last executing test programs: 1m27.801750786s ago: executing program 0 (id=2208): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980", 0x15}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m27.65533507s ago: executing program 0 (id=2211): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "75262c7b9ca5fa07558139ede6dc00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000000240)={0x0, 0xd}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000001700)='./my_configfs\x00') ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"e53a915582f97f2635b44039cbfab4fca0633619087f2a8af8765d9ac20f4331", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"d7e8a41c1e2b6cdb7fcc2bcc7a939699ead6dd95e4cdf9f0e3a8134ee97d118b", r8}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000022c0)='virtiofs\x00', 0x2200890, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, r10, 0x3000) setsockopt$bt_BT_SECURITY(r10, 0x12, 0x4, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000100), &(0x7f0000000140)=0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000020103000007000000000000000000040c4d2de9fe68250019800800020001000000180002800500018008000100ac1414aa0800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) ioctl$sock_bt_hci(r9, 0x400448cb, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8010) 1m26.08982109s ago: executing program 0 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) 1m25.892835805s ago: executing program 0 (id=2217): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x4, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7726736181c208220fffff2ff00000000800000000e002d2559ae66aea76e00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 1m24.889583102s ago: executing program 0 (id=2223): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m23.954566226s ago: executing program 0 (id=2226): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x1, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x49f3, 0x7ff}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 1m22.978563971s ago: executing program 32 (id=2226): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x1, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x49f3, 0x7ff}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 22.770464538s ago: executing program 2 (id=2417): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980", 0x15}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.113035647s ago: executing program 3 (id=2459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001200), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='2\x00', 0x2) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 9.60835743s ago: executing program 4 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001200), 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 9.440202915s ago: executing program 3 (id=2462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x2, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4d5, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x3}, {0x0, 0x3ff, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 8.908947788s ago: executing program 3 (id=2463): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="1eac0b", @ANYBLOB="7649c550303ff62eb3acf63a4dcc6adbe51d090352e4ace1deab4dff5b155108dfd72b3dc8d6b6b5ac829159a02191ea11f2453f5091d46bac495c2844f6967ef741bf090e6d66d69c2aeb494eee88655e57a80aebc5c150ad99b581f7223e226dbbf38b0ed8fd072d2693aae84d06eb55a699e214d8df24198512aa083d39d6149f4e6c961e4e9df9e39aa8deecb6ecc3ebae1bac1db753f612e239368ef7dd86bed25211fdd3d224b59bd7083a2c7bd191cd606489e1504ad8a06031408bb3486a861c96c09b90e15ad88e1e4a28ef9ae3cbb85c4bb1893263bd3cafabcd19bdda05c48489cdea05c3f1bb92429d9d3067dee3", @ANYRES32], 0x1, 0x1ce, &(0x7f00000024c0)="$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") ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 8.83330278s ago: executing program 4 (id=2464): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={r3, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.260846316s ago: executing program 3 (id=2466): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980", 0x15}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6", 0x6d}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.096342929s ago: executing program 3 (id=2467): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105", 0x1f, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.70848218s ago: executing program 3 (id=2468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 6.991862538s ago: executing program 1 (id=2470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='lzo-rl', 0x6) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[], 0x10) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) close(r3) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') 6.874211272s ago: executing program 2 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) 6.606497819s ago: executing program 1 (id=2471): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff0007050102000200070581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 5.061633528s ago: executing program 2 (id=2472): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1", 0x3d, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc865237"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.866806704s ago: executing program 4 (id=2473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001200), 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 4.491518834s ago: executing program 4 (id=2475): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105", 0x1f, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.439661051s ago: executing program 2 (id=2476): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0xddc, 0x80, 0x0, {0x5, 0xd3, 0x3, 0x7fff, 0x7, 0x2, 0x8, 0x0, 0x9, 0x1000, 0x2, 0x0, 0x0, 0x5, 0x1}}}, 0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) pause() r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x22, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x421ad000) 3.409720202s ago: executing program 4 (id=2477): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.317533274s ago: executing program 1 (id=2478): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) 2.776765728s ago: executing program 1 (id=2479): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.16271644s ago: executing program 1 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) 904.863837ms ago: executing program 2 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='lzo-rl', 0x6) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[], 0x10) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) close(r3) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') 710.977532ms ago: executing program 4 (id=2482): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x1020, 0x2, 0x1, 0x1, 0x8, 0xb}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) ioctl(0xffffffffffffffff, 0x8b32, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) write(r2, &(0x7f0000000000)="09000300010001", 0x7) 304.035103ms ago: executing program 2 (id=2483): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5r0b5LDsNdeN/802CRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTG+YvyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5wiN/LKvYs//8/N+Pr/P0hO2clfbyx7c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ+LE9SK/uEFExI0iXtwkCoibRUFRSBQWRUSCKCqKCSNQWEEiFMVFCREVt4iS4laRKEqJ0qKMcKKsKCduE+XF7aKCuEOAuFNUEneJyqKKqCqqibtFdXGPqCFqilriXlFb1BF1RT1xn6gv7hcNxAOioXhQNBIPicbiYdFEPCKaikdFM/GYaC4eFy3EE6KlaCVaizai7f9V/suir3hF9BP9RbIYIAaKV8UgMVgMEUPFMPGaGC5eFyPEGyJFjBSjxJtitHhLjBFvi7FinBgv3hETxEQxSUwWU8RUkSreFdPEe2K6eF/MEDPFLDFbpIk5Yq74QMwT88UC8aFYKD4Si8RisUQsFeniY5EhlolM8YlYLj4VWWKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iM7FD7BS7xG6xR+wV+8TnYr/4QhwQX4ps8dV/Mf/sP+X3AgECJEjQoCEP5IEYiIFYiIU4iIP8kB8iEIF4iIcCUAAKQkEoDIUhARKgGBQDBAQCguJQHKIQhZJQEhIhEUpDaXDgoByUg/JwO1SAClARKkIlqASVoQpUgWpQDapDdagBNaAW1ILaUBvqQl24D+6D+6EBNICG0BAaQSNoDI2hCTSBptAUmkEzaA7NoQW0gJbQElpDa2gLbaEdtIP20B46QkfoBJ2gM3SGJEiCrtAVukE36A7doQf0gJ7QE3pBb+gNL8PL8Aq8Av2hthwAA2EgDIJBMASGwlB4DYbD6/A6vAEpMBJGwZvwJrwFY+AMjIVxMB7GQ3U5ESbBZCA5FVIhFabBNJgO02EGzISZMBvSYA7MhbkwD+bDfPgQFsJH8BEshsWwFNIhHTJgGWRCJiyHs5AFK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22AafwWewE3bCbtgNe2EvfA6fwxfwBaRANmTDQTgIh+AQHIbDkAM5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+HFhG+b7S21IUXIK7TUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GygCwgC8qCsrAsLBNkgiwmi0mUKEmGsrgsHiOEkCVlSZkoE2VpWVo66WQ5WU6Wl+VlBVlBVpR3ykryLllZVpEdXDVZTVaXHV0NWVPWkrVkbVlH1pX1ZD1ZX9aXDWQD2VA2lI1kI9lYPiybyAEwBB6VVybTXI6EFnIUtJStZGvZRr4FT8p2cgy0lx1kR/m0HAdjobNs55Lks7KrnATd5PNyMrwge8ip0FO+JHvJ3rKPfFn2le1dP9lfzoABcqCcDYPkYDlEDpXzoI68MrG68g2ZIkfKUfJNuRTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+RMOUvOlmlyjpwrP5Dz5Hy5QH4oF8qP5CK5WC6RS2W6/FhmyGUyU34il8tPZZZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/EzukDvlLrlb7pF75T75udwvv5AH5JcyW34lD8q/yUPya3lYfiNz5LfyiPxOHpXfy2PyB3lc/ihPyJPylPxJnpY/yzPyrDwnz8sL8hd5UV6Sl6WXQoGSSimtApVH5VUxKp+KVdepOHW9yq9uUBF1o4pXN6kC6mZVUBVShVURlaCKqmLKKFRWkQpVcVVCRdUtqqS6VSWqUqq0KqOcKqvKqdtUeXW7qqDuUBXVnaqSuktVVlVUVVVN3a2qq3tUDVVT1VL3qtqqjqqr6qn7VH11v2qgHlAN1YOqkXpINVYPqybqEdVUPaqaqcdUc/W4aqGeUC1VK9VatVFt1ZOqnXpKtVcdVEf1tOqknlGdVReVpJ5VXdVzqpt6XnVXL6ge6kXVU72keqneqo+6pC4rr/qp/ipZDVAD1atqkBqshqihaph6TQ1Xr6sR6g2VokaqUepNNVq9pcaot9VYNU6NV++oCWqimqQmqylqqkpV76pp6j01Xb2vZqiZapaardLUHDXkt0oL/il/wG9X3X/Mf+9f5I/49d23qe3qM7VD7VS71G61R+1V+9Q+tV/tVwfUAZWtstVBdVAdUofUYXVY5agcdUQdUUfVUXVMHVPH1XF1Qp1U59VP6rT6WZ1RZ9VZdV5dUBfUxd++BkKDllpprQOdR+fVMTqfjtXX6Th9vc6vb9ARfaOO1zfpAvpmXVAX0oV1EZ2gi+pi2mjUVpMOdXFdQkf1LbqkvlUn6lK6tC6jnS6ry+nb/nT+H/XXVrfV7XQ73V631x11R91Jd9KddWedpJN0V91Vd9PddHfdXffQPXRP3VP30r10H91H99V9dT/dTyfrZD1Qv6oH6cF6iB6qh+nX9HA9XI/QI3SKTtGj9Cg9Wo/WY/QYPVaP1eP1eD1BT9CT9CQ9RU/RqTpVT9PT9HQ9Xc/QM/QsPUun6TQ9V8/V8/Q8vUAv0Av1Qr1IL9JL9BKdrtN1hs7QmTpTL9fLdZZeoVfoVXqVXqPX6HV6nd6gN+hNepPeorfoLL1db9c79A69S+/Se/QevU/v0/v1fn1AH9DZOlsf1Af1IX1IH9aHdY7O0Uf0EX1UH9XH9LEBx/VxfUKf0Kf0KX1an9Zn9Bl9Tp/TF/QFfVFf1Jf15Su3fYEMZKADHeQJ8gQxQUwQG8QGcUFckD/IH0SCSBAfxAcFgpuDgkGhoHBQJEgIigbFAhNgYAMKwqB4UCKIBrcEJYNbg8SgVFA6KBO4oGxQLrgtKB/cHlQI7ggqBncGlYK7gspBlaBqUC24O6ge3BPUCGoGtYJ7g9pBnaBuUC+4L6gf3B80CB4IGgYPBo2Ch4LGwcNBk+CRoGnwaNAseCxoHjwetAieCFoGrYLWQZug7V9a3/szhZ5y/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpBpqOZPeM9PN+2aGmWlmmdkmzcwxc80HZp6ZbxaYD81C85FZZBabJWapSTcfmwyzzGSaT8xy86nJMivMSrPKrDZrzt8ohFlvNpiNZpPZbLaYrWab2W4+MzvMTrPL7DZ7zF6zz3xu9psvzAHzpck2X5mD5m/mkPnaHDbfmBzzrTlivjNHzffmmPnBHDc/mhPmpDllfjKnzc/mjDlrzpnz5oL5xVw0l8xl46/c3F+5vKNGjXkwD8ZgDMZiLMZhHObH/BjBCMZjPBbAAlgQC2JhLIwJmIDFsBheQUhYHItjFKNYEktiIiZiaSyNDh2Ww3JYHstjBayAFbEiVsJKWBkrY1Wsinfj3XgP3oM1sSbei/diHayD9bAe1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYAltgS2yJrbE1tsW22A7bYXtsjx2xI3bCTtgZO2MSJmFX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/sh8mYjANxIA7CQTgEh+AwHIbDcTiOwBGYgik4CkfhaByNY3AMjsVxOB7fwQk4ESfhZJyCUzEVU3EaTsPpOB1n4AychbMwDdNwLs7FeTgPF+ACXIgLcREuwiW4BNMxHTMwAzMxE5fjcszCLFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsBszMaDeBAP4SE8jIcxB3PwCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsML+AtexEt4GT3GWCli7XU2zl5v89sbbIzNZ/8xLmyL2ARb1Bazxha0hf5djNbaRFvKlrZlrLNlbTl72+/iyraKrWqr2bttdXuPrfG7uL693zawD9iG9kFbz973W5z317iRfcg2to/bJvYJ29S2ss1sG9vcPm5b2CdsS9vKtrZtbCf7jO1su9gk+6ztap/7XZxhl9n1doPdaDfZ/fYLe86et0ft9/aC/cX2s/3tMPuaHW5ftyPsGzbFjvxdPN6+YyfYiXaSnWyn2Km/i2fZ2TbNzrFz7Qd2np3/uzjdfmwX2ky7yC62S+zSX+MrPWXaT+xy+6nNsivsSrvKrrZr7Fq77n/3uspusVvtNrvPfm532J12l91t99i9v8ZXzuOA/dJm26/sEfudPWS/toftMZtjv/01vnJ+x+wP9rj90Z6wJ+0p+5M9bX+2Z+zZX8//yrn/ZC/Zy9ZbQUCSFGkKKA/lpRjKR7F0HcXR9ZSfbqAI3UjxdBMVoJupIBWiwlSEEqgoFSNDSJaIQipOJShKt1BJupUSqRSVpjLkqCyVo9uoPN1OFegOqkh3UiW6iypTFapK1ehuqk73UA2qSbXoXqpNdagu1aP7qD7dTw3oAWpID1Ijeoga08PUhB6hpvQoNaPHqDk9Ti3oCWpJrag1taG29CS1o6eoPXWgjvQ0daJnqDN1oSR6lrrSc9SNnqfu9AL1oBepJ71Evag39aGXqS+9Qv2oPyXTABpIr9IgGkxDaCgNo9doOL1OI+gNSqGRNIrepNH0Fo2ht2ksjaPx9A5NoIk0iSbTFJpKqfQunU3vUvjKvd4MmkmzaDal0RyaSx/QPJpPC+hDWkgf0SJaTEtoKaXTx5RByyiTPqHl9Cll0QpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTZ7SDdtIu2k17aC/to89pP31BB+hLyqav6CD9jQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFP0E52mn+kMnaVzdJ4u0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNiwX3haWD28PK4R3hBXDO8NK4V1h5bBK+PiD1cK7w+rhPWGNsGZYK7w3rB3WCeuG9cL7wvrh/WGD8IGwYfhgWCF8KGwcPhw2CR8Jm4aPhs3Cx8Lm4eNhi/CJsGXYKmwdtgnbhk+G7cKnwvZhh7Bj+HTYKXwm7Bx2CZPCZ8Ou4XN/eDw5HBAODF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+XVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2VdOdfGtXVtXTv3lGvvOriO7mn3tHvGPeO6uC7uWdfVPee6ueddd/eC6+FedC+6l1wv19v1cS+7vu4V18/1d8ku2Q10A90gN8gNcUPcMDfMDXfD3Qg3wqW4FDfKjXKj3Wg3xo1xY91YN96NdxPcBDfJTXJT3BSX6lLdNDfNTXfT3Qw3w81ys1yaS3Nz3Vw3z81zC9wCtzBxoVvkFrklbolLd+kuw2W4TJfplrvlLstluZVupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrsdbofb5Xa5PW6P2+f2uf1uvzvgDrhsl+0OuoPukDvkDrtvXI771h1x37mj7nt3zP3gjrsf3Ql30p1yP7nT7md3xp1159x5d8H94i66S+6y8y418m5kWuS9yPTI+5EZkZmRWZHZkbTInMjcyAeReZH5kQWRDyMLIx9FFkUWR5ZElkbSIx9HMiLLIpmRTyLLI59GsiIrIisjqyKrI2si3hfdEfrivoSP+lt8SX+rT/SlfGlfxjtf9renPu0r+Dt8RX+nr+Tv8pV9FV/VP+Fb+la+tW/j2/onfTv/lG/vO/iO/mnfyT/jO/suPsk/67v653w3/7zv7l/wPfyLvqd/yffyvX0f/7Lv61/x/Xx/n+wH+IH+VT/ID/ZD/FA/zL/mh/vX/Qj/hk/xI/0o/6Yf7d/yY/zbfqwf58f7d/wEP9FP8pP9FD/Vp/p3/TT/np/u3/cz/Ew/y8/2aX6On+s/8PP8fL/Af+gX+o/8Ir/YL/FLfbr/2Gf4ZT7Tf+KX+099ll/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/zO/wO/0uv9vv8Xv9Pv+53++/8Af8lz7bf+UP+r/5Q/5rf9h/43P8t/6I/84f9d/7Y/4Hf9z/6E/4k/6U/8mf9j/7M/6sP+fP+wv+F3/RX/KX+XfWGGOMMcb+j6g/OD7gX/yf/G1dMVAIcf3OIjn/XHNzwb/vB8uEThEhxLP9ez76b6t27eTk5N9em6VEUGKxECJyNT+PuBqvEB3FMyJJdBDl/2V/g2XvC/QH9aN3ChF7tfKvYsU/17/9P6j/5NPjMyqF5+L/k/qLhUgscTUnn7gaX61f4T+oX6jdH/Sf7+tUIdr/Q06cuBpfrV9OPCWeE0n/7pWMMcYYY4wxxtjfDZZVu//R8/OV5/MEfTUnr7ga/9HzOWOMMcYYY4wxxq69F3r36fJkUlKH7rz5E5sa/z3a4A1v/rLNtf7JxBhjjDHGGPurXb3pv9adMMYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjudf/jz8ndq3PkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvW/lcAAAD//5GrMz4=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) 0s ago: executing program 1 (id=2484): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1", 0x3d, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc865237"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf53}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): tate [ 79.869214][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.876406][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.911985][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.932952][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.940195][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.977727][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.004489][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.011647][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.041090][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.048328][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.172390][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.442884][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.571593][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.613682][ T5775] veth0_vlan: entered promiscuous mode [ 80.624515][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.652216][ T5775] veth1_vlan: entered promiscuous mode [ 80.698183][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.707161][ T5781] Bluetooth: hci2: command tx timeout [ 80.708152][ T5776] Bluetooth: hci0: command tx timeout [ 80.759891][ T5779] veth0_vlan: entered promiscuous mode [ 80.770486][ T5778] veth0_vlan: entered promiscuous mode [ 80.786880][ T5776] Bluetooth: hci1: command tx timeout [ 80.788333][ T5781] Bluetooth: hci3: command tx timeout [ 80.809131][ T5778] veth1_vlan: entered promiscuous mode [ 80.835107][ T5779] veth1_vlan: entered promiscuous mode [ 80.842134][ T5775] veth0_macvtap: entered promiscuous mode [ 80.854184][ T5775] veth1_macvtap: entered promiscuous mode [ 80.893968][ T5785] veth0_vlan: entered promiscuous mode [ 80.933471][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.951372][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.960639][ T5785] veth1_vlan: entered promiscuous mode [ 80.981161][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990342][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.001733][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.010819][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.029896][ T5778] veth0_macvtap: entered promiscuous mode [ 81.048110][ T5779] veth0_macvtap: entered promiscuous mode [ 81.065628][ T5778] veth1_macvtap: entered promiscuous mode [ 81.098317][ T5779] veth1_macvtap: entered promiscuous mode [ 81.132398][ T5785] veth0_macvtap: entered promiscuous mode [ 81.144958][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.158654][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.170654][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.181300][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.192272][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.204015][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.222839][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.231928][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.244692][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.253487][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.267972][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.279758][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.290099][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.300655][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.312334][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.325329][ T5785] veth1_macvtap: entered promiscuous mode [ 