.957816738s ago: executing program 7 (id=120): mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0204800, &(0x7f0000000140)={0x60000000, 0x0, 0x80000}) 895.155575ms ago: executing program 6 (id=121): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01020304", 0x4}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) 436.026188ms ago: executing program 9 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000000f40)=""/1034, 0x40a) write(r8, &(0x7f0000001380)='\x00'/1034, 0x40a) read(r8, &(0x7f00000017c0)=""/1034, 0x40a) write(r8, &(0x7f0000001c00)='\x00'/1034, 0x40a) read(r9, &(0x7f0000002040)=""/1034, 0x40a) write(r9, &(0x7f0000002480)='\x00'/1034, 0x40a) read(r9, &(0x7f00000028c0)=""/1034, 0x40a) write(r9, &(0x7f0000002d00)='\x00'/1034, 0x40a) read(r10, &(0x7f0000003140)=""/1034, 0x40a) write(r10, &(0x7f0000003580)='\x00'/1034, 0x40a) read(r10, &(0x7f00000039c0)=""/1034, 0x40a) write(r10, &(0x7f0000003e00)='\x00'/1034, 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 393.672831ms ago: executing program 6 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='auto\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='auto\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='auto\n', 0x5) 169.140892ms ago: executing program 6 (id=123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/video17\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000640)) 117.176425ms ago: executing program 6 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f7261696400") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="040000003200000000000000880100003801000001000000000000000000000000000000000000000000000000000000746573745f7261696400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000072616964000000000000000000000000007261696431203120382032202d202f6465762f6c6f6f7030202d202f6465762f6c6f6f703100") ioctl(r0, 0xc138fd0c, &(0x7f0000000500)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f7261696400") 0s ago: executing program 6 (id=125): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x2}}, 0xc) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x2}}, 0xc) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x2}}, 0xc) read(r0, &(0x7f0000000200)=""/436, 0x1b4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x2}}, 0xc) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x1c, "5dff00"/28}}, 0x22) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x1c, "5dff00"/28}}, 0x22) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x1c, "5dff00"/28}}, 0x22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 72.669508][ T5603] cgroup: Unknown subsys name 'net' [ 72.758371][ T5603] cgroup: Unknown subsys name 'cpuset' [ 72.767122][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.281026][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.832907][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.833665][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.843429][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.850382][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.865247][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.872821][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.881000][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.888567][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.897412][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.897599][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.898992][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.900171][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.900961][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.906064][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.911191][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.993313][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.995980][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.997932][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.999495][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.004323][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.018943][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.021435][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.022004][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.023373][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.029635][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.039137][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.041573][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.043527][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.051355][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.052006][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.964400][ T5624] Bluetooth: hci1: command tx timeout [ 78.964404][ T4932] Bluetooth: hci2: command tx timeout [ 78.964585][ T4932] Bluetooth: hci0: command tx timeout [ 79.044500][ T5617] Bluetooth: hci4: command tx timeout [ 79.044667][ T5624] Bluetooth: hci5: command tx timeout [ 79.124753][ T5624] Bluetooth: hci3: command tx timeout [ 79.333792][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.334487][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.334641][ T5629] bridge_slave_0: entered allmulticast mode [ 79.336792][ T5629] bridge_slave_0: entered promiscuous mode [ 79.341139][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.341246][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.341368][ T5629] bridge_slave_1: entered allmulticast mode [ 79.343221][ T5629] bridge_slave_1: entered promiscuous mode [ 79.496249][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.496384][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.496522][ T5630] bridge_slave_0: entered allmulticast mode [ 79.498788][ T5630] bridge_slave_0: entered promiscuous mode [ 79.562747][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.562888][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.563031][ T5630] bridge_slave_1: entered allmulticast mode [ 79.566530][ T5630] bridge_slave_1: entered promiscuous mode [ 79.588289][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.588502][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.589012][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.589198][ T5614] bridge_slave_0: entered allmulticast mode [ 79.592273][ T5614] bridge_slave_0: entered promiscuous mode [ 79.646662][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.646898][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.647138][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.647563][ T5614] bridge_slave_1: entered allmulticast mode [ 79.649655][ T5614] bridge_slave_1: entered promiscuous mode [ 79.665487][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.665598][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.665752][ T5622] bridge_slave_0: entered allmulticast mode [ 79.668142][ T5622] bridge_slave_0: entered promiscuous mode [ 79.672145][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.672272][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.672857][ T5622] bridge_slave_1: entered allmulticast mode [ 79.675699][ T5622] bridge_slave_1: entered promiscuous mode [ 79.725534][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.803508][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.803700][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.803881][ T5628] bridge_slave_0: entered allmulticast mode [ 79.806409][ T5628] bridge_slave_0: entered promiscuous mode [ 79.813879][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.817231][ T5629] team0: Port device team_slave_0 added [ 79.822026][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.844952][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.874590][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.874769][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.875940][ T5628] bridge_slave_1: entered allmulticast mode [ 79.878230][ T5628] bridge_slave_1: entered promiscuous mode [ 79.913661][ T5629] team0: Port device team_slave_1 added [ 79.916902][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.937956][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.956074][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.956209][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.956347][ T5615] bridge_slave_0: entered allmulticast mode [ 79.958806][ T5615] bridge_slave_0: entered promiscuous mode [ 79.962461][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.962633][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.963063][ T5615] bridge_slave_1: entered allmulticast mode [ 79.965668][ T5615] bridge_slave_1: entered promiscuous mode [ 79.993133][ T5630] team0: Port device team_slave_0 added [ 80.065205][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.082248][ T5630] team0: Port device team_slave_1 added [ 80.098947][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.099033][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.099062][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.103789][ T5614] team0: Port device team_slave_0 added [ 80.107815][ T5614] team0: Port device team_slave_1 added [ 80.169693][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.208273][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.208325][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.208357][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.210721][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.210736][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.210766][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.227277][ T5622] team0: Port device team_slave_0 added [ 80.230736][ T5622] team0: Port device team_slave_1 added [ 80.251309][ T5628] team0: Port device team_slave_0 added [ 80.256404][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.258214][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.258229][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.258260][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.311135][ T5628] team0: Port device team_slave_1 added [ 80.320205][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.349061][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.349081][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.349111][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.386114][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.386134][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.386164][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.423477][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.423497][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.423529][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.446480][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.446500][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.446530][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.449392][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.449408][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.449438][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.453480][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.453496][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.453526][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.460400][ T5615] team0: Port device team_slave_0 added [ 80.599212][ T5615] team0: Port device team_slave_1 added [ 80.624977][ T5629] hsr_slave_0: entered promiscuous mode [ 80.626371][ T5629] hsr_slave_1: entered promiscuous mode [ 80.653050][ T5622] hsr_slave_0: entered promiscuous mode [ 80.656278][ T5622] hsr_slave_1: entered promiscuous mode [ 80.661801][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 80.661865][ T5622] Cannot create hsr debugfs directory [ 80.704823][ T5614] hsr_slave_0: entered promiscuous mode [ 80.706775][ T5614] hsr_slave_1: entered promiscuous mode [ 80.707479][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 80.707498][ T5614] Cannot create hsr debugfs directory [ 80.808034][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.808128][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.808160][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.810513][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.810528][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.810558][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.889286][ T5630] hsr_slave_0: entered promiscuous mode [ 80.890392][ T5630] hsr_slave_1: entered promiscuous mode [ 80.891453][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.891474][ T5630] Cannot create hsr debugfs directory [ 80.901208][ T5628] hsr_slave_0: entered promiscuous mode [ 80.902411][ T5628] hsr_slave_1: entered promiscuous mode [ 80.903231][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 80.903252][ T5628] Cannot create hsr debugfs directory [ 81.045045][ T5617] Bluetooth: hci1: command tx timeout [ 81.045111][ T5617] Bluetooth: hci2: command tx timeout [ 81.045567][ T5624] Bluetooth: hci0: command tx timeout [ 81.129948][ T4932] Bluetooth: hci4: command tx timeout [ 81.130067][ T5624] Bluetooth: hci5: command tx timeout [ 81.149590][ T5615] hsr_slave_0: entered promiscuous mode [ 81.150679][ T5615] hsr_slave_1: entered promiscuous mode [ 81.151437][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 81.151457][ T5615] Cannot create hsr debugfs directory [ 81.204834][ T5624] Bluetooth: hci3: command tx timeout [ 81.679325][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.690845][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.691986][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.703329][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.724458][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.734524][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.737808][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.746350][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.824644][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.835901][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.838726][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.847419][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.852040][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.861758][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.874302][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.885466][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.954283][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.970780][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.989111][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.000199][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.009936][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.020242][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.039846][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.049833][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.133601][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.147768][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.166878][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.178570][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.200729][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.207242][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.219973][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.220579][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.230821][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.332154][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.342168][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.348027][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.366737][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.367739][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.379977][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.406831][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.407316][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.409068][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.421555][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.448020][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.457991][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.492880][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.493025][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.560588][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.572001][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.582638][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.598317][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.608115][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.625883][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.637293][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.645880][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.657474][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.682528][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.682643][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.708877][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.708994][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.776787][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.780919][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.873312][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.901349][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.901483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.936977][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.962633][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.962769][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.008617][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.008754][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.053107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.053498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.124357][ T4932] Bluetooth: hci2: command tx timeout [ 83.124412][ T4932] Bluetooth: hci1: command tx timeout [ 83.130004][ T5624] Bluetooth: hci0: command tx timeout [ 83.158682][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.214459][ T5624] Bluetooth: hci5: command tx timeout [ 83.216355][ T5624] Bluetooth: hci4: command tx timeout [ 83.284273][ T5617] Bluetooth: hci3: command tx timeout [ 83.296732][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.326272][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.351258][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.351388][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.420521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.420664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.482328][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.567677][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.567828][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.599554][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.599682][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.812180][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.123613][ T5622] veth0_vlan: entered promiscuous mode [ 84.168948][ T5622] veth1_vlan: entered promiscuous mode [ 84.296636][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.418918][ T5622] veth0_macvtap: entered promiscuous mode [ 84.473510][ T5622] veth1_macvtap: entered promiscuous mode [ 84.612400][ T5629] veth0_vlan: entered promiscuous mode [ 84.622407][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.660331][ T5629] veth1_vlan: entered promiscuous mode [ 84.675731][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.766516][ T3238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767631][ T3238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767678][ T3238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767727][ T3238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.847271][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.991065][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.001102][ T5629] veth0_macvtap: entered promiscuous mode [ 85.051271][ T5629] veth1_macvtap: entered promiscuous mode [ 85.106523][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.106578][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.193221][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.204434][ T5624] Bluetooth: hci1: command tx timeout [ 85.204488][ T5624] Bluetooth: hci2: command tx timeout [ 85.205387][ T5617] Bluetooth: hci0: command tx timeout [ 85.251228][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.259509][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.285707][ T4932] Bluetooth: hci5: command tx timeout [ 85.285782][ T5617] Bluetooth: hci4: command tx timeout [ 85.309450][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.309495][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.326166][ T5630] veth0_vlan: entered promiscuous mode [ 85.367160][ T5617] Bluetooth: hci3: command tx timeout [ 85.388685][ T5630] veth1_vlan: entered promiscuous mode [ 85.435950][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.436050][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.436117][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.436169][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.594292][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.609339][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.678602][ T5630] veth0_macvtap: entered promiscuous mode [ 85.706294][ T5630] veth1_macvtap: entered promiscuous mode [ 85.712502][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.712553][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.876984][ T3238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.877036][ T3238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.930831][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.008253][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.025323][ T857] cfg80211: failed to load regulatory.db [ 86.043610][ T5615] veth0_vlan: entered promiscuous mode [ 86.087045][ T3361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.113710][ T5615] veth1_vlan: entered promiscuous mode [ 86.188269][ T5614] veth0_vlan: entered promiscuous mode [ 86.264744][ T3238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.264829][ T3238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.264868][ T3238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.270404][ T5614] veth1_vlan: entered promiscuous mode [ 86.374627][ T857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.462843][ T5628] veth0_vlan: entered promiscuous mode [ 86.470931][ T3238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.470971][ T3238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.480440][ T5615] veth0_macvtap: entered promiscuous mode [ 86.521396][ T5615] veth1_macvtap: entered promiscuous mode [ 86.540877][ T5614] veth0_macvtap: entered promiscuous mode [ 86.549596][ T857] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 86.569509][ T5628] veth1_vlan: entered promiscuous mode [ 86.578715][ T5614] veth1_macvtap: entered promiscuous mode [ 86.586650][ T857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.586700][ T857] usb 4-1: Product: syz [ 86.586727][ T857] usb 4-1: Manufacturer: syz [ 86.586751][ T857] usb 4-1: SerialNumber: syz [ 86.620104][ T5859] ubi0: attaching mtd0 [ 86.628393][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.628444][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.633909][ T5859] ubi0: scanning is finished [ 86.633928][ T5859] ubi0: empty MTD device detected [ 86.650618][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.665471][ T857] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 86.674687][ T857] usb 4-1: setting power ON [ 86.697004][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.734344][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.760709][ T5628] veth0_macvtap: entered promiscuous mode [ 86.784446][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.785584][ T1089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.792229][ T5860] UBIFS error (pid: 5860): cannot open "ubi0_0", error -19 [ 86.838125][ T5628] veth1_macvtap: entered promiscuous mode [ 86.898767][ T857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.909485][ T857] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 86.920602][ T857] usb 4-1: media controller created [ 86.956627][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.966092][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967229][ T3238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967278][ T3238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967321][ T3238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967363][ T3238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967405][ T3238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.967448][ T3238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.022318][ T5859] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.022346][ T5859] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 87.022367][ T5859] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 87.022387][ T5859] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 87.022407][ T5859] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 87.022426][ T5859] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 