last executing test programs: 5.871082251s ago: executing program 3 (id=748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) write(r3, &(0x7f0000000280)="3c0000001b0005000000000000000000010100000c0001007664706173696d00100002007664706173696d5f6e6574000a0004007664706130000000", 0x3c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000380)={0x5, 0xffffe055, 0x6a, 0x10001, 0xffffffffffffffff, 0xffffdffffffffffd, 0x7, 0x0, 0x0, 0x10000009, 0xff7ffffb, 0x2}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000380)="b8b36c000065f3f30f017e6c0f21f83503000e000f23f8c744240010000000c7442402ce010000c7442406000000000f011c24f0f616ea000000008a00dcb000800000c40dc271989900958000000000200066ed66baf80cb8442ee886ef66bafc0cb863000000efb948030000b84b5dbdd3ba62291f2f0f30c4c19d63f6", 0x7e}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='1', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0xa, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 4.397772146s ago: executing program 3 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) syz_clone3(&(0x7f00000007c0)={0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000500), {0x35}, &(0x7f0000000540)=""/49, 0x31, &(0x7f0000000580)=""/180, &(0x7f0000000740)=[r2, r3, 0xffffffffffffffff], 0x3, {r4}}, 0x58) write(r1, &(0x7f0000000240)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001000)="53464f5a05abbf5900"/851, 0x353, 0x0) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 4.293037828s ago: executing program 2 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="0661e9f69fa14a000f5847fb92a46435", 0x10) (fail_nth: 1) 3.93148861s ago: executing program 2 (id=756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80842, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x1f40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x636}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0x0, 0x9}, 0x90) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 3.930298781s ago: executing program 3 (id=757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 3.881416849s ago: executing program 0 (id=759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0xb, 0x3, 0x8, 0xfff, 'syz1\x00', 0x53}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0xc1105511, &(0x7f0000000040)) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r5 = socket$kcm(0x29, 0x5, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) 3.684813255s ago: executing program 3 (id=760): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) write(r3, &(0x7f0000000280)="3c0000001b0005000000000000000000010100000c0001007664706173696d00100002007664706173696d5f6e6574000a0004007664706130000000", 0x3c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000380)={0x5, 0xffffe055, 0x6a, 0x10001, 0xffffffffffffffff, 0xffffdffffffffffd, 0x7, 0x0, 0x0, 0x10000009, 0xff7ffffb, 0x2}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000380)="b8b36c000065f3f30f017e6c0f21f83503000e000f23f8c744240010000000c7442402ce010000c7442406000000000f011c24f0f616ea000000008a00dcb000800000c40dc271989900958000000000200066ed66baf80cb8442ee886ef66bafc0cb863000000efb948030000b84b5dbdd3ba62291f2f0f30c4c19d63f6", 0x7e}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='1', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0xa, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 3.540423009s ago: executing program 0 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 3.540231476s ago: executing program 1 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.420989301s ago: executing program 2 (id=763): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 3.333696207s ago: executing program 0 (id=764): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) setresuid(0x0, 0xee00, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x8, 0xe3, 0x8, 0xd13e, 0x4, 0x2, "55c799fa9efa88afad769ab115199085", 0x2, 0xc, 0x4, 0xe2, 0x0, 0x4, 0x7}) 3.30126885s ago: executing program 1 (id=765): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000100)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) ioctl(r0, 0x3b89, &(0x7f0000001000)="3000000004000000030000000600") ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 3.244714772s ago: executing program 0 (id=766): syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x175) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1e8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x3, @loopback, 0xffff}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x41) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa1, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) accept(r1, 0x0, 0x0) 3.112981869s ago: executing program 1 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000240)=0x40000009, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/173, 0xad) write$cgroup_devices(r3, &(0x7f0000000100)={'c', ' *:* ', 'r\x00'}, 0x8) 3.094124178s ago: executing program 1 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) syz_clone3(&(0x7f00000007c0)={0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000500), {0x35}, &(0x7f0000000540)=""/49, 0x31, &(0x7f0000000580)=""/180, &(0x7f0000000740)=[r2, r3, 0xffffffffffffffff], 0x3, {r4}}, 0x58) write(r1, &(0x7f0000000240)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001000)="53464f5a05abbf5900"/851, 0x353, 0x0) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 2.97825086s ago: executing program 1 (id=769): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xc5]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macsec0\x00', @broadcast}) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) 2.01326801s ago: executing program 3 (id=770): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) 1.765175835s ago: executing program 1 (id=771): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) (fail_nth: 1) 339.638604ms ago: executing program 2 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 284.067798ms ago: executing program 2 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) socket$alg(0x26, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xa0302, 0x5e) sendfile(r3, r3, 0x0, 0x2) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 100.728469ms ago: executing program 0 (id=774): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fa, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000001000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x0, 0x3fd]}}) r2 = dup(r1) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) (async) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x1ac, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ddfa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x669}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a9d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0xd1) (async) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, r5, 0xfa81c6d76d4f4e97, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) clock_gettime(0x358305538ae10dd1, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="8d92b48fa04e37b4947d6b0cb440f24c9effdc4a6486bedf262d591291db5d7570ed1b20aaecd5e3e84d5bb85d04786756871eb64d54f7b10fd8448aec421eb7e1511b1ee6560d2d018098a4e68e28aa5073", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r8, 0x0, 0x0, 0x80800) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xc4a3b7db7ff9fad4, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x3c, &(0x7f0000000080)=@string={0x3c, 0x3, "84fe6f01d8fb8de92ef39d1cab80a036006cb3063ce080ac877ee8f565b688fd665dd48bdc091e051d770d7c1675b1db23b6254e650edf835b70"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xac, &(0x7f0000000280)=@string={0xac, 0x3, "9ce2ced42513b5c3cc54d62e819f32ef5ec8dfd89c8ce61777629e122899b81048ec4c2b68d2177b5d18acbd4083a511a82364ad521dd61614f6319b8ca7eaad051127bcefd42a426766200ca00ea7e0837494423af93109be77280dc64cc5b6b87ce708e5d18d22edc4d53e390191350be272a38f1ca51087e88bd61495945989d659989dd600773eac1b521146c3fa5c92004de1904f4be4265ce8e3c4da3d2093e3581d7cd01bcc54"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x405}}, {0x68, &(0x7f0000000180)=@string={0x68, 0x3, "6c3fd9647fd1ba1f3ecebd2c4515e3007610a559aedd0cb4a51ec7c85f13e6c043a17b5be6c05514efc27719ff242db00b2daa99419485050e03499a9f033a871a5cb8b78471f05226ea8db6c29b62543da98a0bbfb44eb39aeeda8161925a687c38560bb79b"}}, {0x40, &(0x7f0000000400)=@string={0x40, 0x3, "d1e9ada87290ede234ae200f2d73504aaecb944077091d6a2c4bf1a7fd63170fa03d2ef1d7acaa65ad72c4e8b24fbb039a8bb331e1f79be2cb0948bef57f"}}]}) 12.643849ms ago: executing program 3 (id=775): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) (fail_nth: 1) 11.025124ms ago: executing program 2 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000240)=0x40000009, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/173, 0xad) write$cgroup_devices(r3, &(0x7f0000000100)={'c', ' *:* ', 'r\x00'}, 0x8) 0s ago: executing program 0 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) syz_clone3(&(0x7f00000007c0)={0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000500), {0x35}, &(0x7f0000000540)=""/49, 0x31, &(0x7f0000000580)=""/180, &(0x7f0000000740)=[r2, r3, 0xffffffffffffffff], 0x3, {r4}}, 0x58) write(r1, &(0x7f0000000240)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001000)="53464f5a05abbf5900"/851, 0x353, 0x0) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 76.662094][ T5603] cgroup: Unknown subsys name 'net' [ 76.752501][ T5603] cgroup: Unknown subsys name 'cpuset' [ 76.761940][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.412585][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.240916][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.241831][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.263370][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.266739][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.271207][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.278630][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.285794][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.287741][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.289912][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.290857][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.295365][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.296919][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.302823][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.303440][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.304029][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.305596][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.306487][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.324737][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.333595][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.352087][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.850244][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.851053][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.851636][ T5619] bridge_slave_0: entered allmulticast mode [ 83.856715][ T5619] bridge_slave_0: entered promiscuous mode [ 83.904019][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.904245][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.905473][ T5619] bridge_slave_1: entered allmulticast mode [ 83.911282][ T5619] bridge_slave_1: entered promiscuous mode [ 83.953473][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.953844][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.954184][ T5618] bridge_slave_0: entered allmulticast mode [ 83.960546][ T5618] bridge_slave_0: entered promiscuous mode [ 84.007434][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.011340][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.011738][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.012122][ T5618] bridge_slave_1: entered allmulticast mode [ 84.022884][ T5618] bridge_slave_1: entered promiscuous mode [ 84.062933][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.127101][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.175573][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.193674][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.194063][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.194425][ T5613] bridge_slave_0: entered allmulticast mode [ 84.200199][ T5613] bridge_slave_0: entered promiscuous mode [ 84.214514][ T5619] team0: Port device team_slave_0 added [ 84.245848][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.246083][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.246466][ T5613] bridge_slave_1: entered allmulticast mode [ 84.256086][ T5613] bridge_slave_1: entered promiscuous mode [ 84.267492][ T5619] team0: Port device team_slave_1 added [ 84.306061][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.306450][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.306779][ T5612] bridge_slave_0: entered allmulticast mode [ 84.313227][ T5612] bridge_slave_0: entered promiscuous mode [ 84.332449][ T5618] team0: Port device team_slave_0 added [ 84.360736][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.360957][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.361326][ T5612] bridge_slave_1: entered allmulticast mode [ 84.366135][ T5612] bridge_slave_1: entered promiscuous mode [ 84.404214][ T5618] team0: Port device team_slave_1 added [ 84.420453][ T4933] Bluetooth: hci1: command tx timeout [ 84.420984][ T53] Bluetooth: hci2: command tx timeout [ 84.421304][ T5620] Bluetooth: hci3: command tx timeout [ 84.438339][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.447745][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.467588][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.467626][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.467658][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.501981][ T5620] Bluetooth: hci0: command tx timeout [ 84.529733][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.529776][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.529813][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.578643][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.600798][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.600910][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.601006][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.613289][ T5613] team0: Port device team_slave_0 added [ 84.624139][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.664681][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.664720][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.664977][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.702275][ T5613] team0: Port device team_slave_1 added [ 84.726773][ T5612] team0: Port device team_slave_0 added [ 84.769947][ T5612] team0: Port device team_slave_1 added [ 84.795503][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.795628][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.795719][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.844749][ T5618] hsr_slave_0: entered promiscuous mode [ 84.847652][ T5618] hsr_slave_1: entered promiscuous mode [ 84.865725][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.866455][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.866522][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.926059][ T5619] hsr_slave_0: entered promiscuous mode [ 84.928810][ T5619] hsr_slave_1: entered promiscuous mode [ 84.932522][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.932776][ T5619] Cannot create hsr debugfs directory [ 84.954482][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.954518][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.954557][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.010277][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.010356][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.010470][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.143276][ T5613] hsr_slave_0: entered promiscuous mode [ 85.145850][ T5613] hsr_slave_1: entered promiscuous mode [ 85.147725][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 85.147776][ T5613] Cannot create hsr debugfs directory [ 85.220660][ T5612] hsr_slave_0: entered promiscuous mode [ 85.223170][ T5612] hsr_slave_1: entered promiscuous mode [ 85.225005][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 85.225097][ T5612] Cannot create hsr debugfs directory [ 85.593750][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.607498][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.628333][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.638600][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.645691][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.658670][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.664264][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.674827][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.749412][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.760674][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.776653][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.788537][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.792225][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.805843][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.813142][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.824143][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.932727][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.947535][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.955281][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.964968][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.973269][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.982690][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.999480][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.009631][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.116745][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.127307][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.140222][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.152439][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.160505][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.170354][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.183356][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.192950][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.210912][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.267428][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.294316][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.295438][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.327130][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.335779][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.336582][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.432139][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.441228][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.477714][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477962][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.493611][ T4933] Bluetooth: hci1: command tx timeout [ 86.499354][ T5620] Bluetooth: hci3: command tx timeout [ 86.499494][ T53] Bluetooth: hci2: command tx timeout [ 86.520754][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.520872][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.542757][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.557364][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.557508][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.572583][ T5620] Bluetooth: hci0: command tx timeout [ 86.607204][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.607501][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.755270][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.843159][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.902329][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.902721][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.958394][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.958647][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.582566][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.766008][ T5618] veth0_vlan: entered promiscuous mode [ 87.821177][ T5618] veth1_vlan: entered promiscuous mode [ 87.944568][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.952476][ T5618] veth0_macvtap: entered promiscuous mode [ 87.962982][ T5618] veth1_macvtap: entered promiscuous mode [ 