81.363589][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.374524][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.385962][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.396941][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.408469][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.450896][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.460626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.463450][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.469471][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.487470][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.496392][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561773][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.582622][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.594372][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.608698][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.619153][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.629940][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.641885][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.663548][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.678317][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.690313][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.698388][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708773][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.719591][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.729709][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.740637][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.752758][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.787350][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.799084][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.808741][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817804][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.920957][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.936062][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.006954][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.014903][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.111829][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.144400][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.214264][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.237179][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.343667][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.397160][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.848979][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.887754][ T5781] Bluetooth: hci0: command tx timeout [ 82.887781][ T5776] Bluetooth: hci2: command tx timeout [ 82.893207][ T5781] Bluetooth: hci1: command tx timeout [ 82.893231][ T5781] Bluetooth: hci3: command tx timeout [ 82.994491][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.946352][ T5088] Bluetooth: hci2: command tx timeout [ 84.946379][ T5781] Bluetooth: hci1: command tx timeout [ 84.951809][ T5088] Bluetooth: hci0: command tx timeout [ 84.960287][ T5781] Bluetooth: hci3: command tx timeout [ 87.433805][ T23] cfg80211: failed to load regulatory.db [ 89.582100][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.266166][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.481164][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 90.524434][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 90.547991][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 90.564068][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 90.579039][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 90.589546][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 91.883647][ T56] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 91.905937][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 91.914758][ T56] usb 2-1: Product: syz [ 91.929293][ T56] usb 2-1: Manufacturer: syz [ 91.970997][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.986397][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.000524][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.026245][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.056702][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.068097][ T5904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.127449][ T56] usb 2-1: USB2VGA dongle found at address 2 [ 92.178513][ T56] usb 2-1: Allocated 8 output buffers [ 92.199890][ T56] usb 2-1: Failed to early initialize device [ 94.323987][ T56] usb 2-1: USB disconnect, device number 2 [ 101.519243][ T6024] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 101.535984][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 101.536014][ T6024] batadv_slave_0: entered promiscuous mode [ 101.536030][ T6024] batadv_slave_0: entered allmulticast mode [ 106.344748][ T6087] CIFS: Attempting to mount //127.0.0.1/share [ 106.499787][ T6088] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 106.635070][ T6087] CIFS: VFS: cifs_mount failed w/return code = -112 [ 113.206303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.785983][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.986076][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 114.003810][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.023615][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.046744][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 114.073798][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.090455][ T23] usb 2-1: SerialNumber: syz [ 114.124002][ T23] usb 2-1: 0:2 : does not exist [ 114.394896][ T6173] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 114.440920][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.457808][ T6173] bridge_slave_1: left allmulticast mode [ 114.463663][ T6173] bridge_slave_1: left promiscuous mode [ 114.474055][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.562014][ T6173] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 114.635569][ C0] Illegal XDP return value 16128 on prog (id 2) dev bridge_slave_1, expect packet loss! [ 114.680811][ T23] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 114.697665][ T23] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 114.728666][ T23] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 114.734823][ T23] usb 2-1: USB disconnect, device number 3 [ 115.896154][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.216037][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 116.232671][ T5813] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 116.358031][ T5813] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 116.450521][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.555928][ T5813] usb 1-1: Product: syz [ 116.613130][ T5813] usb 1-1: Manufacturer: syz [ 116.713224][ T5813] usb 1-1: SerialNumber: syz [ 116.878426][ T6211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.129895][ T5813] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 117.141099][ T5813] usb 1-1: MIDIStreaming interface descriptor not found [ 117.247357][ T5813] usb 1-1: USB disconnect, device number 2 [ 118.326378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.659366][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.856045][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 120.023979][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 126.415963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.566374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.638116][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.845954][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.853752][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.864153][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 129.878359][ T9] usb 3-1: string descriptor 0 read error: -22 [ 129.885019][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 129.894405][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 129.918486][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 129.959641][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.993479][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.020744][ T9] usb 3-1: media controller created [ 130.076719][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.145867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.195876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.235861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.535964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.063804][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 132.107285][ T9] usb 3-1: USB disconnect, device number 2 [ 133.032437][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039715][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.806360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.861673][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.775927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.009762][ T6578] Zero length message leads to an empty skb [ 151.097826][ T6604] syz.1.232[6604]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 152.473247][ T6614] binder_alloc: 6613: binder_alloc_buf, no vma [ 171.398405][ T6796] binder: BINDER_SET_CONTEXT_MGR already set [ 171.404690][ T6796] binder: 6795:6796 ioctl 4018620d 200000004a80 returned -16 [ 177.742301][ T6866] random: crng reseeded on system resumption [ 182.786190][ T6919] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.319'. [ 183.893509][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 183.903713][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 183.918016][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 183.930293][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 183.940083][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 183.953478][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 183.963620][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 183.999188][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 184.023964][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 184.056034][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 184.075977][ T6931] kvm: kvm [6930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 184.098676][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.109354][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.128261][ T5879] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 184.151240][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 184.185354][ T5879] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 184.205071][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.482621][ T5879] ttusb_dec_send_command: result bulk message failed: error -90 [ 184.502031][ T6938] random: crng reseeded on system resumption [ 184.511210][ T5879] ttusb-dec: probe of 3-1:1.0 failed with error -90 [ 184.543537][ T5879] usb 3-1: USB disconnect, device number 3 [ 185.312537][ T6955] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.331'. [ 187.413234][ T6977] random: crng reseeded on system resumption [ 188.066141][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.294441][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.324670][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.342866][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 188.353275][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.373469][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 188.383519][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.453971][ T6994] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.344'. [ 188.620910][ T9] ttusb_dec_send_command: result bulk message failed: error -90 [ 188.629487][ T9] ttusb-dec: probe of 2-1:1.0 failed with error -90 [ 188.648030][ T9] usb 2-1: USB disconnect, device number 4 [ 190.741437][ T7032] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.355'. [ 191.566092][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 191.671202][ T7043] kvm_pr_unimpl_wrmsr: 94 callbacks suppressed [ 191.671214][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 191.723212][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 191.748558][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 191.769860][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 191.787763][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.800365][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 191.810028][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.820615][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 191.829714][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 191.843260][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 191.891391][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 191.903114][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 191.924884][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 191.940317][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.966834][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 191.983853][ T7043] kvm: kvm [7042]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 192.203184][ T23] ttusb_dec_send_command: result bulk message failed: error -90 [ 192.231448][ T23] ttusb-dec: probe of 4-1:1.0 failed with error -90 [ 192.885291][ T23] usb 4-1: USB disconnect, device number 2 [ 194.471288][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.584921][ T7071] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.367'. [ 196.708810][ T7083] kvm_pr_unimpl_wrmsr: 50 callbacks suppressed [ 196.708836][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 196.767139][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 196.804509][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 196.831416][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 196.944523][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 197.766390][ T7083] kvm: kvm [7082]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 198.445973][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.545090][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 198.678413][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.694676][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.704943][ T42] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 198.716203][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 198.734689][ T42] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 198.740672][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 198.754359][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.010224][ T42] ttusb_dec_send_command: result bulk message failed: error -90 [ 199.030422][ T42] ttusb-dec: probe of 1-1:1.0 failed with error -90 [ 199.052836][ T42] usb 1-1: USB disconnect, device number 3 [ 199.706761][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.956052][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 199.992279][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.003871][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.021796][ T42] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 200.031799][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.043358][ T42] usb 4-1: SerialNumber: syz [ 200.100877][ T42] usb 4-1: 0:2 : does not exist [ 200.507846][ T7113] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 200.567137][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.600047][ T7113] bridge_slave_1: left allmulticast mode [ 200.605741][ T7113] bridge_slave_1: left promiscuous mode [ 200.666643][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.708088][ T7113] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 202.336923][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.343008][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.346837][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 202.349938][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.536641][ T42] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 202.561322][ T42] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 202.591528][ T42] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 202.620666][ T42] usb 4-1: USB disconnect, device number 3 [ 202.691929][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.783015][ T7138] random: crng reseeded on system resumption [ 204.136369][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 204.367477][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.403894][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.427817][ T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 204.449754][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 204.497607][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 204.520830][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.836015][ T42] ttusb_dec_send_command: result bulk message failed: error -90 [ 204.843898][ T42] ttusb-dec: probe of 3-1:1.0 failed with error -90 [ 204.870147][ T42] usb 3-1: USB disconnect, device number 4 [ 204.916934][ T7158] binder: 7157:7158 ioctl 4018620d 0 returned -22 [ 208.862424][ T7185] binder: BINDER_SET_CONTEXT_MGR already set [ 208.876137][ T7185] binder: 7184:7185 ioctl 4018620d 200000004a80 returned -16 [ 213.368281][ T7223] binder: BINDER_SET_CONTEXT_MGR already set [ 213.374327][ T7223] binder: 7222:7223 ioctl 4018620d 200000004a80 returned -16 [ 216.468285][ T7259] binder: BINDER_SET_CONTEXT_MGR already set [ 216.474456][ T7259] binder: 7258:7259 ioctl 4018620d 200000004a80 returned -16 [ 216.699967][ T7264] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.425'. [ 220.073684][ T7285] binder: 7284:7285 ioctl c0306201 0 returned -14 [ 222.801992][ T7313] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.437'. [ 223.153409][ T7318] binder: 7317:7318 ioctl c0306201 0 returned -14 [ 223.180423][ T7318] binder: BINDER_SET_CONTEXT_MGR already set [ 223.204441][ T7318] binder: 7317:7318 ioctl 4018620d 200000004a80 returned -16 [ 225.136725][ T7344] CIFS: Attempting to mount //127.0.0.1/share [ 225.171227][ T7347] jffs2: notice: (7347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.524484][ T7360] binder: BINDER_SET_CONTEXT_MGR already set [ 225.534030][ T7360] binder: 7356:7360 ioctl 4018620d 200000004a80 returned -16 [ 226.143221][ T7344] CIFS: VFS: cifs_mount failed w/return code = -112 [ 228.329194][ T23] libceph: connect (1)[c::]:6789 error -101 [ 228.336307][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 228.417390][ T7400] jffs2: notice: (7400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.273750][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 229.279927][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 229.306994][ T7393] ceph: No mds server is up or the cluster is laggy [ 229.779496][ T7425] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.470'. [ 231.687019][ T8] libceph: connect (1)[c::]:6789 error -101 [ 231.729344][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 232.039695][ T8] libceph: connect (1)[c::]:6789 error -101 [ 232.053026][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 232.729663][ T9] libceph: connect (1)[c::]:6789 error -101 [ 232.745516][ T7448] ceph: No mds server is up or the cluster is laggy [ 232.758140][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 233.415636][ T7484] FAULT_INJECTION: forcing a failure. [ 233.415636][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.440191][ T7484] CPU: 1 PID: 7484 Comm: syz.3.494 Not tainted syzkaller #0 [ 233.447542][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.457634][ T7484] Call Trace: [ 233.460925][ T7484] [ 233.463878][ T7484] dump_stack_lvl+0x18c/0x250 [ 233.468690][ T7484] ? show_regs_print_info+0x20/0x20 [ 233.473922][ T7484] ? load_image+0x420/0x420 [ 233.478476][ T7484] ? __might_fault+0xaa/0x120 [ 233.483191][ T7484] ? __lock_acquire+0x7d80/0x7d80 [ 233.488254][ T7484] should_fail_ex+0x394/0x4c0 [ 233.492965][ T7484] _copy_from_user+0x2f/0xe0 [ 233.497609][ T7484] __sys_bpf+0x23e/0x890 [ 233.501982][ T7484] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.507819][ T7484] ? lock_chain_count+0x20/0x20 [ 233.512686][ T7484] __x64_sys_bpf+0x7c/0x90 [ 233.517105][ T7484] do_syscall_64+0x55/0xb0 [ 233.521544][ T7484] ? clear_bhb_loop+0x40/0x90 [ 233.526243][ T7484] ? clear_bhb_loop+0x40/0x90 [ 233.530956][ T7484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.536862][ T7484] RIP: 0033:0x7fdf94f9e0d9 [ 233.541281][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.560889][ T7484] RSP: 002b:00007fdf95d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.569302][ T7484] RAX: ffffffffffffffda RBX: 00007fdf95225fa0 RCX: 00007fdf94f9e0d9 [ 233.577269][ T7484] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.585244][ T7484] RBP: 00007fdf95035024 R08: 0000000000000000 R09: 0000000000000000 [ 233.593208][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.601176][ T7484] R13: 00007fdf95226038 R14: 00007fdf95225fa0 R15: 00007fff368e9798 [ 233.609168][ T7484] [ 233.764653][ T7491] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.495'. [ 233.863063][ T8] libceph: connect (1)[c::]:6789 error -101 [ 233.887483][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 234.166617][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 234.172706][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 234.246270][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 234.450644][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 234.469748][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.490252][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 234.512060][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.533736][ T8] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 234.548759][ T7494] ceph: No mds server is up or the cluster is laggy [ 234.561181][ T8] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 234.570418][ T8] garmin_gps: probe of ttyUSB0 failed with error -22 [ 234.739113][ T8] usb 4-1: USB disconnect, device number 4 [ 234.752145][ T8] garmin_gps 4-1:1.0: device disconnected [ 234.796066][ T5815] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 235.018423][ T5815] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 235.026864][ T5815] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 235.046209][ T5815] usb 2-1: config 2 has no interface number 0 [ 235.052397][ T5815] usb 2-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.095276][ T5815] usb 2-1: config 2 interface 31 has no altsetting 0 [ 235.120001][ T5815] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 235.133146][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.141521][ T5815] usb 2-1: Product: syz [ 235.145750][ T5815] usb 2-1: Manufacturer: syz [ 235.150689][ T5815] usb 2-1: SerialNumber: syz [ 235.163003][ T5815] ch9200: probe of 2-1:2.31 failed with error -22 [ 235.382745][ T5815] usb 2-1: USB disconnect, device number 5 [ 235.887820][ T7542] CIFS: Attempting to mount //127.0.0.1/share [ 236.723881][ T7542] CIFS: VFS: cifs_mount failed w/return code = -112 [ 238.113356][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.299449][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.331192][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.343972][ T5813] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.356978][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 238.365317][ T5813] usb 4-1: SerialNumber: syz [ 238.584378][ T5813] usb 4-1: 0:2 : does not exist [ 238.612981][ T5813] usb 4-1: USB disconnect, device number 5 [ 238.684121][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.991474][ T7611] random: crng reseeded on system resumption [ 246.366136][ T7735] binder: 7734:7735 ioctl 4018620d 0 returned -22 [ 246.495082][ T7739] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 246.505896][ T7739] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 248.385424][ T7769] binder: 7768:7769 ioctl 4018620d 0 returned -22 [ 249.927310][ T7800] binder: 7799:7800 ioctl 4018620d 0 returned -22 [ 250.961793][ T7820] CIFS: Attempting to mount //127.0.0.1/share [ 251.184995][ T7827] binder: 7826:7827 ioctl c0306201 0 returned -14 [ 252.114401][ T7820] CIFS: VFS: cifs_mount failed w/return code = -112 [ 252.477811][ T7843] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.607'. [ 254.291259][ T7856] binder: 7855:7856 ioctl c0306201 0 returned -14 [ 254.592150][ T7862] binder: 7859:7862 ioctl c0306201 0 returned -14 [ 255.910757][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.917395][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.207697][ T7879] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.620'. [ 257.656249][ T7889] binder: 7888:7889 ioctl c0306201 0 returned -14 [ 257.876097][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 258.026364][ T8] usb 1-1: device descriptor read/64, error -71 [ 258.296216][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.445900][ T8] usb 1-1: device descriptor read/64, error -71 [ 258.567207][ T8] usb usb1-port1: attempt power cycle [ 258.999789][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 259.131765][ T8] usb 1-1: device descriptor read/8, error -71 [ 259.506054][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 259.559974][ T8] usb 1-1: device descriptor read/8, error -71 [ 259.769091][ T7920] hub 8-0:1.0: USB hub found [ 259.777367][ T7920] hub 8-0:1.0: 1 port detected [ 260.368910][ T8] usb usb1-port1: unable to enumerate USB device [ 262.135953][ T5815] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 262.285889][ T5815] usb 1-1: device descriptor read/64, error -71 [ 262.599605][ T5815] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 262.624655][ T7964] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.397088][ T5815] usb 1-1: device descriptor read/64, error -71 [ 263.521069][ T5815] usb usb1-port1: attempt power cycle [ 263.955915][ T5815] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 263.986512][ T5815] usb 1-1: device descriptor read/8, error -71 [ 264.421765][ T5815] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 264.462392][ T5815] usb 1-1: device descriptor read/8, error -71 [ 265.181955][ T5815] usb usb1-port1: unable to enumerate USB device [ 266.820646][ T8017] dccp_invalid_packet: P.Data Offset(4) too small [ 266.896049][ T5815] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.232815][ T5815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.498355][ T5815] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 267.550337][ T5815] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 267.723755][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.630918][ T5765] usb 4-1: USB disconnect, device number 6 [ 274.173758][ T789] libceph: connect (1)[c::]:6789 error -101 [ 274.225351][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 274.233375][ T8080] ceph: No mds server is up or the cluster is laggy [ 275.820019][ T8106] kvm: kvm [8105]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a000000292c [ 275.833728][ T8106] kvm: kvm [8105]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc90000004900 [ 276.641670][ T789] libceph: connect (1)[c::]:6789 error -101 [ 276.650722][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 276.929156][ T789] libceph: connect (1)[c::]:6789 error -101 [ 276.944918][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 277.492465][ T5765] libceph: connect (1)[c::]:6789 error -101 [ 277.558448][ T5765] libceph: mon0 (1)[c::]:6789 connect error [ 277.824533][ T8122] ceph: No mds server is up or the cluster is laggy [ 280.351472][ T8] libceph: connect (1)[c::]:6789 error -101 [ 280.419509][ T8180] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.711'. [ 280.555883][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 280.573962][ T8] libceph: connect (1)[c::]:6789 error -101 [ 280.580225][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 281.457166][ T8] libceph: connect (1)[c::]:6789 error -101 [ 281.463366][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 281.475734][ T8176] ceph: No mds server is up or the cluster is laggy [ 283.393959][ T8211] netlink: 592 bytes leftover after parsing attributes in process `syz.0.720'. [ 283.407209][ T8214] binder: 8212:8214 ioctl 4018620d 0 returned -22 [ 283.411166][ T8215] binder: BINDER_SET_CONTEXT_MGR already set [ 283.422134][ T8215] binder: 8213:8215 ioctl 4018620d 200000004a80 returned -16 [ 283.631549][ T8224] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.723'. [ 285.567127][ T8250] netlink: 592 bytes leftover after parsing attributes in process `syz.2.733'. [ 285.887251][ T8261] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.737'. [ 286.894062][ T8274] netlink: 592 bytes leftover after parsing attributes in process `syz.2.742'. [ 289.889089][ T8361] netlink: 592 bytes leftover after parsing attributes in process `syz.3.752'. [ 290.073232][ T8365] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.751'. [ 290.617327][ T8379] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.756'. [ 291.383259][ T8387] dvmrp0: entered allmulticast mode [ 298.572513][ T8524] dummy0: entered promiscuous mode [ 298.592560][ T8524] macsec1: entered promiscuous mode [ 298.600833][ T8524] macsec1: entered allmulticast mode [ 298.608947][ T8524] dummy0: entered allmulticast mode [ 298.619737][ T8524] dummy0: left allmulticast mode [ 298.638182][ T8524] dummy0: left promiscuous mode [ 300.113485][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 300.121983][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 300.296655][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 300.386887][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 300.394408][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 300.508677][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.516786][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.527080][ T23] usb 2-1: config 0 has no interface number 0 [ 300.533482][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.545486][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.555379][ T23] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.569614][ T23] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 300.578829][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.589544][ T23] usb 2-1: config 0 descriptor?? [ 300.907032][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 300.913169][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 300.932219][ T8563] ceph: No mds server is up or the cluster is laggy [ 301.032926][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.062214][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.082282][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.100872][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.112066][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.121018][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.128727][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.136557][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.144767][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.152824][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.160954][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.175119][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.184032][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.192045][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.221658][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.244263][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.255641][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.264895][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.282045][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.299933][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.325965][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.333515][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.361400][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.371839][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 301.379165][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.398042][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.406094][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.414611][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.429931][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.443979][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.452398][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.461949][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.469860][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.477886][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.485601][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.495990][ T8583] syz.2.826 uses obsolete (PF_INET,SOCK_PACKET) [ 301.504825][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.515099][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.526362][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.534023][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.542423][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.553590][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.561529][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.572766][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.580699][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.588987][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.611194][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.628089][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.644326][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.652475][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.661692][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.674406][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.683692][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.692154][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.711010][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.721736][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.748200][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.764666][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.789194][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.817208][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 301.833750][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.055395][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.063403][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.071060][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.078643][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x4 [ 302.086202][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.093714][ T23] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x0 [ 302.815846][ T23] holtek_mouse 0003:04D9:A04A.0001: global environment stack underflow [ 302.845359][ T23] holtek_mouse 0003:04D9:A04A.0001: item 0 0 1 11 parsing failed [ 302.856090][ T23] holtek_mouse 0003:04D9:A04A.0001: hid parse failed: -22 [ 302.863304][ T23] holtek_mouse: probe of 0003:04D9:A04A.0001 failed with error -22 [ 302.891747][ T23] usb 2-1: USB disconnect, device number 6 [ 303.081048][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 303.090317][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 303.360314][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 303.376547][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 303.887126][ T8602] ceph: No mds server is up or the cluster is laggy [ 303.888443][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 303.930386][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 305.285854][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 305.616026][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 305.623256][ T5813] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 305.636385][ T5813] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 