87.022446][ T5859] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 241183573 [ 87.022469][ T5859] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 87.022922][ T5868] ubi0: background thread "ubi_bgt0d" started, PID 5868 [ 87.110480][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.132569][ T857] usb 4-1: selecting invalid altsetting 6 [ 87.138944][ T857] usb 4-1: digital interface selection failed (-22) [ 87.145739][ T857] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 87.156086][ T857] usb 4-1: setting power OFF [ 87.156964][ T857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 87.156994][ T857] usb 4-1: setting power ON [ 87.193794][ T5870] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 87.193883][ T5870] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 87.231459][ T5870] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 87.231550][ T5870] UBIFS error (pid: 5870): cannot open "ubi0_0", error -19 [ 87.313942][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.360981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.361045][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.482198][ T5866] ftl_cs: FTL header not found. [ 87.561296][ T5866] block2mtd: mtd1: [/dev/ram1] erase_size = 64KiB [65536] [ 87.615113][ T3238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615196][ T3238] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615237][ T3238] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615276][ T3238] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861415][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.861460][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.906429][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 87.906528][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 87.910276][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 87.928986][ T5883] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 87.929066][ T5883] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 87.929125][ T5883] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 87.942311][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.942335][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.951419][ T5883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.019800][ T5883] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.066919][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.075677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.180381][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.241738][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.241788][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.248113][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.279979][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.412788][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.423416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.423457][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.468624][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.524749][ T5883] dummy0 speed is unknown, defaulting to 1000 [ 88.536254][ T5890] loop0: detected capacity change from 0 to 131072 [ 88.701666][ T5893] ubi: ubi0 already exists [ 88.814417][ T5893] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 88.832897][ T5893] UBIFS error (pid: 5893): cannot open "ubi0_0", error -19 [ 88.950272][ T5900] CIFS: Attempting to mount //127.0.0.1/share [ 89.027010][ T5903] ubi1: attaching mtd1 [ 89.049750][ T5900] CIFS: VFS: Error connecting to socket. Aborting operation. [ 89.049902][ T5900] CIFS: VFS: cifs_mount failed w/return code = -111 [ 89.114898][ T5903] ubi1: scanning is finished [ 89.120873][ T5903] ubi1: empty MTD device detected [ 89.195271][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.216057][ T857] dvb-usb: bulk message failed: -110 (2/0) [ 89.235078][ T5890] ftl_cs: FTL header not found. [ 89.344909][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 89.346195][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.389603][ T5901] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 89.398544][ T5901] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 89.409055][ T5901] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 89.417722][ T5901] UBIFS error (pid: 5901): cannot open "ubi0_0", error -19 [ 89.422221][ T5903] ubi1: attached mtd1 (name "block2mtd: /dev/ram1", size 4 MiB) [ 89.422265][ T5903] ubi1: PEB size: 65536 bytes (64 KiB), LEB size: 65408 bytes [ 89.423173][ T5903] ubi1: min./max. I/O unit sizes: 1/4096, sub-page size 1 [ 89.423196][ T5903] ubi1: VID header offset: 64 (aligned 64), data offset: 128 [ 89.423216][ T5903] ubi1: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0 [ 89.423235][ T5903] ubi1: user volume: 0, internal volumes: 1, max. volumes count: 128 [ 89.423256][ T5903] ubi1: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1226858659 [ 89.423279][ T5903] ubi1: available PEBs: 60, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 89.429853][ T5907] ubi1: background thread "ubi_bgt1d" started, PID 5907 [ 89.523179][ T857] usb 4-1: analog interface selection failed (-71) [ 89.539797][ T5890] block2mtd: mtd2: [/dev/loop0] erase_size = 64KiB [65536] [ 89.579652][ T5877] infiniband rxe0: set active [ 89.588089][ T5877] infiniband rxe0: added veth0 [ 89.623792][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 89.756320][ T5877] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 89.773261][ T5877] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 89.801514][ T5877] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 89.852050][ T3097] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.882009][ T5896] ftl_cs: FTL header not found. [ 89.945726][ T857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 89.955766][ T857] dvb_usb_cxusb 4-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 89.955945][ T3361] usb 5-1: Unsupported hardware version: 0x41000168 [ 89.955969][ T3361] usb 5-1: could not get hw params (-22) [ 89.956126][ T3361] usb 5-1: could not probe fw (-22) [ 89.998347][ T857] usb 4-1: USB disconnect, device number 2 [ 90.015238][ T3097] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 90.026318][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.112894][ T5877] RDS/IB: rxe0: added [ 90.119401][ T5877] smc: adding ib device rxe0 with port count 1 [ 90.129911][ T5877] smc: ib device rxe0 port 1 has no pnetid [ 90.163509][ T5896] block2mtd: mtd3: [/dev/ram0] erase_size = 64KiB [65536] [ 90.212370][ T3097] gspca_main: spca501-2.14.0 probing 0000:0000 [ 90.671807][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.690842][ T5917] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 90.719826][ T3097] gspca_spca501: reg write: error -110 [ 90.719873][ T3097] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 90.719957][ T3097] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 90.836092][ T5925] NFSD: Failed to start, no listeners configured. [ 91.488276][ T5946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.985323][ T5954] block2mtd: error: cannot open device /dev/loop0 [ 91.986725][ T5954] ubi: mtd1 is already attached to ubi1 [ 92.039989][ T5956] Zero length message leads to an empty skb [ 92.206674][ T5956] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 92.223549][ T5956] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 92.252972][ T5957] UBIFS error (ubi0:0 pid 5957): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 92.472279][ T44] usb 3-1: USB disconnect, device number 2 [ 92.866610][ T5962] CIFS: Attempting to mount //127.0.0.1/share [ 92.869774][ T5962] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.869822][ T5962] CIFS: VFS: cifs_mount failed w/return code = -111 [ 93.091141][ T5967] kAFS: unable to lookup cell '127.0.0.1' [ 93.276897][ T3097] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 93.283012][ T3097] wiimote 0005:057E:0306.0001: New device registered [ 93.374759][ T5779] usb 5-1: USB disconnect, device number 2 [ 93.378259][ T5977] md: could not open device unknown-block(1,0). [ 93.455565][ T5740] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.614055][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 93.620583][ T5740] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.633301][ T5740] usb 1-1: config index 0 descriptor too short (expected 43, got 41) [ 93.633376][ T5740] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.633443][ T5740] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 93.633497][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.660767][ T5982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.676605][ T5980] md: could not open device unknown-block(7,0). [ 93.999961][ T5971] wiimote 0005:057E:0306.0001: Device removed [ 94.304780][ T5987] rdma_rxe: rxe_newlink: failed to add lo [ 94.316134][ T5936] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 94.325352][ T3097] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 94.344478][ T5936] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 94.361955][ T5936] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 94.388948][ T5936] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.447039][ T3097] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 94.493498][ T3097] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 94.521457][ T3097] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 94.763427][ T6006] CIFS: Attempting to mount //127.0.0.1/share [ 94.818545][ T6007] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 95.214072][ T5763] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.367939][ T5763] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 95.371141][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.371167][ T5763] usb 6-1: Product: syz [ 95.371185][ T5763] usb 6-1: Manufacturer: syz [ 95.371202][ T5763] usb 6-1: SerialNumber: syz [ 95.591226][ T6006] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 95.591436][ T6006] CIFS: VFS: cifs_mount failed w/return code = -11 [ 95.967128][ T6017] block2mtd: error: cannot open device /dev/loop0 [ 95.980478][ T6017] ubi: mtd1 is already attached to ubi1 [ 96.035370][ T6018] ubi0 error: ubi_create_volume: volume 0 already exists [ 96.035453][ T6018] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 96.106949][ T6017] UBIFS error (ubi0:0 pid 6017): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 96.259160][ T5740] usbhid 1-1:1.0: can't add hid device: -71 [ 96.259301][ T5740] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 96.265997][ T5740] usb 1-1: USB disconnect, device number 2 [ 96.429310][ T6020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.534989][ T6022] md: could not open device unknown-block(1,0). [ 96.705767][ T6027] md: could not open device unknown-block(7,0). [ 96.999633][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 97.009200][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 97.265868][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 97.777503][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 97.791632][ T6037] ceph: No mds server is up or the cluster is laggy [ 98.184070][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.335014][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 98.335062][ T10] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 98.336412][ T10] usb 4-1: config index 0 descriptor too short (expected 87, got 69) [ 98.336439][ T10] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 98.336521][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.336567][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.350343][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 99.054163][ T10] gspca_spca501: reg write: error -110 [ 99.054197][ T10] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 99.054341][ T10] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 99.057414][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 99.057478][ T10] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 99.057500][ T10] uvcvideo 4-1:1.0: Entity type for entity Input 1 was not initialized! [ 99.770392][ T44] usb 4-1: USB disconnect, device number 3 [ 99.981590][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 99.981676][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 99.983300][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.000067][ T5763] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 100.018864][ T5763] usb 6-1: USB disconnect, device number 2 [ 100.128768][ T6048] CIFS: Attempting to mount //127.0.0.1/share [ 100.181584][ T6048] CIFS: VFS: challenge blob len 0 too small [ 100.181905][ T6048] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 100.182320][ T6048] CIFS: VFS: cifs_mount failed w/return code = -22 [ 100.252871][ T5763] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 100.253215][ T5763] wiimote 0005:057E:0306.0002: New device registered [ 100.256947][ T6051] wiimote 0005:057E:0306.0002: Device removed [ 100.399976][ T6053] fido_id[6053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.465039][ T5739] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 100.469121][ T5739] wiimote 0005:057E:0306.0003: New device registered [ 100.517861][ T6060] ubi: mtd1 is already attached to ubi1 [ 100.572264][ T6058] ubi0 error: ubi_create_volume: volume 0 already exists [ 100.572361][ T6058] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 100.628986][ T6055] UBIFS error (ubi0:0 pid 6055): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 100.841953][ T6062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.994536][ T6064] md: could not open device unknown-block(1,0). [ 101.214701][ T6070] md: could not open device unknown-block(7,0). [ 101.261317][ T6056] wiimote 0005:057E:0306.0003: Device removed [ 101.524108][ T5739] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 101.524644][ T5739] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 101.524678][ T5739] CPU: 0 UID: 0 PID: 5739 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 101.524710][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.524726][ T5739] Workqueue: events wiimote_init_worker [ 101.524772][ T5739] Call Trace: [ 101.524783][ T5739] [ 101.524794][ T5739] dump_stack_lvl+0xe8/0x150 [ 101.524838][ T5739] sysfs_warn_dup+0x8e/0xa0 [ 101.524882][ T5739] sysfs_do_create_link_sd+0xc0/0x110 [ 101.524932][ T5739] device_add_class_symlinks+0x1cf/0x240 [ 101.524981][ T5739] device_add+0x467/0xb80 [ 101.525022][ T5739] __power_supply_register+0xb88/0xf60 [ 101.525057][ T5739] ? __pfx___power_supply_register+0x10/0x10 [ 101.525086][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525113][ T5739] ? trace_kmalloc+0x2a/0xf0 [ 101.525157][ T5739] wiimod_battery_probe+0x202/0x3a0 [ 101.525188][ T5739] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 101.525231][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525258][ T5739] ? input_ff_create_memless+0x2e4/0x600 [ 101.525294][ T5739] wiimote_init_worker+0x20c9/0x2f00 [ 101.525343][ T5739] ? __pfx_wiimote_init_worker+0x10/0x10 [ 101.525390][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525423][ T5739] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.525477][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525510][ T5739] ? lock_acquire+0x115/0x350 [ 101.525541][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525579][ T5739] ? rcu_is_watching+0x16/0xb0 [ 101.525614][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525645][ T5739] ? process_scheduled_works+0x97a/0x1630 [ 101.525681][ T5739] process_scheduled_works+0xc3d/0x1630 [ 101.525715][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525780][ T5739] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.525821][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525850][ T5739] ? assign_work+0x3cf/0x5d0 [ 101.525890][ T5739] worker_thread+0xa47/0xfb0 [ 101.525929][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525969][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.525999][ T5739] ? __kthread_parkme+0x71/0x1f0 [ 101.526050][ T5739] kthread+0x38b/0x480 [ 101.526076][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 101.526109][ T5739] ? __pfx_kthread+0x10/0x10 [ 101.526136][ T5739] ret_from_fork+0x514/0xb70 [ 101.526165][ T5739] ? __pfx_ret_from_fork+0x10/0x10 [ 101.526204][ T5739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.526239][ T5739] ? __switch_to+0xc89/0x1420 [ 101.526278][ T5739] ? __pfx_kthread+0x10/0x10 [ 101.526304][ T5739] ret_from_fork_asm+0x1a/0x30 [ 101.526363][ T5739] [ 101.612055][ T5739] wiimote 0005:057E:0306.0003: cannot register battery device [ 101.734070][ T5763] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.890816][ T5763] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.890902][ T5763] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 101.892109][ T5763] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.900074][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.900103][ T5763] usb 4-1: Product: syz [ 101.900120][ T5763] usb 4-1: Manufacturer: syz [ 101.900138][ T5763] usb 4-1: SerialNumber: syz [ 101.952980][ T6076] FAULT_INJECTION: forcing a failure. [ 101.952980][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.953073][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.953102][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.953115][ T6076] Call Trace: [ 101.953124][ T6076] [ 101.953133][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.953177][ T6076] should_fail_ex+0x410/0x560 [ 101.953229][ T6076] _copy_from_user+0x2d/0xb0 [ 101.953259][ T6076] get_timespec64+0x96/0x1b0 [ 101.953289][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.953320][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.953360][ T6076] __se_sys_futex+0x19a/0x450 [ 101.953400][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.953430][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.953461][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.953497][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.953526][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.953562][ T6076] do_syscall_64+0x166/0x520 [ 101.953600][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.953632][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.953658][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.953681][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.953701][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.953727][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.953746][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.953762][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.953778][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.953795][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.953833][ T6076] [ 101.953870][ T6076] FAULT_INJECTION: forcing a failure. [ 101.953870][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.953898][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.953924][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.953938][ T6076] Call Trace: [ 101.953947][ T6076] [ 101.953960][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.953997][ T6076] should_fail_ex+0x410/0x560 [ 101.954041][ T6076] _copy_from_user+0x2d/0xb0 [ 101.954069][ T6076] get_timespec64+0x96/0x1b0 [ 101.954099][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.954131][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.954170][ T6076] __se_sys_futex+0x19a/0x450 [ 101.954210][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.954244][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.954276][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.954312][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.954341][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.954377][ T6076] do_syscall_64+0x166/0x520 [ 101.954414][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.954447][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.954472][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.954493][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.954513][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.954536][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.954553][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.954569][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.954586][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.954603][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.954641][ T6076] [ 101.956806][ T6076] FAULT_INJECTION: forcing a failure. [ 101.956806][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.956866][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.956892][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.956905][ T6076] Call Trace: [ 101.956915][ T6076] [ 101.956925][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.956963][ T6076] should_fail_ex+0x410/0x560 [ 101.957010][ T6076] _copy_from_user+0x2d/0xb0 [ 101.957039][ T6076] get_timespec64+0x96/0x1b0 [ 101.957069][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.957110][ T6076] __se_sys_futex+0x19a/0x450 [ 101.957147][ T6076] ? exc_page_fault+0x6a/0xc0 [ 101.957183][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.957222][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.957258][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.957287][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.957323][ T6076] do_syscall_64+0x166/0x520 [ 101.957359][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.957384][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.957417][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.957442][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.957464][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.957483][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.957509][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.957526][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.957543][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.957559][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.957576][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.957613][ T6076] [ 101.957647][ T6076] FAULT_INJECTION: forcing a failure. [ 101.957647][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.957674][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.957700][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.957713][ T6076] Call Trace: [ 101.957722][ T6076] [ 101.957735][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.957772][ T6076] should_fail_ex+0x410/0x560 [ 101.957815][ T6076] _copy_from_user+0x2d/0xb0 [ 101.957844][ T6076] get_timespec64+0x96/0x1b0 [ 101.957873][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.957914][ T6076] __se_sys_futex+0x19a/0x450 [ 101.957951][ T6076] ? exc_page_fault+0x6a/0xc0 [ 101.957986][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.958020][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.958056][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.958085][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.958120][ T6076] do_syscall_64+0x166/0x520 [ 101.958156][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.958180][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.958213][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.958242][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.958263][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.958282][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.958306][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.958324][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.958340][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.958356][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.958373][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.958410][ T6076] [ 101.966008][ T6076] FAULT_INJECTION: forcing a failure. [ 101.966008][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.966040][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.966070][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.966084][ T6076] Call Trace: [ 101.966093][ T6076] [ 101.966103][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.966142][ T6076] should_fail_ex+0x410/0x560 [ 101.966186][ T6076] _copy_from_user+0x2d/0xb0 [ 101.966220][ T6076] get_timespec64+0x96/0x1b0 [ 101.966250][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.966291][ T6076] __se_sys_futex+0x19a/0x450 [ 101.966331][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.966363][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.966398][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.966428][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.966463][ T6076] do_syscall_64+0x166/0x520 [ 101.966503][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.966527][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.966560][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.966586][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.966607][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.966627][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.966652][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.966669][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.966685][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.966702][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.966719][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.966757][ T6076] [ 101.969652][ T6076] FAULT_INJECTION: forcing a failure. [ 101.969652][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.969684][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.969713][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.969727][ T6076] Call Trace: [ 101.969736][ T6076] [ 101.969746][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.969784][ T6076] should_fail_ex+0x410/0x560 [ 101.969829][ T6076] _copy_from_user+0x2d/0xb0 [ 101.969857][ T6076] get_timespec64+0x96/0x1b0 [ 101.969887][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.969928][ T6076] __se_sys_futex+0x19a/0x450 [ 101.969968][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.970000][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.970037][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.970066][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.970101][ T6076] do_syscall_64+0x166/0x520 [ 101.970138][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.970163][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.970195][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.970223][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.970245][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.970264][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.970289][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.970307][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.970323][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.970339][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.970356][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.970393][ T6076] [ 101.973356][ T6076] FAULT_INJECTION: forcing a failure. [ 101.973356][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.973387][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.973413][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.973427][ T6076] Call Trace: [ 101.973436][ T6076] [ 101.973446][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.973488][ T6076] should_fail_ex+0x410/0x560 [ 101.973532][ T6076] _copy_from_user+0x2d/0xb0 [ 101.973561][ T6076] get_timespec64+0x96/0x1b0 [ 101.973592][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.973633][ T6076] __se_sys_futex+0x19a/0x450 [ 101.973672][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.973705][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.973741][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.973770][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.973806][ T6076] do_syscall_64+0x166/0x520 [ 101.973842][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.973867][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.973899][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.973924][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.973945][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.973965][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.973990][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.974008][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.974024][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.974040][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.974057][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.974094][ T6076] [ 101.974351][ T6076] FAULT_INJECTION: forcing a failure. [ 101.974351][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.974380][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.974406][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.974419][ T6076] Call Trace: [ 101.974429][ T6076] [ 101.974438][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.974478][ T6076] should_fail_ex+0x410/0x560 [ 101.974522][ T6076] _copy_from_user+0x2d/0xb0 [ 101.974550][ T6076] get_timespec64+0x96/0x1b0 [ 101.974580][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.974621][ T6076] __se_sys_futex+0x19a/0x450 [ 101.974660][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.974692][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.974729][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.974758][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.974794][ T6076] do_syscall_64+0x166/0x520 [ 101.974830][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.974854][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.974887][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.974912][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.974933][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.974952][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.974977][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.974994][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.975010][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.975026][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.975043][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.975080][ T6076] [ 101.980606][ T6076] FAULT_INJECTION: forcing a failure. [ 101.980606][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.980665][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.980692][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.980707][ T6076] Call Trace: [ 101.980716][ T6076] [ 101.980726][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.980764][ T6076] should_fail_ex+0x410/0x560 [ 101.980811][ T6076] _copy_from_user+0x2d/0xb0 [ 101.980840][ T6076] get_timespec64+0x96/0x1b0 [ 101.980870][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.980911][ T6076] __se_sys_futex+0x19a/0x450 [ 101.980950][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.980982][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.981019][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.981048][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.981084][ T6076] do_syscall_64+0x166/0x520 [ 101.981120][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.981144][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.981176][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.981202][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.981227][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.981247][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.981272][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.981289][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.981305][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.981322][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.981339][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.981376][ T6076] [ 101.981414][ T6076] FAULT_INJECTION: forcing a failure. [ 101.981414][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.981441][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.981466][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.981480][ T6076] Call Trace: [ 101.981489][ T6076] [ 101.981499][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.981539][ T6076] should_fail_ex+0x410/0x560 [ 101.981582][ T6076] _copy_from_user+0x2d/0xb0 [ 101.981610][ T6076] get_timespec64+0x96/0x1b0 [ 101.981639][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.981680][ T6076] __se_sys_futex+0x19a/0x450 [ 101.981720][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.981752][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.981788][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.981817][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.981853][ T6076] do_syscall_64+0x166/0x520 [ 101.981889][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.981913][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.981945][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.981970][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.981991][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.982011][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.982035][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.982053][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.982069][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.982085][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.982102][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.982139][ T6076] [ 101.982174][ T6076] FAULT_INJECTION: forcing a failure. [ 101.982174][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.982200][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.982232][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.982246][ T6076] Call Trace: [ 101.982255][ T6076] [ 101.982265][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.982301][ T6076] should_fail_ex+0x410/0x560 [ 101.982344][ T6076] _copy_from_user+0x2d/0xb0 [ 101.982373][ T6076] get_timespec64+0x96/0x1b0 [ 101.982402][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.982443][ T6076] __se_sys_futex+0x19a/0x450 [ 101.982482][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.982514][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.982551][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.982580][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.982616][ T6076] do_syscall_64+0x166/0x520 [ 101.982651][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.982675][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.982707][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.982732][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.982754][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.982773][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.982797][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.982815][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.982831][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.982847][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.982864][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.982901][ T6076] [ 101.991006][ T6076] FAULT_INJECTION: forcing a failure. [ 101.991006][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.991040][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.991066][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.991081][ T6076] Call Trace: [ 101.991090][ T6076] [ 101.991100][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.991143][ T6076] should_fail_ex+0x410/0x560 [ 101.991190][ T6076] _copy_from_user+0x2d/0xb0 [ 101.991225][ T6076] get_timespec64+0x96/0x1b0 [ 101.991256][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.991297][ T6076] __se_sys_futex+0x19a/0x450 [ 101.991337][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.991369][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.991405][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.991434][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.991470][ T6076] do_syscall_64+0x166/0x520 [ 101.991507][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.991531][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.991563][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.991588][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.991610][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.991630][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.991655][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.991673][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.991689][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.991706][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.991742][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.991779][ T6076] [ 101.991817][ T6076] FAULT_INJECTION: forcing a failure. [ 101.991817][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.991844][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.991869][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.991883][ T6076] Call Trace: [ 101.991893][ T6076] [ 101.991902][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.991942][ T6076] should_fail_ex+0x410/0x560 [ 101.991988][ T6076] _copy_from_user+0x2d/0xb0 [ 101.992017][ T6076] get_timespec64+0x96/0x1b0 [ 101.992046][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.992088][ T6076] __se_sys_futex+0x19a/0x450 [ 101.992128][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.992160][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.992196][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.992230][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.992266][ T6076] do_syscall_64+0x166/0x520 [ 