last executing test programs: 18m30.998828277s ago: executing program 3 (id=452): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x12, "ee153459ca529beb5d240bd5156f13854a91"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 18m27.76739257s ago: executing program 3 (id=472): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04f34120", @ANYRESDEC], 0x7) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000500), 0xfa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='Mid', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, 0x0) 18m27.172511036s ago: executing program 3 (id=475): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104a3010000ff0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200000000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r5, 0x5}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r6, r4}}, 0x18) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="0203000808000001000100000000000003000680000000000200100000000000000000000000000000000000ed73104ea77b34b302000000ac1414000000008a4a0000005c4ac4b2bb548c68f53c"], 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 18m24.992210738s ago: executing program 3 (id=480): mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x20000000, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 18m24.899162185s ago: executing program 3 (id=481): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone(0x40a04000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 18m23.839906415s ago: executing program 3 (id=485): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 18m8.408111174s ago: executing program 32 (id=485): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2m53.950819522s ago: executing program 5 (id=3752): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) getsockopt$inet_int(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x8000) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m49.985607347s ago: executing program 5 (id=3758): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "02"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030908000009058d67c8002a000009050502000000000009058b6e"], 0x0) 2m46.60282129s ago: executing program 5 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000480)="0c7d18b0d81b997e4fee", 0xa}], 0x3}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) 2m44.055412852s ago: executing program 5 (id=3770): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000004c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000c40)="0000010298c01c6f8244e4a4ab85f12ff334d62502b6678f0313edc65b8e7fb251313c8e580de853476867c7ff478a0a13ac14e99447fa165decda6ffc", 0x3d, 0xfffffffffffffffb) 2m39.052649001s ago: executing program 5 (id=3785): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f28a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d8a0d18974e26a607febe419d816e57a6ef190303200f389f9e4b5e92d4810a60107f8bb2da65ef951e9cba1c0cef429fff4456", 0x148}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f99977c186c32df773c81e81f1543adb", 0x69}, {&(0x7f0000000640)="37f00163ee64590eddc69225a76b0c705b43d255bb682c28fc62b9d27da33e7dd1c9f3f87d7292ca519c643a0c26e00455b5456afb57a36b83100e28affe31", 0x3f}], 0x4) write(r0, &(0x7f0000001e00)="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", 0x49a) 2m37.79133937s ago: executing program 5 (id=3789): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x10000) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) 2m22.580138619s ago: executing program 33 (id=3789): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x10000) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) 16.932689796s ago: executing program 1 (id=4023): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 12.398846167s ago: executing program 2 (id=4033): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r1, 0x485c, 0x7721, 0x16, 0x0, 0xffffffffffffff85) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 10.378847796s ago: executing program 2 (id=4041): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.1117522s ago: executing program 1 (id=4042): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdir(0x0, 0x17f) mount(0x0, 0x0, &(0x7f0000000040)='udf\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80540, 0xf0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000180)={[{@cpuset_v2_mode}, {@favordynmods}, {}], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x62, 0x62, 0x38, 0x31, 0x32, 0x33], 0x2d, [0x37, 0x61, 0x64, 0x31], 0x2d, [0x62, 0x61, 0x34, 0x96925f4fcb616854], 0x2d, [0x66, 0x66, 0x37, 0x61], 0x2d, [0x63, 0x61, 0x63, 0x31, 0x61, 0x61, 0x31, 0x77]}}}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, '/^'}}]}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040fe1b1090d20"], 0x7) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x4000, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 8.96329723s ago: executing program 6 (id=4043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.194553422s ago: executing program 2 (id=4045): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@local, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="0f5b2cdb3bb88d0d5eb79387e8", 0xd) landlock_restrict_self(r1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280), 0x2, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000046c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000008000000000000000400000000000000100002000000000020"], 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000040c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000004140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004540)='./mnt/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2) 7.786378791s ago: executing program 1 (id=4046): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) r0 = syz_io_uring_setup(0x440e, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0xffffffff, 0x263}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xa78}}, './file1\x00'}) bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000009c0)="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", 0xb80, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000044) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000019c0)={r6, 0x50, 0x72}, &(0x7f0000001a00)={'enc=', 'pkcs1', ' hash=', {'sha512_mb\x00'}}, &(0x7f0000001a80)="5f9dcff5cc2f585f68b091bc1d1a7feef8496c82b77d8904b8a61267067d4e2b8b43d38eaacc34f661d58c761f440af57d844e3484aaa62b72c3f7d500f943a57497d31411a96a1bfbf692ad0ea1670c", &(0x7f0000001b00)=""/114) 7.723583046s ago: executing program 4 (id=4047): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x30, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x5da, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0xd, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x2, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1000, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x10001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.617479823s ago: executing program 0 (id=4049): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f999", 0x5b}], 0x3) write(r0, &(0x7f0000001e00)="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", 0x441) 7.462939858s ago: executing program 2 (id=4050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x45}}], 0x1, 0x0) 7.451399973s ago: executing program 0 (id=4051): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b3}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b12494", 0x6f}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x3fc) 6.185861162s ago: executing program 0 (id=4052): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 6.183713484s ago: executing program 2 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000f7ffffff000000001c0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf2720000000000007080000fffdffffbfa400000000000007040000f0ffffff54020000080000001822000039f81b8fe1cf6ad2e872a57eda9b64e075018baec171b0a63f216b1229357826b4c1cffc33e0b7285cdc058bbc18b87d161ca9b2514431c453869861160cd38fbdc9b9f54c6f8bb3926646033ee6f5e26d515cf214211ef52a5cf02633df9b4c712e47d70493f2901536e60bad0c720315e63dcec3d038bc7eb41d5e470c1c18a999913b38eab7bb3277b6c168b1d33a50f9b98c65c34482857813125c7b7f368614e0", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b70000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='measure', 0x7) 6.093265511s ago: executing program 4 (id=4054): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) socket(0x28, 0x801, 0x0) write$binfmt_register(r0, &(0x7f0000000a00)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x6f) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 5.528254345s ago: executing program 1 (id=4055): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x22, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000f7ffffff000000001c0000", @ANYRES32=r5, @ANYBLOB="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", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b70000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='measure', 0x7) 5.425397506s ago: executing program 4 (id=4056): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r1, 0x0, r2}) 4.17825704s ago: executing program 1 (id=4057): syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x0, 0x7a, 0xfa, 0x71, 0x2c}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0xf7, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x2, 0x67, 0xff}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa, 0xc}, @obex={0x5, 0x24, 0x15, 0x282}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x5, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfe, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x5, 0x5, 0xff, 0x1}, 0xe0, &(0x7f00000000c0)={0x5, 0xf, 0xe0, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x7f, 0x1}, @generic={0xb2, 0x10, 0x1, "4c76a3aebd601c053f686cb29647c3b75e95eeee082601222f0547122fd185f80bb6668a78567b2519bcf67fcdb3b76b2ad11f9b9976de75af940c72f4afabdd798444daec073d1ec6df5c78e01bd689cca1704652b9e22c53216e716ed57b39a5c69aca19d04be3abf7b5cf052468b9bf608cd7ed3bec378dea4c48323fac3527847d3b814065dc0b77b5163f759902d363c9567332b5621b90429fcfb9f3965c62a40f58a6a65664099b8894d23e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0xf8, 0x2e, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "373a935e676dd6e010b2300aa8fa67e4"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x38, &(0x7f0000000200)=@string={0x38, 0x3, "718bc3442d3217adc06b2dcb6de1f28c3be81053c6165326ca61230cdacbee1702dbcdc72d16c27d089d68573328b77ac31bc3e0f008"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "354dba739d906eb1dcd44a03648ebb9e5dd258a3a03ec0c2b69cc049ad08a340626d124064df03fd542a06ba8f04c46c6576a4b5fb6c50915576654becfb8ac5c8bbefbe735278e3112cba566ccad13190c4c94a1aa08ef6633319f86b646b9393ed6b3a6e37aa5414508c43733330721e44d991f6f4fcf3133c51ca4c51ec2413bb"}}, {0xae, &(0x7f00000004c0)=@string={0xae, 0x3, "9fdbd0f03df0691f4670a11c99364b2b45753e575fa9b90adee6a1d30308660dc751777285ef7eaff606d0cdef050090cd2e526934eadc0df4aca29bab8e8179b39bd51b02ce4b8bc87b4f21875980559596dd59d0e078701b837500c03d19acedb529a35cde9d7c63f14954c2dae35601515f68b709a58498b60f0a7d72c5630f2d406f060d24a97fcbd9ccd7aca3bb5ce919f5c2b505e69c6bbdb7e5ccf2489c0cdcefc44277b0df84b16f"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='psmouse\x00', 0x8) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000600)='sessname=s. device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 3.931134082s ago: executing program 4 (id=4058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 3.517195137s ago: executing program 0 (id=4059): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pI4 \x00'}, 0x20) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) 3.283819847s ago: executing program 6 (id=4060): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df47571021", 0x4e}], 0x3) write(r0, &(0x7f0000001e00)="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", 0x441) 3.140656923s ago: executing program 6 (id=4061): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@local, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="0f5b2cdb3bb88d0d5eb79387e8", 0xd) landlock_restrict_self(r1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300"], 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280), 0x2, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000046c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000008000000000000000400000000000000100002000000000020"], 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000040c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000004140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004540)='./mnt/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2) 3.02487733s ago: executing program 6 (id=4062): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d740101685fc860", 0x1b3}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b12494", 0x6f}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x3fc) 2.958940929s ago: executing program 6 (id=4063): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 2.940237387s ago: executing program 4 (id=4064): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x30, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x5da, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0xd, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x2, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1000, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x10001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.631567821s ago: executing program 6 (id=4065): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r1, 0x0, r2}) 50.664306ms ago: executing program 1 (id=4069): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 0s ago: executing program 4 (id=4070): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000001c0)={0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x80000005, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x21, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x102, 0x401, 0x1, 0x81, 0x1, 0x6, 0xc, 0x9, 0x40, 0x7, 0x6, 0xa4, 0x7, 0x6, 0xbc, 0x1]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af08be") syz_open_procfs(r2, &(0x7f0000000700)='net/netfilter\x00') ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='cgroup.max.depth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.0\x00') kernel console output (not intermixed with test programs): ] EXT4-fs (loop2): Total free blocks count 0 [ 820.609269][T15953] EXT4-fs (loop2): Free/Dirty block details [ 820.609281][T15953] EXT4-fs (loop2): free_blocks=0 [ 820.609293][T15953] EXT4-fs (loop2): dirty_blocks=368 [ 820.609305][T15953] EXT4-fs (loop2): Block reservation details [ 820.609316][T15953] EXT4-fs (loop2): i_reserved_data_blocks=368 [ 820.850931][T14829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.151744][T15972] overlayfs: missing 'lowerdir' [ 821.628172][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 821.852868][ T5767] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 822.004399][ T5767] usb 3-1: Using ep0 maxpacket: 32 [ 822.006899][ T5767] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 822.008467][ T5767] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 822.008489][ T5767] usb 3-1: config 0 has no interface number 0 [ 822.020122][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.020148][ T5767] usb 3-1: Product: syz [ 822.020162][ T5767] usb 3-1: Manufacturer: syz [ 822.020181][ T5767] usb 3-1: SerialNumber: syz [ 822.037614][ T5767] usb 3-1: config 0 descriptor?? [ 822.043094][ T5767] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 822.280610][ T5767] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 822.302238][ T5767] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 822.503073][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 822.713665][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 822.718657][ T5767] usb 3-1: USB disconnect, device number 10 [ 822.783559][ T5767] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 822.861193][ T5767] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 822.874209][ T5767] quatech2 3-1:0.51: device disconnected [ 823.190186][T15998] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 823.190270][T15998] CIFS mount error: No usable UNC path provided in device string! [ 823.190270][T15998] [ 823.190338][T15998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 823.837962][T16000] loop4: detected capacity change from 0 to 512 [ 823.859901][T16000] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2916: iget: bad i_size value: 38620345925642 [ 823.859956][T16000] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 823.873961][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 823.873988][ C0] EXT4-fs (loop4): initial error at time 1787612662: ext4_orphan_get:1403: inode 15 [ 823.874018][ C0] EXT4-fs (loop4): last error at time 1787612662: ext4_orphan_get:1403: inode 15 [ 823.876333][T16000] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2916: couldn't read orphan inode 15 (err -117) [ 823.876366][T16000] loop4: lost filesystem error report for type 5 error -117 [ 823.939206][T16000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.361533][T15374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.252587][T16013] bridge1: left promiscuous mode [ 825.254771][T16013] bridge2: left promiscuous mode [ 825.255203][T16013] bridge3: left promiscuous mode [ 827.576416][T16052] syzkaller0: entered promiscuous mode [ 827.576461][T16052] syzkaller0: entered allmulticast mode [ 828.777244][T16066] loop2: detected capacity change from 0 to 512 [ 828.787777][T16066] journal_path: Lookup failure for './file1' [ 828.794060][T16066] EXT4-fs: error: could not find journal device path [ 829.104134][T15828] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 829.248301][T16067] loop2: detected capacity change from 0 to 256 [ 829.258604][T16067] vfat: Unknown parameter 'nnonumtail' [ 829.646545][T15828] usb 5-1: Using ep0 maxpacket: 32 [ 829.652845][T15828] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 829.695691][T15828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.708181][T15828] usb 5-1: Product: syz [ 829.708232][T15828] usb 5-1: Manufacturer: syz [ 829.708249][T15828] usb 5-1: SerialNumber: syz [ 829.754195][T15828] usb 5-1: config 0 descriptor?? [ 829.763311][T15828] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 829.774578][T15828] dvb-usb: bulk message failed: -22 (4/0) [ 829.781011][T15828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 829.792966][T15828] dvb-usb: bulk message failed: -22 (5/0) [ 829.798861][T15828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 829.836327][T15828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.846994][T15828] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 829.855243][T15828] usb 5-1: media controller created [ 829.876298][T15828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.934315][T15828] usb 5-1: selecting invalid altsetting 3 [ 829.941708][T15828] ttusb2: set interface to alts=3 failed [ 830.872171][T15828] DVB: Unable to find symbol tda10086_attach() [ 830.881587][T15828] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 830.894603][T15828] dvb-usb: bulk message failed: -22 (4/0) [ 830.894642][T15828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 830.894783][T15828] dvb-usb: bulk message failed: -22 (5/0) [ 830.894800][T15828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 830.894866][T15828] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 830.967195][T15828] usb 5-1: USB disconnect, device number 16 [ 831.014155][ T5715] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 831.073841][T15828] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 831.166113][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 831.172490][ T5715] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 831.185616][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 62405, setting to 1024 [ 831.197389][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 831.211950][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.222250][ T5715] usb 3-1: Product: syz [ 831.227944][ T5715] usb 3-1: Manufacturer: syz [ 831.233088][ T5715] usb 3-1: SerialNumber: syz [ 831.242143][ T5715] usb 3-1: config 0 descriptor?? [ 831.251820][T16066] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 831.263775][ T5715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 831.812196][ T9] usb 3-1: USB disconnect, device number 11 [ 832.759969][T16092] jffs2: notice: (16092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 833.079292][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 833.272167][T16105] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2952'. [ 833.964549][T16109] overlayfs: missing 'lowerdir' [ 834.078051][T16114] jffs2: notice: (16114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 834.188551][T16121] syzkaller0: entered promiscuous mode [ 834.195160][T16121] syzkaller0: entered allmulticast mode [ 834.229546][T16123] jffs2: notice: (16123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 834.940158][T16142] 9p: Bad value for 'rfdno' [ 835.327509][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 836.359776][T16161] syzkaller0: entered promiscuous mode [ 836.359822][T16161] syzkaller0: entered allmulticast mode [ 836.712334][T16168] overlayfs: missing 'lowerdir' [ 836.763327][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 836.839152][T16178] syzkaller0: entered promiscuous mode [ 836.844898][T16178] syzkaller0: entered allmulticast mode [ 836.954323][T16181] jffs2: notice: (16181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 840.233280][T16218] loop4: detected capacity change from 0 to 512 [ 840.271372][T16218] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2988: iget: bad i_size value: 38620345925642 [ 840.271420][T16218] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.284339][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 840.284357][ C1] EXT4-fs (loop4): initial error at time 1787612678: ext4_orphan_get:1403: inode 15 [ 840.284374][ C1] EXT4-fs (loop4): last error at time 1787612678: ext4_orphan_get:1403: inode 15 [ 840.331232][T16218] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2988: couldn't read orphan inode 15 (err -117) [ 840.331284][T16218] loop4: lost filesystem error report for type 5 error -117 [ 840.347645][T16218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.502432][T16218] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.2988: bg 0: block 5: invalid block bitmap [ 840.507032][T16218] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 164 with error 28 [ 840.507065][T16218] EXT4-fs (loop4): This should not happen!! Data will be lost [ 840.507065][T16218] [ 840.507079][T16218] EXT4-fs (loop4): Total free blocks count 0 [ 840.507091][T16218] EXT4-fs (loop4): Free/Dirty block details [ 840.507103][T16218] EXT4-fs (loop4): free_blocks=0 [ 840.507115][T16218] EXT4-fs (loop4): dirty_blocks=164 [ 840.507127][T16218] EXT4-fs (loop4): Block reservation details [ 840.507138][T16218] EXT4-fs (loop4): i_reserved_data_blocks=164 [ 840.717677][T15374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.613465][T16241] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 841.824839][T16241] bridge1: entered promiscuous mode [ 841.851993][T16241] bond2: (slave bridge1): making interface the new active one [ 841.864182][T16241] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 842.072112][T16248] jffs2: notice: (16248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 843.092385][T16260] jffs2: notice: (16260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 843.431085][T16270] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3004'. [ 844.254113][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 844.404046][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 844.405634][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 844.408398][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 844.408421][ T9] usb 5-1: config 179 has no interface number 0 [ 844.408460][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 844.408484][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 844.408509][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.408530][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 844.408554][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 844.408593][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.459503][T16279] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 844.602509][T16291] jffs2: notice: (16291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 845.595971][ T5715] usb 5-1: USB disconnect, device number 17 [ 845.596006][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 845.596052][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 845.690967][T16301] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3015'. [ 846.013437][ T5619] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 846.025614][ T5767] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 846.874465][ T5767] usb 3-1: Using ep0 maxpacket: 32 [ 846.882602][ T5767] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 846.897238][ T5767] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 846.909226][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 846.920422][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 846.920453][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 846.920475][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 846.957801][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.966057][ T5767] usb 3-1: Product: syz [ 846.966093][ T5767] usb 3-1: Manufacturer: syz [ 846.966106][ T5767] usb 3-1: SerialNumber: syz [ 846.982581][ T5767] usb 3-1: config 0 descriptor?? [ 847.403150][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.426654][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.459285][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.529386][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.542106][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 848.147812][ T5767] input input57: Device does not respond to id packet M [ 848.270928][T16334] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3027'. [ 848.357671][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.357743][ T5767] input input57: Device does not respond to id packet P [ 848.372796][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.372864][ T5767] input input57: Device does not respond to id packet B [ 848.387870][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.387919][ T5767] input input57: Device does not respond to id packet N [ 848.401348][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.407942][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.415044][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.421578][ T5767] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 848.436413][ T5767] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 848.461536][ T5767] usb 3-1: USB disconnect, device number 12 [ 849.422025][T16341] loop4: detected capacity change from 0 to 32768 [ 849.780651][ T5619] Bluetooth: hci3: command tx timeout [ 850.207021][T16341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 850.415128][T16368] jffs2: notice: (16368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 850.589002][T16324] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.589109][T16324] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.593440][T16324] bridge_slave_0: entered allmulticast mode [ 850.602027][T16324] bridge_slave_0: entered promiscuous mode [ 850.613200][T16324] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.613382][T16324] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.613535][T16324] bridge_slave_1: entered allmulticast mode [ 850.621454][T16324] bridge_slave_1: entered promiscuous mode [ 850.782821][T16324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.813249][T16324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.938465][T16379] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3038'. [ 850.966087][T16324] team0: Port device team_slave_0 added [ 851.491394][T16324] team0: Port device team_slave_1 added [ 851.703795][T16324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.713586][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.739672][T16324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.762329][T16324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.762364][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.762405][T16324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.824338][ T5619] Bluetooth: hci3: command tx timeout [ 852.090833][T16324] hsr_slave_0: entered promiscuous mode [ 852.093436][T16324] hsr_slave_1: entered promiscuous mode [ 852.094651][T16324] debugfs: 'hsr0' already exists in 'hsr' [ 852.094671][T16324] Cannot create hsr debugfs directory [ 852.238303][ T6390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.496288][ T6390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.893998][ T5619] Bluetooth: hci3: command tx timeout [ 855.253083][ T6390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.289193][T16400] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 855.371123][T16407] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3048'. [ 855.984464][ T5619] Bluetooth: hci3: command tx timeout [ 856.578013][T16400] bridge4: entered promiscuous mode [ 856.738418][T16433] jffs2: notice: (16433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 857.019557][ T6390] bridge_slave_1: left allmulticast mode [ 857.019597][ T6390] bridge_slave_1: left promiscuous mode [ 857.019826][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.163533][ T6390] bridge_slave_0: left allmulticast mode [ 857.170007][ T6390] bridge_slave_0: left promiscuous mode [ 857.179437][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.205021][T15116] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 857.555493][T15116] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 857.566785][T15116] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 857.566824][T15116] usb 5-1: config 0 has no interface number 0 [ 857.566887][T15116] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 857.566915][T15116] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 857.566959][T15116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.625114][T15116] usb 5-1: config 0 descriptor?? [ 857.631029][T16443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 857.658338][T15116] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 860.585993][ T6390] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 860.619075][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.610344][ T5715] usb 5-1: USB disconnect, device number 18 [ 861.759593][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.780578][ T6390] bond0 (unregistering): Released all slaves [ 861.853482][T16480] netlink: 'syz.4.3062': attribute type 1 has an invalid length. [ 861.866957][ T6390] bond1 (unregistering): Released all slaves [ 861.889572][ T6390] bond2 (unregistering): Released all slaves [ 861.922106][ T6390] bond3 (unregistering): Released all slaves [ 862.070945][T16485] bridge1: entered promiscuous mode [ 862.708129][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 867.861173][ T6390] hsr_slave_0: left promiscuous mode [ 867.867396][ T6390] hsr_slave_1: left promiscuous mode [ 867.887053][ T6390] veth1_vlan: left promiscuous mode [ 867.887171][ T6390] veth0_vlan: left promiscuous mode [ 868.067061][ T5812] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 868.229070][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.239693][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 868.239733][ T5812] usb 3-1: config 0 has no interface number 0 [ 868.239776][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 868.239803][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 868.239845][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.413147][ T5812] usb 3-1: config 0 descriptor?? [ 868.445117][T16550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 868.765401][ T5812] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 869.165583][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 869.219791][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 870.265224][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.265337][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.459348][T16324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.474365][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.477335][T16324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.496691][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.498413][T16324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.527602][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.533342][T16324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 