305.645581][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.657670][ T5813] usb 4-1: Product: syz [ 305.669639][ T5813] usb 4-1: Manufacturer: syz [ 305.674286][ T5813] usb 4-1: SerialNumber: syz [ 305.710265][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.973180][ T5813] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 305.985302][ T5813] usb 4-1: MIDIStreaming interface descriptor not found [ 306.057353][ T5813] usb 4-1: USB disconnect, device number 7 [ 306.141202][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.691483][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 308.275887][ T5815] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 308.459095][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.469635][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 308.480222][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 308.547042][ T5815] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 309.221612][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.468840][ T5815] ttusb_dec_send_command: result bulk message failed: error -22 [ 309.496003][ T5815] ttusb-dec: probe of 3-1:1.0 failed with error -22 [ 309.538096][ T5815] usb 3-1: USB disconnect, device number 5 [ 312.007222][ T8769] binder: 8768:8769 ioctl c0306201 0 returned -14 [ 313.553714][ T8792] binder: 8791:8792 ioctl c0306201 0 returned -14 [ 317.353583][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.360335][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654174][ T8839] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.908'. [ 322.058819][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 322.065205][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 322.327634][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 322.346039][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 322.719452][ T8887] ceph: No mds server is up or the cluster is laggy [ 330.006647][ T8986] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.954'. [ 333.371014][ T9037] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.969'. [ 333.696080][ T56] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 333.885917][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 333.893021][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.903800][ T56] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 333.915678][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.934185][ T56] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 333.943709][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 333.952308][ T56] usb 1-1: Product: syz [ 333.956916][ T56] usb 1-1: Manufacturer: syz [ 333.961698][ T56] usb 1-1: SerialNumber: syz [ 333.970512][ T56] usb 1-1: config 0 descriptor?? [ 333.981478][ T56] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 333.990805][ T56] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 333.998654][ T56] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 334.243280][ T56] usb 1-1: USB disconnect, device number 12 [ 334.405074][ T9052] batman_adv: batadv0: Adding interface: veth0 [ 334.428352][ T9052] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.466602][ T9052] batman_adv: batadv0: Interface activated: veth0 [ 334.493740][ T9052] batman_adv: batadv0: Interface deactivated: veth0 [ 334.515823][ T9052] batman_adv: batadv0: Removing interface: veth0 [ 334.525445][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.541820][ T9052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.553316][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.563586][ T9052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.995407][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 336.035227][ T9079] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.983'. [ 337.808375][ T9114] ======================================================= [ 337.808375][ T9114] WARNING: The mand mount option has been deprecated and [ 337.808375][ T9114] and is ignored by this kernel. Remove the mand [ 337.808375][ T9114] option from the mount to silence this warning. [ 337.808375][ T9114] ======================================================= [ 338.140996][ T9124] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.998'. [ 340.944575][ T9159] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1009'. [ 344.327759][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 344.495247][ T9220] binder: 9219:9220 ioctl c0306201 0 returned -14 [ 346.093891][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 348.140798][ T5786] Bluetooth: hci3: hardware error 0x00 [ 350.085142][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 350.235853][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 351.082794][ T9321] binder: BINDER_SET_CONTEXT_MGR already set [ 351.099244][ T9321] binder: 9320:9321 ioctl 4018620d 200000004a80 returned -16 [ 352.881520][ T9346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1068'. [ 354.466052][ T789] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 354.668398][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.687509][ T789] usb 4-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 354.709350][ T789] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 354.737049][ T789] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 354.755849][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.451093][ C1] usb 4-1: received EP1 urb->status = -71 [ 356.478604][ T789] usb 4-1: unable to init card! (ret=-19) [ 356.512217][ T789] usb 4-1: USB disconnect, device number 8 [ 356.581848][ T27] audit: type=1326 audit(1786194609.415:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.632262][ T27] audit: type=1326 audit(1786194609.445:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.666484][ T27] audit: type=1326 audit(1786194609.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.691797][ T27] audit: type=1326 audit(1786194609.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.730329][ T27] audit: type=1326 audit(1786194609.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.755197][ T27] audit: type=1326 audit(1786194609.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.816024][ T27] audit: type=1326 audit(1786194609.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.863842][ T27] audit: type=1326 audit(1786194609.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.891754][ T27] audit: type=1326 audit(1786194609.455:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 356.917224][ T27] audit: type=1326 audit(1786194609.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.1079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273959e0d9 code=0x7ffc0000 [ 361.896000][ T5765] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 362.088716][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.105804][ T5765] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 362.511486][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.536225][ T5765] as10x_usb: device has been detected [ 362.542533][ T5765] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 362.577978][ T5765] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 362.704928][ T5765] as10x_usb: error during firmware upload part1 [ 362.729709][ T5765] Registered device Abilis Systems DVB-Titan [ 362.926582][ T5815] usb 4-1: USB disconnect, device number 9 [ 363.734465][ T5815] Unregistered device Abilis Systems DVB-Titan [ 363.744990][ T5815] as10x_usb: device has been disconnected [ 365.451236][ T9483] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 365.619753][ T9487] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 365.806623][ T9483] veth3: entered promiscuous mode [ 365.833433][ T9483] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 368.061746][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 368.318090][ T9526] jffs2: notice: (9526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 368.866442][ T789] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 369.837212][ T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.853876][ T789] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.911335][ T789] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 369.935905][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.738898][ T789] usb 1-1: Product: syz [ 370.766379][ T789] usb 1-1: Manufacturer: syz [ 370.771051][ T789] usb 1-1: SerialNumber: syz [ 370.815537][ T789] usbtmc 1-1:1.0: bulk endpoints not found [ 370.832484][ T789] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 371.176415][ T5815] usb 1-1: USB disconnect, device number 13 [ 371.580001][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 377.700020][ T9630] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1151'. [ 377.913572][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 377.922912][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 378.187203][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 378.194714][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 378.373495][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'. [ 378.418549][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'. [ 378.706442][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 378.712569][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 378.724287][ T9634] ceph: No mds server is up or the cluster is laggy [ 378.791227][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797840][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.920760][ T9671] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1163'. [ 380.183027][ T9673] MTD: Couldn't look up './dev/mtdblock0': -2 [ 382.872798][ T9720] netlink: 'syz.2.1178': attribute type 72 has an invalid length. [ 384.666122][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 384.857808][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.868352][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.879997][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 385.282351][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 385.298791][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 385.307963][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.316042][ T9] usb 4-1: Product: syz [ 385.320222][ T9] usb 4-1: Manufacturer: syz [ 385.324831][ T9] usb 4-1: SerialNumber: syz [ 385.570498][ T9] usb 4-1: Not enough endpoints found in device, aborting! [ 385.764983][ T5815] usb 4-1: USB disconnect, device number 10 [ 385.916170][ T9785] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1198'. [ 389.565252][ T9841] wireguard0: entered promiscuous mode [ 390.110954][ T9856] capability: warning: `syz.3.1225' uses 32-bit capabilities (legacy support in use) [ 390.131547][ T9856] program syz.3.1225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.563183][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 394.822417][ T42] libceph: connect (1)[c::]:6789 error -101 [ 394.840416][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 395.061594][ T9910] ceph: No mds server is up or the cluster is laggy [ 395.226001][ T9922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.239221][ T9922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 395.254494][ T9922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.261016][ T9922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 395.270247][ T9922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.322150][ T9922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 397.635826][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 397.635972][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 397.641873][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 399.665930][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 399.672164][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 399.678335][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 401.995049][ T9977] bond2: entered allmulticast mode [ 402.729740][ T9986] macvlan2: entered promiscuous mode [ 402.754224][ T9986] macvlan2: entered allmulticast mode [ 402.765451][ T9986] bond2: (slave macvlan2): Opening slave failed [ 407.219784][T10053] loop5: detected capacity change from 0 to 7 [ 407.269638][T10053] Dev loop5: unable to read RDB block 7 [ 407.278336][T10053] loop5: AHDI p2 [ 407.285552][T10053] loop5: partition table partially beyond EOD, truncated [ 415.355433][T10135] batman_adv: batadv0: Adding interface: veth0 [ 415.363454][T10135] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.388614][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.396280][T10135] batman_adv: batadv0: Interface activated: veth0 [ 415.412174][T10135] batman_adv: batadv0: Interface deactivated: veth0 [ 415.419435][T10135] batman_adv: batadv0: Removing interface: veth0 [ 415.427132][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.434664][T10135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.442772][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.450485][T10135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.428397][T10212] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1333'. [ 421.167279][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.188088][T10236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.211150][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.232923][T10236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.488529][T10241] loop5: detected capacity change from 0 to 7 [ 421.513574][T10241] Dev loop5: unable to read RDB block 7 [ 421.522466][T10241] loop5: AHDI p1 [ 421.526657][T10241] loop5: partition table partially beyond EOD, truncated [ 425.158686][T10309] wireguard0: entered promiscuous mode [ 425.733361][T10328] loop5: detected capacity change from 0 to 7 [ 425.740788][T10328] Dev loop5: unable to read RDB block 7 [ 425.757732][T10328] loop5: AHDI p1 [ 425.761567][T10328] loop5: partition table partially beyond EOD, truncated [ 427.028851][T10346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.047135][T10346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.061246][T10346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.074908][T10346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.197818][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 428.203903][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 428.486379][ T8] libceph: connect (1)[c::]:6789 error -101 [ 428.499596][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 428.994263][T10364] ceph: No mds server is up or the cluster is laggy [ 429.026776][ T8] libceph: connect (1)[c::]:6789 error -101 [ 429.046013][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 432.183642][T10405] ceph: No mds server is up or the cluster is laggy [ 440.229971][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236438][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.221574][T10874] loop5: detected capacity change from 0 to 7 [ 462.234214][T10874] Dev loop5: unable to read RDB block 7 [ 462.234268][T10874] loop5: AHDI p1 [ 462.234309][T10874] loop5: partition table partially beyond EOD, truncated [ 462.246865][T10876] No source specified [ 465.153766][T10946] loop5: detected capacity change from 0 to 7 [ 465.161941][T10946] Dev loop5: unable to read RDB block 7 [ 465.168416][T10946] loop5: AHDI p1 [ 465.172097][T10946] loop5: partition table partially beyond EOD, truncated [ 467.908237][T11008] loop5: detected capacity change from 0 to 7 [ 467.915253][T11008] Dev loop5: unable to read RDB block 7 [ 467.930661][T11008] loop5: AHDI p1 [ 467.930700][T11008] loop5: partition table partially beyond EOD, truncated [ 469.530647][T11041] loop5: detected capacity change from 0 to 7 [ 469.539568][T11041] Dev loop5: unable to read RDB block 7 [ 469.545362][T11041] loop5: AHDI p1 [ 469.551540][T11041] loop5: partition table partially beyond EOD, truncated [ 475.853821][T11149] loop5: detected capacity change from 0 to 7 [ 475.868387][T11149] Dev loop5: unable to read RDB block 7 [ 475.881072][T11149] loop5: AHDI p1 [ 475.889371][T11149] loop5: partition table partially beyond EOD, truncated [ 478.989810][T11206] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1648'. [ 479.373578][T11210] loop5: detected capacity change from 0 to 7 [ 479.380583][T11210] Dev loop5: unable to read RDB block 7 [ 479.387025][T11210] loop5: AHDI p1 [ 479.391271][T11210] loop5: partition table partially beyond EOD, truncated [ 481.552730][T11246] bond1: entered allmulticast mode [ 481.565206][T11248] macvlan2: entered promiscuous mode [ 481.571464][T11248] macvlan2: entered allmulticast mode [ 481.578808][T11248] bond1: (slave macvlan2): Opening slave failed [ 481.870463][T11261] loop5: detected capacity change from 0 to 7 [ 481.877468][T11261] Dev loop5: unable to read RDB block 7 [ 481.883490][T11261] loop5: AHDI p1 [ 481.889980][T11261] loop5: partition table partially beyond EOD, truncated [ 484.512264][T11299] loop5: detected capacity change from 0 to 7 [ 484.536698][T11299] Dev loop5: unable to read RDB block 7 [ 484.549121][T11299] loop5: unable to read partition table [ 484.568744][T11299] loop5: partition table beyond EOD, truncated [ 484.587103][T11299] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.920815][T11447] loop5: detected capacity change from 0 to 7 [ 492.938681][T11447] Dev loop5: unable to read RDB block 7 [ 492.944319][T11447] loop5: unable to read partition table [ 492.965079][T11447] loop5: partition table beyond EOD, truncated [ 492.979062][T11447] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.206816][T11573] loop5: detected capacity change from 0 to 7 [ 501.235405][T11573] Dev loop5: unable to read RDB block 7 [ 501.278392][T11573] loop5: unable to read partition table [ 501.308038][T11573] loop5: partition table beyond EOD, truncated [ 