101.992302][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.992327][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.992359][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.992384][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.992405][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.992425][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.992449][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.992466][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.992482][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.992499][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.992516][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.992553][ T6076] [ 101.997691][ T6076] FAULT_INJECTION: forcing a failure. [ 101.997691][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.997723][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.997750][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.997764][ T6076] Call Trace: [ 101.997774][ T6076] [ 101.997784][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.997826][ T6076] should_fail_ex+0x410/0x560 [ 101.997871][ T6076] _copy_from_user+0x2d/0xb0 [ 101.997899][ T6076] get_timespec64+0x96/0x1b0 [ 101.997929][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.997970][ T6076] __se_sys_futex+0x19a/0x450 [ 101.998010][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.998042][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.998078][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.998107][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.998144][ T6076] do_syscall_64+0x166/0x520 [ 101.998180][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.998204][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.998240][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.998265][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.998287][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.998306][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.998332][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.998349][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.998365][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.998382][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.998399][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.998436][ T6076] [ 101.998491][ T6076] FAULT_INJECTION: forcing a failure. [ 101.998491][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 101.998519][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 101.998545][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 101.998558][ T6076] Call Trace: [ 101.998568][ T6076] [ 101.998578][ T6076] dump_stack_lvl+0xe8/0x150 [ 101.998617][ T6076] should_fail_ex+0x410/0x560 [ 101.998661][ T6076] _copy_from_user+0x2d/0xb0 [ 101.998689][ T6076] get_timespec64+0x96/0x1b0 [ 101.998720][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 101.998761][ T6076] __se_sys_futex+0x19a/0x450 [ 101.998800][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 101.998832][ T6076] ? rcu_is_watching+0x16/0xb0 [ 101.998868][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.998897][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 101.998933][ T6076] do_syscall_64+0x166/0x520 [ 101.998969][ T6076] ? trace_irq_disable+0x3b/0x140 [ 101.998993][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.999025][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.999051][ T6076] RIP: 0033:0x7f2e90b9e159 [ 101.999072][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.999091][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.999115][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 101.999133][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 101.999149][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.999165][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 101.999182][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 101.999223][ T6076] [ 102.013410][ T6076] FAULT_INJECTION: forcing a failure. [ 102.013410][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 102.013447][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 102.013474][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 102.013488][ T6076] Call Trace: [ 102.013498][ T6076] [ 102.013511][ T6076] dump_stack_lvl+0xe8/0x150 [ 102.013551][ T6076] should_fail_ex+0x410/0x560 [ 102.013596][ T6076] _copy_from_user+0x2d/0xb0 [ 102.013624][ T6076] get_timespec64+0x96/0x1b0 [ 102.013654][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 102.013685][ T6076] ? __se_sys_futex+0x90/0x450 [ 102.013724][ T6076] __se_sys_futex+0x19a/0x450 [ 102.013764][ T6076] ? __pfx___se_sys_futex+0x10/0x10 [ 102.013796][ T6076] ? rcu_is_watching+0x16/0xb0 [ 102.013832][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.013861][ T6076] ? __x64_sys_futex+0x21/0xf0 [ 102.013897][ T6076] do_syscall_64+0x166/0x520 [ 102.013934][ T6076] ? trace_irq_disable+0x3b/0x140 [ 102.013959][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.013991][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.014018][ T6076] RIP: 0033:0x7f2e90b9e159 [ 102.014040][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.014059][ T6076] RSP: 002b:00007ffc0acedb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.014084][ T6076] RAX: ffffffffffffffda RBX: 0000000000018e29 RCX: 00007f2e90b9e159 [ 102.014102][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e90e25fac [ 102.014119][ T6076] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 102.014135][ T6076] R10: 00007ffc0acedc60 R11: 0000000000000246 R12: 00007ffc0acedc80 [ 102.014152][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 102.014189][ T6076] [ 102.019435][ T6076] FAULT_INJECTION: forcing a failure. [ 102.019435][ T6076] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 102.019467][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 102.019497][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 102.019511][ T6076] Call Trace: [ 102.019521][ T6076] [ 102.019531][ T6076] dump_stack_lvl+0xe8/0x150 [ 102.019569][ T6076] should_fail_ex+0x410/0x560 [ 102.019614][ T6076] _copy_from_user+0x2d/0xb0 [ 102.019643][ T6076] get_timespec64+0x96/0x1b0 [ 102.019674][ T6076] ? __pfx_get_timespec64+0x10/0x10 [ 102.019715][ T6076] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 102.019757][ T6076] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 102.019793][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.019830][ T6076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.019864][ T6076] do_syscall_64+0x166/0x520 [ 102.019901][ T6076] ? trace_irq_disable+0x3b/0x140 [ 102.019926][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.019958][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.019983][ T6076] RIP: 0033:0x7f2e90b5e98e [ 102.020005][ T6076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.020025][ T6076] RSP: 002b:00007ffc0acedad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 102.020050][ T6076] RAX: ffffffffffffffda RBX: 000055557c715500 RCX: 00007f2e90b5e98e [ 102.020069][ T6076] RDX: 00007ffc0acedb30 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.020085][ T6076] RBP: 00007f2e90e27da0 R08: 0000000000000000 R09: 0000000000000000 [ 102.020100][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000019134 [ 102.020116][ T6076] R13: 00007f2e90e25fac R14: 0000000000018e5b R15: 00007ffc0acedc60 [ 102.020153][ T6076] [ 102.375323][ T30] audit: type=1800 audit(1788451224.900:2): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.67" name="local" dev="configfs" ino=10618 res=0 errno=0 [ 102.412261][ T6081] dlm: no local IP address has been set [ 102.412277][ T6081] dlm: cannot start dlm midcomms -107 [ 102.413876][ T6083] dlm: no local IP address has been set [ 102.413888][ T6083] dlm: cannot start dlm midcomms -107 [ 103.381066][ T6087] CIFS: Attempting to mount //127.0.0.1/share [ 103.382502][ T6087] CIFS: VFS: Error connecting to socket. Aborting operation. [ 103.382547][ T6087] CIFS: VFS: cifs_mount failed w/return code = -111 [ 103.579435][ T5763] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 103.686575][ T5763] usb 4-1: USB disconnect, device number 4 [ 103.831990][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.405375][ T6095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.803185][ T6100] ubi: mtd1 is already attached to ubi1 [ 104.856662][ T6099] ubi0 error: ubi_create_volume: volume 0 already exists [ 104.856721][ T6099] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 104.937957][ T6101] UBIFS error (ubi0:0 pid 6101): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 105.295978][ T6103] md: could not open device unknown-block(1,0). [ 105.504442][ T6107] md: could not open device unknown-block(7,0). [ 105.893795][ T6115] ceph: Unknown parameter '127.0.0.1:6789:/' [ 106.204373][ T6121] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 106.204373][ T6121] [ 106.204545][ T6121] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 106.204673][ T6121] CIFS: Attempting to mount //172.20.20.170/share [ 106.255443][ T6121] CIFS: VFS: cifs_mount failed w/return code = -112 [ 106.337277][ T6125] siw: device registration error -23 [ 107.218974][ T6130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.278359][ T5749] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.300408][ T6132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.435327][ T5749] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 107.436875][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.465806][ T6135] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 107.465863][ T6135] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 107.468944][ T6135] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 107.468968][ T6135] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 107.634231][ T6137] md: could not open device unknown-block(1,0). [ 107.709481][ T5749] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 26:57:3d:d1:c8:1e [ 107.844189][ T6142] md: could not open device unknown-block(7,0). [ 109.410055][ T4932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.417402][ T4932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.418912][ T4932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.419937][ T4932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.420810][ T4932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.574086][ T5739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.635901][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.646493][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.647780][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.648745][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.649374][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.726266][ T5739] usb 6-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 109.739366][ T5739] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4096, setting to 1024 [ 109.751072][ T5739] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 109.761397][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.780449][ T5739] gspca_main: se401-2.14.0 probing 03e8:0004 [ 110.183376][ T5739] gspca_se401: Wrong descriptor type [ 111.444387][ T5617] Bluetooth: hci6: command tx timeout [ 111.684988][ T5617] Bluetooth: hci7: command tx timeout [ 112.570899][ T4932] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 112.577862][ T4932] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 112.578403][ T4932] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 112.579751][ T4932] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 112.581087][ T4932] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 112.773280][ T9] usb 6-1: USB disconnect, device number 3 [ 112.837015][ T6188] Bluetooth: ISO socket layer initialized [ 112.904977][ T6190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.150394][ T9] usb 3-1: USB disconnect, device number 3 [ 113.160635][ T9] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 113.424771][ T6207] md: could not open device unknown-block(1,0). [ 113.539899][ T4932] Bluetooth: hci6: command tx timeout [ 113.764534][ T4932] Bluetooth: hci7: command tx timeout [ 113.998602][ T6226] md: could not open device unknown-block(7,0). [ 114.549797][ T6171] dummy0 speed is unknown, defaulting to 1000 [ 114.645183][ T4932] Bluetooth: hci8: command tx timeout [ 115.253437][ T6183] dummy0 speed is unknown, defaulting to 1000 [ 115.604105][ T4932] Bluetooth: hci6: command tx timeout [ 115.620065][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.628396][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.636498][ T6171] bridge_slave_0: entered allmulticast mode [ 115.651371][ T6171] bridge_slave_0: entered promiscuous mode [ 115.681173][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.681312][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.681476][ T6171] bridge_slave_1: entered allmulticast mode [ 115.715118][ T6171] bridge_slave_1: entered promiscuous mode [ 115.811831][ T6176] dummy0 speed is unknown, defaulting to 1000 [ 115.825635][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.851647][ T4932] Bluetooth: hci7: command tx timeout [ 115.873713][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.884177][ T6240] NFSD: Unable to initialize client recovery tracking! (-110) [ 115.884216][ T6240] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 115.884236][ T6240] NFSD: starting 90-second grace period (net f0000559) [ 116.018302][ T6171] team0: Port device team_slave_0 added [ 116.038090][ T6171] team0: Port device team_slave_1 added [ 116.187656][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.187698][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.187750][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.276360][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.276404][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.276456][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.565904][ T6171] hsr_slave_0: entered promiscuous mode [ 116.567228][ T6171] hsr_slave_1: entered promiscuous mode [ 116.568135][ T6171] debugfs: 'hsr0' already exists in 'hsr' [ 116.568155][ T6171] Cannot create hsr debugfs directory [ 116.725622][ T4932] Bluetooth: hci8: command tx timeout [ 116.854877][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 116.943705][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.943917][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.944839][ T6183] bridge_slave_0: entered allmulticast mode [ 116.947074][ T6183] bridge_slave_0: entered promiscuous mode [ 116.973362][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.973775][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.975514][ T6183] bridge_slave_1: entered allmulticast mode [ 116.977594][ T6183] bridge_slave_1: entered promiscuous mode [ 117.049694][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.090104][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.200098][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.200631][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.201196][ T6176] bridge_slave_0: entered allmulticast mode [ 117.203804][ T6176] bridge_slave_0: entered promiscuous mode [ 117.212050][ T6183] team0: Port device team_slave_0 added [ 117.225345][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.225549][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.226011][ T6176] bridge_slave_1: entered allmulticast mode [ 117.236599][ T6176] bridge_slave_1: entered promiscuous mode [ 117.251227][ T6183] team0: Port device team_slave_1 added [ 117.372320][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.374014][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.374056][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.374086][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.393835][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.396358][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.396375][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.396405][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.539403][ T6176] team0: Port device team_slave_0 added [ 117.587515][ T6176] team0: Port device team_slave_1 added [ 117.605911][ T6183] hsr_slave_0: entered promiscuous mode [ 117.614913][ T6183] hsr_slave_1: entered promiscuous mode [ 117.621460][ T6183] debugfs: 'hsr0' already exists in 'hsr' [ 117.627436][ T6183] Cannot create hsr debugfs directory [ 117.671280][ T6271] CIFS: Attempting to mount //127.0.0.1/share [ 117.684465][ T4932] Bluetooth: hci6: command tx timeout [ 117.729920][ T6271] CIFS: VFS: cifs_mount failed w/return code = -112 [ 117.759113][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.767041][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.793397][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.808102][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.815314][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.841455][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.924298][ T4932] Bluetooth: hci7: command tx timeout [ 117.934953][ T6171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.949267][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.975116][ T6171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.987845][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.996327][ T6171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.011928][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.025521][ T9] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 118.026414][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 118.026450][ T9] usb 3-1: can't read configurations, error -71 [ 118.092686][ T6171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.106914][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.163220][ T6176] hsr_slave_0: entered promiscuous mode [ 118.176438][ T6176] hsr_slave_1: entered promiscuous mode [ 118.183246][ T6176] debugfs: 'hsr0' already exists in 'hsr' [ 118.189584][ T6176] Cannot create hsr debugfs directory [ 118.549616][ T6183] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 118.569716][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.570683][ T6183] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 118.604201][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.637944][ T6183] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 118.699768][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.702569][ T6183] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 118.723687][ T6283] CIFS: Attempting to mount //127.0.0.1/share [ 118.730308][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.804851][ T4932] Bluetooth: hci8: command tx timeout [ 118.947277][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.957380][ T6176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 118.972141][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.994559][ T6176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 119.007580][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.019863][ T6176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 119.032418][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.043885][ T6176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 119.061788][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.113313][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.160816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.160941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.210265][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.210428][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.318633][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.391302][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.408997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.409114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.454025][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.454151][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.530212][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.570483][ T6283] CIFS: VFS: cifs_mount failed w/return code = -112 [ 119.587989][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.629069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.629202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.648432][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.648625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.944638][ T6308] md: could not open device unknown-block(7,0). [ 120.395687][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 120.410878][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 120.422078][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 120.432262][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 120.440388][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 120.884802][ T4932] Bluetooth: hci8: command tx timeout [ 121.246792][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.490053][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.890805][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.955772][ T6332] NFSD: Unable to initialize client recovery tracking! (-110) [ 121.957084][ T6332] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 121.957097][ T6332] NFSD: starting 90-second grace period (net f0000559) [ 122.138480][ T6171] veth0_vlan: entered promiscuous mode [ 122.175799][ T6171] veth1_vlan: entered promiscuous mode [ 122.229195][ T6320] dummy0 speed is unknown, defaulting to 1000 [ 122.447892][ T6171] veth0_macvtap: entered promiscuous mode [ 122.473065][ T6171] veth1_macvtap: entered promiscuous mode [ 122.484644][ T4932] Bluetooth: hci9: command tx timeout [ 122.656695][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.743583][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.753103][ T6183] veth0_vlan: entered promiscuous mode [ 122.856890][ T6183] veth1_vlan: entered promiscuous mode [ 122.965905][ T3361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.015797][ T3361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.019436][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.042725][ T6176] veth0_vlan: entered promiscuous mode [ 123.185659][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.228898][ T6176] veth1_vlan: entered promiscuous mode [ 123.238367][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.238410][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.272944][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.273078][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.273260][ T6320] bridge_slave_0: entered allmulticast mode [ 123.276835][ T6320] bridge_slave_0: entered promiscuous mode [ 123.279851][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.279988][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.282032][ T6320] bridge_slave_1: entered allmulticast mode [ 123.286288][ T6320] bridge_slave_1: entered promiscuous mode [ 123.330849][ T6183] veth0_macvtap: entered promiscuous mode [ 123.390277][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.406884][ T6183] veth1_macvtap: entered promiscuous mode [ 123.420099][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.442710][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.442763][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.503138][ T6320] team0: Port device team_slave_0 added [ 123.537084][ T6320] team0: Port device team_slave_1 added [ 123.641417][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.647020][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.647036][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.647064][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.743716][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.757035][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.757093][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.757126][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.809628][ T6176] veth0_macvtap: entered promiscuous mode [ 123.970874][ T6320] hsr_slave_0: entered promiscuous mode [ 123.977250][ T6320] hsr_slave_1: entered promiscuous mode [ 123.979655][ T6320] debugfs: 'hsr0' already exists in 'hsr' [ 123.979674][ T6320] Cannot create hsr debugfs directory [ 123.987023][ T6176] veth1_macvtap: entered promiscuous mode [ 124.134812][ T3361] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.255466][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.265699][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.314746][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.393217][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.419554][ T44] usb 7-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 124.421068][ T44] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 124.421099][ T44] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 124.421143][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.433312][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.433334][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.435232][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.435319][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.459354][ T6398] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 124.459501][ T6398] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 