87.990743][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.066826][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.097465][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.164665][ T5613] veth0_vlan: entered promiscuous mode [ 88.192377][ T5619] veth0_vlan: entered promiscuous mode [ 88.213230][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.234826][ T5613] veth1_vlan: entered promiscuous mode [ 88.244924][ T5619] veth1_vlan: entered promiscuous mode [ 88.310579][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312409][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312555][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312652][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394041][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.394091][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.441670][ T5619] veth0_macvtap: entered promiscuous mode [ 88.474105][ T5613] veth0_macvtap: entered promiscuous mode [ 88.481695][ T5612] veth0_vlan: entered promiscuous mode [ 88.497265][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.497332][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.505040][ T5619] veth1_macvtap: entered promiscuous mode [ 88.527892][ T5612] veth1_vlan: entered promiscuous mode [ 88.535861][ T5613] veth1_macvtap: entered promiscuous mode [ 88.569538][ T5620] Bluetooth: hci3: command tx timeout [ 88.570138][ T5620] Bluetooth: hci1: command tx timeout [ 88.570202][ T5620] Bluetooth: hci2: command tx timeout [ 88.586381][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.615605][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.626477][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.659716][ T53] Bluetooth: hci0: command tx timeout [ 88.679985][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.683633][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.720164][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721014][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721346][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721455][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.805708][ T5612] veth0_macvtap: entered promiscuous mode [ 88.817559][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.845295][ T5612] veth1_macvtap: entered promiscuous mode [ 88.915304][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.972697][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.013084][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.026085][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.092297][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.092345][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.119742][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.129101][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.129163][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.129200][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.129247][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.207865][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.207918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.257604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.257642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.282264][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.299394][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.338571][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.347249][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.347914][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.438627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.438680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.471645][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.484874][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.496144][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.506434][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.526987][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.535226][ T10] usb 1-1: Product: syz [ 89.535277][ T10] usb 1-1: Manufacturer: syz [ 89.535298][ T10] usb 1-1: SerialNumber: syz [ 89.571470][ T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 89.581823][ T10] cdc_ncm 1-1:1.0: bind() failure [ 89.799811][ T190] usb 1-1: USB disconnect, device number 2 [ 89.878056][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.978208][ T12] nci: nci_ntf_packet: unknown ntf opcode 0xc2f [ 90.149866][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.279258][ T5767] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.299862][ T10] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 90.302951][ T10] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 90.303028][ T10] usb 3-1: config 1 has no interface number 0 [ 90.318179][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.318198][ T10] usb 3-1: Product: syz [ 90.318209][ T10] usb 3-1: Manufacturer: syz [ 90.318219][ T10] usb 3-1: SerialNumber: syz [ 90.376017][ T10] usb 3-1: 3:1 : does not exist [ 90.381595][ T10] usb 3-1: 3:2 : does not exist [ 90.440160][ T5767] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.452807][ T5767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.452852][ T5767] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.452917][ T5767] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.495076][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.503384][ T5767] usb 2-1: Product: syz [ 90.503437][ T5767] usb 2-1: Manufacturer: syz [ 90.503458][ T5767] usb 2-1: SerialNumber: syz [ 90.540475][ T5767] cdc_ncm 2-1:1.0: skipping garbage [ 90.540518][ T5767] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 90.540580][ T5767] cdc_ncm 2-1:1.0: bind() failure [ 90.651041][ T4933] Bluetooth: hci3: command tx timeout [ 90.651121][ T5620] Bluetooth: hci1: command tx timeout [ 90.651175][ T53] Bluetooth: hci2: command tx timeout [ 90.677206][ T10] usb 3-1: USB disconnect, device number 2 [ 90.730703][ T53] Bluetooth: hci0: command tx timeout [ 90.762654][ T25] usb 2-1: USB disconnect, device number 2 [ 90.837856][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.632130][ T5809] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.744359][ T5811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.937527][ T988] cfg80211: failed to load regulatory.db [ 92.469768][ T5840] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.25'. [ 92.834016][ T5781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.940341][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 93.089627][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 93.093637][ T10] usb 1-1: config 0 has no interfaces? [ 93.093732][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.115849][ T10] usb 1-1: config 0 descriptor?? [ 93.338241][ T190] usb 1-1: USB disconnect, device number 3 [ 93.476736][ T5862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.725296][ T13] IPVS: starting estimator thread 0... [ 93.820005][ T5873] IPVS: using max 28 ests per chain, 67200 per kthread [ 94.654819][ T5903] process 'syz.0.51' launched './file0' with NULL argv: empty string added [ 95.025694][ T5917] gadgetfs: bound to dummy_udc driver [ 95.046215][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce1cc00: rx timeout, send abort [ 95.103149][ T5922] Zero length message leads to an empty skb [ 95.489106][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.547588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce1c400: rx timeout, send abort [ 95.548573][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce1cc00: abort rx timeout. Force session deactivation [ 95.639829][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 95.649914][ T10] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 95.649954][ T10] usb 2-1: config 1 has no interface number 0 [ 95.667397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.667436][ T10] usb 2-1: Product: syz [ 95.667452][ T10] usb 2-1: Manufacturer: syz [ 95.667494][ T10] usb 2-1: SerialNumber: syz [ 95.706523][ T10] usb 2-1: 3:1 : does not exist [ 95.706578][ T10] usb 2-1: 3:2 : does not exist [ 96.047653][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce1c400: abort rx timeout. Force session deactivation [ 96.489774][ T5971] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP) [ 97.746796][ T6018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.261828][ T27] IPVS: starting estimator thread 0... [ 98.430235][ T6035] IPVS: using max 28 ests per chain, 67200 per kthread [ 98.785042][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.004452][ T988] usb 2-1: USB disconnect, device number 3 [ 101.439582][ T190] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.590695][ T190] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 101.593451][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.593597][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.646175][ T190] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 101.651164][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 101.651371][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 101.706050][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 101.715896][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 101.739574][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 101.755801][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 101.756003][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 101.774416][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 101.849891][ T190] usb 4-1: USB disconnect, device number 2 [ 101.933295][ T190] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 101.984375][ T190] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 101.992517][ T190] keyspan 4-1:1.0: device disconnected [ 102.716674][ T1157] IPVS: starting estimator thread 0... [ 102.811077][ T6152] IPVS: using max 30 ests per chain, 72000 per kthread [ 103.169025][ T190] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.326292][ T190] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 103.331314][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.331465][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.367531][ T190] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 