last executing test programs: 41.044490481s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0xf, 0x5, 0x6, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x100000, 0x7000, 0xc, 0x2, 0x1, 0x43, 0x8, 0x6, 0x9, 0x6, 0x83, 0x2b}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x5}, {0x200000, 0x8080000, 0x10, 0x6, 0x3, 0xff, 0xfd, 0x0, 0xa, 0xa0, 0x9, 0xe}, {0x1000, 0x2000, 0x8, 0x6, 0x5, 0x2, 0xab, 0x4, 0xf, 0x83, 0xf7, 0x5}, {0xeeef0000, 0x191bd000, 0xc, 0x7, 0xf7, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5}, {0x6000, 0xeeee8000, 0xb, 0x5, 0x0, 0x0, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x25000, 0xf, 0x2, 0xf, 0x7, 0x6a, 0x9, 0xff, 0x8, 0xf0, 0x9}, {0x0, 0x5}, {0x2000, 0x2}, 0x80000031, 0x0, 0x41000, 0x42064, 0x400000006, 0x9000, 0xf000, [0x400000000000a2, 0x800ffc, 0x400000000063, 0x7]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000500)) 40.698080029s ago: executing program 2 (id=84): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x200, 0x0, 0xe, 0x6, 0x9}) 37.726417535s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 37.403144478s ago: executing program 2 (id=95): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 36.587409574s ago: executing program 2 (id=99): ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x1, 0xfffffff0, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x2}) 36.066556281s ago: executing program 2 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x4}]}) 35.668538677s ago: executing program 32 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x4}]}) 11.811692742s ago: executing program 1 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000093, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.137599734s ago: executing program 1 (id=212): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 8.446421602s ago: executing program 1 (id=211): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 7.612371232s ago: executing program 4 (id=216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.882703253s ago: executing program 4 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x58000, 0x1000, &(0x7f0000060000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x80000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 6.18278787s ago: executing program 1 (id=224): modify_ldt$write2(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x90}], 0x1}], 0x1, 0x40800) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) modify_ldt$read(0x0, 0x0, 0x0) 5.880247111s ago: executing program 4 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 5.444240473s ago: executing program 4 (id=229): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000001f) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x3, 0x200, 0xb81}) 2.930666902s ago: executing program 0 (id=236): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.856857734s ago: executing program 1 (id=237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r0], 0x0, 0x0}) 2.754114641s ago: executing program 3 (id=238): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.654592598s ago: executing program 0 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0x1a0402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e4530f00ac80130f3066b9370200000f320f01d1700f20c066350f000000109fbe9fbec066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x77}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0xfffffff9, 0x8, 0x6, 0x8000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.509992922s ago: executing program 4 (id=240): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000c00)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@map_off}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") 2.267761612s ago: executing program 0 (id=241): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9e", 0x31}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xb, "09e12e5f0b6bdcf72f2ec7"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x12, "50d650847249ad288702ebd0d654b985e890"}, @pad1, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x4, 0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x218}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.768200255s ago: executing program 0 (id=242): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) inotify_rm_watch(r2, r1) 1.758549397s ago: executing program 3 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) 1.312293481s ago: executing program 3 (id=244): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x4) 985.729476ms ago: executing program 4 (id=245): modify_ldt$write2(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x90}], 0x1}], 0x1, 0x40800) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) modify_ldt$read(0x0, 0x0, 0x0) 921.935306ms ago: executing program 3 (id=246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 719.10399ms ago: executing program 0 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) 565.144926ms ago: executing program 3 (id=248): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 332.293685ms ago: executing program 1 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, 0x0) 4.267119ms ago: executing program 0 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r2, 0x25, 0x0, @val=@perf_event={0x429}}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4, 0x4, r1}, 0x10) 0s ago: executing program 3 (id=251): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9e", 0x31}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xb, "09e12e5f0b6bdcf72f2ec7"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x12, "50d650847249ad288702ebd0d654b985e890"}, @pad1, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x4, 0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x218}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 81.094582][ T5756] cgroup: Unknown subsys name 'net' [ 81.229632][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.945240][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.676173][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.684934][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.695092][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.708811][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.717029][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.724792][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.732713][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.735230][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.749222][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.757139][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.764788][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.765428][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.777107][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.786842][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.789276][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.794705][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.809938][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.818824][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.821619][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.829233][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.834411][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.843206][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.857081][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.865460][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.399478][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.420459][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.496104][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 85.584061][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 85.683165][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.690472][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.701118][ T5771] bridge_slave_0: entered allmulticast mode [ 85.709204][ T5771] bridge_slave_0: entered promiscuous mode [ 85.756672][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.764663][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.772754][ T5768] bridge_slave_0: entered allmulticast mode [ 85.781107][ T5768] bridge_slave_0: entered promiscuous mode [ 85.789328][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.797854][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.808139][ T5771] bridge_slave_1: entered allmulticast mode [ 85.816604][ T5771] bridge_slave_1: entered promiscuous mode [ 85.852002][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.859215][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.869117][ T5768] bridge_slave_1: entered allmulticast mode [ 85.876999][ T5768] bridge_slave_1: entered promiscuous mode [ 85.923890][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.934055][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.941684][ T5769] bridge_slave_0: entered allmulticast mode [ 85.948770][ T5769] bridge_slave_0: entered promiscuous mode [ 