870.557111][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.832292][T16324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.873648][T16324] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.913836][T15176] usb 3-1: USB disconnect, device number 13 [ 870.923499][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.923597][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.959159][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.959273][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.131294][T16588] fuse: fd is not a fuse device [ 871.206486][ T6390] IPVS: stop unused estimator thread 0... [ 874.017129][T16626] overlayfs: missing 'lowerdir' [ 875.602418][T16324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.803679][T16324] veth0_vlan: entered promiscuous mode [ 875.821623][T16657] fuse: Bad value for 'fd' [ 875.833427][T16324] veth1_vlan: entered promiscuous mode [ 875.987690][T16324] veth0_macvtap: entered promiscuous mode [ 876.025697][T16324] veth1_macvtap: entered promiscuous mode [ 876.089404][T16324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.875466][T16324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.161669][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.161761][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.161829][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.161879][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.091598][ T6390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.099734][ T6390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.488807][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.508768][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.770556][T16691] overlayfs: missing 'lowerdir' [ 879.974057][T16700] jffs2: notice: (16700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 880.853439][T16709] loop2: detected capacity change from 0 to 512 [ 880.863369][T16709] journal_path: Lookup failure for './file1' [ 880.866997][T16709] EXT4-fs: error: could not find journal device path [ 881.047721][T16709] loop2: detected capacity change from 0 to 32768 [ 881.058940][T16709] (syz.2.3110,16709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 881.073012][T16709] (syz.2.3110,16709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 881.109070][T16709] JBD2: Ignoring recovery information on journal [ 881.189471][T16709] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 886.371999][T14829] ocfs2: Unmounting device (7,2) on (node local) [ 886.528582][T16757] jffs2: notice: (16757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 887.694263][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.719614][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.727906][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.745142][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.753752][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 889.814128][ T5623] Bluetooth: hci0: command tx timeout [ 891.904972][ T5623] Bluetooth: hci0: command tx timeout [ 894.066574][ T5623] Bluetooth: hci0: command tx timeout [ 896.134822][ T5619] Bluetooth: hci0: command tx timeout [ 897.896614][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 898.550058][T16763] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.567983][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.582158][T16763] bridge_slave_0: entered allmulticast mode [ 898.600026][T16763] bridge_slave_0: entered promiscuous mode [ 898.611321][T16763] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.631787][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.631927][T16763] bridge_slave_1: entered allmulticast mode [ 898.632948][T16763] bridge_slave_1: entered promiscuous mode [ 898.956272][T16763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.973157][T16763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.265186][T16763] team0: Port device team_slave_0 added [ 899.281099][T16763] team0: Port device team_slave_1 added [ 900.209643][T16763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.210181][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.212370][T16763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.215778][T16763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.215792][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.215817][T16763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.746337][T16763] hsr_slave_0: entered promiscuous mode [ 901.750646][T16763] hsr_slave_1: entered promiscuous mode [ 902.050054][T16872] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 902.192865][T16874] libceph: secret too big 79 [ 904.472905][T16894] loop2: detected capacity change from 0 to 512 [ 904.483297][T16894] ext4: Bad value for 'data' [ 904.922224][T16898] loop2: detected capacity change from 0 to 512 [ 905.201700][T16898] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 905.201854][T16898] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3158: corrupted inode contents [ 905.201882][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.216478][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 905.216504][ C1] EXT4-fs (loop2): initial error at time 1787612743: mb_free_blocks:2049: inode 11: block 64 [ 905.216542][ C1] EXT4-fs (loop2): last error at time 1787612743: ext4_do_update_inode:5801: inode 11 [ 905.216817][T16898] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #11: comm syz.2.3158: mark_inode_dirty error [ 905.216843][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.238450][T16898] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3158: invalid indirect mapped block 1 (level 1) [ 905.238475][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.245067][T16898] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3158: corrupted inode contents [ 905.245088][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.255505][T16898] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 905.255530][T16898] loop2: lost filesystem error report for type 5 error -117 [ 905.266930][T16898] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3158: corrupted inode contents [ 905.266963][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.279743][T16898] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.3158: mark_inode_dirty error [ 905.279779][T16898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.302407][T16898] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 905.302436][T16898] loop2: lost filesystem error report for type 5 error -117 [ 905.311969][T16898] EXT4-fs (loop2): 1 truncate cleaned up [ 905.313730][T16898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.571723][T14829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.774843][ T1083] bridge_slave_1: left allmulticast mode [ 906.774886][ T1083] bridge_slave_1: left promiscuous mode [ 906.775801][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.817489][ T1083] bridge_slave_0: left allmulticast mode [ 906.817530][ T1083] bridge_slave_0: left promiscuous mode [ 906.819709][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.124875][T16931] jffs2: notice: (16931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 907.186229][T16935] fuse: fd is not a fuse device [ 907.317113][T16937] loop2: detected capacity change from 0 to 512 [ 907.318094][T16937] ext4: Bad value for 'data' [ 907.819559][T16951] loop2: detected capacity change from 0 to 512 [ 908.172251][T16951] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 908.172475][T16951] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3169: corrupted inode contents [ 908.173138][T16951] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 908.188217][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 908.188241][ C1] EXT4-fs (loop2): initial error at time 1787612746: mb_free_blocks:2049: inode 11: block 64 [ 908.188281][ C1] EXT4-fs (loop2): last error at time 1787612746: ext4_do_update_inode:5801: inode 11 [ 910.012266][T16951] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #11: comm syz.2.3169: mark_inode_dirty error [ 910.012363][T16951] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 910.056491][ T1083] bond1 (unregistering): (slave geneve2): Releasing active interface [ 910.125948][T16951] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3169: invalid indirect mapped block 1 (level 1) [ 910.126000][T16951] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 910.126428][T16951] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3169: corrupted inode contents [ 910.126458][T16951] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 910.126777][T16951] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 910.126800][T16951] loop2: lost filesystem error report for type 5 error -117 [ 910.140186][T16951] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.3169: corrupted inode contents [ 910.140612][T16951] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.3169: mark_inode_dirty error [ 910.150105][T16951] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 910.150129][T16951] loop2: lost filesystem error report for type 5 error -117 [ 910.152662][T16951] EXT4-fs (loop2): 1 truncate cleaned up [ 910.154528][T16951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.449617][T14829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.048172][ T1083] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 912.083845][ T1083] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 912.114315][ T1083] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 912.157892][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.174690][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.185007][ T1083] bond0 (unregistering): Released all slaves [ 912.209164][ T1083] bond1 (unregistering): Released all slaves [ 912.230349][ T1083] bond2 (unregistering): Released all slaves [ 912.249464][ T1083] bond3 (unregistering): Released all slaves [ 912.271069][ T1083] bond4 (unregistering): Released all slaves [ 912.295589][ T1083] bond5 (unregistering): Released all slaves [ 912.318505][ T1083] bond6 (unregistering): Released all slaves [ 912.338627][ T1083] bond7 (unregistering): Released all slaves [ 912.362604][ T1083] bond8 (unregistering): Released all slaves [ 912.388641][ T1083] bond9 (unregistering): Released all slaves [ 912.407498][ T1083] bond10 (unregistering): Released all slaves [ 912.830461][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 912.830942][ T1083] tipc: Left network mode [ 912.986165][T16993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3183'. [ 916.969689][ T1083] hsr_slave_0: left promiscuous mode [ 916.980854][ T1083] hsr_slave_1: left promiscuous mode [ 916.983025][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.997608][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.253096][ T5623] Bluetooth: hci2: unexpected event for opcode 0x080d [ 917.264555][T17058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.264987][T17058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.487455][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 917.519970][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 918.182199][T17079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3197'. [ 919.459757][T16763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 919.669457][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.673338][T16763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 919.765551][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.005197][T16763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 921.709447][ T5623] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 921.709527][ T5623] Bluetooth: hci2: Injecting HCI hardware error event [ 921.712508][ T5623] Bluetooth: hci2: hardware error 0x00 [ 921.791399][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.940218][T16763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 923.901122][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.469328][ T1083] IPVS: stop unused estimator thread 0... [ 924.660074][T17144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.782938][T16763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.842478][T16763] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.877952][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.878056][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.992237][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.992352][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.183518][T17154] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 926.183707][T17154] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 926.187664][T17154] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 926.265822][T17154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 926.345021][ T5623] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 926.473500][T17154] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 928.545030][T17166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.945601][T17191] libceph: secret too big 79 [ 931.161912][T16763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.323104][T16763] veth0_vlan: entered promiscuous mode [ 931.365476][T16763] veth1_vlan: entered promiscuous mode [ 931.437169][T17200] loop4: detected capacity change from 0 to 512 [ 931.449027][T17200] journal_path: Lookup failure for './file1' [ 931.449088][T17200] EXT4-fs: error: could not find journal device path [ 932.580753][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.580806][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.754970][T16763] veth0_macvtap: entered promiscuous mode [ 932.891308][T17200] loop4: detected capacity change from 0 to 32768 [ 932.905172][T16763] veth1_macvtap: entered promiscuous mode [ 932.911845][T17200] (syz.4.3218,17200,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 932.926435][T17200] (syz.4.3218,17200,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 932.970346][T17200] JBD2: Ignoring recovery information on journal [ 933.004940][T17200] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 933.081705][T16763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.331182][T16763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.367333][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.367518][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.434064][ T6567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.437193][ T1083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.054678][T17223] libceph: secret too big 79 [ 934.120466][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.120506][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.298149][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.298185][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.800439][T17241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3122'. [ 934.830653][ T5812] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 936.073176][T15374] ocfs2: Unmounting device (7,4) on (node local) [ 936.752759][T17259] binder_alloc: 17258: binder_alloc_buf, no vma [ 940.876289][T17307] comedi comedi2: aio_aio12_8: I/O base address not correctly aligned [ 941.870939][T17318] siw: device registration error -23 [ 943.908853][T17334] loop4: detected capacity change from 0 to 512 [ 943.925539][T17334] ext3: Bad value for 'stripe' [ 946.239844][T17351] siw: device registration error -23 [ 946.510885][ T5812] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 947.026351][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 947.087540][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 947.087581][ T5812] usb 3-1: config 0 has no interface number 0 [ 947.087636][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 947.087664][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 947.087706][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.127591][ T5812] usb 3-1: config 0 descriptor?? [ 947.136256][T17347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 947.186863][ T5812] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 947.410054][T17358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.420957][T17358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.373220][T17222] usb 3-1: USB disconnect, device number 14 [ 951.174524][T17388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3259'. [ 954.706096][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.707689][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.563783][T17457] libceph: secret too big 79 [ 960.930293][T17464] siw: device registration error -23 [ 962.272309][T17477] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3290'. [ 964.542085][T17492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.843201][ T6567] IPVS: starting estimator thread 0... [ 970.924844][T17539] IPVS: using max 35 ests per chain, 84000 per kthread [ 972.694088][T15828] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 973.453977][T15828] usb 2-1: Using ep0 maxpacket: 32 [ 973.454801][T15828] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 973.454838][T15828] usb 2-1: no configurations [ 973.454850][T15828] usb 2-1: can't read configurations, error -22 [ 973.586802][T15828] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 973.734608][T15828] usb 2-1: Using ep0 maxpacket: 32 [ 973.735395][T15828] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 973.735432][T15828] usb 2-1: no configurations [ 973.735444][T15828] usb 2-1: can't read configurations, error -22 [ 973.735710][T15828] usb usb2-port1: attempt power cycle [ 973.752451][ T140] IPVS: starting estimator thread 0... [ 973.802236][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 973.834020][T17569] IPVS: using max 56 ests per chain, 134400 per kthread [ 974.074774][T15828] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 974.095954][T15828] usb 2-1: Using ep0 maxpacket: 32 [ 974.096559][T15828] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 974.096593][T15828] usb 2-1: no configurations [ 974.096604][T15828] usb 2-1: can't read configurations, error -22 [ 974.224002][T15828] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 974.244666][T15828] usb 2-1: Using ep0 maxpacket: 32 [ 974.245209][T15828] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 974.245244][T15828] usb 2-1: no configurations [ 974.245256][T15828] usb 2-1: can't read configurations, error -22 [ 974.245690][T15828] usb usb2-port1: unable to enumerate USB device [ 974.694316][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 976.469272][T17608] 9p: Bad value for 'rfdno' [ 979.345729][ T5619] Bluetooth: hci1: unexpected event for opcode 0x080d [ 981.895745][ T5944] IPVS: starting estimator thread 0... [ 981.984506][T17641] IPVS: using max 36 ests per chain, 86400 per kthread [ 982.452597][T17657] loop4: detected capacity change from 0 to 512 [ 982.480797][T17657] ext4: Bad value for 'data' [ 982.497860][T17658] loop0: detected capacity change from 0 to 512 [ 982.505224][T17658] journal_path: Lookup failure for './file1' [ 982.505288][T17658] EXT4-fs: error: could not find journal device path [ 983.414714][ T5619] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 983.426658][ T5619] Bluetooth: hci1: Injecting HCI hardware error event [ 983.429208][ T5619] Bluetooth: hci1: hardware error 0x00 [ 983.776162][T17668] loop0: detected capacity change from 0 to 256 [ 983.777658][T17668] vfat: Unknown parameter 'nnonumtail' [ 985.304960][T17678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.313728][T17678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.574254][ T5619] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 987.726760][T17692] loop1: detected capacity change from 0 to 512 [ 987.840807][T17692] ext4: Bad value for 'data' [ 989.765502][T17716] libceph: secret too big 79 [ 989.931614][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.942891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.241319][T17723] loop4: detected capacity change from 0 to 8 [ 990.982272][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'. [ 992.010570][T17746] libceph: secret too big 79 [ 992.152817][T17727] loop2: detected capacity change from 0 to 32768 [ 993.096830][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.096906][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.015140][T17787] siw: device registration error -23 [ 997.427260][T17792] loop2: detected capacity change from 0 to 8 [ 999.275221][ T1083] IPVS: starting estimator thread 0... [ 999.454009][T17809] IPVS: using max 32 ests per chain, 76800 per kthread [ 999.485103][T17812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.558941][T15116] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 999.844077][T15116] usb 3-1: Using ep0 maxpacket: 8 [ 999.851325][T15116] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 999.869762][T15116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 999.869908][T15116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.869929][T15116] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.869946][T15116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 999.869963][T15116] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 999.870000][T15116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.889735][T15116] usb 3-1: config 0 descriptor?? [ 999.916935][T15116] hub 3-1:0.0: bad descriptor, ignoring hub [ 999.916969][T15116] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1000.346664][T17819] loop1: detected capacity change from 0 to 512 [ 1000.347911][T17819] ext4: Bad value for 'data' [ 1000.525888][ T5619] Bluetooth: hci4: urb ffff88801d382000 submission failed (90) [ 1000.532429][T15116] usb 3-1: USB disconnect, device number 15 [ 1000.650769][T17824] loop1: detected capacity change from 0 to 512 [ 1001.043505][T17824] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1001.043645][T17824] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.3388: corrupted inode contents [ 1001.043666][T17824] fserror_report: 2 callbacks suppressed [ 1001.043676][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.049686][T17824] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #11: comm syz.1.3388: mark_inode_dirty error [ 1001.049727][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.050171][T17824] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3388: invalid indirect mapped block 1 (level 1) [ 1001.050202][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.050765][T17824] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.3388: corrupted inode contents [ 1001.050789][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.051401][T17824] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 1001.051420][T17824] loop1: lost filesystem error report for type 5 error -117 [ 1001.052753][T17824] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.3388: corrupted inode contents [ 1001.052779][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.053109][T17824] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.3388: mark_inode_dirty error [ 1001.053131][T17824] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.053975][T17824] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 1001.053996][T17824] loop1: lost filesystem error report for type 5 error -117 [ 1001.055490][T17824] EXT4-fs (loop1): 1 truncate cleaned up [ 1001.136736][T17823] libceph: secret too big 79 [ 1001.176866][T17824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.472932][T16763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.516920][T17813] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1002.248695][T17844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.250743][T17844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.570618][T17858] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1006.367283][T15116] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1008.034731][T15116] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1008.104991][T15116] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1008.105037][T15116] usb 3-1: config 0 has no interface number 0 [ 1008.105094][T15116] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1008.105121][T15116] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1008.105164][T15116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.392739][T17899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1008.514827][T15116] usb 3-1: config 0 descriptor?? [ 1008.520572][T17887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1008.538884][T15116] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1009.733542][T17925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.427083][T15176] usb 3-1: USB disconnect, device number 16 [ 1010.547266][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.925730][T17926] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1010.946522][T17929] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3416'. [ 1013.217911][T17951] ubi0: attaching mtd0 [ 1013.247797][T17951] ubi0: scanning is finished [ 1013.248270][T17951] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1013.957551][T17951] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1014.457432][T17954] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3422'. [ 1014.999701][T17966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.011068][T17966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.086113][T17222] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1017.091132][T17972] overlayfs: failed to clone upperpath [ 1018.644777][T17222] usb 5-1: device descriptor read/all, error -71 [ 1019.011421][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3431'. [ 1020.573946][T11580] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1020.760540][T11580] usb 2-1: Using ep0 maxpacket: 32 [ 1020.797618][T11580] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1020.844720][T11580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.857356][T11580] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.956384][T11580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.965994][T11580] usb 2-1: Product: syz [ 1020.966052][T11580] usb 2-1: Manufacturer: syz [ 1020.971532][T11580] usb 2-1: SerialNumber: syz [ 1021.451327][T11580] usb 2-1: config 0 descriptor?? [ 1022.816354][T18027] overlayfs: missing 'lowerdir' [ 1023.255359][T18031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.255840][T18031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.247576][T15176] usb 2-1: USB disconnect, device number 34 [ 1025.263940][T17222] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1025.474416][T17222] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1025.475481][T17222] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1025.475503][T17222] usb 5-1: config 0 has no interface number 0 [ 1025.475539][T17222] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1025.475563][T17222] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1025.475599][T17222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.480157][T17222] usb 5-1: config 0 descriptor?? [ 1025.481534][T18039] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1025.494253][T17222] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1025.523675][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1027.746707][T15828] usb 5-1: USB disconnect, device number 22 [ 1029.674653][T15828] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1029.837080][T15828] usb 2-1: Using ep0 maxpacket: 32 [ 1029.837925][T15828] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1029.840553][T15828] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1029.840581][T15828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1029.840604][T15828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1029.840623][T15828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1029.840646][T15828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1029.858994][T15828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.859020][T15828] usb 2-1: Product: syz [ 1029.859033][T15828] usb 2-1: Manufacturer: syz [ 1029.859045][T15828] usb 2-1: SerialNumber: syz [ 1029.867300][T15828] usb 2-1: config 0 descriptor?? [ 1030.274980][T18083] loop4: detected capacity change from 0 to 512 [ 1030.286746][T18083] journal_path: Lookup failure for './file1' [ 1030.286824][T18083] EXT4-fs: error: could not find journal device path [ 1030.312441][T15828] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1030.312521][T15828] input input58: Device does not respond to id packet M [ 1030.316898][T15828] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1030.316943][T15828] input input58: Device does not respond to id packet P [ 1030.322791][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.322836][T15828] input input58: Device does not respond to id packet B [ 1030.324782][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.324829][T15828] input input58: Device does not respond to id packet N [ 1030.326202][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.327112][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.327516][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.327896][T15828] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1030.338952][T15828] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58 [ 1030.424173][T15828] usb 2-1: USB disconnect, device number 35 [ 1030.613103][T18083] loop4: detected capacity change from 0 to 32768 [ 1030.630941][T18083] (syz.4.3460,18083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1030.645585][T18083] (syz.4.3460,18083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1030.678519][T18083] JBD2: Ignoring recovery information on journal [ 1030.713098][T18083] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1034.164437][T15116] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1034.223929][T15176] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1034.313917][T15116] usb 5-1: device descriptor read/64, error -71 [ 1034.383959][T15176] usb 2-1: Using ep0 maxpacket: 8 [ 1034.390419][T15176] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1034.403753][T15176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1034.415019][T15176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1034.425355][T15176] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1034.435123][T15176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1034.445008][T15176] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1034.454939][T15176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.482090][T15176] usb 2-1: config 0 descriptor?? [ 1034.502680][T15176] hub 2-1:0.0: bad descriptor, ignoring hub [ 1034.502726][T15176] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1034.699404][T15116] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1034.926808][T15116] usb 5-1: device descriptor read/64, error -71 [ 1034.944396][ T5623] Bluetooth: hci4: urb ffff888029153d00 submission failed (90) [ 1035.035089][T15116] usb usb5-port1: attempt power cycle [ 1035.396099][T15176] usb 2-1: USB disconnect, device number 36 [ 1036.140180][T15374] ocfs2: Unmounting device (7,4) on (node local) [ 1038.673901][T17222] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1038.973885][T17222] usb 2-1: Using ep0 maxpacket: 32 [ 1038.983930][T17222] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1039.121411][T17222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.121459][T17222] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1039.266341][T17222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.298604][T17222] usb 2-1: Product: syz [ 1039.298664][T17222] usb 2-1: Manufacturer: syz [ 1039.298682][T17222] usb 2-1: SerialNumber: syz [ 1039.584684][T17222] usb 2-1: config 0 descriptor?? [ 1043.763096][T11580] usb 2-1: USB disconnect, device number 37 [ 1048.135481][T15116] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1048.294303][T15116] usb 2-1: Using ep0 maxpacket: 32 [ 1048.300643][T15116] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1048.316206][T15116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.327053][T15116] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1048.338797][T15116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.347270][T15116] usb 2-1: Product: syz [ 1048.351894][T15116] usb 2-1: Manufacturer: syz [ 1048.357118][T15116] usb 2-1: SerialNumber: syz [ 1048.378497][T15116] usb 2-1: config 0 descriptor?? [ 1049.877743][T18229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1051.317854][T18233] all: renamed from bridge_slave_0 (while UP) [ 1051.442925][T15828] usb 2-1: USB disconnect, device number 38 [ 1051.792398][T18241] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1054.254522][T15828] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1054.445187][T15828] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1054.446263][T15828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1054.446287][T15828] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1054.448178][T15828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.448199][T15828] usb 