501.335490][T11573] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.726324][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.726422][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.860457][T11617] loop5: detected capacity change from 0 to 7 [ 504.871783][T11617] Dev loop5: unable to read RDB block 7 [ 504.883231][T11617] loop5: unable to read partition table [ 504.890839][T11617] loop5: partition table beyond EOD, truncated [ 504.906084][T11617] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.330889][T11682] loop5: detected capacity change from 0 to 7 [ 509.343636][T11682] Dev loop5: unable to read RDB block 7 [ 509.354004][T11682] loop5: unable to read partition table [ 509.361993][T11682] loop5: partition table beyond EOD, truncated [ 509.378022][T11682] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 513.425667][ C0] sched: RT throttling activated [ 521.751665][T11841] wireguard0: entered promiscuous mode [ 524.153153][T11881] wireguard1: entered promiscuous mode [ 527.156705][T11917] wireguard0: entered promiscuous mode [ 544.127179][T12148] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1919'. [ 563.117203][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.129569][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.815753][ T5815] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 568.007585][ T5815] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 568.022890][ T5815] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 568.043901][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.082766][ T5815] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 570.521070][ T2322] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 570.570356][ T2322] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 571.429061][T12242] usb 2-1: USB disconnect, device number 7 [ 572.946275][T12426] kvm: kvm [12422]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000008b [ 572.967520][T12426] kvm: kvm [12422]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002785 [ 573.058657][T12426] kvm: kvm [12422]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000388e [ 581.049644][T12572] random: crng reseeded on system resumption [ 592.231820][T12669] netlink: 'syz.1.2059': attribute type 10 has an invalid length. [ 592.242333][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.276090][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.283294][T12669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.319707][T12669] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 592.329628][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 592.355961][T12673] bridge_slave_0: left allmulticast mode [ 592.361661][T12673] bridge_slave_0: left promiscuous mode [ 592.368085][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.472425][T12673] bond0: (slave bridge0): Releasing backup interface [ 597.338620][T12745] bond1: entered allmulticast mode [ 600.865783][T12632] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 601.097791][T12632] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 601.115765][T12632] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 601.135513][T12632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.170951][T12632] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 603.635446][T12819] loop0: detected capacity change from 0 to 256 [ 603.675532][ T789] usb 4-1: USB disconnect, device number 11 [ 603.699865][ T789] pvrusb2: Device being rendered inoperable [ 603.700780][T12819] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 604.085707][T12632] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 604.275932][T12632] usb 1-1: Using ep0 maxpacket: 32 [ 604.288293][T12632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.315745][T12632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.332943][T12632] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 604.353034][T12632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.377911][T12632] usb 1-1: config 0 descriptor?? [ 604.389914][T12632] hub 1-1:0.0: USB hub found [ 604.572231][T12833] loop2: detected capacity change from 0 to 256 [ 604.586886][T12632] hub 1-1:0.0: 1 port detected [ 604.743255][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 604.743290][ T27] audit: type=1804 audit(1786194857.575:46): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2109" name="/newroot/532/file0/bus" dev="loop2" ino=1048592 res=1 errno=0 [ 604.788454][T12632] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 604.805200][T12632] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 604.827370][T12632] usbhid 1-1:0.0: can't add hid device: -71 [ 604.844541][T12632] usbhid: probe of 1-1:0.0 failed with error -71 [ 604.905474][T12632] usb 1-1: USB disconnect, device number 14 [ 607.839765][T12877] loop1: detected capacity change from 0 to 512 [ 607.957478][T12877] EXT4-fs (loop1): 1 truncate cleaned up [ 608.009992][T12877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.133159][T12877] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2120: invalid indirect mapped block 234881024 (level 0) [ 610.062226][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.233718][T12897] orangefs_mount: mount request failed with -4 [ 612.498231][T12909] loop3: detected capacity change from 0 to 1024 [ 613.282812][T12909] hfsplus: request for non-existent node 3 in B*Tree [ 613.309254][T12909] hfsplus: request for non-existent node 3 in B*Tree [ 614.120620][T12929] loop2: detected capacity change from 0 to 512 [ 614.164026][T12929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.211337][T12929] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 614.268171][T12929] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 614.299715][T12933] loop0: detected capacity change from 0 to 1024 [ 614.325536][T12929] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 614.416791][T12929] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 614.456622][T12929] EXT4-fs (loop2): orphan cleanup on readonly fs [ 614.519984][T12929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2135: bg 0: block 34: padding at end of block bitmap is not set [ 614.621997][T12929] Quota error (device loop2): write_blk: dquota write failed [ 614.635358][T12930] syz.0.2136: attempt to access beyond end of device [ 614.635358][T12930] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 614.675883][T12929] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 614.698870][T12930] Buffer I/O error on dev loop0, logical block 458752, async page read [ 614.707366][T12929] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2135: Failed to acquire dquot type 1 [ 614.733104][T12930] syz.0.2136: attempt to access beyond end of device [ 614.733104][T12930] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 614.774523][T12929] EXT4-fs (loop2): 1 truncate cleaned up [ 614.806272][T12930] Buffer I/O error on dev loop0, logical block 458752, async page read [ 615.692825][T12929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.733899][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.133487][T12983] loop0: detected capacity change from 0 to 512 [ 619.176685][T12983] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 619.184450][T12983] UDF-fs: Scanning with blocksize 512 failed [ 619.208574][T12983] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 619.219392][T12983] UDF-fs: Scanning with blocksize 1024 failed [ 619.241567][T12983] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 619.254907][T12983] UDF-fs: Scanning with blocksize 2048 failed [ 619.269460][T12983] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 619.285886][T12983] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 619.295493][T12983] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 619.323385][T12983] UDF-fs: Scanning with blocksize 4096 failed [ 619.343729][T12983] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 624.899096][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.905467][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.836329][T13072] capability: warning: `syz.2.2179' uses deprecated v2 capabilities in a way that may be insecure [ 627.850037][T13084] loop2: detected capacity change from 0 to 256 [ 629.512144][T12750] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 630.433575][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 630.446332][T13101] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 630.455474][T13101] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 630.464292][T13101] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 630.472510][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2185'. [ 632.725764][ T5765] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 632.945680][ T5765] usb 4-1: Using ep0 maxpacket: 16 [ 632.954477][ T5765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 632.964594][ T5765] usb 4-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 1024 [ 632.980519][ T5765] usb 4-1: config 1 interface 0 altsetting 251 bulk endpoint 0x3 has invalid maxpacket 16 [ 633.008134][ T5765] usb 4-1: config 1 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.040335][ T5765] usb 4-1: config 1 interface 0 has no altsetting 0 [ 633.062707][ T5765] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.078753][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.090180][ T5765] usb 4-1: Product: syz [ 633.096871][ T5765] usb 4-1: Manufacturer: syz [ 633.101724][ T5765] usb 4-1: SerialNumber: syz [ 633.206344][T13111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.226098][T13111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.614395][ T5765] usb 4-1: bad CDC descriptors [ 633.785050][ T5765] usb 4-1: USB disconnect, device number 12 [ 634.808170][ T2322] pvrusb2: request_firmware fatal error with code=-110 [ 634.898959][ T2322] pvrusb2: Failure uploading firmware1 [ 634.904487][ T2322] pvrusb2: Device initialization was not successful. [ 634.918862][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.989966][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 635.028397][T12242] pvrusb2: Device being rendered inoperable [ 635.362417][T13148] bond2: entered allmulticast mode [ 637.507699][T13190] loop0: detected capacity change from 0 to 128 [ 637.530649][T13190] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 637.541590][T13187] loop2: detected capacity change from 0 to 128 [ 637.564965][T13190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.613491][T13187] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 637.814861][T13187] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.866158][T13187] ext2 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.007441][T13196] No source specified [ 638.703358][T13193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2211'. [ 638.818931][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.213331][T13213] loop0: detected capacity change from 0 to 512 [ 639.277028][T13213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.302777][T13213] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.009863][T13213] loop0: detected capacity change from 512 to 0 [ 640.023630][ C1] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 640.033375][T13218] EXT4-fs error (device loop0): __ext4_find_entry:1685: inode #2: comm syz.0.2217: reading directory lblock 0 [ 640.077173][T13218] syz.0.2217: attempt to access beyond end of device [ 640.077173][T13218] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 640.116847][T13218] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 640.156889][T13218] EXT4-fs (loop0): I/O error while writing superblock [ 640.200512][ T5785] syz-executor: attempt to access beyond end of device [ 640.200512][ T5785] loop0: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 640.245287][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.268680][ T5785] syz-executor: attempt to access beyond end of device [ 640.268680][ T5785] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 640.296485][ T5785] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 640.312173][ T5785] EXT4-fs (loop0): I/O error while writing superblock [ 640.321494][T13215] kmmpd-loop0: attempt to access beyond end of device [ 640.321494][T13215] loop0: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 640.525544][T13215] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 641.272493][ T8347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.477906][ T8347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.082158][ T8347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.285958][T13251] loop2: detected capacity change from 0 to 1024 [ 642.378747][T13251] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 642.408527][T13251] hfsplus: xattr searching failed [ 642.453944][ T8347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.553667][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 643.564393][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 643.573648][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 643.585709][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 643.594188][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 643.601840][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.852832][T13290] loop2: detected capacity change from 0 to 1024 [ 644.870574][T13290] EXT4-fs: Ignoring removed bh option [ 644.956983][T13290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 645.753104][ T5781] Bluetooth: hci3: command tx timeout [ 647.341789][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.349274][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.825888][ T5786] Bluetooth: hci3: command tx timeout [ 648.201734][T13299] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.211390][T13299] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.220347][T13299] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.229493][T13299] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.393808][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.355784][T13268] chnl_net:caif_netlink_parms(): no params data found [ 649.667797][ T5765] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 649.719198][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.729643][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.738798][T13268] bridge_slave_0: entered allmulticast mode [ 649.748594][T13268] bridge_slave_0: entered promiscuous mode [ 649.768263][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.785860][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.793097][T13268] bridge_slave_1: entered allmulticast mode [ 649.818295][T13268] bridge_slave_1: entered promiscuous mode [ 649.845870][ T5765] usb 2-1: device descriptor read/64, error -71 [ 649.905756][ T5786] Bluetooth: hci3: command tx timeout [ 650.029961][T13268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.065007][T13268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.127459][ T5765] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 650.197124][T13268] team0: Port device team_slave_0 added [ 650.228544][ T8347] hsr_slave_0: left promiscuous mode [ 650.235260][ T8347] hsr_slave_1: left promiscuous mode [ 650.243519][ T8347] bridge_slave_1: left allmulticast mode [ 650.251552][ T8347] bridge_slave_1: left promiscuous mode [ 650.269042][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.295572][ T8347] bridge_slave_0: left allmulticast mode [ 650.295756][ T5765] usb 2-1: device descriptor read/64, error -71 [ 650.314486][ T8347] bridge_slave_0: left promiscuous mode [ 650.331376][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.407128][ T8347] veth1_macvtap: left promiscuous mode [ 650.416240][ T5765] usb usb2-port1: attempt power cycle [ 650.421906][ T8347] veth0_macvtap: left promiscuous mode [ 650.432008][ T8347] veth1_vlan: left promiscuous mode [ 650.439108][ T8347] veth0_vlan: left promiscuous mode [ 650.611341][ T8347] bond1 (unregistering): Released all slaves [ 650.853915][ T5765] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 650.912812][ T5765] usb 2-1: device descriptor read/8, error -71 [ 651.365886][ T5765] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 651.408969][ T5765] usb 2-1: device descriptor read/8, error -71 [ 651.531635][ T5765] usb usb2-port1: unable to enumerate USB device [ 651.985781][ T5786] Bluetooth: hci3: command tx timeout [ 652.333025][ T8347] team0 (unregistering): Port device team_slave_1 removed [ 652.379707][ T8347] team0 (unregistering): Port device team_slave_0 removed [ 652.467860][ T8347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.574323][ T8347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.740016][T13382] loop3: detected capacity change from 0 to 8 [ 653.147479][ T8347] bond0 (unregistering): Released all slaves [ 653.231386][T13268] team0: Port device team_slave_1 added [ 653.914408][T13268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.949887][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.015544][T13268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.028673][T13268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.035937][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.079076][T13268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.295867][T12632] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 654.551087][T12632] usb 2-1: device descriptor read/64, error -71 [ 654.985721][T12632] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 656.105859][T12632] usb 2-1: device descriptor read/64, error -71 [ 656.107864][T13268] hsr_slave_0: entered promiscuous mode [ 656.213677][T13268] hsr_slave_1: entered promiscuous mode [ 656.237293][T12632] usb usb2-port1: attempt power cycle [ 656.427686][T13268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.427789][T13268] Cannot create hsr debugfs directory [ 