last executing test programs: 4.027880617s ago: executing program 0 (id=49): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 2.530168967s ago: executing program 3 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000011c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 2.309776547s ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) write(r0, &(0x7f0000000400)='1', 0x1) 2.308294886s ago: executing program 0 (id=69): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 2.231148677s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x180000c, 0x2072, 0xffffffffffffffff, 0xd0fbb000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xd, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) 2.211933641s ago: executing program 1 (id=63): symlink(&(0x7f00000008c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001940)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000019c0)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001a40)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001cc0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.201968352s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x400c0930, 0x0) 2.07155012s ago: executing program 1 (id=65): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 1.987644721s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r3, 0x40140921, &(0x7f00000002c0)="0000000001") ioctl(r3, 0x400c0930, 0x0) write(r0, &(0x7f0000000e40)='3', 0x4e) 1.912647667s ago: executing program 2 (id=67): syz_usb_connect(0x5, 0x4e, 0x0, 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', 0x0, 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) 1.658576971s ago: executing program 3 (id=68): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x6, 0xb3, &(0x7f0000009dc0)={{0x12, 0x1, 0x300, 0x56, 0x60, 0xd3, 0x20, 0x4e8, 0x6615, 0x38db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x1, 0x5, 0x5, 0x70, 0x80, "", [{{0x9, 0x4, 0xe1, 0x8, 0x2, 0x8f, 0xfa, 0x3a, 0xff, [], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @generic={0x76, 0x1, "1472d2d10b6a177efce5224e18efa563b7f9c880d1fc6dc9f735b02541e0b2d9f681a9869c3b2c68081348bc54e2e35fcba58d100cfed628e0b2ba31397e4902b39362cb99b4a9a10e4daccb13ad792836e49f34c6b429717d8af95b4673ea0a3ed552e8e9687735d1834741c60249d7cb81f769"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x1, 0x3e}}]}}]}}]}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000009dc0)) ptrace$cont(0x21, r0, 0x5, 0x4) 987.655814ms ago: executing program 1 (id=70): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000740)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 967.568844ms ago: executing program 2 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='t', 0x1) 907.115894ms ago: executing program 3 (id=72): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1401aa0800060003"], 0x30}}, 0x4000090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000480)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 822.630171ms ago: executing program 0 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000011c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 733.654702ms ago: executing program 2 (id=74): symlink(&(0x7f00000008c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001940)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000019c0)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001a40)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001cc0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 613.202464ms ago: executing program 2 (id=75): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 513.832989ms ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x180000c, 0x2072, 0xffffffffffffffff, 0xd0fbb000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xd, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) 401.933363ms ago: executing program 0 (id=77): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x400c0930, 0x0) 378.207475ms ago: executing program 2 (id=78): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000240)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, &(0x7f00000002c0)="0000000001") ioctl(r2, 0x400c0930, 0x0) write(r0, &(0x7f0000000e40)='3', 0x4e) 285.578348ms ago: executing program 1 (id=79): syz_usb_connect(0x5, 0x4e, 0x0, 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', 0x0, 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) 227.908751ms ago: executing program 0 (id=80): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) 100.457069ms ago: executing program 0 (id=81): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x4e, 0x0, 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 0s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='t', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 82.344834][ T5599] cgroup: Unknown subsys name 'net' [ 82.459749][ T5599] cgroup: Unknown subsys name 'cpuset' [ 82.469207][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.119262][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.596028][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.598369][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.598927][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.600198][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.600868][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.700878][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.703105][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.704010][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.705621][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.720895][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.757337][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.758133][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.758609][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.759813][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.760450][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.802890][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.812896][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.815126][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.831676][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.832431][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.773295][ T5616] rdma_rxe: Failed to create IPv4 UDP tunnel [ 