2-1: Product: syz [ 1054.448212][T15828] usb 2-1: Manufacturer: syz [ 1054.448225][T15828] usb 2-1: SerialNumber: syz [ 1054.463354][T15828] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1054.496627][T15828] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1054.496627][T15828] Please send a copy of this message to and [ 1054.546522][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.546579][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.748757][T15828] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 1056.937801][T15828] usb 2-1: USB disconnect, device number 39 [ 1057.440227][T18281] loop4: detected capacity change from 0 to 512 [ 1057.638492][T18281] journal_path: Lookup failure for './file1' [ 1057.645674][T18281] EXT4-fs: error: could not find journal device path [ 1058.074933][T18281] loop4: detected capacity change from 0 to 32768 [ 1058.079739][T18281] (syz.4.3522,18281,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1058.081978][T18281] (syz.4.3522,18281,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1058.123668][T18281] JBD2: Ignoring recovery information on journal [ 1058.160920][T18281] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1059.368719][T18296] loop1: detected capacity change from 0 to 512 [ 1059.397712][T18296] ext4: Bad value for 'data' [ 1063.559465][T18313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.162988][T15374] ocfs2: Unmounting device (7,4) on (node local) [ 1065.255149][T18313] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1066.141502][T18330] all: renamed from bridge_slave_0 (while UP) [ 1068.105939][T18351] all: renamed from bridge_slave_0 (while UP) [ 1071.799396][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.812668][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.217716][T18410] all: renamed from bridge_slave_0 (while UP) [ 1079.145183][T18432] all: renamed from bridge_slave_0 (while UP) [ 1079.321370][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'. [ 1079.422551][T18442] ubi0: attaching mtd0 [ 1079.433391][T18442] ubi0: scanning is finished [ 1079.433642][T18442] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1079.874298][T18442] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1082.650798][T18464] overlayfs: missing 'lowerdir' [ 1082.967998][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1083.201987][T18470] 9p: Bad value for 'rfdno' [ 1083.601046][T18474] 9p: Bad value for 'rfdno' [ 1089.247930][T15116] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1089.404607][T15116] usb 3-1: Using ep0 maxpacket: 32 [ 1089.405430][T15116] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1089.406524][T15116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.406551][T15116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.406586][T15116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.419951][ T5729] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1089.420804][T15116] usb 3-1: config 0 descriptor?? [ 1089.437988][T15116] hub 3-1:0.0: USB hub found [ 1089.586861][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 1089.593856][ T5729] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1089.608261][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.608310][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.608364][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.649476][ T5729] usb 2-1: config 0 descriptor?? [ 1089.667249][T15116] hub 3-1:0.0: 1 port detected [ 1089.709770][ T5729] hub 2-1:0.0: USB hub found [ 1089.886754][ T5729] hub 2-1:0.0: 1 port detected [ 1089.932527][T15116] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1089.962909][T15116] usbhid 3-1:0.0: can't add hid device: -71 [ 1089.963045][T15116] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1090.036162][T15116] usb 3-1: USB disconnect, device number 17 [ 1090.119494][ T5729] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1090.144571][ T5729] usbhid 2-1:0.0: can't add hid device: -71 [ 1090.144687][ T5729] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1090.177970][ T5729] usb 2-1: USB disconnect, device number 40 [ 1090.688850][T18532] 9p: Bad value for 'rfdno' [ 1091.486517][T18542] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1095.346314][T18579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.358865][T18579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.922480][T18593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.928239][T18593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.535474][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1097.553547][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1097.562046][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1097.594432][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1097.604857][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1099.654057][ T5619] Bluetooth: hci4: command tx timeout [ 1099.990219][T18631] libceph: secret too big 79 [ 1101.814458][ T5619] Bluetooth: hci4: command tx timeout [ 1103.953940][ T5619] Bluetooth: hci4: command tx timeout [ 1105.445946][T18656] all: renamed from bridge_slave_0 (while UP) [ 1105.655732][T18676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1105.814801][T15116] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1106.000261][ T5619] Bluetooth: hci4: command tx timeout [ 1106.165392][T15116] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1106.181113][T15116] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 1106.181159][T15116] usb 5-1: config 127 has no interface number 0 [ 1106.249640][T15116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.249717][T15116] usb 5-1: Product: syz [ 1106.249755][T15116] usb 5-1: Manufacturer: syz [ 1106.249768][T15116] usb 5-1: SerialNumber: syz [ 1106.807157][T18683] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.892192][T18683] binder: 18681:18683 ioctl 4018620d 200000004a80 returned -16 [ 1107.391596][T18691] misc userio: Invalid payload size [ 1107.457826][T18674] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 1107.458556][T18674] rtrs_client L2826: pathname cannot contain / and . [ 1107.480825][ T140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.501290][ T140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1107.613176][T18599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.620628][T18599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.628049][T18599] bridge_slave_0: entered allmulticast mode [ 1107.638111][T18599] bridge_slave_0: entered promiscuous mode [ 1107.649829][T18599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.657844][T18599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.666981][T18599] bridge_slave_1: entered allmulticast mode [ 1107.675807][T18599] bridge_slave_1: entered promiscuous mode [ 1107.675937][T18694] libceph: secret too big 79 [ 1107.792436][ T140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.808264][ T140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1107.839070][T18599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.851698][T18599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.916921][T18599] team0: Port device team_slave_0 added [ 1108.076515][ T140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.104557][ T140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1108.165541][T18599] team0: Port device team_slave_1 added [ 1109.089413][T18599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.097928][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.126201][T18599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.143605][T18599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.143637][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.143676][T18599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.296002][T18599] hsr_slave_0: entered promiscuous mode [ 1109.302807][T18599] hsr_slave_1: entered promiscuous mode [ 1109.309246][T18599] debugfs: 'hsr0' already exists in 'hsr' [ 1109.316447][T18599] Cannot create hsr debugfs directory [ 1110.422975][T15116] asix 5-1:127.57: probe with driver asix failed with error -22 [ 1110.631885][T15116] usb 5-1: USB disconnect, device number 26 [ 1110.840497][T18711] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1111.570940][T18718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1111.750618][T18722] binder: BINDER_SET_CONTEXT_MGR already set [ 1111.756810][T18722] binder: 18721:18722 ioctl 4018620d 200000004a80 returned -16 [ 1111.853973][T15116] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1111.958401][ T140] bridge_slave_1: left allmulticast mode [ 1111.958450][ T140] bridge_slave_1: left promiscuous mode [ 1111.958653][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.972418][ T140] bridge_slave_0: left allmulticast mode [ 1111.972442][ T140] bridge_slave_0: left promiscuous mode [ 1111.978181][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.019382][T15116] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1112.029697][T15116] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1112.029737][T15116] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1112.029758][T15116] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.029779][T15116] usb 2-1: config 220 has no interface number 2 [ 1112.029839][T15116] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1112.029866][T15116] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1112.029887][T15116] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1112.029906][T15116] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1112.181802][T15116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.181845][T15116] usb 2-1: Product: syz [ 1112.181883][T15116] usb 2-1: Manufacturer: syz [ 1112.181899][T15116] usb 2-1: SerialNumber: syz [ 1113.296462][T15116] usb 2-1: selecting invalid altsetting 0 [ 1114.942012][T15116] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1114.942071][T15116] uvcvideo 2-1:220.0: No valid video chain found. [ 1115.009435][ T140] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1115.045516][T15116] usb 2-1: selecting invalid altsetting 0 [ 1115.045565][T15116] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1115.064537][T15116] usb 2-1: USB disconnect, device number 41 [ 1115.356638][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.371225][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.464254][T15116] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1115.661177][T15116] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1115.677413][T15116] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1115.686848][T15116] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1115.698899][T15116] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.698945][T15116] usb 2-1: config 220 has no interface number 2 [ 1115.711022][T15116] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1115.711095][T15116] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1115.711133][T15116] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1115.711171][T15116] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1115.750918][ T140] bond0 (unregistering): Released all slaves [ 1115.778107][ T140] bond1 (unregistering): Released all slaves [ 1115.808308][ T140] bond2 (unregistering): Released all slaves [ 1115.819247][T15116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.827392][T15116] usb 2-1: Product: syz [ 1115.831702][T15116] usb 2-1: Manufacturer: syz [ 1115.831746][T15116] usb 2-1: SerialNumber: syz [ 1115.862658][T18744] all: renamed from bridge_slave_0 (while UP) [ 1115.897928][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1116.038822][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.038893][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.197487][T15116] usb 2-1: selecting invalid altsetting 0 [ 1116.197979][T15116] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1116.198038][T15116] uvcvideo 2-1:220.0: No valid video chain found. [ 1116.349324][T15116] usb 2-1: selecting invalid altsetting 0 [ 1116.349375][T15116] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1116.378544][T15116] usb 2-1: USB disconnect, device number 42 [ 1119.942540][T18795] all: renamed from bridge_slave_0 (while UP) [ 1120.140711][ T140] hsr_slave_0: left promiscuous mode [ 1120.162958][ T140] hsr_slave_1: left promiscuous mode [ 1120.172109][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.172148][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.193217][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.193265][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.635861][ T140] veth1_vlan: left promiscuous mode [ 1120.645042][ T140] veth0_vlan: left promiscuous mode [ 1122.194784][T17222] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1122.434640][T17222] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1122.456293][T17222] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1122.456341][T17222] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1122.456359][T17222] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.456374][T17222] usb 5-1: config 220 has no interface number 2 [ 1122.456428][T17222] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1122.456461][T17222] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1122.456477][T17222] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1122.456493][T17222] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1122.788808][T17222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.788874][T17222] usb 5-1: Product: syz [ 1122.788911][T17222] usb 5-1: Manufacturer: syz [ 1122.788929][T17222] usb 5-1: SerialNumber: syz [ 1123.497205][ T140] team0 (unregistering): Port device team_slave_1 removed [ 1123.517078][T17222] usb 5-1: selecting invalid altsetting 0 [ 1123.551645][T17222] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1123.551726][T17222] uvcvideo 5-1:220.0: No valid video chain found. [ 1123.580583][ T140] team0 (unregistering): Port device team_slave_0 removed [ 1123.586069][T17222] usb 5-1: selecting invalid altsetting 0 [ 1123.586096][T17222] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1123.594516][T17222] usb 5-1: USB disconnect, device number 27 [ 1126.617679][T18599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1126.652719][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.656671][T18599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1126.758293][ T140] IPVS: stop unused estimator thread 0... [ 1126.788174][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.792061][T18599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1127.025514][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1127.026349][T18599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1127.527374][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.535031][T18876] all: renamed from bridge_slave_0 (while UP) [ 1128.827610][T18900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.828027][T18900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.870286][T18901] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1129.206136][T18599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.266005][T18599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.304270][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.304417][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.348264][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.348412][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.374889][ T5767] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1129.534999][ T5767] usb 5-1: Using ep0 maxpacket: 8 [ 1129.540942][ T5767] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1129.562139][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1129.562216][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1129.562254][ T5767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1129.562280][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1129.562303][ T5767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1129.562343][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.718436][ T5767] usb 5-1: config 0 descriptor?? [ 1129.736446][ T5767] hub 5-1:0.0: bad descriptor, ignoring hub [ 1129.736487][ T5767] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1129.872778][ T5619] Bluetooth: hci5: urb ffff88804de83f00 submission failed (90) [ 1129.963415][ T5767] usb 5-1: USB disconnect, device