656.735772][T12632] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 656.778509][T12632] usb 2-1: device descriptor read/8, error -71 [ 656.919859][T13268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.936992][T13268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.953704][T13268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.971436][T13268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 657.055835][T12632] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 657.204567][T13268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.249237][T13268] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.285268][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.292504][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.300501][T12632] usb 2-1: device not accepting address 15, error -71 [ 657.318886][T12632] usb usb2-port1: unable to enumerate USB device [ 657.354759][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.362019][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.755015][T13268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.196501][T13460] loop3: detected capacity change from 0 to 512 [ 659.260927][T13460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 659.298794][T13460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 659.313231][T13460] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 659.328099][T13460] EXT4-fs (loop3): 1 truncate cleaned up [ 659.335150][T13460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.399033][T13465] tun0: tun_chr_ioctl cmd 1074025680 [ 659.411688][T13465] Bluetooth: MGMT ver 1.22 [ 659.559008][T13268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.989410][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.222841][T13268] veth0_vlan: entered promiscuous mode [ 660.253345][T13268] veth1_vlan: entered promiscuous mode [ 660.314841][T13268] veth0_macvtap: entered promiscuous mode [ 660.342410][T13268] veth1_macvtap: entered promiscuous mode [ 660.407627][T13268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.437933][T13268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.514973][T13268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.534758][T13268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.577493][T13268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.621573][T13268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.905231][ T8330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.157365][ T8330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.544025][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.586132][T13523] loop2: detected capacity change from 0 to 512 [ 662.593484][T13523] EXT4-fs: Ignoring removed nobh option [ 662.638806][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.804421][T13523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.898278][T13523] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.024798][T13523] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2285: corrupted inode contents [ 663.131002][T13523] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.2285: mark_inode_dirty error [ 663.190399][T13523] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2285: corrupted inode contents [ 663.278408][T13537] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2285: corrupted inode contents [ 663.330508][T13537] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.2285: mark_inode_dirty error [ 663.359412][T13537] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2285: corrupted inode contents [ 663.372862][T13537] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.2285: mark_inode_dirty error [ 663.501377][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.944303][T13639] loop4: detected capacity change from 0 to 128 [ 668.999457][T13631] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 669.080933][T13639] loop4: detected capacity change from 0 to 2048 [ 669.107072][T13639] UDF-fs: bad mount option "./file0" or missing value [ 669.125997][ T789] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 669.175756][T12750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 669.317411][ T789] usb 2-1: device descriptor read/64, error -71 [ 669.606126][ T789] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 669.879012][ T789] usb 2-1: device descriptor read/64, error -71 [ 669.995914][ T789] usb usb2-port1: attempt power cycle [ 670.415717][ T789] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 670.456375][ T789] usb 2-1: device descriptor read/8, error -71 [ 670.899480][ T789] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 670.946271][ T789] usb 2-1: device descriptor read/8, error -71 [ 671.670074][ T789] usb usb2-port1: unable to enumerate USB device [ 672.470136][T13691] process 'syz.3.2317' launched './file0' with NULL argv: empty string added [ 672.609956][T13695] loop2: detected capacity change from 0 to 512 [ 672.617883][T13695] EXT4-fs: Ignoring removed i_version option [ 672.651682][T13695] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 672.678724][T13695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 672.690191][T13695] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 672.706780][T13695] Quota error (device loop2): write_blk: dquota write failed [ 672.714190][T13695] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 672.725110][T13695] Quota error (device loop2): write_blk: dquota write failed [ 672.732788][T13695] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 672.742872][T13695] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2320: Failed to acquire dquot type 1 [ 672.761960][T13695] EXT4-fs (loop2): 1 truncate cleaned up [ 672.786674][T13695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 672.842008][T13695] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.2320: iget: bad i_size value: 360287970189639690 [ 672.906945][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.728234][ T5765] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 675.346466][ T5765] usb 5-1: device descriptor read/64, error -71 [ 675.615788][ T5765] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 675.779972][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 675.789467][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 675.802676][ T5765] usb 5-1: device descriptor read/64, error -71 [ 675.925944][ T5765] usb usb5-port1: attempt power cycle [ 676.345708][ T5765] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 676.386965][ T5765] usb 5-1: device descriptor read/8, error -71 [ 676.436604][T13772] loop3: detected capacity change from 0 to 512 [ 676.465743][T13772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 676.488616][T13772] EXT4-fs (loop3): 1 truncate cleaned up [ 676.496916][T13772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.675673][ T5765] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 676.706557][ T5765] usb 5-1: device descriptor read/8, error -71 [ 676.826354][ T5765] usb usb5-port1: unable to enumerate USB device [ 676.835702][ T56] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 677.028508][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.045674][ T56] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.058039][ T56] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 677.072500][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 677.706977][T13782] loop4: detected capacity change from 0 to 764 [ 677.771424][T13784] loop2: detected capacity change from 0 to 1024 [ 678.648767][ T56] usb 4-1: SerialNumber: syz [ 680.487022][ T56] usb 4-1: 0:2 : does not exist [ 680.691214][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.889227][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 680.908356][ T56] usb 4-1: USB disconnect, device number 13 [ 680.968206][T12645] udevd[12645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.118835][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.131331][ T8] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 681.150524][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 681.170096][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.319186][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 681.331035][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 681.358775][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 681.370493][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 681.392302][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 681.399840][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 681.678747][ T3426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.716909][T13837] chnl_net:caif_netlink_parms(): no params data found [ 681.774640][ T3426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.827678][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.835037][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.842362][T13837] bridge_slave_0: entered allmulticast mode [ 681.849281][T13837] bridge_slave_0: entered promiscuous mode [ 681.859122][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.866554][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.874066][T13837] bridge_slave_1: entered allmulticast mode [ 681.881251][T13837] bridge_slave_1: entered promiscuous mode [ 681.921496][ T3426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.014665][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.193894][ T3426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.589528][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.625086][ T5765] usb 5-1: USB disconnect, device number 6 [ 682.713660][T13854] loop2: detected capacity change from 0 to 512 [ 682.807975][T13854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 682.871058][T13854] EXT4-fs (loop2): 1 truncate cleaned up [ 682.928292][T13854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.176217][T13837] team0: Port device team_slave_0 added [ 683.208291][T13837] team0: Port device team_slave_1 added [ 683.437118][ T5786] Bluetooth: hci4: command tx timeout [ 683.483702][T13837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.514433][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.564804][T13837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.619001][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.631104][T13837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.640284][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.670060][T13837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.705441][T13873] loop2: detected capacity change from 0 to 128 [ 683.726168][T12242] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 683.772810][ T27] audit: type=1800 audit(1786194936.605:47): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2365" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 683.827938][ T3426] bond1: (slave ip6gretap1): Releasing backup interface [ 683.834957][ T3426] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 36:29:1f:20:46:7b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 683.934732][T12242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 683.951177][T12242] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 684.030626][T12242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.182460][T12242] usb 4-1: config 0 descriptor?? [ 684.477116][T13837] hsr_slave_0: entered promiscuous mode [ 684.511633][T13837] hsr_slave_1: entered promiscuous mode [ 684.537945][T13837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.592561][T13837] Cannot create hsr debugfs directory [ 685.513655][ T5781] Bluetooth: hci4: command tx timeout [ 685.528295][T12242] logitech-djreceiver 0003:046D:C70E.0002: ignoring exceeding usage max [ 685.632802][T12242] usb 4-1: USB disconnect, device number 14 [ 686.028935][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043950][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.499738][T13900] loop2: detected capacity change from 0 to 1024 [ 687.530306][T13900] hfsplus: invalid length 32517 has been corrected to 255 [ 687.585747][ T5781] Bluetooth: hci4: command tx timeout [ 687.625729][ T27] audit: type=1800 audit(1786194940.435:48): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2374" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 688.293273][ T12] hfsplus: b-tree write err: -5, ino 4 [ 688.309341][ T12] hfsplus: b-tree write err: -5, ino 2 [ 689.175408][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2378'. [ 689.280483][T13915] loop2: detected capacity change from 0 to 1024 [ 689.327074][T13915] hfsplus: unable to parse mount options [ 689.665757][ T5781] Bluetooth: hci4: command tx timeout [ 692.004197][ T3426] hsr_slave_0: left promiscuous mode [ 692.018080][ T3426] hsr_slave_1: left promiscuous mode [ 692.494393][ T3426] veth1_macvtap: left promiscuous mode [ 692.595821][ T3426] veth0_macvtap: left promiscuous mode [ 692.601948][ T3426] veth1_vlan: left promiscuous mode [ 692.676199][ T3426] veth0_vlan: left promiscuous mode [ 692.752083][T13972] loop2: detected capacity change from 0 to 512 [ 692.883130][T13972] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2386: iget: bad i_size value: 38620345925642 [ 692.998446][T13972] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2386: couldn't read orphan inode 15 (err -117) [ 693.079877][T13972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.669633][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.772160][ T3426] bond2 (unregistering): Released all slaves [ 693.889787][ T3426] bond1 (unregistering): (slave veth3): Releasing backup interface [ 693.967677][ T3426] bond1 (unregistering): Released all slaves [ 694.725713][T14011] loop3: detected capacity change from 0 to 1024 [ 694.752767][T14011] hfsplus: invalid length 32517 has been corrected to 255 [ 694.952329][T13890] hfsplus: b-tree write err: -5, ino 25 [ 694.972629][T13890] hfsplus: b-tree write err: -5, ino 4 [ 694.987983][T13890] hfsplus: b-tree write err: -5, ino 2 [ 695.151057][T14016] loop3: detected capacity change from 0 to 512 [ 695.190980][T14016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 695.240434][T14016] System zones: 1-12 [ 695.270868][T14016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2398: missing EA_INODE flag [ 695.332411][T14016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2398: error while reading EA inode 12 err=-117 [ 695.381196][T14016] EXT4-fs (loop3): 1 orphan inode deleted [ 695.405736][T14016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.569976][T14016] fscrypt (loop3, inode 15): Reserved bits set in encryption policy [ 695.620083][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 695.815081][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 695.948588][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.056817][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.169950][ T3426] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 697.067753][ T3426] bond0 (unregistering): Released all slaves [ 697.210398][T14016] warning: `syz.3.2398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 697.256063][T13837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.288677][T13837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.318937][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.341662][T13837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.363259][T13837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 697.691299][T13837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.796542][T13837] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.877381][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.884626][ T8330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.927677][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.934913][ T8330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.105247][T13837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.165669][T13837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.449469][T14070] loop4: detected capacity change from 0 to 2048 [ 700.508228][T14070] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 700.534531][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.534685][T14070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.808365][T14079] loop3: detected capacity change from 0 to 1024 [ 700.844576][T13837] veth0_vlan: entered promiscuous mode [ 700.872540][T13837] veth1_vlan: entered promiscuous mode [ 701.816448][T13837] veth0_macvtap: entered promiscuous mode [ 701.993247][T13837] veth1_macvtap: entered promiscuous mode [ 702.101205][T13837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.137845][T13837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.177216][T13837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.241826][T13837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.286040][T13837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.306898][T13837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.342880][T13837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.363795][T13837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.386549][T13837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.395302][T13837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.513794][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.537827][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.644047][ T8336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.665201][ T8336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.707680][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 703.915845][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 703.934867][ T5879] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 703.953583][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.975827][ T5879] usb 5-1: Product: syz [ 703.984503][ T5879] usb 5-1: Manufacturer: syz [ 