124.554221][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.554328][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.567102][ T5617] Bluetooth: hci9: command tx timeout [ 124.712302][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.712347][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.947141][ T6320] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 124.963045][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.974065][ T6320] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 124.990061][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.998195][ T6320] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 125.008846][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.013872][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.013893][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.014839][ T6320] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 125.029832][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.102585][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.102622][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.195661][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.195729][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.326279][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.372034][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.403917][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.405033][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.441001][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.441143][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.032732][ T9] usb 7-1: USB disconnect, device number 2 [ 126.033314][ T4932] Bluetooth: hci10: Opcode 0x0c03 failed: -71 [ 126.211298][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.573081][ T6320] veth0_vlan: entered promiscuous mode [ 126.605762][ T6320] veth1_vlan: entered promiscuous mode [ 126.645877][ T4932] Bluetooth: hci9: command tx timeout [ 126.667110][ T6320] veth0_macvtap: entered promiscuous mode [ 126.685651][ T6320] veth1_macvtap: entered promiscuous mode [ 126.717197][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.732786][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.794603][ T3338] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.794686][ T3338] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.794758][ T3338] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.794806][ T3338] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.945583][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.945652][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.024468][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.024527][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.540237][ T6456] device-mapper: table: 248:0: zero-length target [ 127.540289][ T6456] device-mapper: ioctl: error adding target to table [ 127.653838][ T5739] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0004/input/input9 [ 127.713111][ T5739] asus 0018:0B05:0101.0004: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 127.713216][ T5739] asus 0018:0B05:0101.0004: Asus failed to start multitouch: -5 [ 127.860093][ T6461] ================================================================== [ 127.860117][ T6461] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 127.860153][ T6461] Read of size 50 at addr ffff88802b7a1400 by task fido_id/6461 [ 127.860174][ T6461] [ 127.860186][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 127.860213][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 127.860228][ T6461] Call Trace: [ 127.860244][ T6461] [ 127.860255][ T6461] dump_stack_lvl+0xe8/0x150 [ 127.860292][ T6461] print_address_description+0x55/0x1e0 [ 127.860326][ T6461] ? report_descriptor_read+0xb5/0x100 [ 127.860357][ T6461] print_report+0x58/0x70 [ 127.860389][ T6461] kasan_report+0x117/0x150 [ 127.860417][ T6461] ? lock_acquire+0x115/0x350 [ 127.860444][ T6461] ? report_descriptor_read+0xb5/0x100 [ 127.860480][ T6461] kasan_check_range+0x264/0x2c0 [ 127.860486][ T5739] asus 0018:0B05:0101.0004: probe with driver asus failed with error -5 [ 127.860509][ T6461] ? report_descriptor_read+0xb5/0x100 [ 127.860540][ T6461] __asan_memcpy+0x29/0x70 [ 127.860577][ T6461] report_descriptor_read+0xb5/0x100 [ 127.860606][ T6461] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 127.860643][ T6461] kernfs_fop_read_iter+0x434/0x6a0 [ 127.860675][ T6461] vfs_read+0x595/0xa80 [ 127.860714][ T6461] ? __pfx_vfs_read+0x10/0x10 [ 127.860749][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.860779][ T6461] ? kmem_cache_free+0x182/0x650 [ 127.860806][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.860837][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.860869][ T6461] ksys_read+0x150/0x270 [ 127.860906][ T6461] ? __pfx_ksys_read+0x10/0x10 [ 127.860947][ T6461] do_syscall_64+0x166/0x520 [ 127.860988][ T6461] ? trace_irq_disable+0x3b/0x140 [ 127.861014][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.861043][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.861068][ T6461] RIP: 0033:0x7f7e4b8a7407 [ 127.861089][ T6461] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.861109][ T6461] RSP: 002b:00007ffe27ae4230 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 127.861136][ T6461] RAX: ffffffffffffffda RBX: 00007f7e4bfe9880 RCX: 00007f7e4b8a7407 [ 127.861154][ T6461] RDX: 0000000000001000 RSI: 00007ffe27ae4280 RDI: 0000000000000004 [ 127.861171][ T6461] RBP: 000055b5c15306f0 R08: 0000000000000000 R09: 0000000000000000 [ 127.861187][ T6461] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b5c152f930 [ 127.861204][ T6461] R13: 00007ffe27ae4280 R14: 0000000000000004 R15: 000055b58a3734d8 [ 127.861232][ T6461] [ 127.861247][ T6461] [ 127.861253][ T6461] Allocated by task 5739: [ 127.861265][ T6461] kasan_save_track+0x3e/0x80 [ 127.861288][ T6461] __kasan_kmalloc+0x93/0xb0 [ 127.861311][ T6461] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 127.861350][ T6461] kmemdup_noprof+0x2b/0x70 [ 127.861372][ T6461] hid_open_report+0x1fa/0xf00 [ 127.861408][ T6461] asus_probe+0x981/0x2850 [ 127.861437][ T6461] hid_device_probe+0x46a/0x870 [ 127.861460][ T6461] really_probe+0x254/0xae0 [ 127.861483][ T6461] __driver_probe_device+0x1e8/0x360 [ 127.861504][ T6461] driver_probe_device+0x4f/0x240 [ 127.861528][ T6461] __device_attach_driver+0x270/0x410 [ 127.861551][ T6461] bus_for_each_drv+0x258/0x2f0 [ 127.861581][ T6461] __device_attach+0x2c4/0x450 [ 127.861600][ T6461] device_initial_probe+0xa1/0xd0 [ 127.861620][ T6461] bus_probe_device+0x12a/0x220 [ 127.861647][ T6461] device_add+0x7d7/0xb80 [ 127.861676][ T6461] hid_add_device+0x272/0x3e0 [ 127.861697][ T6461] uhid_device_add_worker+0x43/0xf0 [ 127.861719][ T6461] process_scheduled_works+0xc3d/0x1630 [ 127.861747][ T6461] worker_thread+0xa47/0xfb0 [ 127.861774][ T6461] kthread+0x38b/0x480 [ 127.861795][ T6461] ret_from_fork+0x514/0xb70 [ 127.861815][ T6461] ret_from_fork_asm+0x1a/0x30 [ 127.861846][ T6461] [ 127.861851][ T6461] The buggy address belongs to the object at ffff88802b7a1400 [ 127.861851][ T6461] which belongs to the cache kmalloc-64 of size 64 [ 127.861867][ T6461] The buggy address is located 0 bytes inside of [ 127.861867][ T6461] freed 64-byte region [ffff88802b7a1400, ffff88802b7a1440) [ 127.861887][ T6461] [ 127.861893][ T6461] The buggy address belongs to the physical page: [ 127.861902][ T6461] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b7a1 [ 127.861920][ T6461] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.861937][ T6461] page_type: f5(slab) [ 127.861955][ T6461] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 127.861973][ T6461] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 127.861985][ T6461] page dumped because: kasan: bad access detected [ 127.861995][ T6461] page_owner tracks the page as allocated [ 127.862003][ T6461] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 43699416534 [ 127.862036][ T6461] post_alloc_hook+0x1f9/0x250 [ 127.862066][ T6461] get_page_from_freelist+0x2209/0x2280 [ 127.862087][ T6461] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 127.862107][ T6461] allocate_slab+0x7d/0x620 [ 127.862135][ T6461] refill_objects+0x2d5/0x350 [ 127.862164][ T6461] __pcs_replace_empty_main+0x2c8/0x6c0 [ 127.862191][ T6461] __kmalloc_noprof+0x47b/0x720 [ 127.862226][ T6461] security_inode_init_security+0x102/0x3e0 [ 127.862261][ T6461] shmem_symlink+0xe0/0x4d0 [ 127.862297][ T6461] vfs_symlink+0x18b/0x330 [ 127.862321][ T6461] filename_symlinkat+0x1cd/0x410 [ 127.862345][ T6461] __se_sys_symlink+0x4d/0x2b0 [ 127.862370][ T6461] do_syscall_64+0x166/0x520 [ 127.862406][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.862430][ T6461] page last free pid 4988 tgid 4988 ts 43665232250 stack trace: [ 127.862447][ T6461] __free_frozen_pages+0xc93/0xd90 [ 127.862481][ T6461] rcu_core+0x926/0x1260 [ 127.862504][ T6461] handle_softirqs+0x226/0x860 [ 127.862534][ T6461] __irq_exit_rcu+0xcb/0x220 [ 127.862565][ T6461] irq_exit_rcu+0x9/0x30 [ 127.862595][ T6461] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 127.862628][ T6461] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.862655][ T6461] [ 127.862661][ T6461] Memory state around the buggy address: [ 127.862674][ T6461] ffff88802b7a1300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 127.862694][ T6461] ffff88802b7a1380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 127.862708][ T6461] >ffff88802b7a1400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.862720][ T6461] ^ [ 127.862731][ T6461] ffff88802b7a1480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.862746][ T6461] ffff88802b7a1500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 127.862759][ T6461] ================================================================== [ 127.889306][ T6461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.528810][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 128.537828][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 128.547882][ T6461] Call Trace: [ 128.551162][ T6461] [ 128.554086][ T6461] vpanic+0x56d/0xa60 [ 128.558076][ T6461] ? rcu_is_watching+0x16/0xb0 [ 128.562841][ T6461] ? __pfx_vpanic+0x10/0x10 [ 128.567346][ T6461] ? __pfx___schedule+0x10/0x10 [ 128.572204][ T6461] panic+0xc5/0xd0 [ 128.575931][ T6461] ? __pfx_panic+0x10/0x10 [ 128.580352][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.585985][ T6461] ? preempt_schedule_common+0x7f/0xd0 [ 128.591453][ T6461] ? report_descriptor_read+0xb5/0x100 [ 128.596915][ T6461] check_panic_on_warn+0x89/0xb0 [ 128.601861][ T6461] ? report_descriptor_read+0xb5/0x100 [ 128.607329][ T6461] end_report+0x73/0x170 [ 128.611577][ T6461] ? report_descriptor_read+0xb5/0x100 [ 128.617042][ T6461] kasan_report+0x128/0x150 [ 128.621556][ T6461] ? lock_acquire+0x115/0x350 [ 128.626245][ T6461] ? report_descriptor_read+0xb5/0x100 [ 128.631717][ T6461] kasan_check_range+0x264/0x2c0 [ 128.636689][ T6461] ? report_descriptor_read+0xb5/0x100 [ 128.642159][ T6461] __asan_memcpy+0x29/0x70 [ 128.646596][ T6461] report_descriptor_read+0xb5/0x100 [ 128.651891][ T6461] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 128.657358][ T6461] kernfs_fop_read_iter+0x434/0x6a0 [ 128.662566][ T6461] vfs_read+0x595/0xa80 [ 128.666732][ T6461] ? __pfx_vfs_read+0x10/0x10 [ 128.671422][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.677057][ T6461] ? kmem_cache_free+0x182/0x650 [ 128.681999][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.687632][ T6461] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.693275][ T6461] ksys_read+0x150/0x270 [ 128.697534][ T6461] ? __pfx_ksys_read+0x10/0x10 [ 128.702310][ T6461] do_syscall_64+0x166/0x520 [ 128.706910][ T6461] ? trace_irq_disable+0x3b/0x140 [ 128.711934][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.718002][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.723898][ T6461] RIP: 0033:0x7f7e4b8a7407 [ 128.728310][ T6461] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 128.747925][ T6461] RSP: 002b:00007ffe27ae4230 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 128.756357][ T6461] RAX: ffffffffffffffda RBX: 00007f7e4bfe9880 RCX: 00007f7e4b8a7407 [ 128.764339][ T6461] RDX: 0000000000001000 RSI: 00007ffe27ae4280 RDI: 0000000000000004 [ 128.772313][ T6461] RBP: 000055b5c15306f0 R08: 0000000000000000 R09: 0000000000000000 [ 128.780284][ T6461] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b5c152f930 [ 128.788260][ T6461] R13: 00007ffe27ae4280 R14: 0000000000000004 R15: 000055b58a3734d8 [ 128.796245][ T6461] [ 128.799961][ T6461] Kernel Offset: disabled [ 128.804276][ T6461] Rebooting in 86400 seconds..