87.784299][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.795825][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.798574][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.826326][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.853184][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.175779][ T5615] infiniband rxe0: set active [ 88.177216][ T5615] infiniband rxe0: added rxe_eth0 [ 88.178745][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.219849][ T5615] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.219889][ T5615] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.219935][ T5615] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.289265][ T5615] RDS/IB: rxe0: added [ 88.289627][ T5615] smc: adding ib device rxe0 with port count 1 [ 88.289728][ T5615] smc: ib device rxe0 port 1 has no pnetid [ 88.329058][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.357573][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.696053][ T5621] Bluetooth: hci0: command tx timeout [ 88.721613][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.775636][ T5621] Bluetooth: hci1: command tx timeout [ 88.855298][ T5621] Bluetooth: hci2: command tx timeout [ 88.870735][ T5621] Bluetooth: hci3: command tx timeout [ 88.919082][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.920168][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.920331][ T5616] bridge_slave_0: entered allmulticast mode [ 88.922587][ T5616] bridge_slave_0: entered promiscuous mode [ 88.980554][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.980702][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.981628][ T5616] bridge_slave_1: entered allmulticast mode [ 88.982844][ T5616] bridge_slave_1: entered promiscuous mode [ 89.020542][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.059582][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.059696][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.059835][ T5618] bridge_slave_0: entered allmulticast mode [ 89.062022][ T5618] bridge_slave_0: entered promiscuous mode [ 89.124664][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.124843][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.124990][ T5618] bridge_slave_1: entered allmulticast mode [ 89.146589][ T5618] bridge_slave_1: entered promiscuous mode [ 89.157916][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.158463][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.158581][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.158729][ T5609] bridge_slave_0: entered allmulticast mode [ 89.161759][ T5609] bridge_slave_0: entered promiscuous mode [ 89.223421][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.223752][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.223917][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.224058][ T5609] bridge_slave_1: entered allmulticast mode [ 89.230581][ T5609] bridge_slave_1: entered promiscuous mode [ 89.264806][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.312047][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.387104][ T5616] team0: Port device team_slave_0 added [ 89.393444][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.408583][ T5618] team0: Port device team_slave_0 added [ 89.419403][ T5616] team0: Port device team_slave_1 added [ 89.441428][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.443716][ T5618] team0: Port device team_slave_1 added [ 89.500515][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.500534][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.500561][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.501924][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.577379][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.577398][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.577425][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.604008][ T5609] team0: Port device team_slave_0 added [ 89.609086][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.609133][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.609208][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.631392][ T5609] team0: Port device team_slave_1 added [ 89.634283][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.634327][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.634460][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.767743][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.767762][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.767789][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.829258][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.829277][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.829305][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.897850][ T5616] hsr_slave_0: entered promiscuous mode [ 89.899214][ T5616] hsr_slave_1: entered promiscuous mode [ 89.950122][ T5618] hsr_slave_0: entered promiscuous mode [ 89.953991][ T5618] hsr_slave_1: entered promiscuous mode [ 89.954900][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.955006][ T5618] Cannot create hsr debugfs directory [ 90.057297][ T5609] hsr_slave_0: entered promiscuous mode [ 90.058406][ T5609] hsr_slave_1: entered promiscuous mode [ 90.060003][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 90.060025][ T5609] Cannot create hsr debugfs directory [ 90.558485][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.587321][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.591731][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.610607][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.613453][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.635998][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.663013][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.669501][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.776712][ T5621] Bluetooth: hci0: command tx timeout [ 90.803324][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.803503][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.803642][ T5615] bridge_slave_0: entered allmulticast mode [ 90.817279][ T5615] bridge_slave_0: entered promiscuous mode [ 90.831781][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.831875][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.832024][ T5615] bridge_slave_1: entered allmulticast mode [ 90.833724][ T5615] bridge_slave_1: entered promiscuous mode [ 90.856422][ T5621] Bluetooth: hci1: command tx timeout [ 