85.963122][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.975340][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.990542][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.008124][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.015937][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.023927][ T5769] bridge_slave_1: entered allmulticast mode [ 86.031908][ T5769] bridge_slave_1: entered promiscuous mode [ 86.042019][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.084275][ T5771] team0: Port device team_slave_0 added [ 86.095164][ T5771] team0: Port device team_slave_1 added [ 86.168540][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.176050][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.183607][ T5770] bridge_slave_0: entered allmulticast mode [ 86.191827][ T5770] bridge_slave_0: entered promiscuous mode [ 86.202008][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.214671][ T5768] team0: Port device team_slave_0 added [ 86.226063][ T5768] team0: Port device team_slave_1 added [ 86.246550][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.254086][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.280885][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.293593][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.301385][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.308645][ T5770] bridge_slave_1: entered allmulticast mode [ 86.316729][ T5770] bridge_slave_1: entered promiscuous mode [ 86.338264][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.363347][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.371088][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.398035][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.469669][ T5769] team0: Port device team_slave_0 added [ 86.482515][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.492762][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.499917][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.527011][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.540297][ T5769] team0: Port device team_slave_1 added [ 86.571872][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.591306][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.598491][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.626085][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.655874][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.663243][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.690106][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.733083][ T5771] hsr_slave_0: entered promiscuous mode [ 86.740005][ T5771] hsr_slave_1: entered promiscuous mode [ 86.767501][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.775054][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.801813][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.875194][ T5770] team0: Port device team_slave_0 added [ 86.887118][ T5768] hsr_slave_0: entered promiscuous mode [ 86.894175][ T5768] hsr_slave_1: entered promiscuous mode [ 86.902472][ T5083] Bluetooth: hci2: command tx timeout [ 86.902491][ T5780] Bluetooth: hci1: command tx timeout [ 86.914417][ T5778] Bluetooth: hci3: command tx timeout [ 86.920434][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.928665][ T5768] Cannot create hsr debugfs directory [ 86.947118][ T5770] team0: Port device team_slave_1 added [ 86.980937][ T5780] Bluetooth: hci0: command tx timeout [ 87.038321][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.045740][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.072803][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.114235][ T5769] hsr_slave_0: entered promiscuous mode [ 87.124299][ T5769] hsr_slave_1: entered promiscuous mode [ 87.131491][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.139102][ T5769] Cannot create hsr debugfs directory [ 87.159527][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.169996][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.199441][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.418241][ T5770] hsr_slave_0: entered promiscuous mode [ 87.425810][ T5770] hsr_slave_1: entered promiscuous mode [ 87.438376][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.447045][ T5770] Cannot create hsr debugfs directory [ 87.729080][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.748212][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.769426][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.817963][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.992147][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.004600][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.015674][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.029093][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.155008][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.185275][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.196588][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.209107][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.245790][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.308051][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.327633][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.354494][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.367377][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.378673][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.420332][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.427937][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.476943][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.484386][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.643422][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.660420][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.702271][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.729668][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.752025][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.759252][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.803726][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.826100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.833633][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.857532][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.887825][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.895136][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.913734][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921090][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.936573][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.943970][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.954277][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.961867][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.981491][ T5780] Bluetooth: hci2: command tx timeout [ 88.987127][ T5780] Bluetooth: hci1: command tx timeout [ 88.993145][ T5778] Bluetooth: hci3: command tx timeout [ 89.060909][ T5780] Bluetooth: hci0: command tx timeout [ 89.122487][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.141002][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.255310][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.278143][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.428690][ T5771] veth0_vlan: entered promiscuous mode [ 89.469582][ T5771] veth1_vlan: entered promiscuous mode [ 89.584721][ T5771] veth0_macvtap: entered promiscuous mode [ 89.609601][ T5771] veth1_macvtap: entered promiscuous mode [ 89.669949][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.731451][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.773660][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.783673][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795157][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.806825][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.849854][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.867296][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.900213][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.054018][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.065447][ T5770] veth0_vlan: entered promiscuous mode [ 90.083251][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.113179][ T5768] veth0_vlan: entered promiscuous mode [ 90.157648][ T5769] veth0_vlan: entered promiscuous mode [ 90.176240][ T5769] veth1_vlan: entered promiscuous mode [ 90.197598][ T5770] veth1_vlan: entered promiscuous mode [ 90.204053][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.221386][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.238382][ T5768] veth1_vlan: entered promiscuous mode [ 90.309429][ T5769] veth0_macvtap: entered promiscuous mode [ 90.372247][ T5769] veth1_macvtap: entered promiscuous mode [ 90.389484][ T5768] veth0_macvtap: entered promiscuous mode [ 90.410010][ T5768] veth1_macvtap: entered promiscuous mode [ 90.473522][ T5770] veth0_macvtap: entered promiscuous mode [ 90.515407][ T5770] veth1_macvtap: entered promiscuous mode [ 