number 28 [ 1132.102887][T18946] overlayfs: missing 'lowerdir' [ 1132.772779][T18957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.773237][T18957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.966190][T18975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1135.310241][T18599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.551928][T18599] veth0_vlan: entered promiscuous mode [ 1136.590397][T18599] veth1_vlan: entered promiscuous mode [ 1136.682500][T18599] veth0_macvtap: entered promiscuous mode [ 1136.696070][T18599] veth1_macvtap: entered promiscuous mode [ 1136.726827][T18599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.746015][T19012] loop4: detected capacity change from 0 to 512 [ 1136.758992][T19012] journal_path: Lookup failure for './file1' [ 1136.759045][T19012] EXT4-fs: error: could not find journal device path [ 1136.765360][T18599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.789787][ T6567] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.789972][ T6567] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.790036][ T6567] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.044317][ T5944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.456502][T19019] loop4: detected capacity change from 0 to 256 [ 1137.463044][T19019] vfat: Unknown parameter 'nnonumtail' [ 1137.668076][T13661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.668110][T13661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.812670][ T6567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.834228][ T6567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.730428][T19035] Can't find ip_set type hash:net,ifac [ 1140.540279][T19051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1140.925214][T19060] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1141.812153][T19070] loop5: detected capacity change from 0 to 512 [ 1141.827203][T19070] journal_path: Lookup failure for './file1' [ 1141.839411][T19070] EXT4-fs: error: could not find journal device path [ 1142.313290][ T12] IPVS: starting estimator thread 0... [ 1142.523888][T19075] IPVS: using max 38 ests per chain, 91200 per kthread [ 1144.115696][T19082] loop5: detected capacity change from 0 to 256 [ 1144.126494][T19082] vfat: Unknown parameter 'nnonumtail' [ 1146.001864][T19092] libceph: secret too big 79 [ 1146.634607][T19095] Can't find ip_set type hash:net,ifac [ 1149.836494][T19108] all: renamed from bridge_slave_0 (while UP) [ 1152.073990][T15176] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1152.104217][T19139] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1152.521853][T15176] usb 3-1: Using ep0 maxpacket: 32 [ 1152.548884][T15176] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1152.619380][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.619433][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.619486][T15176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.651794][T15176] usb 3-1: config 0 descriptor?? [ 1152.656326][T15176] hub 3-1:0.0: USB hub found [ 1152.858983][T15176] hub 3-1:0.0: 1 port detected [ 1152.954204][ T5729] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 1153.104725][ T5729] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1153.115647][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1153.123792][ T5729] usb 5-1: config 0 has no interface number 0 [ 1153.955217][T15176] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1153.965298][T15176] usbhid 3-1:0.0: can't add hid device: -71 [ 1153.965396][T15176] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1154.079364][T17222] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1154.079521][ T5729] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1154.079548][ T5729] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1154.079845][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.083106][ T5729] usb 5-1: config 0 descriptor?? [ 1154.084835][T19142] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1154.089478][ T5729] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1154.520217][T15176] usb 3-1: USB disconnect, device number 18 [ 1154.587703][T17222] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1154.607140][T17222] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1154.607167][T17222] usb 2-1: config 0 has no interface number 0 [ 1154.607207][T17222] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1154.607231][T17222] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1154.607280][T17222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.673375][T17222] usb 2-1: config 0 descriptor?? [ 1154.687451][T19144] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1154.734061][T17222] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1156.327454][ T5729] usb 2-1: USB disconnect, device number 43 [ 1156.456759][T19168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.457228][T19168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.600901][ T5812] usb 5-1: USB disconnect, device number 29 [ 1167.833917][T11580] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1167.983967][T11580] usb 6-1: Using ep0 maxpacket: 32 [ 1168.009739][T11580] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1168.012295][T19231] all: renamed from bridge_slave_0 (while UP) [ 1168.046869][T11580] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.046941][T11580] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.111170][T11580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.111242][T11580] usb 6-1: Product: syz [ 1168.111355][T11580] usb 6-1: Manufacturer: syz [ 1168.111445][T11580] usb 6-1: SerialNumber: syz [ 1168.216052][T11580] usb 6-1: config 0 descriptor?? [ 1171.030067][ T5729] usb 6-1: USB disconnect, device number 16 [ 1174.620323][T19264] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1175.198136][T19274] libceph: secret too big 79 [ 1175.440097][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1175.692678][ T13] IPVS: starting estimator thread 0... [ 1175.794600][T19279] IPVS: using max 28 ests per chain, 67200 per kthread [ 1176.394620][ T5729] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1176.539584][T19287] libceph: secret too big 79 [ 1176.545810][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1176.551665][ T5729] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1176.564553][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1176.575754][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.585636][ T5729] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.595595][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1176.605461][ T5729] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1176.615505][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.628653][ T5729] usb 6-1: config 0 descriptor?? [ 1176.643192][ T5729] hub 6-1:0.0: bad descriptor, ignoring hub [ 1176.643250][ T5729] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1176.687230][ T5619] Bluetooth: hci5: urb ffff888033a0f700 submission failed (90) [ 1177.058361][T17222] usb 6-1: USB disconnect, device number 17 [ 1177.416289][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.423034][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.708573][T19333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1183.077725][T19343] libceph: secret too big 79 [ 1183.148858][T19344] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1195.208038][T19414] all: renamed from bridge_slave_0 (while UP) [ 1200.204727][T19440] all: renamed from bridge_slave_0 (while UP) [ 1201.559980][T19456] ubi0: attaching mtd0 [ 1201.562015][T19456] ubi0: scanning is finished [ 1201.562086][T19456] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1202.547253][T19456] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1202.936475][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1202.965137][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1202.982163][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1202.995566][T19470] all: renamed from bridge_slave_0 (while UP) [ 1203.008709][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.155134][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1205.504610][ T5619] Bluetooth: hci5: command tx timeout [ 1205.764078][T11580] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1205.926712][T11580] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1205.937383][T11580] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1205.945660][T11580] usb 2-1: config 0 has no interface number 0 [ 1205.945735][T11580] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1205.945764][T11580] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1205.945809][T11580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.992176][T11580] usb 2-1: config 0 descriptor?? [ 1206.001103][T19498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1206.068891][T11580] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1207.433912][ T5812] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1207.573839][ T5619] Bluetooth: hci5: command tx timeout [ 1207.583937][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 1207.589908][ T5812] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1207.610293][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.610323][ T5812] usb 3-1: Product: syz [ 1207.610418][ T5812] usb 3-1: Manufacturer: syz [ 1207.610432][ T5812] usb 3-1: SerialNumber: syz [ 1207.620245][ T5812] usb 3-1: config 0 descriptor?? [ 1207.650284][ T5812] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1207.651192][ T5812] dvb-usb: bulk message failed: -22 (4/0) [ 1207.670180][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1207.676771][ T5812] dvb-usb: bulk message failed: -22 (5/0) [ 1207.676791][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1207.713179][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1207.719129][ T5812] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1207.719190][ T5812] usb 3-1: media controller created [ 1207.720031][T19473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.720209][T19473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.720509][T19473] bridge_slave_0: entered allmulticast mode [ 1207.752648][T19473] bridge_slave_0: entered promiscuous mode [ 1207.781706][T19473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.781875][T19473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.782083][T19473] bridge_slave_1: entered allmulticast mode [ 1207.793345][T19473] bridge_slave_1: entered promiscuous mode [ 1207.800885][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1208.863171][ T5812] usb 3-1: selecting invalid altsetting 3 [ 1208.863212][ T5812] ttusb2: set interface to alts=3 failed [ 1209.418486][T19473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.435809][T19473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.483540][ T9] usb 2-1: USB disconnect, device number 44 [ 1209.511968][ T5812] DVB: Unable to find symbol tda10086_attach() [ 1209.512005][ T5812] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1209.512714][ T5812] dvb-usb: bulk message failed: -22 (4/0) [ 1209.512731][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1209.512838][ T5812] dvb-usb: bulk message failed: -22 (5/0) [ 1209.512850][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1209.512908][ T5812] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1209.654218][ T5619] Bluetooth: hci5: command tx timeout [ 1209.711326][ T5812] usb 3-1: USB disconnect, device number 19 [ 1210.703090][T19533] all: renamed from bridge_slave_0 (while UP) [ 1211.180911][ T5812] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1211.234260][T19473] team0: Port device team_slave_0 added [ 1211.244688][T19473] team0: Port device team_slave_1 added [ 1211.475467][T19473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.475499][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.475536][T19473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.477833][T19473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.477850][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.477873][T19473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.734005][ T5619] Bluetooth: hci5: command tx timeout [ 1212.047261][T19547] 9p: Bad value for 'rfdno' [ 1212.149762][T19473] hsr_slave_0: entered promiscuous mode [ 1212.162579][T19473] hsr_slave_1: entered promiscuous mode [ 1212.170694][T19473] debugfs: 'hsr0' already exists in 'hsr' [ 1212.176591][T19473] Cannot create hsr debugfs directory [ 1214.070970][T19573] libceph: secret too big 79 [ 1215.411790][T19473] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1215.427759][T19473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.436169][T19473] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1215.458285][T19473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.466854][T19473] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1215.486414][T19473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1215.494650][T19473] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1215.508724][T19473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.593769][T19585] 9pnet_fd: Insufficient options for proto=fd [ 1215.612617][T19589] comedi comedi0: comedi_config --init_data is deprecated [ 1216.767453][T19594] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1218.476312][T19473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.545199][T19473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.565450][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.565565][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.692769][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.692897][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.732261][T19601] all: renamed from bridge_slave_0 (while UP) [ 1220.454075][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 1221.967074][T19626] all: renamed from bridge_slave_0 (while UP) [ 1224.170365][T19473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.461006][T19649] overlayfs: missing 'lowerdir' [ 1227.127932][T19473] veth0_vlan: entered promiscuous mode [ 1227.142241][T19473] veth1_vlan: entered promiscuous mode [ 1227.191537][T19473] veth0_macvtap: entered promiscuous mode [ 1227.207752][T19473] veth1_macvtap: entered promiscuous mode [ 1227.232257][T19473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.251580][T19473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.434566][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.506482][T13659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.519105][T13659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.556752][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.568558][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.584076][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.636789][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.645268][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.393833][T15179] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1233.059573][T15179] usb 3-1: Using ep0 maxpacket: 32 [ 1233.107657][T15179] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1235.331882][T15179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.331934][T15179] usb 3-1: Product: syz [ 1235.349616][T15179] usb 3-1: config 0 descriptor?? [ 1235.357075][T15179] usb 3-1: can't set config #0, error -71 [ 1235.365163][T15179] usb 3-1: USB disconnect, device number 20 [ 1236.608427][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.617944][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.347460][T19742] capability: warning: `syz.0.3883' uses deprecated v2 capabilities in a way that may be insecure [ 1238.855868][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.862556][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.456687][T19757] all: renamed from bridge_slave_0 (while UP) [ 1239.534079][ T5729] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1239.723689][ T5729] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1239.774983][ T5729] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1239.775052][ T5729] usb 7-1: config 0 has no interface number 0 [ 1239.775266][ T5729] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1239.775305][ T5729] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1239.775467][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.978124][ T5729] usb 7-1: config 0 descriptor?? [ 