103.382010][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 103.382174][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 103.401384][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 103.401603][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 103.415662][ T190] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.444098][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 103.444270][ T190] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 103.477002][ T190] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 103.572833][ T190] usb 3-1: USB disconnect, device number 3 [ 103.593211][ T12] IPVS: starting estimator thread 0... [ 103.601880][ T190] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.633173][ T190] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.644000][ T190] keyspan 3-1:1.0: device disconnected [ 103.689102][ T6175] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.074145][ T6195] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.606829][ T6213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.694857][ T6217] rnbd_client L127: Can't parse path i: -93 [ 105.059049][ T5767] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.221060][ T5767] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 105.227611][ T5767] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 105.227697][ T5767] usb 2-1: config 1 has no interface number 0 [ 105.246036][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.246087][ T5767] usb 2-1: Product: syz [ 105.246121][ T5767] usb 2-1: Manufacturer: syz [ 105.246140][ T5767] usb 2-1: SerialNumber: syz [ 105.318443][ T5767] usb 2-1: 3:1 : does not exist [ 105.318502][ T5767] usb 2-1: 3:2 : does not exist [ 106.599024][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 106.779667][ T10] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 106.784062][ T10] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 106.784150][ T10] usb 4-1: config 127 has no interface number 0 [ 106.809980][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.810033][ T10] usb 4-1: Product: syz [ 106.810090][ T10] usb 4-1: Manufacturer: syz [ 106.810108][ T10] usb 4-1: SerialNumber: syz [ 107.072897][ T6264] misc userio: Invalid payload size [ 108.372625][ T10] asix 4-1:127.57: probe with driver asix failed with error -22 [ 108.384451][ T10] usb 4-1: USB disconnect, device number 3 [ 110.060392][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.107748][ T190] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 110.107811][ T190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 110.135078][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.145047][ T13] wlan1: authenticated [ 110.153725][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.191051][ T1006] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 110.301957][ T1157] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 110.409309][ T1157] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 110.518983][ T12] wlan1: association with 08:02:11:00:00:00 timed out [ 110.615251][ T5767] usb 2-1: USB disconnect, device number 4 [ 110.822938][ T6339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.879331][ T988] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.039620][ T988] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 112.042947][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.063484][ T988] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 004 [ 112.464346][ T988] (null): failure reading functionality [ 112.479559][ T988] i2c i2c-1: failure reading functionality [ 112.504603][ T988] i2c i2c-1: connected i2c-tiny-usb device [ 114.638625][ T6373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.666988][ T5725] usb 4-1: USB disconnect, device number 4 [ 114.856900][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.708962][ T5701] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 116.859528][ T5701] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 116.862532][ T5701] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 116.862607][ T5701] usb 3-1: config 127 has no interface number 0 [ 116.868511][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.868575][ T5701] usb 3-1: Product: syz [ 116.868770][ T5701] usb 3-1: Manufacturer: syz [ 116.868789][ T5701] usb 3-1: SerialNumber: syz [ 117.122031][ T6502] misc userio: Invalid payload size [ 117.755899][ T6506] null_blk: nullb1: using native zone append [ 117.796579][ T6506] null_blk: disk nullb1 created [ 117.815576][ T6506] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 118.104466][ T6520] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 118.405339][ T5701] asix 3-1:127.57: probe with driver asix failed with error -22 [ 118.419775][ T5701] usb 3-1: USB disconnect, device number 4 [ 118.818473][ T6463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.175634][ T6538] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 119.305617][ T6542] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 119.316300][ T6542] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 119.648942][ T5701] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 119.799667][ T5701] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 119.802960][ T5701] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 119.803024][ T5701] usb 2-1: config 127 has no interface number 0 [ 119.814046][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.814117][ T5701] usb 2-1: Product: syz [ 119.814159][ T5701] usb 2-1: Manufacturer: syz [ 119.814200][ T5701] usb 2-1: SerialNumber: syz [ 120.051330][ T6554] misc userio: Invalid payload size [ 121.336528][ T5701] asix 2-1:127.57: probe with driver asix failed with error -22 [ 121.390212][ T5701] usb 2-1: USB disconnect, device number 5 [ 121.505452][ T6566] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 122.202146][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.251082][ T6544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.251829][ T6567] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 122.251848][ T6567] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 122.325197][ T6594] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 122.335798][ T6594] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 122.359633][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 122.385161][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 122.385206][ T9] usb 3-1: config 1 has no interface number 0 [ 122.385288][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 122.385320][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 122.385351][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 122.437409][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.437454][ T9] usb 3-1: Product: syz [ 122.437486][ T9] usb 3-1: Manufacturer: syz [ 122.437518][ T9] usb 3-1: SerialNumber: syz [ 122.464204][ T6583] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.674333][ T6603] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 122.753632][ T6564] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.771289][ T9] usb 3-1: No status endpoint found [ 123.141761][ T6628] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 123.785087][ T6646] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 123.795131][ T6646] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 124.510792][ T5798] usb 3-1: USB disconnect, device number 5 [ 124.842933][ T6668] fuse: Bad value for 'fd' [ 125.255597][ T6661] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 125.771756][ T5798] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.951475][ T5798] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 125.954544][ T5798] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 125.954624][ T5798] usb 3-1: config 1 has no interface number 0 [ 125.966526][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.966601][ T5798] usb 3-1: Product: syz [ 125.966644][ T5798] usb 3-1: Manufacturer: syz [ 125.966696][ T5798] usb 3-1: SerialNumber: syz [ 126.010471][ T6618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.027768][ T6691] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 126.027814][ T6691] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 126.093337][ T5798] usb 3-1: 3:1 : does not exist [ 126.095891][ T5798] usb 3-1: 3:2 : does not exist [ 126.367017][ T5798] usb 3-1: USB disconnect, device number 6 [ 126.409961][ T53] Bluetooth: hci3: command 0x0401 tx timeout [ 126.466070][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.162084][ T6725] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 127.167769][ T6725] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 127.273296][ T6734] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 127.799219][ T5725] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.949810][ T5725] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 127.955757][ T5725] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 127.955834][ T5725] usb 2-1: config 1 has no interface number 0 [ 127.975205][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.975255][ T5725] usb 2-1: Product: syz [ 127.975273][ T5725] usb 2-1: Manufacturer: syz [ 127.975319][ T5725] usb 2-1: SerialNumber: syz [ 128.021275][ T5725] usb 2-1: 3:1 : does not exist [ 128.021331][ T5725] usb 2-1: 3:2 : does not exist [ 128.222679][ T5725] usb 2-1: USB disconnect, device number 6 [ 129.187995][ T6808] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 129.200151][ T6808] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 129.609589][ T6826] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 129.627363][ T6826] netlink: 'syz.3.413': attribute type 2 has an invalid length. [ 130.311010][ T6848] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 130.312668][ T6848] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 130.659618][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 130.679582][ T5694] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.841723][ T5694] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 130.853693][ T5694] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 130.853739][ T5694] usb 4-1: config 1 has