90.904826][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.917787][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.919020][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.923841][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.935928][ T5621] Bluetooth: hci3: command tx timeout [ 90.936036][ T5621] Bluetooth: hci2: command tx timeout [ 90.960832][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.962888][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.979026][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.990881][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.012807][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.024366][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.067713][ T5615] team0: Port device team_slave_0 added [ 91.071096][ T5615] team0: Port device team_slave_1 added [ 91.133572][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.133591][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.133617][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.190027][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.190047][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.190076][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.219679][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.249545][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.250713][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.254098][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.281780][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.285106][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.317677][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.321756][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.366251][ T5615] hsr_slave_0: entered promiscuous mode [ 91.367201][ T5615] hsr_slave_1: entered promiscuous mode [ 91.367810][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 91.367833][ T5615] Cannot create hsr debugfs directory [ 91.649754][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.682801][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.690427][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.697471][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.710591][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.724512][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.733771][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.734503][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.753396][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.790342][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.825712][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.828266][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.828377][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.861310][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.887528][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.887604][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.936555][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.938497][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.979335][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.979415][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.004423][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.004498][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.022916][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.022991][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.050035][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.050148][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.075876][ T949] cfg80211: failed to load regulatory.db [ 92.261448][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.328915][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.369222][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.369334][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.404954][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.405067][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.855535][ T54] Bluetooth: hci0: command tx timeout [ 92.935557][ T54] Bluetooth: hci1: command tx timeout [ 93.015701][ T54] Bluetooth: hci2: command tx timeout [ 93.015735][ T54] Bluetooth: hci3: command tx timeout [ 93.266714][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.402264][ T5616] veth0_vlan: entered promiscuous mode [ 93.432786][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.447081][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.474955][ T5616] veth1_vlan: entered promiscuous mode [ 93.528960][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.631387][ T5618] veth0_vlan: entered promiscuous mode [ 93.631933][ T5609] veth0_vlan: entered promiscuous mode [ 93.635132][ T5616] veth0_macvtap: entered promiscuous mode [ 93.668700][ T5616] veth1_macvtap: entered promiscuous mode [ 93.674844][ T5618] veth1_vlan: entered promiscuous mode [ 93.703103][ T5609] veth1_vlan: entered promiscuous mode [ 93.722866][ T5615] veth0_vlan: entered promiscuous mode [ 93.733704][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.760199][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.792124][ T5615] veth1_vlan: entered promiscuous mode [ 93.831081][ T5609] veth0_macvtap: entered promiscuous mode [ 93.834435][ T5618] veth0_macvtap: entered promiscuous mode [ 93.848886][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870158][ T5618] veth1_macvtap: entered promiscuous mode [ 93.877717][ T5609] veth1_macvtap: entered promiscuous mode [ 93.929819][ T279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929897][ T279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929957][ T279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.983373][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.026260][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.032011][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.060361][ T5615] veth0_macvtap: entered promiscuous mode [ 94.076795][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.076824][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.077089][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.077478][ T5615] veth1_macvtap: entered promiscuous mode [ 94.163157][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.187550][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.187574][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.191462][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.325299][ T339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346703][ T339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346931][ T339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347110][ T339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347503][ T339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347929][ T339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.348004][ T339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.429115][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.496388][ T316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497396][ T316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497439][ T316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497477][ T316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497515][ T316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.501873][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.501893][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.621172][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.621197][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.694772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.694794][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.742756][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.742778][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.823718][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.823741][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.903065][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.903089][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.936571][ T5621] Bluetooth: hci0: command tx timeout [ 95.016804][ T5621] Bluetooth: hci1: command tx timeout [ 95.096545][ T54] Bluetooth: hci2: command tx timeout [ 95.096600][ T5621] Bluetooth: hci3: command tx timeout [ 95.409399][ T5779] FAULT_INJECTION: forcing a failure. [ 95.409399][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 95.409451][ T5779] CPU: 0 UID: 0 PID: 5779 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 95.409474][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.409493][ T5779] Call Trace: [ 95.409504][ T5779] [ 95.409513][ T5779] dump_stack_lvl+0xe8/0x150 [ 95.409550][ T5779] should_fail_ex+0x3eb/0x540 [ 95.409595][ T5779] should_failslab+0xa8/0x100 [ 95.409625][ T5779] ? __kernfs_new_node+0xe6/0x980 [ 95.409650][ T5779] kmem_cache_alloc_noprof+0x9c/0x600 [ 95.409681][ T5779] ? __kernfs_new_node+0xe6/0x980 [ 95.409705][ T5779] ? irqentry_exit+0x2a0/0x9b0 [ 95.409735][ T5779] __kernfs_new_node+0xe6/0x980 [ 95.409767][ T5779] ? __pfx___kernfs_new_node+0x10/0x10 [ 95.409789][ T5779] ? lock_acquire+0x115/0x350 [ 95.409810][ T5779] ? kernfs_root+0x1c/0x230 [ 95.409844][ T5779] ? kernfs_root+0x1c/0x230 [ 95.409865][ T5779] ? kernfs_root+0x1c/0x230 [ 95.409884][ T5779] ? kernfs_root+0x1c/0x230 [ 95.409910][ T5779] kernfs_new_node+0xeb/0x140 [ 95.409938][ T5779] __kernfs_create_file+0x4b/0x2e0 [ 95.409970][ T5779] sysfs_add_file_mode_ns+0x237/0x300 [ 95.410009][ T5779] internal_create_group+0x679/0x1180 [ 95.410046][ T5779] ? __pfx_internal_create_group+0x10/0x10 [ 95.410073][ T5779] ? up_write+0x19d/0x4a0 [ 95.410102][ T5779] sysfs_create_groups+0x59/0x120 [ 95.410127][ T5779] device_add_attrs+0x12c/0x600 [ 95.410154][ T5779] ? __pfx_device_add_attrs+0x10/0x10 [ 95.410177][ T5779] ? kobject_put+0x50f/0x550 [ 95.410209][ T5779] ? device_add_class_symlinks+0x21f/0x240 [ 95.410237][ T5779] device_add+0x488/0xb80 [ 95.410263][ T5779] __add_disk+0x517/0xdb0 [ 95.410295][ T5779] add_disk_fwnode+0x143/0x3a0 [ 95.410331][ T5779] md_alloc+0x81b/0xf20 [ 95.410362][ T5779] md_alloc_and_put+0x1a/0x1f0 [ 95.410383][ T5779] add_named_array+0x240/0x350 [ 95.410403][ T5779] ? __pfx___mutex_lock+0x10/0x10 [ 95.410427][ T5779] ? __pfx_add_named_array+0x10/0x10 [ 95.410450][ T5779] ? sysfs_file_kobj+0x1a/0x230 [ 95.410479][ T5779] param_attr_store+0x214/0x310 [ 95.410512][ T5779] ? __pfx_param_attr_store+0x10/0x10 [ 95.410536][ T5779] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.410553][ T5779] module_attr_store+0x65/0x90 [ 95.410579][ T5779] kernfs_fop_write_iter+0x3a4/0x540 [ 95.410613][ T5779] vfs_write+0x612/0xba0 [ 95.410645][ T5779] ? __pfx_vfs_write+0x10/0x10 [ 95.410676][ T5779] ? __fget_files+0x3a2/0x420 [ 95.410714][ T5779] ? __fget_files+0x2a/0x420 [ 95.410752][ T5779] ? fdget+0x1ac/0x250 [ 95.410775][ T5779] ksys_write+0x150/0x270 [ 95.410797][ T5779] ? __pfx_ksys_write+0x10/0x10 [ 95.410828][ T5779] do_syscall_64+0x166/0x520 [ 95.410851][ T5779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.410871][ T5779] ? clear_bhb_loop+0x70/0xc0 [ 95.410894][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.410913][ T5779] RIP: 0033:0x7f04c179f559 [ 95.410940][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.410956][ T5779] RSP: 002b:00007f04c2635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.410977][ T5779] RAX: ffffffffffffffda RBX: 00007f04c1a25fa0 RCX: 00007f04c179f559 [ 95.410991][ T5779] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000004 [ 95.411003][ T5779] RBP: 00007f04c1836b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.411015][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.411026][ T5779] R13: 00007f04c1a26038 R14: 00007f04c1a25fa0 R15: 00007ffc2f48d918 [ 95.411057][ T5779] [ 95.797622][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.967283][ T26] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 95.995670][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.995728][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.042142][ T26] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 96.042467][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 96.043699][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 96.072343][ T5779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.074732][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 96.074916][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 96.115704][ T26] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.124904][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 96.124997][ T26] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 96.156489][ T26] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.808347][ T194] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.928098][ T5803] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.958312][ T194] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 96.959611][ T194] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.959663][ T194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.011261][ T194] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 97.020717][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 97.020829][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 97.033247][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 97.033484][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 97.101830][ T194] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 97.143005][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 97.143122][ T194] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 97.189196][ T194] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 97.259670][ T5793] ======================================================= [ 97.259670][ T5793] WARNING: The mand mount option has been deprecated and [ 97.259670][ T5793] and is ignored by this kernel. Remove the mand [ 97.259670][ T5793] option from the mount to silence this warning. [ 97.259670][ T5793] ======================================================= [ 97.669566][ T194] usb 1-1: USB disconnect, device number 2 [ 97.714563][ T194] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 97.739468][ T194] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 97.765661][ T194] keyspan 1-1:1.0: device disconnected [ 97.884951][ T26] usb 3-1: USB disconnect, device number 2 [ 97.911137][ T26] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 97.936573][ T26] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 97.937595][ T26] keyspan 3-1:1.0: device disconnected [ 98.430198][ T5825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.461405][ T5828] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.472351][ T5828] block device autoloading is deprecated and will be removed. [ 98.501897][ T5825] FAULT_INJECTION: forcing a failure. [ 98.501897][ T5825] name fail_futex, interval 1, probability 0, space 0, times 1 [ 98.501933][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 98.501959][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.501974][ T5825] Call Trace: [ 98.501983][ T5825] [ 98.501994][ T5825] dump_stack_lvl+0xe8/0x150 [ 98.502030][ T5825] should_fail_ex+0x3eb/0x540 [ 98.502071][ T5825] get_futex_key+0x1ab/0x1410 [ 98.502112][ T5825] ? __pfx_get_futex_key+0x10/0x10 [ 98.502158][ T5825] futex_wake+0x119/0x5f0 [ 98.502200][ T5825] ? __pfx_futex_wake+0x10/0x10 [ 98.502248][ T5825] ? mm_exit_exec_release+0x20/0x290 [ 98.502278][ T5825] do_futex+0x458/0x4e0 [ 98.502317][ T5825] ? __pfx_do_futex+0x10/0x10 [ 98.502354][ T5825] ? __might_fault+0xaf/0x130 [ 98.502387][ T5825] mm_exit_exec_release+0x10d/0x290 [ 98.502415][ T5825] exit_mm+0x50/0x240 [ 98.502452][ T5825] do_exit+0x6a8/0x2360 [ 98.502494][ T5825] ? __pfx_do_exit+0x10/0x10 [ 98.502530][ T5825] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.502574][ T5825] do_group_exit+0x22d/0x2f0 [ 98.502605][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.502633][ T5825] get_signal+0x1216/0x12c0 [ 98.502683][ T5825] arch_do_signal_or_restart+0xbb/0x860 [ 98.502720][ T5825] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 98.502760][ T5825] ? ksys_write+0x242/0x270 [ 98.502793][ T5825] exit_to_user_mode_loop+0x10e/0x770 [ 98.502819][ T5825] ? rcu_is_watching+0x16/0xb0 [ 98.502851][ T5825] do_syscall_64+0x328/0x520 [ 98.502884][ T5825] ? trace_irq_disable+0x3b/0x140 [ 98.502918][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.502943][ T5825] ? clear_bhb_loop+0x70/0xc0 [ 98.502972][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.502996][ T5825] RIP: 0033:0x7f04c179f559 [ 98.503018][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.503037][ T5825] RSP: 002b:00007f04c26350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.503062][ T5825] RAX: fffffffffffffe00 RBX: 00007f04c1a25fa8 RCX: 00007f04c179f559 [ 98.503080][ T5825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04c1a25fa8 [ 98.503095][ T5825] RBP: 00007f04c1a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 98.503110][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.503124][ T5825] R13: 00007f04c1a26038 R14: 00007ffc2f48d830 R15: 00007ffc2f48d918 [ 98.503161][ T5825] [ 99.259116][ T194] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.029885][ T5864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.175667][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.275781][ T194] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.339025][ T10] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 100.340568][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.340644][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.400738][ T10] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 100.401033][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 100.401128][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 100.419928][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 100.420275][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 100.433436][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.460943][ T194] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 100.463271][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 100.463378][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 100.504852][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 100.520020][ T194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.520096][ T194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.573562][ T194] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 100.573847][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 100.573940][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 100.620697][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 100.620851][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 100.643846][ T194] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 100.671679][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 100.671784][ T194] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 100.690701][ T194] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 100.951413][ T10] usb 4-1: USB disconnect, device number 2 [ 