1240.040880][T19751] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1241.210375][ T5729] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1242.143478][T19773] syzkaller0: entered promiscuous mode [ 1242.149834][T19773] syzkaller0: entered allmulticast mode [ 1242.214596][T19773] tipc: Started in network mode [ 1242.214648][T19773] tipc: Node identity 3ea704bee60f, cluster identity 4711 [ 1242.250489][T19773] tipc: Enabled bearer , priority 0 [ 1242.280243][T19779] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1242.305673][T19769] tipc: Resetting bearer [ 1242.808972][T19769] tipc: Disabling bearer [ 1242.924403][T19780] libceph: secret too big 79 [ 1245.288833][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.291134][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.309795][T11580] usb 7-1: USB disconnect, device number 2 [ 1250.955681][T19841] all: renamed from bridge_slave_0 (while UP) [ 1251.033976][T15179] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1251.248398][T15179] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1251.261197][T15179] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1251.261273][T15179] usb 2-1: config 0 has no interface number 0 [ 1251.261385][T15179] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1251.261443][T15179] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1251.261851][T15179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.406475][T15179] usb 2-1: config 0 descriptor?? [ 1251.421341][T19837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1251.622383][T15179] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1253.920897][T17222] usb 2-1: USB disconnect, device number 45 [ 1256.770795][T19852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.774124][T19852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.440841][T19855] comedi comedi0: comedi_config --init_data is deprecated [ 1261.309856][T19881] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1264.075077][T19884] syzkaller0: entered promiscuous mode [ 1264.075123][T19884] syzkaller0: entered allmulticast mode [ 1264.107824][T19884] tipc: Enabled bearer , priority 0 [ 1265.361725][ T9] tipc: Node number set to 3634889918 [ 1265.452332][T19883] tipc: Resetting bearer [ 1265.531412][T19883] tipc: Disabling bearer [ 1266.070216][ T6567] IPVS: starting estimator thread 0... [ 1266.164863][T19907] IPVS: using max 30 ests per chain, 72000 per kthread [ 1269.253631][T19927] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1272.243871][ T9] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1272.394680][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1272.408506][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1272.408533][ T9] usb 2-1: config 0 has no interface number 0 [ 1272.408598][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1272.408623][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1272.408662][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.427997][T19944] all: renamed from bridge_slave_0 (while UP) [ 1272.631274][ T9] usb 2-1: config 0 descriptor?? [ 1272.842393][T19938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1272.873995][T15179] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1273.360149][T15179] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1273.419040][T15179] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.419089][T15179] usb 7-1: config 0 has no interface number 0 [ 1273.419142][T15179] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1273.419168][T15179] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1273.419212][T15179] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.791480][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1273.793550][T15179] usb 7-1: config 0 descriptor?? [ 1273.795709][ T9] usb 2-1: USB disconnect, device number 46 [ 1273.803149][T19942] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1273.826942][T15179] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1274.303921][T15179] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1274.773805][T15179] usb 3-1: Using ep0 maxpacket: 32 [ 1274.779498][T15179] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1274.791208][T15179] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1274.791236][T15179] usb 3-1: config 0 has no interface number 0 [ 1274.810233][T15179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.810262][T15179] usb 3-1: Product: syz [ 1274.810281][T15179] usb 3-1: Manufacturer: syz [ 1274.810291][T15179] usb 3-1: SerialNumber: syz [ 1274.839808][T15179] usb 3-1: config 0 descriptor?? [ 1274.851992][T15179] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.150983][T15179] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1276.650552][T15179] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1276.682012][ T5812] usb 7-1: USB disconnect, device number 3 [ 1278.053704][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1278.054872][T11580] usb 3-1: USB disconnect, device number 21 [ 1278.083228][T11580] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1278.161702][T11580] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1278.169655][T11580] quatech2 3-1:0.51: device disconnected [ 1279.622869][T19973] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1280.644139][T11580] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 1280.804451][T11580] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1280.805422][T11580] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1280.805444][T11580] usb 5-1: config 0 has no interface number 0 [ 1280.805480][T11580] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1280.805503][T11580] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1280.805540][T11580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.808276][T11580] usb 5-1: config 0 descriptor?? [ 1280.809002][T19986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1280.817985][T11580] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1284.466158][ T5729] usb 5-1: USB disconnect, device number 30 [ 1284.646830][T20006] size and base must be multiples of 4 kiB [ 1284.646916][T20006] CPU: 1 UID: 0 PID: 20006 Comm: syz.6.3952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.646946][T20006] Tainted: [L]=SOFTLOCKUP [ 1284.646954][T20006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1284.646973][T20006] Call Trace: [ 1284.646984][T20006] [ 1284.646993][T20006] dump_stack_lvl+0xe8/0x150 [ 1284.647150][T20006] mtrr_add+0xd5/0x100 [ 1284.647193][T20006] mtrr_ioctl+0xc98/0x13b0 [ 1284.647214][T20006] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1284.647330][T20006] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1284.647361][T20006] ? __rcu_read_unlock+0x83/0xe0 [ 1284.647396][T20006] ? __fget_files+0x2a/0x420 [ 1284.647438][T20006] ? __fget_files+0x3a2/0x420 [ 1284.647456][T20006] ? __fget_files+0x2a/0x420 [ 1284.647473][T20006] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1284.647495][T20006] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 1284.647522][T20006] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1284.647539][T20006] __se_sys_ioctl+0xfc/0x170 [ 1284.647561][T20006] do_syscall_64+0x166/0x520 [ 1284.647606][T20006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.647637][T20006] ? clear_bhb_loop+0x70/0xc0 [ 1284.647655][T20006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.647671][T20006] RIP: 0033:0x7f15df59e0d9 [ 1284.647690][T20006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.647704][T20006] RSP: 002b:00007f15e0441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.647724][T20006] RAX: ffffffffffffffda RBX: 00007f15df826180 RCX: 00007f15df59e0d9 [ 1284.647736][T20006] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1284.647747][T20006] RBP: 00007f15df635024 R08: 0000000000000000 R09: 0000000000000000 [ 1284.647756][T20006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.647765][T20006] R13: 00007f15df826218 R14: 00007f15df826180 R15: 00007ffeb14bb2a8 [ 1284.647790][T20006] [ 1285.729345][T20011] rnbd_client L610: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 1285.729466][T20011] rnbd_client L1256: Session s. not found, and path parameter not given [ 1291.062583][T20050] size and base must be multiples of 4 kiB [ 1291.062661][T20050] CPU: 1 UID: 0 PID: 20050 Comm: syz.6.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.062691][T20050] Tainted: [L]=SOFTLOCKUP [ 1291.062698][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1291.062710][T20050] Call Trace: [ 1291.062717][T20050] [ 1291.062726][T20050] dump_stack_lvl+0xe8/0x150 [ 1291.062760][T20050] mtrr_add+0xd5/0x100 [ 1291.062789][T20050] mtrr_ioctl+0xc98/0x13b0 [ 1291.062815][T20050] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1291.062849][T20050] ? __fget_files+0x2a/0x420 [ 1291.062868][T20050] ? __fget_files+0x3a2/0x420 [ 1291.062885][T20050] ? __fget_files+0x2a/0x420 [ 1291.062903][T20050] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1291.062924][T20050] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 1291.062941][T20050] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1291.062958][T20050] __se_sys_ioctl+0xfc/0x170 [ 1291.062975][T20050] do_syscall_64+0x166/0x520 [ 1291.062996][T20050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.063011][T20050] ? clear_bhb_loop+0x70/0xc0 [ 1291.063029][T20050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.063044][T20050] RIP: 0033:0x7f15df59e0d9 [ 1291.063058][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.063071][T20050] RSP: 002b:00007f15e0441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.063088][T20050] RAX: ffffffffffffffda RBX: 00007f15df826180 RCX: 00007f15df59e0d9 [ 1291.063099][T20050] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1291.063108][T20050] RBP: 00007f15df635024 R08: 0000000000000000 R09: 0000000000000000 [ 1291.063118][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.063126][T20050] R13: 00007f15df826218 R14: 00007f15df826180 R15: 00007ffeb14bb2a8 [ 1291.063150][T20050] [ 1300.405751][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.405833][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.079052][T20104] all: renamed from bridge_slave_0 (while UP) [ 1304.592838][T20131] comedi comedi0: comedi_config --init_data is deprecated [ 1304.698635][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1304.865254][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1304.885667][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1304.892234][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1304.892299][ T9] usb 7-1: config 0 has no interface number 0 [ 1304.974628][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.974694][ T9] usb 7-1: Product: syz [ 1304.974983][ T9] usb 7-1: Manufacturer: syz [ 1304.975066][ T9] usb 7-1: SerialNumber: syz [ 1305.191208][ T9] usb 7-1: config 0 descriptor?? [ 1305.322033][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1305.792192][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1305.835613][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1307.113235][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1307.115804][ T5812] usb 7-1: USB disconnect, device number 4 [ 1307.136571][ T5812] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1307.163334][ T5812] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1307.172834][ T5812] quatech2 7-1:0.51: device disconnected [ 1307.571968][T20152] size and base must be multiples of 4 kiB [ 1307.572046][T20152] CPU: 1 UID: 0 PID: 20152 Comm: syz.2.3997 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.572075][T20152] Tainted: [L]=SOFTLOCKUP [ 1307.572082][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1307.572093][T20152] Call Trace: [ 1307.572101][T20152] [ 1307.572109][T20152] dump_stack_lvl+0xe8/0x150 [ 1307.572143][T20152] mtrr_add+0xd5/0x100 [ 1307.572170][T20152] mtrr_ioctl+0xc98/0x13b0 [ 1307.572195][T20152] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1307.572215][T20152] ? irqentry_exit+0x218/0x910 [ 1307.572332][T20152] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1307.572353][T20152] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1307.572375][T20152] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 1307.572392][T20152] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1307.572408][T20152] __se_sys_ioctl+0xfc/0x170 [ 1307.572425][T20152] do_syscall_64+0x166/0x520 [ 1307.572445][T20152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.572460][T20152] ? clear_bhb_loop+0x70/0xc0 [ 1307.572478][T20152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.572492][T20152] RIP: 0033:0x7fbdc9f9e0d9 [ 1307.572507][T20152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.572520][T20152] RSP: 002b:00007fbdc81b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.572537][T20152] RAX: ffffffffffffffda RBX: 00007fbdca226180 RCX: 00007fbdc9f9e0d9 [ 1307.572547][T20152] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1307.572557][T20152] RBP: 00007fbdca035024 R08: 0000000000000000 R09: 0000000000000000 [ 1307.572566][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.572575][T20152] R13: 00007fbdca226218 R14: 00007fbdca226180 R15: 00007ffeece83c48 [ 1307.572598][T20152] [ 1307.644822][T20152] netlink: 'syz.2.3997': attribute type 4 has an invalid length. [ 1310.214039][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1310.234531][T20170] all: renamed from bridge_slave_0 (while UP) [ 1310.395786][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1310.433310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.433348][ T9] usb 3-1: Product: syz [ 1310.433392][ T9] usb 3-1: Manufacturer: syz [ 1310.433436][ T9] usb 3-1: SerialNumber: syz [ 1311.797161][ T9] usb 3-1: USB disconnect, device number 22 [ 1314.826832][T15176] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1315.159102][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 1315.921248][T20191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.929247][T20191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.511228][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1321.665408][T20213] all: renamed from bridge_slave_0 (while UP) [ 1322.745221][T20215] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1326.416519][T20235] comedi comedi0: comedi_config --init_data is deprecated [ 1327.973817][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 1329.126346][T20254] all: renamed from bridge_slave_0 (while UP) [ 1330.199889][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1332.009203][T20268] size and base must be multiples of 4 kiB [ 1332.009284][T20268] CPU: 1 UID: 0 PID: 20268 Comm: syz.0.4028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.009312][T20268] Tainted: [L]=SOFTLOCKUP [ 1332.009318][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1332.009327][T20268] Call Trace: [ 1332.009333][T20268] [ 1332.009339][T20268] dump_stack_lvl+0xe8/0x150 [ 1332.009366][T20268] mtrr_add+0xd5/0x100 [ 1332.009390][T20268] mtrr_ioctl+0xc98/0x13b0 [ 1332.009416][T20268] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1332.009449][T20268] ? __fget_files+0x2a/0x420 [ 1332.009470][T20268] ? __fget_files+0x3a2/0x420 [ 1332.009488][T20268] ? __fget_files+0x2a/0x420 [ 1332.009506][T20268] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1332.009527][T20268] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 1332.009558][T20268] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1332.009579][T20268] __se_sys_ioctl+0xfc/0x170 [ 1332.009600][T20268] do_syscall_64+0x166/0x520 [ 1332.009626][T20268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.009642][T20268] ? clear_bhb_loop+0x70/0xc0 [ 1332.009660][T20268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.009677][T20268] RIP: 0033:0x7fbde279e0d9 [ 1332.009694][T20268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.009711][T20268] RSP: 002b:00007fbde09d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.009733][T20268] RAX: ffffffffffffffda RBX: 00007fbde2a26180 RCX: 00007fbde279e0d9 [ 1332.009744][T20268] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1332.009772][T20268] RBP: 00007fbde2835024 R08: 0000000000000000 R09: 0000000000000000 [ 1332.009783][T20268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.009794][T20268] R13: 00007fbde2a26218 R14: 00007fbde2a26180 R15: 00007fff965edfd8 [ 1332.009820][T20268] [ 1332.053846][T20268] netlink: 'syz.0.4028': attribute type 4 has an invalid length. [ 