no interface number 0 [ 130.853830][ T5694] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 130.853863][ T5694] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 130.853893][ T5694] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 130.918698][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.918742][ T5694] usb 4-1: Product: syz [ 130.918780][ T5694] usb 4-1: Manufacturer: syz [ 130.918799][ T5694] usb 4-1: SerialNumber: syz [ 130.952127][ T6837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.148636][ T6879] capability: warning: `syz.1.431' uses deprecated v2 capabilities in a way that may be insecure [ 131.237318][ T6826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.248618][ T5694] usb 4-1: No status endpoint found [ 131.310910][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 131.492443][ T6592] usb 4-1: USB disconnect, device number 5 [ 132.614330][ T6930] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 132.623898][ T6930] netlink: 'syz.0.456': attribute type 2 has an invalid length. [ 132.749863][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 132.892511][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892613][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.697195][ T6972] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 133.706298][ T6972] netlink: 'syz.2.469': attribute type 2 has an invalid length. [ 133.891470][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 134.287747][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 134.453999][ T7001] misc userio: Invalid payload size [ 134.617983][ T7010] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 134.626365][ T7010] netlink: 'syz.3.483': attribute type 2 has an invalid length. [ 135.186883][ T7037] misc userio: Invalid payload size [ 139.330146][ T7095] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 139.338127][ T7095] netlink: 'syz.0.519': attribute type 2 has an invalid length. [ 139.539003][ T5725] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 139.690404][ T5725] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 139.698021][ T5725] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 139.698103][ T5725] usb 3-1: config 127 has no interface number 0 [ 139.714136][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.714205][ T5725] usb 3-1: Product: syz [ 139.714249][ T5725] usb 3-1: Manufacturer: syz [ 139.714291][ T5725] usb 3-1: SerialNumber: syz [ 139.945247][ T7094] misc userio: Invalid payload size [ 140.155625][ T5725] asix 3-1:127.57: probe with driver asix failed with error -22 [ 140.168593][ T5725] usb 3-1: USB disconnect, device number 7 [ 141.340411][ T5694] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 141.489894][ T5694] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 141.493985][ T5694] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 141.494061][ T5694] usb 3-1: config 127 has no interface number 0 [ 141.501767][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.501794][ T5694] usb 3-1: Product: syz [ 141.501808][ T5694] usb 3-1: Manufacturer: syz [ 141.501822][ T5694] usb 3-1: SerialNumber: syz [ 141.765917][ T7125] misc userio: Invalid payload size [ 142.685692][ T7197] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 142.697049][ T7197] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 142.832320][ T7206] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 142.849602][ T7206] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 143.334297][ T5694] asix 3-1:127.57: probe with driver asix failed with error -22 [ 143.366084][ T5694] usb 3-1: USB disconnect, device number 8 [ 143.451605][ T5725] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.609841][ T5725] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 143.621994][ T5725] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 143.622041][ T5725] usb 2-1: config 1 has no interface number 0 [ 143.622104][ T5725] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 143.622137][ T5725] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 143.622168][ T5725] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 143.676149][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.676196][ T5725] usb 2-1: Product: syz [ 143.676235][ T5725] usb 2-1: Manufacturer: syz [ 143.676255][ T5725] usb 2-1: SerialNumber: syz [ 143.710918][ T7222] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.809452][ T7238] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 143.825997][ T7238] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 143.959271][ T5725] usb 2-1: Error in usbnet_get_endpoints (-71) [ 143.989011][ T5725] usb 2-1: USB disconnect, device number 7 [ 144.467465][ T7268] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 144.495029][ T7263] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 145.008739][ T7293] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 145.028519][ T7293] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 145.200545][ T7302] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 145.200589][ T7302] netlink: 'syz.1.612': attribute type 2 has an invalid length. [ 145.330640][ T7311] netlink: 'syz.3.615': attribute type 3 has an invalid length. [ 145.727491][ T7327] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 145.739501][ T7327] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 145.951283][ T7342] netlink: 'syz.2.628': attribute type 3 has an invalid length. [ 146.010262][ T7346] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 146.018247][ T7346] netlink: 'syz.1.629': attribute type 2 has an invalid length. [ 146.420435][ T7360] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 146.431412][ T7360] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 146.581564][ T7368] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 146.765244][ T7376] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 146.980762][ T7383] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 146.991448][ T7383] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 147.345207][ T7398] fuse: Bad value for 'group_id' [ 147.345250][ T7398] fuse: Bad value for 'group_id' [ 147.729908][ T7408] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 147.745223][ T7408] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 147.864147][ T7420] fuse: Bad value for 'group_id' [ 147.864193][ T7420] fuse: Bad value for 'group_id' [ 148.228920][ T190] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 148.380141][ T190] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 148.387104][ T190] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 148.387183][ T190] usb 2-1: config 127 has no interface number 0 [ 148.406399][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.406446][ T190] usb 2-1: Product: syz [ 148.406478][ T190] usb 2-1: Manufacturer: syz [ 148.406530][ T190] usb 2-1: SerialNumber: syz [ 148.602023][ T7441] fuse: Bad value for 'group_id' [ 148.607352][ T7441] fuse: Bad value for 'group_id' [ 148.673460][ T7443] validate_nla: 7 callbacks suppressed [ 148.679639][ T7424] misc userio: Invalid payload size [ 148.687627][ T7443] netlink: 'syz.2.672': attribute type 3 has an invalid length. [ 148.707835][ T190] asix 2-1:127.57: probe with driver asix failed with error -22 [ 148.725079][ T190] usb 2-1: USB disconnect, device number 8 [ 149.778930][ T190] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 149.932049][ T190] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 149.935180][ T190] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 149.935239][ T190] usb 4-1: config 127 has no interface number 0 [ 149.943213][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.943283][ T190] usb 4-1: Product: syz [ 149.943335][ T190] usb 4-1: Manufacturer: syz [ 149.943387][ T190] usb 4-1: SerialNumber: syz [ 150.180414][ T7463] misc userio: Invalid payload size [ 150.397550][ T190] asix 4-1:127.57: probe with driver asix failed with error -22 [ 150.406370][ T190] usb 4-1: USB disconnect, device number 6 [ 150.682349][ T7475] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 150.690620][ T7475] netlink: 'syz.0.687': attribute type 2 has an invalid length. [ 153.008980][ T6592] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 153.159750][ T6592] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 153.162647][ T6592] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 153.162717][ T6592] usb 2-1: config 127 has no interface number 0 [ 153.168965][ T6592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.168991][ T6592] usb 2-1: Product: syz [ 153.169008][ T6592] usb 2-1: Manufacturer: syz [ 153.169025][ T6592] usb 2-1: SerialNumber: syz [ 153.383673][ T7510] misc userio: Invalid payload size [ 154.007956][ T7487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.021303][ T7498] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 154.021339][ T7498] netlink: 'syz.0.695': attribute type 2 has an invalid length. [ 154.105999][ T7513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.701'. [ 154.352028][ T7523] FAULT_INJECTION: forcing a failure. [ 154.352028][ T7523] name failslab, interval 1, probability 0, space 0, times 1 [ 154.352107][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(full) [ 154.352132][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.352207][ T7523] Call Trace: [ 154.352243][ T7523] [ 154.352271][ T7523] dump_stack_lvl+0xe8/0x150 [ 154.352363][ T7523] should_fail_ex+0x410/0x560 [ 154.352464][ T7523] should_failslab+0xa8/0x100 [ 154.352539][ T7523] __kmalloc_noprof+0xfe/0x720 [ 154.352609][ T7523] ? rcu_is_watching+0x16/0xb0 [ 154.352667][ T7523] ? tomoyo_realpath_from_path+0xef/0x640 [ 154.352750][ T7523] ? tomoyo_realpath_from_path+0xef/0x640 [ 154.352859][ T7523] tomoyo_realpath_from_path+0xef/0x640 [ 154.352962][ T7523] ? tomoyo_path_number_perm+0x219/0x5f0 [ 154.353040][ T7523] tomoyo_path_number_perm+0x246/0x5f0 [ 154.353122][ T7523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.353192][ T7523] ? __lock_acquire+0x6df/0x2e50 [ 154.353311][ T7523] ? hook_file_ioctl+0x1f2/0x600 [ 154.353450][ T7523] ? __fget_files+0x2a/0x420 [ 154.353522][ T7523] ? __fget_files+0x2a/0x420 [ 154.353583][ T7523] ? __fget_files+0x3a2/0x420 [ 154.353651][ T7523] ? __fget_files+0x2a/0x420 [ 154.353739][ T7523] security_file_ioctl+0xc3/0x2a0 [ 154.353821][ T7523] __se_sys_ioctl+0x47/0x170 [ 154.353913][ T7523] do_syscall_64+0x166/0x520 [ 154.353973][ T7523] ? trace_irq_disable+0x3b/0x140 [ 154.354047][ T7523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.354107][ T7523] ? clear_bhb_loop+0x70/0xc0 [ 154.354171][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.354232][ T7523] RIP: 0033:0x7f9de459e0d9 [ 154.354301][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.354339][ T7523] RSP: 002b:00007f9de54a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.354401][ T7523] RAX: ffffffffffffffda RBX: 00007f9de4825fa0 RCX: 00007f9de459e0d9 [ 154.354442][ T7523] RDX: 00002000000000c0 RSI: 00000000c040565e RDI: 0000000000000003 [ 154.354482][ T7523] RBP: 00007f9de54a4090 R08: 0000000000000000 R09: 0000000000000000 [ 154.354514][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.354549][ T7523] R13: 00007f9de4826038 R14: 00007f9de4825fa0 R15: 00007fff418c0d98 [ 154.354650][ T7523] [ 154.354736][ T7523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.686820][ T6592] asix 2-1:127.57: probe with driver asix failed with error -22 [ 154.710215][ T6592] usb 2-1: USB disconnect, device number 9 [ 154.973842][ T7538] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 154.998456][ T7538] netlink: 'syz.0.710': attribute type 4 has an invalid length. [ 154.998502][ T7538] netlink: 152 bytes leftover after parsing attributes in process `syz.0.710'. [ 154.999361][ T5709] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.024147][ T7538] .`: renamed from bond0 (while UP) [ 155.159807][ T5709] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 155.163421][ T5709] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.163493][ T5709] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.163567][ T5709] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.172248][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.172323][ T5709] usb 3-1: Product: syz [ 155.172365][ T5709] usb 3-1: Manufacturer: syz [ 155.172400][ T5709] usb 3-1: SerialNumber: syz [ 155.203353][ T5709] hub 3-1:1.0: bad descriptor, ignoring hub [ 155.203383][ T5709] hub 3-1:1.0: probe with driver hub failed with error -5 [ 155.288362][ T7540] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 155.288420][ T7540] netlink: 'syz.1.711': attribute type 2 has an invalid length. [ 155.493094][ T5709] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 155.520965][ T5709] usb 3-1: USB disconnect, device number 9 [ 155.532411][ T5709] usblp0: removed [ 155.659096][ T5725] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.810896][ T5725] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 155.813962][ T5725] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 155.814041][ T5725] usb 2-1: config 1 has no interface number 0 [ 155.814132][ T5725] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 155.814204][ T5725] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 155.814286][ T5725] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 155.821354][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.821426][ T5725] usb 2-1: Product: syz [ 155.821468][ T5725] usb 2-1: Manufacturer: syz [ 155.821520][ T5725] usb 2-1: SerialNumber: syz [ 155.845536][ T7540] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 156.055247][ T5725] usb 2-1: Error in usbnet_get_endpoints (-71) [ 156.083621][ T5725] usb 2-1: USB disconnect, device number 10 [ 156.759224][ T5725] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 156.790831][ T7568] FAULT_INJECTION: forcing a failure. [ 156.790831][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.790893][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 156.790916][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.790928][ T7568] Call Trace: [ 156.790992][ T7568] [ 156.791022][ T7568] dump_stack_lvl+0xe8/0x150 [ 156.791096][ T7568] should_fail_ex+0x410/0x560 [ 156.791205][ T7568] _copy_from_user+0x2d/0xb0 [ 156.791258][ T7568] ___sys_sendmsg+0x1c6/0x360 [ 156.791327][ T7568] ? __lock_acquire+0x6df/0x2e50 [ 156.791417][ T7568] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.791570][ T7568] ? __fget_files+0x2a/0x420 [ 156.791631][ T7568] ? __fget_files+0x3a2/0x420 [ 156.791714][ T7568] __x64_sys_sendmsg+0x1b1/0x290 [ 156.791793][ T7568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.791910][ T7568] do_syscall_64+0x166/0x520 [ 156.791961][ T7568] ? trace_irq_disable+0x3b/0x140 [ 156.792038][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.792090][ T7568] ? clear_bhb_loop+0x70/0xc0 [ 156.792153][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.792220][ T7568] RIP: 0033:0x7fa32cb9e0d9 [ 156.792311][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.792346][ T7568] RSP: 002b:00007fa32db25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.792401][ T7568] RAX: ffffffffffffffda RBX: 00007fa32ce25fa0 RCX: 00007fa32cb9e0d9 [ 156.792447][ T7568] RDX: 0000000000040080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 156.792490][ T7568] RBP: 00007fa32db25090 R08: 0000000000000000 R09: 0000000000000000 [ 156.792521][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.792551][ T7568] R13: 00007fa32ce26038 R14: 00007fa32ce25fa0 R15: 00007ffe1dd0e8d8 [ 156.792618][ T7568] [ 156.946427][ T5725] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 156.955504][ T5725] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 156.955580][ T5725] usb 3-1: config 127 has no interface number 0 [ 156.970062][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.970133][ T5725] usb 3-1: Product: syz [ 156.970173][ T5725] usb 3-1: Manufacturer: syz [ 156.970213][ T5725] usb 3-1: SerialNumber: syz [ 157.212472][ T7562] misc userio: Invalid payload size [ 157.299008][ T5709] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 157.472990][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.475103][ T5709] usb 2-1: not running at top speed; connect to a high speed hub [ 157.475239][ T5709] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 157.480223][ T5709] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 157.480291][ T5709] usb 2-1: config 2 has no interface number 0 [ 157.480445][ T5709] usb 2-1: config 2 interface 8 has no altsetting 0 [ 157.489511][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 157.490044][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.711165][ T7570] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 157.725363][ T7570] loop5: detected capacity change from 0 to 7 [ 157.739749][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.739817][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.740022][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.740181][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.740439][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.740797][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.740958][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.741007][ T7570] ldm_validate_partition_table(): Disk read failed. [ 157.741167][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.741299][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.741366][ T7570] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.741521][ T7570] Dev loop5: unable to read RDB block 0 [ 157.741793][ T7570] loop5: unable to read partition table [ 157.742644][ T7570] loop5: partition table beyond EOD, truncated [ 157.742805][ T7570] loop_reread_partitions: partition scan of loop5 (被x顯· [ 157.742805][ T7570] ) failed (rc=-5) [ 157.824641][ T5709] usbtest 2-1:2.8: Linux user mode ISO test driver [ 157.824708][ T5709] usbtest 2-1:2.8: full-speed {control iso-out} tests (+alt) [ 157.916078][ T7584] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 157.916119][ T7584] netlink: 'syz.3.728': attribute type 2 has an invalid length. [ 158.045218][ T6592] usb 2-1: USB disconnect, device number 11 [ 158.410063][ T6579] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.503422][ T5725] asix 3-1:127.57: probe with driver asix failed with error -22 [ 158.516437][ T5725] usb 3-1: USB disconnect, device number 10 [ 158.559967][ T6579] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 158.563143][ T6579] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 158.563212][ T6579] usb 4-1: config 1 has no interface number 0 [ 158.563305][ T6579] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 158.563386][ T6579] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 158.563506][ T6579] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 158.576781][ T6579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.576860][ T6579] usb 4-1: Product: syz [ 158.576900][ T6579] usb 4-1: Manufacturer: syz [ 158.576942][ T6579] usb 4-1: SerialNumber: syz [ 158.620848][ T7584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.831275][ T6579] usb 4-1: Error in usbnet_get_endpoints (-71) [ 158.861752][ T6579] usb 4-1: USB disconnect, device number 7 [ 159.496765][ T7614] FAULT_INJECTION: forcing a failure. [ 159.496765][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 159.496826][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.3.740 Not tainted syzkaller #0 PREEMPT(full) [ 159.496849][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.496861][ T7614] Call Trace: [ 159.496920][ T7614] [ 159.496951][ T7614] dump_stack_lvl+0xe8/0x150 [ 159.497085][ T7614] should_fail_ex+0x410/0x560 [ 159.497185][ T7614] should_failslab+0xa8/0x100 [ 159.497256][ T7614] __kvmalloc_node_noprof+0x176/0x820 [ 159.497338][ T7614] ? aa_file_perm+0x4ed/0x15f0 [ 159.497388][ T7614] ? register_lock_class+0x31/0x2e0 [ 159.497466][ T7614] ? seq_read_iter+0x1ea/0xca0 [ 159.497539][ T7614] ? seq_read_iter+0x1ea/0xca0 [ 159.497641][ T7614] seq_read_iter+0x1ea/0xca0 [ 159.497767][ T7614] seq_read+0x367/0x480 [ 159.497872][ T7614] ? __pfx_seq_read+0x10/0x10 [ 159.498003][ T7614] ? rw_verify_area+0x24a/0x4c0 [ 159.498081][ T7614] ? __pfx_seq_read+0x10/0x10 [ 159.498161][ T7614] vfs_read+0x213/0xa80 [ 159.498242][ T7614] ? __pfx___mutex_lock+0x10/0x10 [ 159.498305][ T7614] ? __pfx_vfs_read+0x10/0x10 [ 159.498384][ T7614] ? __fget_files+0x2a/0x420 [ 159.498472][ T7614] ? __fget_files+0x3a2/0x420 [ 159.498536][ T7614] ? __fget_files+0x2a/0x420 [ 159.498617][ T7614] ksys_read+0x150/0x270 [ 159.498689][ T7614] ? __pfx_ksys_read+0x10/0x10 [ 159.498776][ T7614] do_syscall_64+0x166/0x520 [ 159.498828][ T7614] ? trace_irq_disable+0x3b/0x140 [ 159.498906][ T7614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.498960][ T7614] ? clear_bhb_loop+0x70/0xc0 [ 159.499031][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.499083][ T7614] RIP: 0033:0x7f5c5ed9e0d9 [ 159.499149][ T7614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.499191][ T7614] RSP: 002b:00007f5c5fbd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.499255][ T7614] RAX: ffffffffffffffda RBX: 00007f5c5f025fa0 RCX: 00007f5c5ed9e0d9 [ 159.499296][ T7614] RDX: 0000000000001000 RSI: 0000200000000180 RDI: 0000000000000003 [ 159.499339][ T7614] RBP: 00007f5c5fbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 159.499372][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.499403][ T7614] R13: 00007f5c5f026038 R14: 00007f5c5f025fa0 R15: 00007fff7fbe7e98 [ 159.499491][ T7614] [ 160.018963][ T6859] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 160.163022][ T7634] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 160.163068][ T7634] netlink: 'syz.3.748': attribute type 2 has an invalid length. [ 160.181948][ T6859] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 160.192990][ T6859] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 160.201489][ T6859] usb 3-1: config 127 has no interface number 0 [ 160.214704][ T6859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.214748][ T6859] usb 3-1: Product: syz [ 160.214782][ T6859] usb 3-1: Manufacturer: syz [ 160.214802][ T6859] usb 3-1: SerialNumber: syz [ 160.450087][ T7616] misc userio: Invalid payload size [ 160.588990][ T6579] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.674276][ T6859] asix 3-1:127.57: probe with driver asix failed with error -22 [ 160.688474][ T6859] usb 3-1: USB disconnect, device number 11 [ 160.749638][ T6579] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 160.753009][ T6579] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 160.753078][ T6579] usb 4-1: config 1 has no interface number 0 [ 160.753172][ T6579] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 160.753234][ T6579] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 160.753498][ T6579] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 160.760752][ T6579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.760822][ T6579] usb 4-1: Product: syz [ 160.760864][ T6579] usb 4-1: Manufacturer: syz [ 160.760905][ T6579] usb 4-1: SerialNumber: syz [ 160.784699][ T7634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 160.987917][ T6579] usb 4-1: Error in usbnet_get_endpoints (-71) [ 161.012084][ T6579] usb 4-1: USB disconnect, device number 8 [ 161.822398][ T7662] FAULT_INJECTION: forcing a failure. [ 161.822398][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 161.822472][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.2.754 Not tainted syzkaller #0 PREEMPT(full) [ 161.822496][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.822509][ T7662] Call Trace: [ 161.822557][ T7662] [ 161.822592][ T7662] dump_stack_lvl+0xe8/0x150 [ 161.822685][ T7662] should_fail_ex+0x410/0x560 [ 161.822773][ T7662] should_failslab+0xa8/0x100 [ 161.822842][ T7662] __kmalloc_noprof+0xfe/0x720 [ 161.822926][ T7662] ? kernfs_fop_write_iter+0x157/0x540 [ 161.822979][ T7662] ? kernfs_fop_write_iter+0x157/0x540 [ 161.823069][ T7662] kernfs_fop_write_iter+0x157/0x540 [ 161.823136][ T7662] vfs_write+0x612/0xba0 [ 161.823231][ T7662] ? __pfx_vfs_write+0x10/0x10 [ 161.823334][ T7662] ? __fget_files+0x2a/0x420 [ 161.823433][ T7662] ksys_write+0x150/0x270 [ 161.823509][ T7662] ? __pfx_ksys_write+0x10/0x10 [ 161.823620][ T7662] do_syscall_64+0x166/0x520 [ 161.823675][ T7662] ? trace_irq_disable+0x3b/0x140 [ 161.823756][ T7662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.823818][ T7662] ? clear_bhb_loop+0x70/0xc0 [ 161.823892][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.823945][ T7662] RIP: 0033:0x7f9de459e0d9 [ 161.823997][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.824052][ T7662] RSP: 002b:00007f9de54a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.824115][ T7662] RAX: ffffffffffffffda RBX: 00007f9de4825fa0 RCX: 00007f9de459e0d9 [ 161.824164][ T7662] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 161.824196][ T7662] RBP: 00007f9de54a4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.824228][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.824266][ T7662] R13: 00007f9de4826038 R14: 00007f9de4825fa0 R15: 00007fff418c0d98 [ 161.824350][ T7662] [ 162.202922][ T7672] FAULT_INJECTION: forcing a failure. [ 162.202922][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 162.202981][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.1.758 Not tainted syzkaller #0 PREEMPT(full) [ 162.203005][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.203017][ T7672] Call Trace: [ 162.203024][ T7672] [ 162.203077][ T7672] dump_stack_lvl+0xe8/0x150 [ 162.203178][ T7672] should_fail_ex+0x410/0x560 [ 162.203290][ T7672] should_failslab+0xa8/0x100 [ 162.203345][ T7672] __kmalloc_noprof+0xfe/0x720 [ 162.203430][ T7672] ? rcu_is_watching+0x16/0xb0 [ 162.203492][ T7672] ? tomoyo_realpath_from_path+0xef/0x640 [ 162.203603][ T7672] ? tomoyo_realpath_from_path+0xef/0x640 [ 162.203707][ T7672] tomoyo_realpath_from_path+0xef/0x640 [ 162.203825][ T7672] ? tomoyo_path_number_perm+0x219/0x5f0 [ 162.203900][ T7672] tomoyo_path_number_perm+0x246/0x5f0 [ 162.203983][ T7672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.204060][ T7672] ? __lock_acquire+0x6df/0x2e50 [ 162.204176][ T7672] ? hook_file_ioctl+0x1f2/0x600 [ 162.204308][ T7672] ? __fget_files+0x2a/0x420 [ 162.204381][ T7672] ? __fget_files+0x2a/0x420 [ 162.204443][ T7672] ? __fget_files+0x3a2/0x420 [ 162.204506][ T7672] ? __fget_files+0x2a/0x420 [ 162.204614][ T7672] security_file_ioctl+0xc3/0x2a0 [ 162.204699][ T7672] __se_sys_ioctl+0x47/0x170 [ 162.204787][ T7672] do_syscall_64+0x166/0x520 [ 162.204839][ T7672] ? trace_irq_disable+0x3b/0x140 [ 162.204911][ T7672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.204977][ T7672] ? clear_bhb_loop+0x70/0xc0 [ 162.205040][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.205093][ T7672] RIP: 0033:0x7fa32cb9e0d9 [ 162.205145][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.205193][ T7672] RSP: 002b:00007fa32db25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.205252][ T7672] RAX: ffffffffffffffda RBX: 00007fa32ce25fa0 RCX: 00007fa32cb9e0d9 [ 162.205293][ T7672] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 162.205324][ T7672] RBP: 00007fa32db25090 R08: 0000000000000000 R09: 0000000000000000 [ 162.205364][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.205396][ T7672] R13: 00007fa32ce26038 R14: 00007fa32ce25fa0 R15: 00007ffe1dd0e8d8 [ 162.205476][ T7672] [ 162.212164][ T7672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.467528][ T7668] affs: No valid root block on device nullb0 [ 162.502392][ T7674] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 162.510287][ T7674] netlink: 'syz.3.760': attribute type 2 has an invalid length. [ 162.777840][ T7692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.969572][ T190] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.996509][ T7698] buffer_io_error: 9 callbacks suppressed [ 162.997204][ T7698] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 163.006688][ T7698] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x310ba2e8, got 0x59bfab05) [ 163.119708][ T190] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 163.123002][ T190] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 163.123065][ T190] usb 4-1: config 1 has no interface number 0 [ 163.123165][ T190] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 163.123234][ T190] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 163.123296][ T190] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 163.131203][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.131280][ T190] usb 4-1: Product: syz [ 163.131313][ T190] usb 4-1: Manufacturer: syz [ 163.131353][ T190] usb 4-1: SerialNumber: syz [ 163.162189][ T7674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.289170][ T6859] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.376516][ T190] usb 4-1: Error in usbnet_get_endpoints (-71) [ 163.401960][ T190] usb 4-1: USB disconnect, device number 9 [ 163.442794][ T6859] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 163.446153][ T6859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.446281][ T6859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.476248][ T6859] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 163.478450][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 163.483319][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 163.502741][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 163.502950][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 163.521918][ T6859] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 163.526736][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 163.526949][ T6859] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 163.540816][ T6859] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 163.682641][ T6592] usb 2-1: USB disconnect, device number 12 [ 163.695639][ T6592] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 163.711610][ T6592] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 163.722242][ T6592] keyspan 2-1:1.0: device disconnected [ 164.258941][ T190] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.411271][ T190] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 164.414558][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.414708][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.446331][ T190] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 164.448593][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 