704.003680][ T5879] usb 5-1: SerialNumber: syz [ 704.141593][T14132] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2421'. [ 704.274349][ T5879] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 704.333183][ T5879] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 704.373690][ T5879] usb 5-1: USB disconnect, device number 7 [ 704.442172][T12645] udevd[12645]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.187693][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.197867][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.218687][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.229894][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.238134][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 706.247525][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.295727][ T5765] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 706.487623][ T5765] usb 5-1: Using ep0 maxpacket: 32 [ 706.508303][ T5765] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 706.535994][ T5765] usb 5-1: config 0 has no interface number 0 [ 706.549570][ T5765] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 706.564211][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.590055][ T5765] usb 5-1: Product: syz [ 706.604296][ T5765] usb 5-1: Manufacturer: syz [ 706.617347][ T5765] usb 5-1: SerialNumber: syz [ 706.633557][ T5765] usb 5-1: config 0 descriptor?? [ 706.648691][ T5765] smsc95xx v2.0.0 [ 706.980097][T14189] loop3: detected capacity change from 0 to 512 [ 706.988588][T14189] EXT4-fs: Ignoring removed bh option [ 707.058901][T14189] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 707.079339][ T5765] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 707.104357][T14192] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2431'. [ 707.124724][ T5765] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 707.177125][T12750] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 707.367769][ T5765] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 707.379243][ T5765] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 707.394776][ T5765] usb 5-1: USB disconnect, device number 8 [ 707.475917][T14171] chnl_net:caif_netlink_parms(): no params data found [ 708.104837][T14222] fuse: blksize only supported for fuseblk [ 708.109314][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.119880][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.127243][T14171] bridge_slave_0: entered allmulticast mode [ 708.154792][T14171] bridge_slave_0: entered promiscuous mode [ 708.182882][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.201836][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.220076][T14171] bridge_slave_1: entered allmulticast mode [ 708.337276][ T5786] Bluetooth: hci0: command tx timeout [ 708.388388][T14171] bridge_slave_1: entered promiscuous mode [ 709.142028][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.184151][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.451085][T14171] team0: Port device team_slave_0 added [ 709.549335][T14171] team0: Port device team_slave_1 added [ 709.655922][T14251] loop3: detected capacity change from 0 to 256 [ 709.693304][ T8336] dvmrp0 (unregistering): left allmulticast mode [ 709.698896][T12645] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 709.741953][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.753383][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.755004][T12645] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.817638][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.844394][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.853302][T12645] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.861856][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.951741][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.227699][T14171] hsr_slave_0: entered promiscuous mode [ 710.246996][T14171] hsr_slave_1: entered promiscuous mode [ 710.385930][ T5786] Bluetooth: hci0: command tx timeout [ 710.412170][T14264] loop4: detected capacity change from 0 to 256 [ 710.426991][ T8336] hsr_slave_0: left promiscuous mode [ 710.433364][ T8336] hsr_slave_1: left promiscuous mode [ 710.441689][ T8336] bridge_slave_1: left allmulticast mode [ 710.447794][ T8336] bridge_slave_1: left promiscuous mode [ 710.457278][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.495662][T12242] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 710.505198][T14264] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 710.521455][ T8336] bridge_slave_0: left allmulticast mode [ 710.535330][ T8336] bridge_slave_0: left promiscuous mode [ 710.541302][T14264] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 710.562473][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.592380][T14264] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 710.649335][T14264] exFAT-fs (loop4): failed to load alloc-bitmap [ 710.672537][T14264] exFAT-fs (loop4): failed to recognize exfat type [ 710.715780][T12242] usb 2-1: Using ep0 maxpacket: 8 [ 710.730557][T12242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 710.919888][T12242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.124779][T12242] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.322185][T12242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 711.450693][T12242] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 711.461639][T12242] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 711.475304][T12242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.504747][T12242] usb 2-1: config 0 descriptor?? [ 711.533130][T14260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 712.359098][ T8336] team0 (unregistering): Port device team_slave_1 removed [ 712.372323][T12242] usb 2-1: USB disconnect, device number 20 [ 712.381545][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 712.465795][ T5786] Bluetooth: hci0: command tx timeout [ 712.538862][ T8336] team0 (unregistering): Port device team_slave_0 removed [ 712.594590][ T8336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.693369][ T8336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.339663][ T8336] bond0 (unregistering): Released all slaves [ 714.387328][T14171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.406046][T14171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.418450][T14171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.430547][T14171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 714.546044][ T5786] Bluetooth: hci0: command tx timeout [ 714.641206][T14171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.701325][T14171] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.751800][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.759026][ T8330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.800229][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.808355][ T8330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.933237][T14171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.957352][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 716.309143][T14355] loop3: detected capacity change from 0 to 8 [ 716.344682][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.408805][T14355] SQUASHFS error: Failed to read block 0x2: -5 [ 716.415395][T14355] SQUASHFS error: Unable to read metadata cache entry [0] [ 716.504059][T14355] SQUASHFS error: Unable to read inode 0x127 [ 716.634830][T14171] veth0_vlan: entered promiscuous mode [ 716.728103][T14171] veth1_vlan: entered promiscuous mode [ 716.828077][T14171] veth0_macvtap: entered promiscuous mode [ 716.865488][T14171] veth1_macvtap: entered promiscuous mode [ 716.919593][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.947851][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.973397][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.014402][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.039130][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.076746][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.095621][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.115665][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.142664][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.177158][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.212259][T14171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.242356][T14171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.253380][T14171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.264437][T14171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.416013][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.433727][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.538073][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.554617][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.905769][T12632] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 719.135686][T12632] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.177359][T12632] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 719.240485][T12632] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.418230][T12632] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 719.459192][T12632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.563912][T12632] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 720.007318][ T2322] pvrusb2: Invalid read control endpoint [ 720.014049][ T2322] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 720.054533][ T2322] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 721.226681][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 721.235031][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 721.249481][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 721.272453][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 721.285859][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 721.299896][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.743933][ T56] usb 2-1: USB disconnect, device number 21 [ 723.630245][ T5786] Bluetooth: hci1: command tx timeout [ 723.875455][ T8336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.896861][ T8336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.967389][T14452] loop2: detected capacity change from 0 to 256 [ 725.018658][T14452] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 725.129908][ T8336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.215666][T14453] tun0: tun_chr_ioctl cmd 1074025680 [ 725.375258][ T8336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.406473][ T9] smpboot: CPU 1 is now offline [ 725.500924][T14423] chnl_net:caif_netlink_parms(): no params data found [ 725.522571][T14459] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 725.590859][T14405] ------------[ cut here ]------------ [ 725.592000][T14405] [ 725.592004][T14405] ====================================================== [ 725.592009][T14405] WARNING: possible circular locking dependency detected [ 725.592022][T14405] syzkaller #0 Not tainted [ 725.592030][T14405] ------------------------------------------------------ [ 725.592035][T14405] syz.2.2424/14405 is trying to acquire lock: [ 725.592043][T14405] ffffffff8d1260a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 725.592151][T14405] [ 725.592151][T14405] but task is already holding lock: [ 725.592155][T14405] ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 725.592206][T14405] [ 725.592206][T14405] which lock already depends on the new lock. [ 725.592206][T14405] [ 725.592210][T14405] [ 725.592210][T14405] the existing dependency chain (in reverse order) is: [ 725.592215][T14405] [ 725.592215][T14405] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 725.592234][T14405] _raw_spin_lock_nested+0x32/0x50 [ 725.592281][T14405] raw_spin_rq_lock_nested+0x29/0x130 [ 725.592300][T14405] task_fork_fair+0x62/0x1f0 [ 725.592314][T14405] sched_cgroup_fork+0x352/0x3e0 [ 725.592328][T14405] copy_process+0x21fd/0x3da0 [ 725.592343][T14405] kernel_clone+0x24b/0x8a0 [ 725.592357][T14405] user_mode_thread+0x111/0x180 [ 725.592372][T14405] rest_init+0x27/0x300 [ 725.592407][T14405] arch_call_rest_init+0xe/0x10 [ 725.592511][T14405] start_kernel+0x461/0x4e0 [ 725.592529][T14405] x86_64_start_reservations+0x2a/0x30 [ 725.592546][T14405] copy_bootdata+0x0/0xd0 [ 725.592562][T14405] secondary_startup_64_no_verify+0x179/0x17b [ 725.592589][T14405] [ 725.592589][T14405] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 725.592608][T14405] _raw_spin_lock_irqsave+0xb4/0x100 [ 725.592628][T14405] try_to_wake_up+0x5b/0x10e0 [ 725.592642][T14405] kick_pool+0x320/0x420 [ 725.592655][T14405] create_worker+0x61e/0x820 [ 725.592670][T14405] workqueue_init+0x306/0x670 [ 725.592690][T14405] kernel_init_freeable+0x3a7/0x560 [ 725.592708][T14405] kernel_init+0x1d/0x1c0 [ 725.592726][T14405] ret_from_fork+0x48/0x80 [ 725.592747][T14405] ret_from_fork_asm+0x11/0x20 [ 725.592764][T14405] [ 725.592764][T14405] -> #3 (&pool->lock){-.-.}-{2:2}: [ 725.592783][T14405] _raw_spin_lock+0x2e/0x40 [ 725.592801][T14405] __queue_work+0x72f/0xfd0 [ 725.592814][T14405] queue_work_on+0x128/0x1f0 [ 725.592827][T14405] rpm_suspend+0x1133/0x1b60 [ 725.592868][T14405] __pm_runtime_idle+0x12f/0x1a0 [ 725.592885][T14405] __device_attach+0x352/0x420 [ 725.592904][T14405] bus_probe_device+0x180/0x260 [ 725.592920][T14405] device_add+0x87c/0xc40 [ 725.592935][T14405] serial_base_port_add+0x2f6/0x430 [ 725.592971][T14405] serial_core_register_port+0x378/0x20b0 [ 725.592991][T14405] serial8250_register_8250_port+0x15fd/0x1f40 [ 725.593008][T14405] serial_pnp_probe+0x577/0x750 [ 725.593023][T14405] pnp_device_probe+0x305/0x4b0 [ 725.593051][T14405] really_probe+0x247/0xae0 [ 725.593063][T14405] __driver_probe_device+0x1f5/0x390 [ 725.593082][T14405] driver_probe_device+0x4f/0x420 [ 725.593101][T14405] __driver_attach+0x444/0x6d0 [ 725.593121][T14405] bus_for_each_dev+0x235/0x2b0 [ 725.593137][T14405] bus_add_driver+0x340/0x630 [ 725.593154][T14405] driver_register+0x23a/0x310 [ 725.593167][T14405] serial8250_init+0x9a/0x170 [ 725.593200][T14405] do_one_initcall+0x242/0x790 [ 725.593217][T14405] do_initcall_level+0x13d/0x1f0 [ 725.593235][T14405] do_initcalls+0x69/0xd0 [ 725.593253][T14405] kernel_init_freeable+0x3d9/0x560 [ 725.593271][T14405] kernel_init+0x1d/0x1c0 [ 725.593289][T14405] ret_from_fork+0x48/0x80 [ 725.593305][T14405] ret_from_fork_asm+0x11/0x20 [ 725.593322][T14405] [ 725.593322][T14405] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 725.593342][T14405] _raw_spin_lock_irqsave+0xb4/0x100 [ 725.593367][T14405] __pm_runtime_resume+0x10f/0x170 [ 725.593385][T14405] __uart_start+0x171/0x3e0 [ 725.593404][T14405] uart_write+0x449/0x5d0 [ 725.593416][T14405] n_tty_write+0xd3d/0x11e0 [ 725.593433][T14405] file_tty_write+0x529/0x960 [ 725.593448][T14405] vfs_write+0x474/0x9a0 [ 725.593481][T14405] ksys_write+0x151/0x260 [ 725.593503][T14405] do_syscall_64+0x55/0xb0 [ 725.593517][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.593542][T14405] [ 725.593542][T14405] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 725.593561][T14405] _raw_spin_lock_irqsave+0xb4/0x100 [ 725.593580][T14405] serial8250_console_write+0x181/0x18b0 [ 725.593598][T14405] console_flush_all+0x6ad/0xcf0 [ 725.593614][T14405] console_unlock+0xad/0x350 [ 725.593630][T14405] vprintk_emit+0x497/0x610 [ 725.593645][T14405] _printk+0xde/0x130 [ 725.593667][T14405] register_console+0xb96/0xf00 [ 725.593684][T14405] univ8250_console_init+0x45/0x50 [ 725.593701][T14405] console_init+0x17b/0x5d0 [ 725.593718][T14405] start_kernel+0x2c8/0x4e0 [ 725.593736][T14405] x86_64_start_reservations+0x2a/0x30 [ 725.593753][T14405] copy_bootdata+0x0/0xd0 [ 725.593769][T14405] secondary_startup_64_no_verify+0x179/0x17b [ 725.593786][T14405] [ 725.593786][T14405] -> #0 (console_owner){-.-.