1332.763842][T20274] binder: 20273:20274 ioctl 4018620d 0 returned -22 [ 1332.893779][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1333.043761][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1333.050580][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1333.062106][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1333.062172][ T9] usb 3-1: config 0 has no interface number 0 [ 1333.080416][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.080457][ T9] usb 3-1: Product: syz [ 1333.080490][ T9] usb 3-1: Manufacturer: syz [ 1333.080507][ T9] usb 3-1: SerialNumber: syz [ 1333.111187][ T9] usb 3-1: config 0 descriptor?? [ 1333.130303][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1333.430168][T20281] size and base must be multiples of 4 kiB [ 1333.430250][T20281] CPU: 1 UID: 0 PID: 20281 Comm: syz.6.4019 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.430280][T20281] Tainted: [L]=SOFTLOCKUP [ 1333.430287][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.430298][T20281] Call Trace: [ 1333.430306][T20281] [ 1333.430315][T20281] dump_stack_lvl+0xe8/0x150 [ 1333.430350][T20281] mtrr_add+0xd5/0x100 [ 1333.430377][T20281] mtrr_ioctl+0xc98/0x13b0 [ 1333.430409][T20281] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1333.430432][T20281] ? irqentry_exit+0x218/0x910 [ 1333.430466][T20281] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1333.430489][T20281] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1333.430511][T20281] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 1333.430528][T20281] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1333.430544][T20281] __se_sys_ioctl+0xfc/0x170 [ 1333.430562][T20281] do_syscall_64+0x166/0x520 [ 1333.430586][T20281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.430603][T20281] ? clear_bhb_loop+0x70/0xc0 [ 1333.430621][T20281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.430635][T20281] RIP: 0033:0x7f15df59e0d9 [ 1333.430651][T20281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.430663][T20281] RSP: 002b:00007f15e0441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1333.430685][T20281] RAX: ffffffffffffffda RBX: 00007f15df826180 RCX: 00007f15df59e0d9 [ 1333.430696][T20281] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 1333.430710][T20281] RBP: 00007f15df635024 R08: 0000000000000000 R09: 0000000000000000 [ 1333.430722][T20281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.430734][T20281] R13: 00007f15df826218 R14: 00007f15df826180 R15: 00007ffeb14bb2a8 [ 1333.430758][T20281] [ 1333.459759][T20281] netlink: 'syz.6.4019': attribute type 4 has an invalid length. [ 1333.828054][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1333.837339][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1334.006178][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1334.006837][ T9] usb 3-1: USB disconnect, device number 23 [ 1334.016799][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1334.037824][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1334.040489][ T9] quatech2 3-1:0.51: device disconnected [ 1336.131418][ T5619] Bluetooth: hci0: unexpected event for opcode 0x200d [ 1336.654523][T20314] binder: 20312:20314 ioctl 4018620d 0 returned -22 [ 1337.297512][T20317] netlink: 'syz.2.4045': attribute type 32 has an invalid length. [ 1337.500122][T20328] libceph: secret too big 79 [ 1340.523602][T20345] ima: policy update completed [ 1340.778025][ T30] audit: type=1807 audit(1787613178.550:7): action=measure res=1 [ 1340.778085][ T30] audit: type=1802 audit(1787613179.010:8): pid=20345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.4055" res=1 errno=0 [ 1340.937328][ T30] audit: type=1800 audit(1787613179.320:9): pid=18780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 1341.191592][ T30] audit: type=1800 audit(1787613179.570:10): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 1341.234856][ T30] audit: type=1800 audit(1787613179.610:11): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 1341.280659][ T30] audit: type=1800 audit(1787613179.660:12): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 1341.299949][T20353] binder: 20352:20353 ioctl c0306201 0 returned -14 [ 1341.536847][ T30] audit: type=1800 audit(1787613179.920:13): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 1341.549752][ T30] audit: type=1800 audit(1787613179.920:14): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 1341.790134][ T30] audit: type=1800 audit(1787613180.170:15): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 1341.797832][ T30] audit: type=1800 audit(1787613180.170:16): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 1341.836786][T20358] overlayfs: missing 'lowerdir' [ 1341.973076][T20365] netlink: 'syz.6.4061': attribute type 32 has an invalid length. [ 1342.114387][ T5812] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1343.513404][ T5812] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1343.514407][ T5812] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 1343.514429][ T5812] usb 2-1: config 127 has no interface number 0 [ 1343.522238][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.522265][ T5812] usb 2-1: Product: syz [ 1343.522278][ T5812] usb 2-1: Manufacturer: syz [ 1343.522291][ T5812] usb 2-1: SerialNumber: syz [ 1344.994897][ T5812] asix 2-1:127.57: probe with driver asix failed with error -22 [ 1345.015022][ T5812] usb 2-1: USB disconnect, device number 47 [ 1345.746174][ T31] INFO: task syz.5.3789:19381 blocked for m ** replaying previous printk message ** [ 1345.746174][ T31] INFO: task syz.5.3789:19381 blocked for more than 144 seconds. [ 1345.746219][ T31] Tainted: G L syzkaller #0 [ 1345.746243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1345.746256][ T31] task:syz.5.3789 state:D stack:25744 pid:19381 tgid:19378 ppid:18599 task_flags:0x400140 flags:0x00080002 [ 1345.746315][ T31] Call Trace: [ 1345.746324][ T31] [ 1345.746340][ T31] __schedule+0x17d4/0x5820 [ 1345.746400][ T31] ? __pfx___schedule+0x10/0x10 [ 1345.746425][ T31] ? lock_acquire+0x115/0x350 [ 1345.746515][ T31] ? schedule+0x90/0x2b0 [ 1345.746544][ T31] schedule+0x164/0x2b0 [ 1345.746572][ T31] schedule_timeout+0xc0/0x2c0 [ 1345.746596][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1345.746621][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1345.746665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1345.746691][ T31] ? wait_for_completion+0x272/0x5e0 [ 1345.746713][ T31] wait_for_completion+0x2ca/0x5e0 [ 1345.746731][ T31] ? snd_refcount_sync+0x7f/0x240 [ 1345.746891][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1345.746913][ T31] ? rcu_is_watching+0x16/0xb0 [ 1345.746940][ T31] ? kobject_put+0x50f/0x550 [ 1345.747019][ T31] trigger_card_free+0x147/0x1d0 [ 1345.747044][ T31] ? __pfx_trigger_card_free+0x10/0x10 [ 1345.747064][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1345.747096][ T31] ? rcu_is_watching+0x16/0xb0 [ 1345.747119][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1345.747145][ T31] devres_release_all+0x1a8/0x260 [ 1345.747222][ T31] ? __pfx_devres_release_all+0x10/0x10 [ 1345.747246][ T31] ? iommu_device_unuse_default_domain+0xc0/0x130 [ 1345.747350][ T31] device_release_driver_internal+0x5d9/0x880 [ 1345.747401][ T31] unbind_store+0x1a1/0x1d0 [ 1345.747429][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1345.747502][ T31] kernfs_fop_write_iter+0x3a4/0x540 [ 1345.747530][ T31] vfs_write+0x612/0xba0 [ 1345.747574][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1345.747609][ T31] ? __fget_files+0x2a/0x420 [ 1345.747649][ T31] ksys_write+0x150/0x270 [ 1345.747677][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1345.747714][ T31] do_syscall_64+0x166/0x520 [ 1345.747739][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.747758][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1345.747780][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.747798][ T31] RIP: 0033:0x7f1a1a79e0d9 [ 1345.747815][ T31] RSP: 002b:00007f1a1b627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.747834][ T31] RAX: ffffffffffffffda RBX: 00007f1a1aa26180 RCX: 00007f1a1a79e0d9 [ 1345.747847][ T31] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000005 [ 1345.747859][ T31] RBP: 00007f1a1a835024 R08: 0000000000000000 R09: 0000000000000000 [ 1345.747869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.747880][ T31] R13: 00007f1a1aa26218 R14: 00007f1a1aa26180 R15: 00007ffc6e333c68 [ 1345.747910][ T31] [ 1345.747936][ T31] [ 1345.747936][ T31] Showing all locks held in the system: [ 1345.747944][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1345.747959][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1345.748006][ T31] #1: ffffffff9ad34078 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1345.748106][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1345.748120][ T31] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1345.748192][ T31] locks held by udevd/4985: 1, last CPU#1: [ 1345.748205][ T31] #0: ffffffff8f4ef338 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1345.748333][ T31] locks held by getty/5378: 2, on CPU#1: [ 1345.748345][ T31] #0: ffff888035fcd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1345.748428][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1345.748496][ T31] locks held by kworker/0:6/5812: 4, on CPU#0: [ 1345.748509][ T31] #0: ffff8880222c0d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1345.748568][ T31] #1: ffffc90005017c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1345.748614][ T31] #2: ffff888029b311d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1345.748717][ T31] #3: ffff88802033fa58 (kn->active#30){++++}-{0:0}, at: __kernfs_remove+0x493/0x8e0 [ 1345.748768][ T31] locks held by syz-executor/14829: 1, last CPU#1: [ 1345.748781][ T31] #0: ffff88805fbac460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1345.748832][ T31] locks held by udevd/17984: 2, last CPU#0: [ 1345.748845][ T31] #0: ffff88802033fa58 (kn->active#30){++++}-{0:0}, at: kernfs_fop_open+0x5a/0xce0 [ 1345.748908][ T31] #1: ffff88814044c748 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_open+0x709/0xce0 [ 1345.748954][ T31] locks held by kworker/0:0H/18685: 2, last CPU#0: [ 1345.748967][ T31] #0: ffff88801b06ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1345.749013][ T31] #1: ffffc900063a7c40 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1345.749063][ T31] locks held by syz.5.3789/19381: 4, on CPU#0: [ 1345.749075][ T31] #0: ffff88807a31e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1345.749121][ T31] #1: ffff888076dce460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1345.749171][ T31] #2: ffff88805aec4c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1345.749216][ T31] #3: ffff888032730138 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1345.749258][ T31] locks held by syz-executor/19473: 1, last CPU#1: [ 1345.749270][ T31] #0: ffff88807a126460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1345.749317][ T31] locks held by syz.0.4067/20383: 1, on CPU#1: [ 1345.749329][ T31] #0: ffff8880583f0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_inquiry+0x36c/0x670 [ 1345.749428][ T31] locks held by syz-executor/20385: 3, last CPU#1: [ 1345.749440][ T31] #0: ffff88801bb479a8 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1345.749552][ T31] #1: ffffffff8eeabe70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1345.749600][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1345.749652][ T31] [ 1345.749657][ T31] ============================================= [ 1345.749657][ T31] [ 1345.749671][ T31] NMI backtrace for cpu 0 [ 1345.749685][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.749709][ T31] Tainted: [L]=SOFTLOCKUP [ 1345.749715][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1345.749725][ T31] Call Trace: [ 1345.749732][ T31] [ 1345.749739][ T31] dump_stack_lvl+0xe8/0x150 [ 1345.749766][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1345.749815][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1345.749844][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1345.749868][ T31] sys_info+0x135/0x170 [ 1345.749886][ T31] watchdog+0xfd7/0x1030 [ 1345.749930][ T31] ? watchdog+0x1c7/0x1030 [ 1345.749953][ T31] kthread+0x38b/0x480 [ 1345.749971][ T31] ? __pfx_watchdog+0x10/0x10 [ 1345.749986][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.750005][ T31] ret_from_fork+0x514/0xb70 [ 1345.750039][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.750056][ T31] ? __switch_to+0xc89/0x1420 [ 1345.750082][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.750101][ T31] ret_from_fork_asm+0x1a/0x30 [ 1345.750132][ T31] [ 1345.750138][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1345.750196][ C1] NMI backtrace for cpu 1 [ 1345.750211][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.750237][ C1] Tainted: [L]=SOFTLOCKUP [ 1345.750244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1345.750255][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1345.750306][ C1] Code: e8 5e be 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f b1 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1345.750324][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1345.750340][ C1] RAX: 1ffffffff35a6800 RBX: 00000000000003fd RCX: 0000000000000000 [ 1345.750354][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1345.750367][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1345.750379][ C1] R10: dffffc0000000000 R11: ffffffff8571f7f0 R12: dffffc0000000000 [ 1345.750394][ C1] R13: 0000000000000000 R14: ffffffff9ad340a0 R15: 0000000000000000 [ 1345.750407][ C1] FS: 0000000000000000(0000) GS:ffff888124dd7000(0000) knlGS:0000000000000000 [ 1345.750423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1345.750437][ C1] CR2: 00007fa978c27dac CR3: 000000005ca06000 CR4: 00000000003526f0 [ 1345.750454][ C1] Call Trace: [ 1345.750461][ C1] [ 1345.750470][ C1] wait_for_lsr+0x184/0x2f0 [ 1345.750503][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1345.750531][ C1] serial8250_console_write+0xaa1/0x1200 [ 1345.750567][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1345.750597][ C1] ? rcu_is_watching+0x16/0xb0 [ 1345.750629][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1345.750659][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1345.750685][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1345.750715][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1345.750743][ C1] nbcon_kthread_func+0x679/0x880 [ 1345.750768][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1345.750788][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1345.750812][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1345.750841][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1345.750873][ C1] kthread+0x38b/0x480 [ 1345.750891][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1345.750910][ C1] ? __pfx_kthread+0x10/0x10 [ 1345.750929][ C1] ret_from_fork+0x514/0xb70 [ 1345.750949][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.750967][ C1] ? __switch_to+0xc89/0x1420 [ 1345.750995][ C1] ? __pfx_kthread+0x10/0x10 [ 1345.751015][ C1] ret_from_fork_asm+0x1a/0x30 [ 1345.751042][ C1] [ 1345.751171][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1346.731860][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.742518][ T31] Tainted: [L]=SOFTLOCKUP [ 1346.746822][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.756856][ T31] Call Trace: [ 1346.760121][ T31] [ 1346.763035][ T31] vpanic+0x56d/0xa60 [ 1346.767030][ T31] ? __pfx_vpanic+0x10/0x10 [ 1346.771521][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1346.777051][ T31] panic+0xc5/0xd0 [ 1346.780761][ T31] ? __pfx_panic+0x10/0x10 [ 1346.785157][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1346.790161][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1346.796304][ T31] watchdog+0x1030/0x1030 [ 1346.800619][ T31] ? watchdog+0x1c7/0x1030 [ 1346.805022][ T31] kthread+0x38b/0x480 [ 1346.809079][ T31] ? __pfx_watchdog+0x10/0x10 [ 1346.813758][ T31] ? __pfx_kthread+0x10/0x10 [ 1346.818351][ T31] ret_from_fork+0x514/0xb70 [ 1346.822933][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1346.828024][ T31] ? __switch_to+0xc89/0x1420 [ 1346.832686][ T31] ? __pfx_kthread+0x10/0x10 [ 1346.837255][ T31] ret_from_fork_asm+0x1a/0x30 [ 1346.842011][ T31] [ 1346.845292][ T31] Kernel Offset: disabled [ 1346.849608][ T31] Rebooting in 86400 seconds..