164.448780][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 164.461939][ T6592] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.478276][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 164.478450][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 164.498261][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 164.510211][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 164.510311][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.528436][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 164.630106][ T6592] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 164.633053][ T6592] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.633219][ T6592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.666868][ T6592] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 164.675639][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 164.675800][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 164.693778][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 164.693972][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 164.716024][ T6592] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 164.721554][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 164.721964][ T6592] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.727258][ T6592] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 164.854546][ T7705] FAULT_INJECTION: forcing a failure. [ 164.854546][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 164.854600][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(full) [ 164.854624][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.854635][ T7705] Call Trace: [ 164.854682][ T7705] [ 164.854721][ T7705] dump_stack_lvl+0xe8/0x150 [ 164.854834][ T7705] should_fail_ex+0x410/0x560 [ 164.854939][ T7705] should_failslab+0xa8/0x100 [ 164.855000][ T7705] __kmalloc_noprof+0xfe/0x720 [ 164.855071][ T7705] ? rcu_is_watching+0x16/0xb0 [ 164.855130][ T7705] ? tomoyo_realpath_from_path+0xef/0x640 [ 164.855212][ T7705] ? tomoyo_realpath_from_path+0xef/0x640 [ 164.855314][ T7705] tomoyo_realpath_from_path+0xef/0x640 [ 164.855427][ T7705] ? tomoyo_path_number_perm+0x219/0x5f0 [ 164.855498][ T7705] tomoyo_path_number_perm+0x246/0x5f0 [ 164.855577][ T7705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.855646][ T7705] ? __lock_acquire+0x6df/0x2e50 [ 164.855765][ T7705] ? hook_file_ioctl+0x1f2/0x600 [ 164.855894][ T7705] ? __fget_files+0x2a/0x420 [ 164.855963][ T7705] ? __fget_files+0x2a/0x420 [ 164.856023][ T7705] ? __fget_files+0x3a2/0x420 [ 164.856076][ T7705] ? __fget_files+0x2a/0x420 [ 164.856160][ T7705] security_file_ioctl+0xc3/0x2a0 [ 164.856237][ T7705] __se_sys_ioctl+0x47/0x170 [ 164.856313][ T7705] do_syscall_64+0x166/0x520 [ 164.856366][ T7705] ? trace_irq_disable+0x3b/0x140 [ 164.856444][ T7705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.856502][ T7705] ? clear_bhb_loop+0x70/0xc0 [ 164.856564][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.856631][ T7705] RIP: 0033:0x7fa32cb9e0d9 [ 164.856680][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.856722][ T7705] RSP: 002b:00007fa32db25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.856781][ T7705] RAX: ffffffffffffffda RBX: 00007fa32ce25fa0 RCX: 00007fa32cb9e0d9 [ 164.856827][ T7705] RDX: 0000000000000007 RSI: 0000000000005425 RDI: 0000000000000004 [ 164.856872][ T7705] RBP: 00007fa32db25090 R08: 0000000000000000 R09: 0000000000000000 [ 164.856903][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.856933][ T7705] R13: 00007fa32ce26038 R14: 00007fa32ce25fa0 R15: 00007ffe1dd0e8d8 [ 164.857014][ T7705] [ 164.857034][ T7705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.453405][ T190] usb 4-1: USB disconnect, device number 10 [ 165.574373][ T190] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 165.586850][ T190] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 165.593942][ T190] keyspan 4-1:1.0: device disconnected [ 165.615223][ T7682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.892191][ T7711] loop6: detected capacity change from 0 to 2640 [ 165.907544][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.908133][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.912518][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.913788][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.915199][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.080588][ T7719] FAULT_INJECTION: forcing a failure. [ 166.080588][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 166.080655][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.3.775 Not tainted syzkaller #0 PREEMPT(full) [ 166.080679][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.080740][ T7719] Call Trace: [ 166.080773][ T7719] [ 166.080803][ T7719] dump_stack_lvl+0xe8/0x150 [ 166.080902][ T7719] should_fail_ex+0x410/0x560 [ 166.080996][ T7719] should_failslab+0xa8/0x100 [ 166.081057][ T7719] ? do_getname+0x2e/0x250 [ 166.081110][ T7719] kmem_cache_alloc_noprof+0xa1/0x600 [ 166.081180][ T7719] ? do_getname+0x2e/0x250 [ 166.081253][ T7719] do_getname+0x2e/0x250 [ 166.081324][ T7719] ? getname_flags+0x11/0x20 [ 166.081377][ T7719] do_sys_openat2+0xcc/0x200 [ 166.081443][ T7719] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.081503][ T7719] ? ksys_write+0x242/0x270 [ 166.081581][ T7719] ? __pfx_ksys_write+0x10/0x10 [ 166.081660][ T7719] __x64_sys_openat+0x138/0x170 [ 166.081730][ T7719] do_syscall_64+0x166/0x520 [ 166.081786][ ** replaying previous printk message ** [ 166.081786][ T7719] ? trace_irq_disable+0x3b/0x140 [ 166.081859][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.081917][ T7719] ? clear_bhb_loop+0x70/0xc0 [ 166.081980][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.082037][ T7719] RIP: 0033:0x7f5c5ed9e0d9 [ 166.082080][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.082127][ T7719] RSP: 002b:00007f5c5fbd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.082199][ T7719] RAX: ffffffffffffffda RBX: 00007f5c5f025fa0 RCX: 00007f5c5ed9e0d9 [ 166.082255][ T7719] RDX: 0000000000101402 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 166.082300][ T7719] RBP: 00007f5c5fbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 166.082338][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.082368][ T7719] R13: 00007f5c5f026038 R14: 00007f5c5f025fa0 R15: 00007fff7fbe7e98 [ 166.082449][ T7719] [ 166.192585][ T7705] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 166.306842][ T7705] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 166.315283][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(full) [ 166.324526][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.334613][ T7705] RIP: 0010:keyspan_break_ctl+0x83/0xc0 [ 166.340214][ T7705] Code: d3 9c 81 fa 41 be 9c 00 00 00 4d 03 37 bf ff ff ff ff 89 ee e8 5e ae 11 fa 45 31 ff 83 fd ff 41 0f 94 c7 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 1d 45 89 3e 48 89 df 31 f6 e8 57 c3 00 00 [ 166.359881][ T7705] RSP: 0018:ffffc90003857e08 EFLAGS: 00010203 [ 166.365989][ T7705] RAX: 0000000000000013 RBX: ffff888057ca6000 RCX: ffff888077023e80 [ 166.373993][ T7705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 166.382005][ T7705] RBP: 0000000000000000 R08: ffffffff909ba87f R09: 1ffffffff213750f [ 166.389998][ T7705] R10: dffffc0000000000 R11: ffffffff87b62cd0 R12: dffffc0000000000 [ 166.397989][ T7705] R13: dffffc0000000000 R14: 000000000000009c R15: 0000000000000000 [ 166.405979][ T7705] FS: 00007fa32db256c0(0000) GS:ffff88812498a000(0000) knlGS:0000000000000000 [ 166.414929][ T7705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.421534][ T7705] CR2: 00007f4dd70daff8 CR3: 0000000074bbc000 CR4: 00000000003526f0 [ 166.429527][ T7705] Call Trace: [ 166.432826][ T7705] [ 166.435776][ T7705] send_break+0x222/0x300 [ 166.440142][ T7705] tty_ioctl+0xd0f/0xdd0 [ 166.444412][ T7705] ? __pfx_tty_ioctl+0x10/0x10 [ 166.449205][ T7705] __se_sys_ioctl+0xfc/0x170 [ 166.453837][ T7705] do_syscall_64+0x166/0x520 [ 166.458460][ T7705] ? trace_irq_disable+0x3b/0x140 [ 166.463512][ T7705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.469600][ T7705] ? clear_bhb_loop+0x70/0xc0 [ 166.474296][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.480213][ T7705] RIP: 0033:0x7fa32cb9e0d9 [ 166.484652][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.504276][ T7705] RSP: 002b:00007fa32db25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.512714][ T7705] RAX: ffffffffffffffda RBX: 00007fa32ce25fa0 RCX: 00007fa32cb9e0d9 [ 166.520709][ T7705] RDX: 0000000000000007 RSI: 0000000000005425 RDI: 0000000000000004 [ 166.528704][ T7705] RBP: 00007fa32db25090 R08: 0000000000000000 R09: 0000000000000000 [ 166.536699][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.544691][ T7705] R13: 00007fa32ce26038 R14: 00007fa32ce25fa0 R15: 00007ffe1dd0e8d8 [ 166.552708][ T7705] [ 166.555767][ T7705] Modules linked in: [ 166.560508][ T7705] ---[ end trace 0000000000000000 ]--- [ 166.574456][ T7705] RIP: 0010:keyspan_break_ctl+0x83/0xc0 [ 166.580315][ T7705] Code: d3 9c 81 fa 41 be 9c 00 00 00 4d 03 37 bf ff ff ff ff 89 ee e8 5e ae 11 fa 45 31 ff 83 fd ff 41 0f 94 c7 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 1d 45 89 3e 48 89 df 31 f6 e8 57 c3 00 00 [ 166.601042][ T7705] RSP: 0018:ffffc90003857e08 EFLAGS: 00010203 [ 166.601067][ T7705] RAX: 0000000000000013 RBX: ffff888057ca6000 RCX: ffff888077023e80 [ 166.601082][ T7705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 166.601095][ T7705] RBP: 0000000000000000 R08: ffffffff909ba87f R09: 1ffffffff213750f [ 166.601108][ T7705] R10: dffffc0000000000 R11: ffffffff87b62cd0 R12: dffffc0000000000 [ 166.601124][ T7705] R13: dffffc0000000000 R14: 000000000000009c R15: 0000000000000000 [ 166.601137][ T7705] FS: 00007fa32db256c0(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000 [ 166.601154][ T7705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.601168][ T7705] CR2: 00007f4dd70fbf88 CR3: 0000000074bbc000 CR4: 00000000003526f0 [ 166.601188][ T7705] Kernel panic - not syncing: Fatal exception [ 166.676944][ T7705] Kernel Offset: disabled [ 166.681296][ T7705] Rebooting in 86400 seconds..