}-{0:0}: [ 725.593805][T14405] __lock_acquire+0x37ef/0x7d80 [ 725.593821][T14405] lock_acquire+0x19e/0x420 [ 725.593835][T14405] console_flush_all+0x676/0xcf0 [ 725.593851][T14405] console_unlock+0xad/0x350 [ 725.593867][T14405] vprintk_emit+0x497/0x610 [ 725.593882][T14405] _printk+0xde/0x130 [ 725.593900][T14405] report_bug+0x34e/0x4f0 [ 725.593915][T14405] handle_bug+0xcf/0x120 [ 725.593929][T14405] exc_invalid_op+0x1a/0x50 [ 725.593943][T14405] asm_exc_invalid_op+0x1a/0x20 [ 725.593956][T14405] update_rq_clock+0x32e/0x4b0 [ 725.593974][T14405] __schedule+0x2c72/0x4660 [ 725.593990][T14405] preempt_schedule_irq+0xbf/0x150 [ 725.594006][T14405] irqentry_exit+0x67/0x70 [ 725.594023][T14405] asm_sysvec_call_function_single+0x1a/0x20 [ 725.594039][T14405] lock_is_held_type+0x13e/0x190 [ 725.594056][T14405] __get_user_pages+0x10a/0x1580 [ 725.594082][T14405] get_dump_page+0x10c/0x200 [ 725.594099][T14405] dump_user_range+0x127/0x840 [ 725.594117][T14405] elf_core_dump+0x320e/0x37c0 [ 725.594135][T14405] do_coredump+0x1791/0x24a0 [ 725.594148][T14405] get_signal+0x10da/0x1390 [ 725.594161][T14405] arch_do_signal_or_restart+0xc2/0x7b0 [ 725.594186][T14405] exit_to_user_mode_loop+0x70/0x110 [ 725.594204][T14405] exit_to_user_mode_prepare+0xee/0x180 [ 725.594222][T14405] irqentry_exit_to_user_mode+0x9/0x30 [ 725.594240][T14405] exc_page_fault+0x8c/0x100 [ 725.594257][T14405] asm_exc_page_fault+0x26/0x30 [ 725.594270][T14405] [ 725.594270][T14405] other info that might help us debug this: [ 725.594270][T14405] [ 725.594275][T14405] Chain exists of: [ 725.594275][T14405] console_owner --> &p->pi_lock --> &rq->__lock [ 725.594275][T14405] [ 725.594296][T14405] Possible unsafe locking scenario: [ 725.594296][T14405] [ 725.594300][T14405] CPU0 CPU1 [ 725.594304][T14405] ---- ---- [ 725.594307][T14405] lock(&rq->__lock); [ 725.594316][T14405] lock(&p->pi_lock); [ 725.594326][T14405] lock(&rq->__lock); [ 725.594335][T14405] lock(console_owner); [ 725.594344][T14405] [ 725.594344][T14405] *** DEADLOCK *** [ 725.594344][T14405] [ 725.594347][T14405] 5 locks held by syz.2.2424/14405: [ 725.594356][T14405] #0: ffff88801ff32418 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1774/0x24a0 [ 725.594396][T14405] #1: ffff888019fd6a20 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xb6/0x200 [ 725.594434][T14405] #2: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 725.594474][T14405] #3: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 725.594517][T14405] #4: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 725.594555][T14405] [ 725.594555][T14405] stack backtrace: [ 725.594560][T14405] CPU: 0 PID: 14405 Comm: syz.2.2424 Not tainted syzkaller #0 [ 725.594575][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.594588][T14405] Call Trace: [ 725.594623][T14405] [ 725.594660][T14405] dump_stack_lvl+0x18c/0x250 [ 725.594728][T14405] ? load_image+0x420/0x420 [ 725.594777][T14405] ? show_regs_print_info+0x20/0x20 [ 725.594796][T14405] ? print_circular_bug+0x12b/0x1a0 [ 725.594816][T14405] check_noncircular+0x2fc/0x400 [ 725.594836][T14405] ? print_deadlock_bug+0x5d0/0x5d0 [ 725.594853][T14405] ? lockdep_lock+0xf5/0x230 [ 725.594875][T14405] __lock_acquire+0x37ef/0x7d80 [ 725.594902][T14405] ? verify_lock_unused+0x140/0x140 [ 725.594929][T14405] lock_acquire+0x19e/0x420 [ 725.594944][T14405] ? console_flush_all+0x10b/0xcf0 [ 725.594965][T14405] ? __lock_acquire+0x7d80/0x7d80 [ 725.594981][T14405] ? do_raw_spin_lock+0x11f/0x2b0 [ 725.595000][T14405] ? read_lock_is_recursive+0x20/0x20 [ 725.595017][T14405] ? __rwlock_init+0x150/0x150 [ 725.595037][T14405] ? do_raw_spin_unlock+0x121/0x230 [ 725.595058][T14405] console_flush_all+0x676/0xcf0 [ 725.595075][T14405] ? console_flush_all+0x10b/0xcf0 [ 725.595094][T14405] ? console_flush_all+0x10b/0xcf0 [ 725.595116][T14405] ? is_console_locked+0x20/0x20 [ 725.595138][T14405] console_unlock+0xad/0x350 [ 725.595157][T14405] ? other_cpu_in_panic+0xf0/0xf0 [ 725.595175][T14405] ? __lock_acquire+0x1336/0x7d80 [ 725.595195][T14405] vprintk_emit+0x497/0x610 [ 725.595214][T14405] ? printk_sprint+0x460/0x460 [ 725.595237][T14405] _printk+0xde/0x130 [ 725.595259][T14405] ? load_image+0x420/0x420 [ 725.595280][T14405] ? find_bug+0xa5/0x3a0 [ 725.595296][T14405] ? update_rq_clock+0x32e/0x4b0 [ 725.595317][T14405] report_bug+0x34e/0x4f0 [ 725.595333][T14405] ? update_rq_clock+0x32e/0x4b0 [ 725.595353][T14405] ? update_rq_clock+0x32e/0x4b0 [ 725.595373][T14405] ? update_rq_clock+0x330/0x4b0 [ 725.595392][T14405] handle_bug+0xcf/0x120 [ 725.595408][T14405] exc_invalid_op+0x1a/0x50 [ 725.595425][T14405] asm_exc_invalid_op+0x1a/0x20 [ 725.595440][T14405] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 725.595507][T14405] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 725.595547][T14405] RSP: 0018:ffffc900030f6e20 EFLAGS: 00010046 [ 725.595583][T14405] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: 5d1d8fa235bd6c00 [ 725.595594][T14405] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 725.595605][T14405] RBP: ffffc900030f7070 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 725.595617][T14405] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8ca92a38 [ 725.595628][T14405] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 725.595648][T14405] __schedule+0x2c72/0x4660 [ 725.595675][T14405] ? asan.module_dtor+0x20/0x20 [ 725.595691][T14405] ? mark_lock+0x94/0x320 [ 725.595709][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.595730][T14405] ? preempt_schedule_irq+0xb4/0x150 [ 725.595749][T14405] preempt_schedule_irq+0xbf/0x150 [ 725.595767][T14405] ? preempt_schedule_notrace+0x110/0x110 [ 725.595788][T14405] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 725.595809][T14405] irqentry_exit+0x67/0x70 [ 725.595827][T14405] asm_sysvec_call_function_single+0x1a/0x20 [ 725.595844][T14405] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 725.595863][T14405] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 725.595876][T14405] RSP: 0018:ffffc900030f71f8 EFLAGS: 00000206 [ 725.595887][T14405] RAX: 5d1d8fa235bd6c00 RBX: ffff88802e091e00 RCX: 5d1d8fa235bd6c00 [ 725.595898][T14405] RDX: ffff88802e091e00 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 725.595910][T14405] RBP: 0000000000000001 R08: ffffc900030f734f R09: 0000000000000000 [ 725.595920][T14405] R10: ffffc900030f7340 R11: fffff5200061ee6a R12: 0000000000000001 [ 725.595930][T14405] R13: 0000000000000246 R14: ffff888019fd6a20 R15: ffff88802e092908 [ 725.595950][T14405] __get_user_pages+0x10a/0x1580 [ 725.595973][T14405] ? read_lock_is_recursive+0x20/0x20 [ 725.595990][T14405] ? up_write+0x1be/0x410 [ 725.596004][T14405] ? file_update_time+0x98/0x1a0 [ 725.596023][T14405] ? populate_vma_page_range+0x380/0x380 [ 725.596043][T14405] ? get_dump_page+0xb6/0x200 [ 725.596061][T14405] ? down_read_killable+0x1d0/0x340 [ 725.596082][T14405] get_dump_page+0x10c/0x200 [ 725.596101][T14405] ? fault_in_readable+0x150/0x150 [ 725.596121][T14405] ? __asan_memset+0x22/0x40 [ 725.596141][T14405] ? iov_iter_bvec+0xd4/0x1b0 [ 725.596171][T14405] dump_user_range+0x127/0x840 [ 725.596191][T14405] ? dump_skip+0x40/0x40 [ 725.596205][T14405] ? dump_emit+0x78/0xe0 [ 725.596225][T14405] ? dump_emit+0xa6/0xe0 [ 725.596239][T14405] ? elf_core_dump+0x2dbb/0x37c0 [ 725.596260][T14405] elf_core_dump+0x320e/0x37c0 [ 725.596286][T14405] ? load_elf_binary+0x2850/0x2850 [ 725.596308][T14405] ? verify_lock_unused+0x140/0x140 [ 725.596325][T14405] ? __lock_acquire+0x7d80/0x7d80 [ 725.596342][T14405] ? mas_next_slot+0x94c/0x980 [ 725.596371][T14405] ? rcu_read_lock_any_held+0xb4/0x140 [ 725.596388][T14405] ? 0xffffffffff600000 [ 725.596404][T14405] do_coredump+0x1791/0x24a0 [ 725.596427][T14405] ? nfs_stat_to_errno+0x170/0x170 [ 725.596451][T14405] ? lock_chain_count+0x20/0x20 [ 725.596469][T14405] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.596494][T14405] ? lockdep_hardirqs_on+0x98/0x150 [ 725.596514][T14405] get_signal+0x10da/0x1390 [ 725.596537][T14405] arch_do_signal_or_restart+0xc2/0x7b0 [ 725.596559][T14405] ? get_sigframe_size+0x20/0x20 [ 725.596581][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 725.596603][T14405] ? exit_to_user_mode_loop+0x3b/0x110 [ 725.596624][T14405] exit_to_user_mode_loop+0x70/0x110 [ 725.596644][T14405] exit_to_user_mode_prepare+0xee/0x180 [ 725.596665][T14405] irqentry_exit_to_user_mode+0x9/0x30 [ 725.596684][T14405] exc_page_fault+0x8c/0x100 [ 725.596704][T14405] asm_exc_page_fault+0x26/0x30 [ 725.596720][T14405] RIP: 0033:0x7f3265d9e0e1 [ 725.596731][T14405] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 725.596744][T14405] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 725.596756][T14405] RAX: 0000000000000000 RBX: 00007f3266026090 RCX: 00007f3265d9e0d9 [ 725.596766][T14405] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 725.596776][T14405] RBP: 00007f3265e35024 R08: 0000000000000000 R09: 0000000000000000 [ 725.596786][T14405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 725.596796][T14405] R13: 00007f3266026128 R14: 00007f3266026090 R15: 00007ffcd5906678 [ 725.596813][T14405] [ 727.041095][T14405] WARNING: CPU: 0 PID: 14405 at kernel/sched/sched.h:1370 update_rq_clock+0x32e/0x4b0 [ 727.050657][T14405] Modules linked in: [ 727.054545][T14405] CPU: 0 PID: 14405 Comm: syz.2.2424 Not tainted syzkaller #0 [ 727.062000][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.072045][T14405] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 727.077600][T14405] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 727.097201][T14405] RSP: 0018:ffffc900030f6e20 EFLAGS: 00010046 [ 727.103264][T14405] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: 5d1d8fa235bd6c00 [ 727.111231][T14405] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 727.119218][T14405] RBP: ffffc900030f7070 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 727.127182][T14405] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8ca92a38 [ 727.135147][T14405] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 727.143113][T14405] FS: 00007f3266cb76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 727.152056][T14405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.158637][T14405] CR2: 0000200000034000 CR3: 00000000637d2000 CR4: 00000000003526f0 [ 727.166605][T14405] Call Trace: [ 727.169881][T14405] [ 727.172808][T14405] __schedule+0x2c72/0x4660 [ 727.177336][T14405] ? asan.module_dtor+0x20/0x20 [ 727.182180][T14405] ? mark_lock+0x94/0x320 [ 727.186511][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.192490][T14405] ? preempt_schedule_irq+0xb4/0x150 [ 727.197773][T14405] preempt_schedule_irq+0xbf/0x150 [ 727.202884][T14405] ? preempt_schedule_notrace+0x110/0x110 [ 727.208605][T14405] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 727.214413][T14405] irqentry_exit+0x67/0x70 [ 727.218830][T14405] asm_sysvec_call_function_single+0x1a/0x20 [ 727.224811][T14405] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 727.230529][T14405] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 727.250136][T14405] RSP: 0018:ffffc900030f71f8 EFLAGS: 00000206 [ 727.256198][T14405] RAX: 5d1d8fa235bd6c00 RBX: ffff88802e091e00 RCX: 5d1d8fa235bd6c00 [ 727.264161][T14405] RDX: ffff88802e091e00 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 727.272128][T14405] RBP: 0000000000000001 R08: ffffc900030f734f R09: 0000000000000000 [ 727.280093][T14405] R10: ffffc900030f7340 R11: fffff5200061ee6a R12: 0000000000000001 [ 727.288072][T14405] R13: 0000000000000246 R14: ffff888019fd6a20 R15: ffff88802e092908 [ 727.296056][T14405] __get_user_pages+0x10a/0x1580 [ 727.301020][T14405] ? read_lock_is_recursive+0x20/0x20 [ 727.306405][T14405] ? up_write+0x1be/0x410 [ 727.310736][T14405] ? file_update_time+0x98/0x1a0 [ 727.315691][T14405] ? populate_vma_page_range+0x380/0x380 [ 727.321335][T14405] ? get_dump_page+0xb6/0x200 [ 727.326018][T14405] ? down_read_killable+0x1d0/0x340 [ 727.331229][T14405] get_dump_page+0x10c/0x200 [ 727.335826][T14405] ? fault_in_readable+0x150/0x150 [ 727.340943][T14405] ? __asan_memset+0x22/0x40 [ 727.345533][T14405] ? iov_iter_bvec+0xd4/0x1b0 [ 727.350210][T14405] dump_user_range+0x127/0x840 [ 727.354980][T14405] ? dump_skip+0x40/0x40 [ 727.359218][T14405] ? dump_emit+0x78/0xe0 [ 727.363458][T14405] ? dump_emit+0xa6/0xe0 [ 727.367694][T14405] ? elf_core_dump+0x2dbb/0x37c0 [ 727.372632][T14405] elf_core_dump+0x320e/0x37c0 [ 727.377411][T14405] ? load_elf_binary+0x2850/0x2850 [ 727.382527][T14405] ? verify_lock_unused+0x140/0x140 [ 727.387725][T14405] ? __lock_acquire+0x7d80/0x7d80 [ 727.392747][T14405] ? mas_next_slot+0x94c/0x980 [ 727.397519][T14405] ? rcu_read_lock_any_held+0xb4/0x140 [ 727.402975][T14405] ? 0xffffffffff600000 [ 727.407128][T14405] do_coredump+0x1791/0x24a0 [ 727.411722][T14405] ? nfs_stat_to_errno+0x170/0x170 [ 727.416835][T14405] ? lock_chain_count+0x20/0x20 [ 727.421687][T14405] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.426889][T14405] ? lockdep_hardirqs_on+0x98/0x150 [ 727.432090][T14405] get_signal+0x10da/0x1390 [ 727.436597][T14405] arch_do_signal_or_restart+0xc2/0x7b0 [ 727.442143][T14405] ? get_sigframe_size+0x20/0x20 [ 727.447083][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.453062][T14405] ? exit_to_user_mode_loop+0x3b/0x110 [ 727.458521][T14405] exit_to_user_mode_loop+0x70/0x110 [ 727.463807][T14405] exit_to_user_mode_prepare+0xee/0x180 [ 727.469354][T14405] irqentry_exit_to_user_mode+0x9/0x30 [ 727.474814][T14405] exc_page_fault+0x8c/0x100 [ 727.479409][T14405] asm_exc_page_fault+0x26/0x30 [ 727.484255][T14405] RIP: 0033:0x7f3265d9e0e1 [ 727.488666][T14405] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 727.508265][T14405] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 727.514325][T14405] RAX: 0000000000000000 RBX: 00007f3266026090 RCX: 00007f3265d9e0d9 [ 727.522290][T14405] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 727.530258][T14405] RBP: 00007f3265e35024 R08: 0000000000000000 R09: 0000000000000000 [ 727.538222][T14405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 727.546195][T14405] R13: 00007f3266026128 R14: 00007f3266026090 R15: 00007ffcd5906678 [ 727.554167][T14405] [ 727.557184][T14405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 727.564450][T14405] CPU: 0 PID: 14405 Comm: syz.2.2424 Not tainted syzkaller #0 [ 727.571902][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.581949][T14405] Call Trace: [ 727.585229][T14405] [ 727.588159][T14405] dump_stack_lvl+0x18c/0x250 [ 727.592836][T14405] ? show_regs_print_info+0x20/0x20 [ 727.598027][T14405] ? load_image+0x420/0x420 [ 727.602533][T14405] panic+0x2ca/0x720 [ 727.606431][T14405] ? bpf_jit_dump+0xd0/0xd0 [ 727.610937][T14405] __warn+0x2e0/0x470 [ 727.614916][T14405] ? update_rq_clock+0x32e/0x4b0 [ 727.619853][T14405] ? update_rq_clock+0x32e/0x4b0 [ 727.624787][T14405] report_bug+0x2be/0x4f0 [ 727.629113][T14405] ? update_rq_clock+0x32e/0x4b0 [ 727.634048][T14405] ? update_rq_clock+0x32e/0x4b0 [ 727.638984][T14405] ? update_rq_clock+0x330/0x4b0 [ 727.644096][T14405] handle_bug+0xcf/0x120 [ 727.648336][T14405] exc_invalid_op+0x1a/0x50 [ 727.652839][T14405] asm_exc_invalid_op+0x1a/0x20 [ 727.657686][T14405] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 727.663235][T14405] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 f9 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 727.682835][T14405] RSP: 0018:ffffc900030f6e20 EFLAGS: 00010046 [ 727.688900][T14405] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: 5d1d8fa235bd6c00 [ 727.696888][T14405] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 727.704879][T14405] RBP: ffffc900030f7070 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 727.712850][T14405] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8ca92a38 [ 727.720819][T14405] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 727.728805][T14405] __schedule+0x2c72/0x4660 [ 727.733323][T14405] ? asan.module_dtor+0x20/0x20 [ 727.738167][T14405] ? mark_lock+0x94/0x320 [ 727.742502][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 727.748484][T14405] ? preempt_schedule_irq+0xb4/0x150 [ 727.753767][T14405] preempt_schedule_irq+0xbf/0x150 [ 727.758892][T14405] ? preempt_schedule_notrace+0x110/0x110 [ 727.764630][T14405] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 727.770451][T14405] irqentry_exit+0x67/0x70 [ 727.774870][T14405] asm_sysvec_call_function_single+0x1a/0x20 [ 727.780852][T14405] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 727.786571][T14405] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 727.806171][T14405] RSP: 0018:ffffc900030f71f8 EFLAGS: 00000206 [ 727.812232][T14405] RAX: 5d1d8fa235bd6c00 RBX: ffff88802e091e00 RCX: 5d1d8fa235bd6c00 [ 727.820194][T14405] RDX: ffff88802e091e00 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 727.828157][T14405] RBP: 0000000000000001 R08: ffffc900030f734f R09: 0000000000000000 [ 727.836121][T14405] R10: ffffc900030f7340 R11: fffff5200061ee6a R12: 0000000000000001 [ 727.844086][T14405] R13: 0000000000000246 R14: ffff888019fd6a20 R15: ffff88802e092908 [ 727.852067][T14405] __get_user_pages+0x10a/0x1580 [ 727.857012][T14405] ? read_lock_is_recursive+0x20/0x20 [ 727.862384][T14405] ? up_write+0x1be/0x410 [ 727.866705][T14405] ? file_update_time+0x98/0x1a0 [ 727.871648][T14405] ? populate_vma_page_range+0x380/0x380 [ 727.877282][T14405] ? get_dump_page+0xb6/0x200 [ 727.881959][T14405] ? down_read_killable+0x1d0/0x340 [ 727.887169][T14405] get_dump_page+0x10c/0x200 [ 727.891757][T14405] ? fault_in_readable+0x150/0x150 [ 727.896864][T14405] ? __asan_memset+0x22/0x40 [ 727.901450][T14405] ? iov_iter_bvec+0xd4/0x1b0 [ 727.906127][T14405] dump_user_range+0x127/0x840 [ 727.910891][T14405] ? dump_skip+0x40/0x40 [ 727.915123][T14405] ? dump_emit+0x78/0xe0 [ 727.919366][T14405] ? dump_emit+0xa6/0xe0 [ 727.923611][T14405] ? elf_core_dump+0x2dbb/0x37c0 [ 727.928552][T14405] elf_core_dump+0x320e/0x37c0 [ 727.933321][T14405] ? load_elf_binary+0x2850/0x2850 [ 727.938434][T14405] ? verify_lock_unused+0x140/0x140 [ 727.943632][T14405] ? __lock_acquire+0x7d80/0x7d80 [ 727.948650][T14405] ? mas_next_slot+0x94c/0x980 [ 727.953422][T14405] ? rcu_read_lock_any_held+0xb4/0x140 [ 727.958875][T14405] ? 0xffffffffff600000 [ 727.963039][T14405] do_coredump+0x1791/0x24a0 [ 727.967633][T14405] ? nfs_stat_to_errno+0x170/0x170 [ 727.972745][T14405] ? lock_chain_count+0x20/0x20 [ 727.977591][T14405] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.982788][T14405] ? lockdep_hardirqs_on+0x98/0x150 [ 727.988004][T14405] get_signal+0x10da/0x1390 [ 727.992522][T14405] arch_do_signal_or_restart+0xc2/0x7b0 [ 727.998095][T14405] ? get_sigframe_size+0x20/0x20 [ 728.003055][T14405] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 728.009064][T14405] ? exit_to_user_mode_loop+0x3b/0x110 [ 728.014537][T14405] exit_to_user_mode_loop+0x70/0x110 [ 728.019841][T14405] exit_to_user_mode_prepare+0xee/0x180 [ 728.025396][T14405] irqentry_exit_to_user_mode+0x9/0x30 [ 728.030860][T14405] exc_page_fault+0x8c/0x100 [ 728.035454][T14405] asm_exc_page_fault+0x26/0x30 [ 728.040301][T14405] RIP: 0033:0x7f3265d9e0e1 [ 728.044713][T14405] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 728.064315][T14405] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 728.070383][T14405] RAX: 0000000000000000 RBX: 00007f3266026090 RCX: 00007f3265d9e0d9 [ 728.078349][T14405] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 728.086310][T14405] RBP: 00007f3265e35024 R08: 0000000000000000 R09: 0000000000000000 [ 728.094275][T14405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 728.102260][T14405] R13: 00007f3266026128 R14: 00007f3266026090 R15: 00007ffcd5906678 [ 728.110239][T14405] [ 728.113318][T14405] Kernel Offset: disabled [ 728.117634][T14405] Rebooting in 86400 seconds..