100.988865][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 101.031597][ T194] usb 3-1: USB disconnect, device number 3 [ 101.089139][ T194] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 101.114268][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 101.147923][ T10] keyspan 4-1:1.0: device disconnected [ 101.152840][ T194] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 101.153844][ T194] keyspan 3-1:1.0: device disconnected [ 101.741424][ T5910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.887682][ T5910] md/raid:md0: not enough operational devices (3/3 failed) [ 102.135292][ C0] net_ratelimit: 155 callbacks suppressed [ 102.163359][ T5910] md/raid:md0: failed to run raid set. [ 102.163375][ T5910] md: pers->run() failed ... [ 102.438656][ T5925] md/raid:md0: not enough operational devices (3/3 failed) [ 102.556605][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.670569][ T5925] md/raid:md0: failed to run raid set. [ 102.670584][ T5925] md: pers->run() failed ... [ 102.710019][ T10] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 102.711595][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.711668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.766761][ T10] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 102.767054][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 102.767154][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 102.773050][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 102.809229][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 102.823425][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 102.842065][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 102.842195][ T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 102.861594][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 103.030807][ T5945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.122117][ T10] usb 1-1: USB disconnect, device number 3 [ 103.149819][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.180323][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.181397][ T10] keyspan 1-1:1.0: device disconnected [ 103.270456][ T5948] md/raid:md0: not enough operational devices (3/3 failed) [ 103.431620][ T5948] md/raid:md0: failed to run raid set. [ 103.431634][ T5948] md: pers->run() failed ... [ 103.431727][ T5945] FAULT_INJECTION: forcing a failure. [ 103.431727][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 103.431757][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 103.431783][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.431798][ T5945] Call Trace: [ 103.431807][ T5945] [ 103.431818][ T5945] dump_stack_lvl+0xe8/0x150 [ 103.431857][ T5945] should_fail_ex+0x3eb/0x540 [ 103.431901][ T5945] should_failslab+0xa8/0x100 [ 103.431933][ T5945] __kmalloc_cache_noprof+0x9e/0x600 [ 103.431974][ T5945] ? badblocks_init+0xc0/0x210 [ 103.432007][ T5945] ? badblocks_init+0xc0/0x210 [ 103.432058][ T5945] badblocks_init+0xc0/0x210 [ 103.432099][ T5945] md_import_device+0x259/0x650 [ 103.432140][ T5945] md_add_new_disk+0x522/0x1850 [ 103.432182][ T5945] md_ioctl+0x2005/0x2610 [ 103.432225][ T5945] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.432261][ T5945] ? __pfx_md_ioctl+0x10/0x10 [ 103.432297][ T5945] ? do_vfs_ioctl+0x116f/0x1530 [ 103.432330][ T5945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.432372][ T5945] ? do_futex+0x3e7/0x4e0 [ 103.432423][ T5945] ? __pfx_md_ioctl+0x10/0x10 [ 103.432463][ T5945] blkdev_ioctl+0x5e3/0x740 [ 103.432493][ T5945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 103.432525][ T5945] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.432551][ T5945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 103.432576][ T5945] __se_sys_ioctl+0xfc/0x170 [ 103.432607][ T5945] do_syscall_64+0x166/0x520 [ 103.432636][ T5945] ? trace_irq_disable+0x3b/0x140 [ 103.432662][ T5945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.432688][ T5945] ? clear_bhb_loop+0x70/0xc0 [ 103.432718][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.432742][ T5945] RIP: 0033:0x7fb27a39f559 [ 103.432766][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.432786][ T5945] RSP: 002b:00007fb27b196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.432812][ T5945] RAX: ffffffffffffffda RBX: 00007fb27a625fa0 RCX: 00007fb27a39f559 [ 103.432830][ T5945] RDX: 00002000000002c0 RSI: 0000000040140921 RDI: 0000000000000005 [ 103.432847][ T5945] RBP: 00007fb27a436b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.432862][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.432876][ T5945] R13: 00007fb27a626038 R14: 00007fb27a625fa0 R15: 00007ffcdb5b2878 [ 103.432915][ T5945] [ 103.432988][ T5945] md: error, md_import_device() returned -12 [ 104.195644][ T5968] md/raid:md0: not enough operational devices (3/3 failed) [ 104.226989][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.343695][ T5979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.377755][ T26] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 104.378934][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.379010][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.430869][ T26] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 104.431175][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 104.431244][ T5968] md/raid:md0: failed to run raid set. [ 104.431266][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 104.434961][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.435064][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.441159][ T5968] md: pers->run() failed ... [ 104.443848][ T5979] md: could not open device unknown-block(1,0). [ 104.444040][ T5979] md: error, md_import_device() returned -16 [ 104.505612][ T26] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.508042][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.508149][ T26] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.510511][ T26] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.716487][ T5983] md/raid:md0: not enough operational devices (3/3 failed) [ 104.827049][ T10] usb 1-1: USB disconnect, device number 4 [ 104.874823][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.897871][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.919695][ T10] keyspan 1-1:1.0: device disconnected [ 104.989942][ T5983] md/raid:md0: failed to run raid set. [ 104.989955][ T5983] md: pers->run() failed ... [ 104.994334][ T5979] FAULT_INJECTION: forcing a failure. [ 104.994334][ T5979] name failslab, interval 1, probability 0, space 0, times 0 [ 104.994360][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT(full) [ 104.994384][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.994397][ T5979] Call Trace: [ 104.994406][ T5979] [ 104.994416][ T5979] dump_stack_lvl+0xe8/0x150 [ 104.994452][ T5979] should_fail_ex+0x3eb/0x540 [ 104.994507][ T5979] should_failslab+0xa8/0x100 [ 104.994534][ T5979] ? taskstats_exit+0x19e/0xe10 [ 104.994557][ T5979] kmem_cache_alloc_noprof+0x9c/0x600 [ 104.994592][ T5979] ? taskstats_exit+0x19e/0xe10 [ 104.994621][ T5979] taskstats_exit+0x19e/0xe10 [ 104.994650][ T5979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.994683][ T5979] ? __pfx_taskstats_exit+0x10/0x10 [ 104.994714][ T5979] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.994742][ T5979] do_exit+0x688/0x2360 [ 104.994784][ T5979] ? __pfx_do_exit+0x10/0x10 [ 104.994808][ T5979] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.994836][ T5979] do_group_exit+0x22d/0x2f0 [ 104.994858][ T5979] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.994877][ T5979] get_signal+0x1216/0x12c0 [ 104.994909][ T5979] arch_do_signal_or_restart+0xbb/0x860 [ 104.994934][ T5979] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 104.994968][ T5979] ? ksys_write+0x242/0x270 [ 104.994991][ T5979] exit_to_user_mode_loop+0x10e/0x770 [ 104.995008][ T5979] ? rcu_is_watching+0x16/0xb0 [ 104.995030][ T5979] do_syscall_64+0x328/0x520 [ 104.995049][ T5979] ? trace_irq_disable+0x3b/0x140 [ 104.995066][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.995083][ T5979] ? clear_bhb_loop+0x70/0xc0 [ 104.995102][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.995118][ T5979] RIP: 0033:0x7f9e9699f559 [ 104.995135][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.995177][ T5979] RSP: 002b:00007f9e9781b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.995200][ T5979] RAX: fffffffffffffe00 RBX: 00007f9e96c25fa8 RCX: 00007f9e9699f559 [ 104.995216][ T5979] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e96c25fa8 [ 104.995231][ T5979] RBP: 00007f9e96c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.995245][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.995258][ T5979] R13: 00007f9e96c26038 R14: 00007fff538689d0 R15: 00007fff53868ab8 [ 104.995292][ T5979] [ 106.048653][ T6009] md: array md0 already has disks! [ 106.096639][ T6009] md: could not open device unknown-block(1,0). [ 106.096696][ T6009] md: error, md_import_device() returned -16 [ 106.225082][ T6009] FAULT_INJECTION: forcing a failure. [ 106.225082][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 106.225116][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 106.225143][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.225161][ T6009] Call Trace: [ 106.225170][ T6009] [ 106.225180][ T6009] dump_stack_lvl+0xe8/0x150 [ 106.225217][ T6009] should_fail_ex+0x3eb/0x540 [ 106.225261][ T6009] should_failslab+0xa8/0x100 [ 106.225292][ T6009] __kmalloc_noprof+0xf9/0x710 [ 106.225329][ T6009] ? __raw_spin_lock_init+0x45/0x100 [ 106.225362][ T6009] ? setup_conf+0xc15/0x2ad0 [ 106.225390][ T6009] ? setup_conf+0xc15/0x2ad0 [ 106.225426][ T6009] setup_conf+0xc15/0x2ad0 [ 106.225477][ T6009] ? __pfx_setup_conf+0x10/0x10 [ 106.225519][ T6009] raid5_run+0x8cc/0x2560 [ 106.225548][ T6009] ? _raw_spin_unlock+0x28/0x50 [ 106.225572][ T6009] ? get_pers+0x22b/0x2e0 [ 106.225606][ T6009] ? __pfx_ ** replaying previous printk message ** [ 106.225606][ T6009] ? __pfx_get_pers+0x10/0x10 [ 106.225650][ T6009] md_run+0xc3d/0x1cd0 [ 106.225695][ T6009] ? __pfx_md_run+0x10/0x10 [ 106.225751][ T6009] do_md_run+0x35/0x720 [ 106.225782][ T6009] ? md_ioctl+0x1e23/0x2610 [ 106.225819][ T6009] md_ioctl+0x1e2b/0x2610 [ 106.225856][ T6009] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 106.225894][ T6009] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.225929][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 106.225964][ T6009] ? do_vfs_ioctl+0x116f/0x1530 [ 106.225996][ T6009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.226041][ T6009] ? do_futex+0x3e7/0x4e0 [ 106.226092][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 106.226128][ T6009] blkdev_ioctl+0x5e3/0x740 [ 106.226158][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.226190][ T6009] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.226218][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.226246][ T6009] __se_sys_ioctl+0xfc/0x170 [ 106.226279][ T6009] do_syscall_64+0x166/0x520 [ 106.226308][ T6009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.226334][ T6009] ? clear_bhb_loop+0x70/0xc0 [ 106.226365][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.226390][ T6009] RIP: 0033:0x7efe49d9f559 [ 106.226413][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.226435][ T6009] RSP: 002b:00007efe4abbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.226462][ T6009] RAX: ffffffffffffffda RBX: 00007efe4a025fa0 RCX: 00007efe49d9f559 [ 106.226482][ T6009] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 106.226498][ T6009] RBP: 00007efe49e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.226514][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.226529][ T6009] R13: 00007efe4a026038 R14: 00007efe4a025fa0 R15: 00007ffeb759c838 [ 106.226566][ T6009] [ 106.258855][ C0] virtqueue callback for ffff888026dfd200 (ffffffff86d8ebb0) [ 106.258970][ C0] No more buffers in queue [ 106.260648][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 106.260725][ C0] No more buffers in queue [ 106.261640][ C0] eth0: xmit ffff88807d31e5f0 42:01:0a:80:00:01 [ 106.261769][ C0] Added buffer head 11 to ffff888026dfd000 [ 106.261834][ C0] virtqueue callback for ffff888026dfd000 (ffffffff86d8ecf0) [ 106.261973][ C0] Sent skb ffff88807d31e5f0 [ 106.262023][ C0] No more buffers in queue [ 106.262066][ C0] No more buffers in queue [ 106.262615][ C0] virtqueue callback for ffff888026dfd200 (ffffffff86d8ebb0) [ 106.262691][ C0] No more buffers in queue [ 106.262777][ C0] virtqueue callback for ffff888026dfd200 (ffffffff86d8ebb0) [ 106.262894][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 106.263052][ C0] Receiving skb proto 0x0800 len 780 type 0 [ 106.263106][ C0] No more buffers in queue [ 