90.538792][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.553652][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.569487][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.580006][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.595760][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.606058][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.616904][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.630536][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.650533][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.666361][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.682376][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.700693][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.715800][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.726388][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.739352][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.769340][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.783404][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.793547][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.805031][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.822926][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.846736][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871192][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880171][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.889715][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937515][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.949402][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.961452][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.972231][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.984145][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.994936][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.007503][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.060821][ T5780] Bluetooth: hci1: command tx timeout [ 91.066415][ T5780] Bluetooth: hci3: command tx timeout [ 91.073067][ T5778] Bluetooth: hci2: command tx timeout [ 91.124495][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.142644][ T5778] Bluetooth: hci0: command tx timeout [ 91.153560][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.163652][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.174340][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.184692][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.195376][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.207149][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.256976][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.267147][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.276064][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.285337][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.315738][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.350577][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.471513][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.479427][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.515902][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.534528][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.564841][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.582302][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.656211][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.681017][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.766345][ T5832] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.783057][ T5025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.812677][ T5025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.837526][ T5844] syz.3.4[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.885238][ T5844] loop3: detected capacity change from 0 to 512 [ 92.040516][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.095427][ T5844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.108752][ T5832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.148419][ T5844] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.162141][ T5832] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.195286][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.230787][ T5832] usb 3-1: SerialNumber: syz [ 92.300314][ T28] audit: type=1800 audit(1776275840.115:2): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 92.526775][ T5832] usb 3-1: 0:2 : does not exist [ 92.566702][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.614591][ T5832] usb 3-1: USB disconnect, device number 2 [ 92.773665][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.802646][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.991761][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 93.012950][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.040846][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.058178][ T23] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 93.074348][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.087870][ T23] usb 1-1: Product: syz [ 93.107737][ T23] usb 1-1: Manufacturer: syz [ 93.115879][ T23] usb 1-1: SerialNumber: syz [ 93.127185][ T23] usb 1-1: config 0 descriptor?? [ 93.141338][ T5778] Bluetooth: hci2: command tx timeout [ 93.147112][ T5778] Bluetooth: hci3: command tx timeout [ 93.153494][ T5780] Bluetooth: hci1: command tx timeout [ 93.193144][ T5875] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 93.222396][ T5778] Bluetooth: hci0: command tx timeout [ 93.358557][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.444283][ T23] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 93.803247][ T23] rc_core: IR keymap rc-imon-pad not found [ 93.830561][ T23] Registered IR keymap rc-empty [ 93.836866][ T23] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 93.868176][ T23] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 93.923111][ T23] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 93.967962][ T23] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 94.021386][ T23] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:2> initialized [ 94.080070][ T5892] netlink: 'syz.2.19': attribute type 20 has an invalid length. [ 94.503664][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 94.517184][ T5813] usb 1-1: USB disconnect, device number 2 [ 94.957486][ T5916] loop2: detected capacity change from 0 to 1024 [ 95.043989][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.251968][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.407311][ T28] audit: type=1326 audit(1776275843.225:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.1.31" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f347f59c819 code=0x0 [ 95.660762][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.713158][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.850808][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 95.865891][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 95.881301][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.901756][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.913266][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.914347][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 95.923629][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.946883][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.970858][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.982970][ T5812] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.992760][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.001090][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.015668][ T5812] usb 3-1: Product: syz [ 96.023718][ T5812] usb 3-1: Manufacturer: syz [ 96.028476][ T5812] usb 3-1: SerialNumber: syz [ 96.056494][ T5812] usb 3-1: config 0 descriptor?? [ 96.071694][ T5936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 96.081682][ T5812] hub 3-1:0.0: bad descriptor, ignoring hub [ 96.087770][ T5812] hub: probe of 3-1:0.0 failed with error -5 [ 96.230963][ T9] usb 1-1: usb_control_msg returned -32 [ 96.236662][ T9] usbtmc 1-1:16.0: can't read capabilities [ 96.672600][ T5812] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 96.683738][ T5812] usb 3-1: device reset changed ep0 maxpacket size! [ 96.694148][ T5812] usb 3-1: USB disconnect, device number 3 [ 96.867148][ T5955] loop3: detected capacity change from 0 to 128 [ 96.881667][ T5955] EXT4-fs: Ignoring removed nobh option [ 96.924986][ T5955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.962450][ T5955] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.045707][ T5959] loop1: detected capacity change from 0 to 64 [ 97.062133][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.135050][ T5955] syz.3.39 (5955) used greatest stack depth: 20016 bytes left [ 97.157549][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.286757][ T5812] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.308482][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.328012][ T5812] usb 3-1: Product: syz [ 97.336048][ T5812] usb 3-1: Manufacturer: syz [ 97.345011][ T5812] usb 3-1: SerialNumber: syz [ 97.563482][ T27] cfg80211: failed to load regulatory.db [ 97.584230][ T5812] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 97.640761][ T5812] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 97.654040][ T5967] loop3: detected capacity change from 0 to 128 [ 97.666859][ T5812] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 97.687012][ T5967] FAT-fs (loop3): Directory bread(block 414) failed [ 97.700718][ T5812] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 97.716096][ T5967] FAT-fs (loop3): Directory bread(block 415) failed [ 97.723990][ T5967] FAT-fs (loop3): Directory bread(block 416) failed [ 97.733671][ T5812] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 97.743930][ T5967] FAT-fs (loop3): Directory bread(block 417) failed [ 97.760076][ T5812] lan78xx: probe of 3-1:1.0 failed with error -71 [ 97.767835][ T5967] FAT-fs (loop3): Directory bread(block 418) failed [ 97.775942][ T5967] FAT-fs (loop3): Directory bread(block 419) failed [ 97.795814][ T5967] FAT-fs (loop3): Directory bread(block 420) failed [ 97.804396][ T5812] usb 3-1: USB disconnect, device number 4 [ 97.818556][ T5967] FAT-fs (loop3): Directory bread(block 421) failed [ 97.886753][ T5967] FAT-fs (loop3): FAT read failed (blocknr 128) [ 97.931837][ T5967] FAT-fs (loop3): FAT read failed (blocknr 128) [ 98.268971][ T5978] loop3: detected capacity change from 0 to 128 [ 98.306918][ T5978] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.338580][ T5978] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.394594][ T28] audit: type=1804 audit(1776275846.195:4): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.48" name="/newroot/17/file1/file1" dev="loop3" ino=12 res=1 errno=0 [ 98.444262][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.470433][ T27] usb 1-1: USB disconnect, device number 3 [ 98.941982][ T5995] loop1: detected capacity change from 0 to 512 [ 99.014799][ T5995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.099658][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.153426][ T5995] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.516522][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.411914][ T6032] syzkaller1: entered promiscuous mode [ 100.417507][ T6032] syzkaller1: entered allmulticast mode [ 101.078881][ T6055] loop3: detected capacity change from 0 to 2048 [ 101.148060][ T6055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.167750][ T6055] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.345277][ T6055] fs-verity: sha512 using implementation "sha512-avx2" [ 101.573482][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.458873][ T6099] loop0: detected capacity change from 0 to 4096 [ 102.480878][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.642840][ T6099] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.669392][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.690805][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 102.710807][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.729496][ T5812] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 102.748826][ T5812] usb 4-1: config 0 has no interface number 0 [ 102.762302][ T6099] EXT4-fs (loop0): shut down requested (1) [ 102.780544][ T5812] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 102.800260][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.824497][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.825714][ T5812] usb 4-1: Product: syz [ 102.842804][ T992] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.859357][ T5812] usb 4-1: Manufacturer: syz [ 102.865849][ T992] Quota error (device loop0): write_blk: dquota write failed [ 102.877535][ T5812] usb 4-1: SerialNumber: syz [ 102.884072][ T992] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 102.899521][ T5812] usb 4-1: config 0 descriptor?? [ 102.901739][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 102.913966][ T5812] smsc95xx v2.0.0 [ 102.928106][ T992] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 102.938152][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.980722][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.012755][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 103.052897][ T5833] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 103.089270][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.134518][ T5833] usb 3-1: config 0 descriptor?? [ 103.229171][ T6102] loop1: detected capacity change from 0 to 32768 [ 103.239141][ T6102] ======================================================= [ 103.239141][ T6102] WARNING: The mand mount option has been deprecated and [ 103.239141][ T6102] and is ignored by this kernel. Remove the mand [ 103.239141][ T6102] option from the mount to silence this warning. [ 103.239141][ T6102] ======================================================= [ 103.382539][ T23] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 103.586536][ T5833] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0001/input/input7 [ 103.611100][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.622944][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.633938][ T23] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 103.644076][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.655807][ T23] usb 1-1: config 0 descriptor?? [ 103.697725][ T5833] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 103.770507][ T5812] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 103.973991][ T5812] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 103.987697][ T5812] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 104.012970][ T5812] usb 4-1: USB disconnect, device number 2 [ 104.120228][ T23] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw1: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 104.378266][ T5812] usb 1-1: USB disconnect, device number 4 [ 104.638029][ T6117] loop1: detected capacity change from 0 to 128 [ 104.704582][ T9] usb 3-1: USB disconnect, device number 5 [ 105.007036][ T6123] loop1: detected capacity change from 0 to 1024 [ 105.020023][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 105.046537][ T6123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.126621][ T6123] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 105.136210][ T6123] System zones: 0-1, 3-36 [ 105.150104][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.339849][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.410984][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.490882][ T6129] netlink: 260 bytes leftover after parsing attributes in process `syz.2.92'. [ 105.505153][ T6131] loop1: detected capacity change from 0 to 256 [ 105.599783][ T6131] syz.1.93: attempt to access beyond end of device [ 105.599783][ T6131] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 105.611002][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 105.633560][ T9] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 105.668705][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.701671][ T9] usb 1-1: Product: syz [ 105.709723][ T9] usb 1-1: Manufacturer: syz [ 105.719499][ T9] usb 1-1: SerialNumber: syz [ 105.757671][ T6138] loop2: detected capacity change from 0 to 512 [ 105.795939][ T6138] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.839721][ T6138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.944278][ T6138] EXT4-fs (loop2): 1 truncate cleaned up [ 105.956562][ T6143] loop1: detected capacity change from 0 to 256 [ 105.989987][ T6138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.023414][ T9] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 106.075567][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.090699][ T6143] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 106.111368][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 106.120451][ T9] usb 1-1: media controller created [ 106.228831][ T6138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.240491][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.390829][ T6148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.97'. [ 106.471185][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 106.585532][ T9] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 106.606825][ T9] usb 1-1: USB disconnect, device number 5 [ 106.912488][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.996048][ T38] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.101061][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.125288][ T38] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.249226][ T38] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.332404][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.352951][ T5832] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.381658][ T5832] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 107.410716][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.433170][ T5832] usb 2-1: config 0 descriptor?? [ 107.472362][ T38] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.730918][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.852123][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.893515][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.914488][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.944513][ T9] usb 2-1: USB disconnect, device number 2 [ 107.983723][ T5832] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.997793][ T5832] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.009431][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.018979][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.034470][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.062173][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 108.070250][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.101643][ T5832] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.113879][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.127488][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.136645][ T5832] usb 1-1: Product: syz [ 108.142058][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.153119][ T5832] usb 1-1: Manufacturer: syz [ 108.173816][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.197545][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 108.208188][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 108.222903][ T5833] usb 4-1: config 0 descriptor?? [ 108.238832][ T5832] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 108.274849][ T5832] cdc_wdm 1-1:1.0: Unknown control protocol [ 108.289754][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.305317][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.314528][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.331888][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.340530][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.349198][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.730196][ T5833] savu 0003:1E7D:2D5A.0003: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 109.009529][ T5833] usb 4-1: USB disconnect, device number 3 [ 109.208993][ T5812] usb 1-1: USB disconnect, device number 6 [ 109.507461][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 109.676924][ T6171] chnl_net:caif_netlink_parms(): no params data found [ 109.896918][ T38] hsr_slave_0: left promiscuous mode [ 109.915129][ T38] hsr_slave_1: left promiscuous mode [ 109.931624][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.939567][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.947451][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.023885][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.046028][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.074566][ T38] bridge_slave_1: left allmulticast mode [ 110.099790][ T38] bridge_slave_1: left promiscuous mode [ 110.116974][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.175570][ T38] bridge_slave_0: left allmulticast mode [ 110.200671][ T38] bridge_slave_0: left promiscuous mode [ 110.230317][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.256155][ T6208] loop3: detected capacity change from 0 to 8192 [ 110.420988][ T28] audit: type=1800 audit(1776275858.185:5): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file2" dev="loop3" ino=1048593 res=0 errno=0 [ 110.451753][ T5778] Bluetooth: hci3: command tx timeout [ 110.465681][ T6208] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 110.475374][ T38] veth1_macvtap: left promiscuous mode [ 110.500630][ T38] veth0_macvtap: left promiscuous mode [ 110.508603][ T6208] FAT-fs (loop3): Filesystem has been set read-only [ 110.540076][ T38] veth1_vlan: left promiscuous mode [ 110.560284][ T6208] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 110.585957][ T38] veth0_vlan: left promiscuous mode [ 110.960623][ C0] sched: RT throttling activated [ 110.961773][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.274747][ T6206] loop0: detected capacity change from 0 to 131072 [ 111.291393][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.294934][ T6206] F2FS-fs (loop0): invalid crc value [ 111.329019][ T6206] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.397142][ T6206] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.348773][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.505370][ T5778] Bluetooth: hci3: command tx timeout [ 112.520527][ T38] team0 (unregistering): Port device team_slave_1 removed [ 112.578643][ T38] team0 (unregistering): Port device team_slave_0 removed [ 112.659602][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.719029][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.793403][ T6227] loop0: detected capacity change from 0 to 256 [ 112.801512][ T6227] exfat: Deprecated parameter 'namecase' [ 112.830545][ T6227] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 113.035178][ T6229] process 'syz.0.116' launched './file0' with NULL argv: empty string added [ 113.389321][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.429237][ T38] bond0 (unregistering): Released all slaves [ 113.586765][ T6201] syzkaller1: entered promiscuous mode [ 113.597354][ T6201] syzkaller1: entered allmulticast mode [ 113.915830][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.923507][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.934465][ T6171] bridge_slave_0: entered allmulticast mode [ 113.952508][ T6171] bridge_slave_0: entered promiscuous mode [ 113.978768][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.987951][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.010022][ T6171] bridge_slave_1: entered allmulticast mode [ 114.027304][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.040795][ T5833] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.050574][ T6171] bridge_slave_1: entered promiscuous mode [ 114.115512][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.125306][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.177366][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.192051][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.266809][ T6171] team0: Port device team_slave_0 added [ 114.272967][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 114.284243][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.306445][ T6171] team0: Port device team_slave_1 added [ 114.312545][ T5833] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.331381][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 114.336650][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.357691][ T5832] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 114.372060][ T5832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.391856][ T5833] usb 1-1: config 0 descriptor?? [ 114.414844][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.425847][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.433346][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.447315][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.477102][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.496362][ T5832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.512057][ T5832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.521871][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.533077][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.547252][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.551087][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.581338][ T5778] Bluetooth: hci3: command tx timeout [ 114.581701][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.655370][ T5833] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 114.700400][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.770876][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 114.785143][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.802261][ T5832] usb 2-1: usb_control_msg returned -32 [ 114.807712][ T6171] hsr_slave_0: entered promiscuous mode [ 114.817310][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.822281][ T5832] usbtmc 2-1:16.0: can't read capabilities [ 114.837262][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.847991][ T6171] hsr_slave_1: entered promiscuous mode [ 114.860890][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.882700][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.897568][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.932306][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.996422][ T5832] usb 1-1: USB disconnect, device number 7 [ 115.205404][ T5813] usb 4-1: GET_CAPABILITIES returned 0 [ 115.227764][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 115.360159][ T6171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.388275][ T6171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.403559][ T6171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.422466][ T6171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.451805][ T5832] usb 4-1: USB disconnect, device number 4 [ 115.461423][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.481927][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.689064][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.821946][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.863360][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.870810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.951559][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.959378][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.502736][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.644527][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.662716][ T5778] Bluetooth: hci3: command tx timeout [ 116.943479][ T5832] usb 2-1: USB disconnect, device number 3 [ 117.222939][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.541742][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.766879][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 117.832095][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.840944][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 117.894588][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 117.908813][ T6329] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 117.930001][ T6329] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 117.961165][ T6329] Zero length message leads to an empty skb [ 118.056895][ T6171] veth0_vlan: entered promiscuous mode [ 118.077054][ T6171] veth1_vlan: entered promiscuous mode [ 118.167143][ T6171] veth0_macvtap: entered promiscuous mode [ 118.229882][ T6171] veth1_macvtap: entered promiscuous mode [ 118.274079][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.289002][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.312967][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.340655][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.354345][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.365563][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.405348][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.437425][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.475882][ T6348] loop1: detected capacity change from 0 to 128 [ 118.482307][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.487881][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.530347][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.561862][ T6348] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.568340][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.578517][ T6348] hpfs: filesystem error: improperly stopped [ 118.587082][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.611247][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.620502][ T6348] [ 118.624331][ T6348] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.639587][ T6348] hpfs: You really don't want any checks? You are crazy... [ 118.655192][ T6348] hpfs: hpfs_map_sector(): read error [ 118.655961][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.668133][ T6348] hpfs: code page support is disabled [ 118.703836][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 118.716671][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 118.724236][ T6171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.725183][ T6348] hpfs: filesystem error: unable to find root dir [ 118.753124][ T6171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.778550][ T6171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.800993][ T6171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.811548][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 118.940741][ T787] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 119.093214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.122054][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.157596][ T6243] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.188764][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.211862][ T787] usb 1-1: config 0 has no interface number 0 [ 119.218160][ T787] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 119.238355][ T6243] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.273519][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.291425][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.309610][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.318243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.340222][ T787] usb 1-1: config 0 descriptor?? [ 119.365828][ T787] usb 1-1: selecting invalid altsetting 1 [ 119.394674][ T787] dvb_ttusb_budget: ttusb_init_controller: error [ 119.432128][ T787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 119.622444][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.671600][ T787] DVB: Unable to find symbol cx22700_attach() [ 119.805296][ T787] DVB: Unable to find symbol tda10046_attach() [ 119.821161][ T787] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 119.853251][ T787] usb 1-1: USB disconnect, device number 8 [ 119.945225][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.050757][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.117507][ T6357] loop3: detected capacity change from 0 to 32768 [ 120.167503][ T6357] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.141 (6357) [ 120.242023][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 120.271855][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.301519][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.313890][ T6357] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 120.335070][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.347078][ T6357] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 120.368140][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.384980][ T6357] BTRFS info (device loop3): turning on sync discard [ 120.400734][ T6357] BTRFS info (device loop3): turning on async discard [ 120.418115][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.440735][ T6357] BTRFS info (device loop3): using free space tree [ 120.465742][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.638715][ T6391] loop0: detected capacity change from 0 to 2048 [ 120.661726][ T27] net_ratelimit: 1 callbacks suppressed [ 120.661742][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.710851][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 120.716615][ T8] usbtmc 5-1:16.0: can't read capabilities [ 120.740417][ T6391] loop0: p1 p2 p3 [ 120.760717][ T6357] BTRFS info (device loop3): enabling ssd optimizations [ 121.200787][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.222157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.279679][ T5768] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 121.441211][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 121.468127][ T5812] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.508180][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.551268][ T8] usb 5-1: USB disconnect, device number 2 [ 121.564512][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.607211][ T5812] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.667898][ T5812] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.702623][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.729410][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.810179][ T6409] loop0: detected capacity change from 0 to 1024 [ 121.864787][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.974107][ T6409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.007925][ T6415] loop4: detected capacity change from 0 to 256 [ 122.044680][ T5812] usb 2-1: GET_CAPABILITIES returned 0 [ 122.050282][ T5812] usbtmc 2-1:16.0: can't read capabilities [ 122.085725][ T6409] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.149368][ T6415] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 122.178352][ T28] audit: type=1800 audit(1776275869.985:6): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.147" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 122.218318][ T6409] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm syz.0.147: lblock 8 mapped to illegal pblock 8 (length 8) [ 122.292158][ T28] audit: type=1800 audit(1776275870.035:7): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.147" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 122.298369][ T6409] EXT4-fs error (device loop0): ext4_ext_remove_space:2940: inode #15: comm syz.0.147: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 122.329136][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 122.358323][ T5813] usb 2-1: USB disconnect, device number 4 [ 122.431808][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.575965][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.646699][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 122.685021][ T5812] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 122.719761][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 122.748430][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.764911][ T5812] usb 4-1: Product: syz [ 122.771842][ T5812] usb 4-1: Manufacturer: syz [ 122.776599][ T5812] usb 4-1: SerialNumber: syz [ 122.813525][ T5812] usb 4-1: config 0 descriptor?? [ 122.832940][ T5812] gspca_main: sq905-2.14.0 probing 2770:9120 [ 122.989475][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.308799][ T6444] loop0: detected capacity change from 0 to 128 [ 123.343540][ T6444] EXT4-fs: Ignoring removed i_version option [ 123.401873][ T6444] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.498038][ T6444] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.721380][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.781461][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.886478][ T5812] gspca_sq905: bulk read fail (-22) len 0/4 [ 123.900811][ T5812] sq905: probe of 4-1:0.0 failed with error -5 [ 123.908564][ T6438] loop4: detected capacity change from 0 to 32768 [ 123.951237][ T6438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.151 (6438) [ 124.036389][ T6438] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.080390][ T6438] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 124.121969][ T6438] BTRFS info (device loop4): using free space tree [ 124.194054][ T27] usb 4-1: USB disconnect, device number 5 [ 124.361096][ T6438] BTRFS info (device loop4): enabling ssd optimizations [ 124.368190][ T6438] BTRFS info (device loop4): auto enabling async discard [ 124.831977][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.073670][ T6171] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.116463][ T6494] ªªªªªª: renamed from vlan0 (while UP) [ 125.228197][ T6451] loop1: detected capacity change from 0 to 40427 [ 125.310926][ T6451] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.505551][ T6501] loop0: detected capacity change from 0 to 2048 [ 125.565799][ T6451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.812329][ T6508] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.861608][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.031407][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.703134][ T6523] loop0: detected capacity change from 0 to 128 [ 126.772103][ T6523] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.891217][ T6523] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.930896][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.105475][ T6523] syz.0.169 (pid 6523) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 127.305094][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.941400][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.986443][ T6531] loop1: detected capacity change from 0 to 32768 [ 128.098454][ T6531] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.262290][ T6531] XFS (loop1): Ending clean mount [ 128.562727][ T28] audit: type=1804 audit(1776275876.375:8): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.167" name="/newroot/46/file1/file1" dev="loop1" ino=6150 res=1 errno=0 [ 128.744257][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.994044][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.026146][ T2133] IPVS: starting estimator thread 0... [ 129.061101][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.151025][ T6579] IPVS: using max 17 ests per chain, 40800 per kthread [ 129.217442][ T6585] warning: `syz.4.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.464552][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.474299][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.484172][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.572646][ T6588] team0 (unregistering): Port device team_slave_0 removed [ 129.624423][ T6588] team0 (unregistering): Port device team_slave_1 removed [ 130.021505][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.932866][ T2133] IPVS: starting estimator thread 0... [ 131.050781][ T6613] IPVS: using max 20 ests per chain, 48000 per kthread [ 131.060981][ T27] net_ratelimit: 1 callbacks suppressed [ 131.060996][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.469308][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.105132][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.113430][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.164068][ T6628] loop0: detected capacity change from 0 to 32768 [ 132.185284][ T6628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.201 (6628) [ 132.230357][ T6628] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.267369][ T6628] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 132.298591][ T6628] BTRFS info (device loop0): force clearing of disk cache [ 132.341108][ T6628] BTRFS info (device loop0): metadata ratio 0 [ 132.347329][ T6628] BTRFS info (device loop0): enabling ssd optimizations [ 132.365205][ T6628] BTRFS info (device loop0): using spread ssd allocation scheme [ 132.378641][ T6628] BTRFS info (device loop0): using free space tree [ 132.532656][ T6628] BTRFS info (device loop0): auto enabling async discard [ 132.607198][ T6628] BTRFS info (device loop0): rebuilding free space tree [ 132.911225][ T28] audit: type=1800 audit(1776275880.715:9): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.201" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 133.070716][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.141156][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.221154][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.290809][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 133.313118][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.342687][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.369324][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.395924][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.405633][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.410806][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.461069][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.514330][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.546974][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.567375][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.857974][ T27] usb 4-1: usb_control_msg returned -32 [ 133.873675][ T27] usbtmc 4-1:16.0: can't read capabilities [ 134.181159][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.303131][ T6685] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 134.324069][ T27] usb 4-1: USB disconnect, device number 6 [ 134.697316][ T6687] loop0: detected capacity change from 0 to 128 [ 134.765408][ T6687] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 134.801471][ T6687] hpfs: filesystem error: improperly stopped [ 134.808410][ T6687] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 134.889427][ T6687] hpfs: You really don't want any checks? You are crazy... [ 134.917320][ T6687] hpfs: Code page index out of array [ 134.950399][ T6687] hpfs: code page support is disabled [ 134.976353][ T6687] hpfs: hpfs_map_4sectors(): unaligned read [ 134.983654][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.002417][ T6687] hpfs: hpfs_map_4sectors(): unaligned read [ 135.008440][ T6687] hpfs: filesystem error: unable to find root dir [ 135.075731][ T6687] hpfs: hpfs_map_4sectors(): unaligned read [ 135.181154][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 135.216643][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.240379][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.265312][ T5813] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.288177][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.313527][ T5813] usb 2-1: config 0 descriptor?? [ 135.584994][ T5813] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.913451][ T6243] usb 2-1: USB disconnect, device number 5 [ 136.051517][ T6714] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 136.272695][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.690949][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.701286][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.777387][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.817163][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.070941][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.270371][ T6759] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 138.511820][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.635781][ T5778] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 138.653390][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.743414][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.838272][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.868496][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.955644][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.056513][ T8] usb 5-1: config 0 descriptor?? [ 139.301954][ T6243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.532904][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 139.620273][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 139.655474][ T6778] capability: warning: `syz.3.234' uses deprecated v2 capabilities in a way that may be insecure [ 139.945068][ T8] usb 5-1: USB disconnect, device number 3 [ 140.026132][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.157410][ T6785] netlink: 'syz.3.235': attribute type 22 has an invalid length. [ 140.540725][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.762902][ T787] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 140.782244][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.805747][ T787] usb 2-1: config 0 descriptor?? [ 140.857560][ T6804] loop4: detected capacity change from 0 to 8192 [ 140.882334][ T5778] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 140.896410][ T6804] loop4: p1 < > p2 p4 < p5 > [ 140.926033][ T6804] loop4: partition table partially beyond EOD, truncated [ 140.984497][ T6804] loop4: p1 start 134217728 is beyond EOD, truncated [ 141.047595][ T6804] loop4: p2 size 591360 extends beyond EOD, truncated [ 141.065400][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.111788][ T6804] loop4: p5 size 591360 extends beyond EOD, truncated [ 141.706350][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.080841][ T787] usb 2-1: Cannot set autoneg [ 142.085976][ T787] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 142.101131][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.133120][ T787] usb 2-1: USB disconnect, device number 6 [ 142.238231][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 142.260547][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 142.274077][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 142.386727][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.425336][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 142.446702][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 142.466735][ T5968] udevd[5968]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 146.821492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.942809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.920950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.330694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 156.481053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.890663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.041012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 159.450628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 161.600975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.010644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.130863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.160950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 194.931334][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.938275][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.062386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.302292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.130606][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 248.137931][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6840/1:b..l [ 248.146682][ C1] rcu: (detected by 1, t=10502 jiffies, g=20185, q=620 ncpus=2) [ 248.154709][ C1] task:syz.4.245 state:R running task stack:25640 pid:6840 ppid:6171 flags:0x00004002 [ 248.167245][ C1] Call Trace: [ 248.170692][ C1] [ 248.173690][ C1] __schedule+0x1553/0x45a0 [ 248.178445][ C1] ? asan.module_dtor+0x20/0x20 [ 248.183364][ C1] ? mark_lock+0x94/0x320 [ 248.187756][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 248.193814][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 248.199787][ C1] preempt_schedule_irq+0xbf/0x150 [ 248.205070][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 248.211217][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 248.217135][ C1] irqentry_exit+0x67/0x70 [ 248.221815][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.228337][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 248.233809][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 248.253496][ C1] RSP: 0018:ffffc9000b907840 EFLAGS: 00000206 [ 248.259628][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7242a90b5426ff00 [ 248.267854][ C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 248.275903][ C1] RBP: ffffc9000b907948 R08: dffffc0000000000 R09: 1ffffffff2238aa0 [ 248.284037][ C1] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 1ffff92001720f14 [ 248.292175][ C1] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000 [ 248.300402][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 248.305411][ C1] ? read_lock_is_recursive+0x20/0x20 [ 248.310943][ C1] ? __pte_offset_map+0x249/0x2c0 [ 248.316145][ C1] handle_mm_fault+0x31ed/0x4c00 [ 248.321168][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 248.326221][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 248.331508][ C1] ? numa_migrate_prep+0x350/0x350 [ 248.336885][ C1] ? follow_page_pte+0x6dd/0x1ac0 [ 248.342204][ C1] ? pmd_lock+0x60/0x60 [ 248.346915][ C1] __get_user_pages+0x5d0/0x1380 [ 248.351963][ C1] ? mtree_destroy+0x30/0x30 [ 248.356652][ C1] ? populate_vma_page_range+0x380/0x380 [ 248.362436][ C1] populate_vma_page_range+0x2c1/0x380 [ 248.367981][ C1] ? fixup_user_fault+0x700/0x700 [ 248.373065][ C1] ? userfaultfd_unmap_complete+0x29f/0x320 [ 248.379031][ C1] ? down_read+0x1ac/0x2e0 [ 248.383502][ C1] __mm_populate+0x260/0x390 [ 248.388219][ C1] ? faultin_page_range+0x8e0/0x8e0 [ 248.393567][ C1] ? up_write+0x1c3/0x410 [ 248.397953][ C1] vm_mmap_pgoff+0x2da/0x3f0 [ 248.402608][ C1] ? account_locked_vm+0x210/0x210 [ 248.407785][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 248.412866][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 248.417740][ C1] do_syscall_64+0x55/0xa0 [ 248.422396][ C1] ? clear_bhb_loop+0x40/0x90 [ 248.427333][ C1] ? clear_bhb_loop+0x40/0x90 [ 248.432105][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.438186][ C1] RIP: 0033:0x7f512479c819 [ 248.442782][ C1] RSP: 002b:00007f512565c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 248.451535][ C1] RAX: ffffffffffffffda RBX: 00007f5124a15fa0 RCX: 00007f512479c819 [ 248.459580][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 248.467940][ C1] RBP: 00007f5124832c91 R08: ffffffffffffffff R09: 0000000000000000 [ 248.476440][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 248.484847][ C1] R13: 00007f5124a16038 R14: 00007f5124a15fa0 R15: 00007ffc19c02848 [ 248.492921][ C1] [ 248.496083][ C1] rcu: rcu_preempt kthread starved for 10270 jiffies! g20185 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 248.507652][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 248.517964][ C1] rcu: RCU grace-period kthread stack dump: [ 248.524108][ C1] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 248.535316][ C1] Call Trace: [ 248.538644][ C1] [ 248.541713][ C1] __schedule+0x1553/0x45a0 [ 248.546402][ C1] ? asan.module_dtor+0x20/0x20 [ 248.551347][ C1] ? enqueue_timer+0x23d/0x550 [ 248.556226][ C1] ? __mod_timer+0x984/0xdb0 [ 248.560889][ C1] schedule+0xbd/0x170 [ 248.565054][ C1] schedule_timeout+0x188/0x2d0 [ 248.570000][ C1] ? console_conditional_schedule+0x40/0x40 [ 248.576063][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 248.582125][ C1] ? update_process_times+0x1b0/0x1b0 [ 248.587743][ C1] ? prepare_to_swait_event+0x339/0x360 [ 248.593540][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 248.598647][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 248.605074][ C1] ? rcu_gp_init+0x1560/0x1560 [ 248.610579][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 248.616060][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.621416][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 248.626782][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 248.631637][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 248.636901][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 248.642002][ C1] ? __kthread_parkme+0x162/0x1c0 [ 248.647096][ C1] kthread+0x2fa/0x390 [ 248.651494][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 248.656755][ C1] ? kthread_blkcg+0xd0/0xd0 [ 248.661408][ C1] ret_from_fork+0x48/0x80 [ 248.666098][ C1] ? kthread_blkcg+0xd0/0xd0 [ 248.670812][ C1] ret_from_fork_asm+0x11/0x20 [ 248.675774][ C1] [ 248.678873][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 248.685460][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 248.692737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.703119][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 248.709022][ C1] Code: 29 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 248.729939][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 248.737649][ C1] RAX: 85aecb3b2df82400 RBX: ffffffff8162aa0d RCX: 85aecb3b2df82400 [ 248.746177][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 248.754336][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 248.762416][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 248.770683][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 248.778852][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 248.787959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.794790][ C1] CR2: 00007fce8c0d692d CR3: 000000003048e000 CR4: 00000000003506e0 [ 248.803359][ C1] Call Trace: [ 248.806985][ C1] [ 248.810089][ C1] default_idle+0x13/0x20 [ 248.814577][ C1] default_idle_call+0x6c/0xa0 [ 248.819595][ C1] do_idle+0x33d/0x590 [ 248.823732][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 248.829078][ C1] ? asm_common_interrupt+0x26/0x40 [ 248.834433][ C1] cpu_startup_entry+0x43/0x60 [ 248.839801][ C1] start_secondary+0xee/0xf0 [ 248.844548][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 248.850790][ C1]