106.263546][ C0] No more buffers in queue [ 106.263558][ C0] No more buffers in queue [ 106.274904][ T5599] eth0: xmit ffff88802bf05500 42:01:0a:80:00:01 [ 106.275046][ T5599] Added buffer head 11 to ffff888026dfd000 [ 106.275114][ C0] virtqueue callback for ffff888026dfd000 (ffffffff86d8ecf0) [ 106.275399][ C0] Sent skb ffff88802bf05500 [ 106.275563][ C0] No more buffers in queue [ 106.275607][ C0] No more buffers in queue [ 106.283974][ T6009] ================================================================== [ 106.284027][ T6009] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0 [ 106.284158][ T6009] Read of size 8 at addr 0000000000000028 by task syz.2.78/6009 [ 106.284212][ T6009] [ 106.284238][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 106.284308][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.284360][ T6009] Call Trace: [ 106.284391][ T6009] [ 106.284423][ T6009] dump_stack_lvl+0xe8/0x150 [ 106.284525][ T6009] ? free_conf+0x81/0x5d0 [ 106.284600][ T6009] kasan_report+0x117/0x150 [ 106.284677][ T6009] ? free_conf+0x81/0x5d0 [ 106.284797][ T6009] kasan_check_range+0x264/0x2c0 [ 106.284873][ T6009] free_conf+0x81/0x5d0 [ 106.284963][ T6009] setup_conf+0x1720/0x2ad0 [ 106.285068][ T6009] ? __pfx_setup_conf+0x10/0x10 [ 106.285165][ T6009] raid5_run+0x8cc/0x2560 [ 106.285234][ T6009] ? _raw_spin_unlock+0x28/0x50 [ 106.285293][ T6009] ? get_pers+0x22b/0x2e0 [ 106.285381][ T6009] ? __pfx_get_pers+0x10/0x10 [ 106.285472][ T6009] md_run+0xc3d/0x1cd0 [ 106.285570][ T6009] ? __pfx_md_run+0x10/0x10 [ 106.285663][ T6009] do_md_run+0x35/0x720 [ 106.285780][ T6009] ? md_ioctl+0x1e23/0x2610 [ 106.285880][ T6009] md_ioctl+0x1e2b/0x2610 [ 106.285970][ T6009] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 106.286052][ T6009] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.286143][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 106.286242][ T6009] ? do_vfs_ioctl+0x116f/0x1530 [ 106.286288][ T6009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.286320][ T6009] ? do_futex+0x3e7/0x4e0 [ 106.286359][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 106.286391][ T6009] blkdev_ioctl+0x5e3/0x740 [ 106.286417][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.286444][ T6009] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.286527][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 106.286612][ T6009] __se_sys_ioctl+0xfc/0x170 [ 106.286699][ T6009] do_syscall_64+0x166/0x520 [ 106.286786][ T6009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.286853][ T6009] ? clear_bhb_loop+0x70/0xc0 [ 106.286928][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.286987][ T6009] RIP: 0033:0x7efe49d9f559 [ 106.287043][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.287104][ T6009] RSP: 002b:00007efe4abbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.287171][ T6009] RAX: ffffffffffffffda RBX: 00007efe4a025fa0 RCX: 00007efe49d9f559 [ 106.287218][ T6009] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 106.287266][ T6009] RBP: 00007efe49e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.287303][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.287345][ T6009] R13: 00007efe4a026038 R14: 00007efe4a025fa0 R15: 00007ffeb759c838 [ 106.287421][ T6009] [ 106.287444][ T6009] ================================================================== [ 106.326458][ T6009] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.944124][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 106.953354][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.963452][ T6009] Call Trace: [ 106.966771][ T6009] [ 106.969747][ T6009] vpanic+0x26f/0x710 [ 106.973790][ T6009] panic+0xc5/0xd0 [ 106.977563][ T6009] ? __pfx_panic+0x10/0x10 [ 106.982058][ T6009] ? preempt_schedule_thunk+0x16/0x40 [ 106.987491][ T6009] ? free_conf+0x81/0x5d0 [ 106.991863][ T6009] check_panic_on_warn+0x89/0xb0 [ 106.996862][ T6009] ? free_conf+0x81/0x5d0 [ 107.001241][ T6009] end_report+0x73/0x170 [ 107.005532][ T6009] ? free_conf+0x81/0x5d0 [ 107.009937][ T6009] kasan_report+0x128/0x150 [ 107.014489][ T6009] ? free_conf+0x81/0x5d0 [ 107.018876][ T6009] kasan_check_range+0x264/0x2c0 [ 107.023877][ T6009] free_conf+0x81/0x5d0 [ 107.028089][ T6009] setup_conf+0x1720/0x2ad0 [ 107.032654][ T6009] ? __pfx_setup_conf+0x10/0x10 [ 107.037564][ T6009] raid5_run+0x8cc/0x2560 [ 107.041937][ T6009] ? _raw_spin_unlock+0x28/0x50 [ 107.046824][ T6009] ? get_pers+0x22b/0x2e0 [ 107.051209][ T6009] ? __pfx_get_pers+0x10/0x10 [ 107.055948][ T6009] md_run+0xc3d/0x1cd0 [ 107.060077][ T6009] ? __pfx_md_run+0x10/0x10 [ 107.064630][ T6009] do_md_run+0x35/0x720 [ 107.068863][ T6009] ? md_ioctl+0x1e23/0x2610 [ 107.073423][ T6009] md_ioctl+0x1e2b/0x2610 [ 107.077816][ T6009] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 107.083506][ T6009] ? tomoyo_path_number_perm+0x219/0x5f0 [ 107.089192][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 107.093933][ T6009] ? do_vfs_ioctl+0x116f/0x1530 [ 107.098834][ T6009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.103924][ T6009] ? do_futex+0x3e7/0x4e0 [ 107.108304][ T6009] ? __pfx_md_ioctl+0x10/0x10 [ 107.113079][ T6009] blkdev_ioctl+0x5e3/0x740 [ 107.117726][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 107.122792][ T6009] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.127839][ T6009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 107.132905][ T6009] __se_sys_ioctl+0xfc/0x170 [ 107.137549][ T6009] do_syscall_64+0x166/0x520 [ 107.142188][ T6009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.148331][ T6009] ? clear_bhb_loop+0x70/0xc0 [ 107.153074][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.159018][ T6009] RIP: 0033:0x7efe49d9f559 [ 107.163483][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.183124][ T6009] RSP: 002b:00007efe4abbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.191599][ T6009] RAX: ffffffffffffffda RBX: 00007efe4a025fa0 RCX: 00007efe49d9f559 [ 107.199703][ T6009] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 107.207729][ T6009] RBP: 00007efe49e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.215744][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.223758][ T6009] R13: 00007efe4a026038 R14: 00007efe4a025fa0 R15: 00007ffeb759c838 [ 107.231779][ T6009] [ 107.235442][ T6009] Kernel Offset: disabled [ 107.239792][ T6009] Rebooting in 86400 seconds..