last executing test programs: 8m53.064533094s ago: executing program 32 (id=1880): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000005c000/0x4000)=nil, 0xffffffffffffff03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet(0x2, 0x6, 0xf2bc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket(0x21, 0x80000, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioprio_set$pid(0x3, r0, 0x2000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100001040000e2ff0001f80000000000", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0xeb64d656001f6f32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x50001, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(r9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0xa, {0x2, 0x4e24, @loopback}, 'veth0_to_batadv\x00'}) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$TIOCSIG(r10, 0x40045436, 0x14) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB="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"], 0xfb, 0x20f, &(0x7f0000000d40)="$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") 7m35.724925441s ago: executing program 33 (id=2103): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x22, 0xe, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x8, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100400, 0x1000, 0x0, 0x0, 0x100000, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x1, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7m7.093838861s ago: executing program 34 (id=2202): futex(0x0, 0x85, 0x3, 0x0, 0x0, 0xc6000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffe56, &(0x7f0000000340)=0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) 6m47.939827306s ago: executing program 35 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x13, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 5m58.96359425s ago: executing program 36 (id=2522): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)={[{@fat=@gid}, {@fat=@debug}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@numtail}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5m24.139363798s ago: executing program 2 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) 5m8.721260804s ago: executing program 37 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) 4m38.487279492s ago: executing program 38 (id=2665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@errors_remount}, {@abort}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) 4m38.457733893s ago: executing program 39 (id=2661): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) 1m56.435054753s ago: executing program 6 (id=3882): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000380)="0f30c4a1c572e7c5ae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x34}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x8, 0x0, 0x9, 0x9, 0x8000000000000004, 0xc6, 0x5, 0x82, 0x0, 0x421c, 0x7, 0x7fffffffffffffff, 0xffffffffffff8b16, 0x7, 0x3], 0x10000, 0x3957c4}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m56.035651443s ago: executing program 40 (id=3882): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000380)="0f30c4a1c572e7c5ae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x34}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x8, 0x0, 0x9, 0x9, 0x8000000000000004, 0xc6, 0x5, 0x82, 0x0, 0x421c, 0x7, 0x7fffffffffffffff, 0xffffffffffff8b16, 0x7, 0x3], 0x10000, 0x3957c4}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 34.682102356s ago: executing program 3 (id=4435): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x80086301, 0x4000) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, 0xffffffffffffffff, 0x0) 34.153565229s ago: executing program 8 (id=4440): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) lstat(&(0x7f0000005980)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) 34.011442702s ago: executing program 41 (id=4442): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x94, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x8001, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x47, 0x0, &(0x7f0000000300)="3aff0adf42cb650707b5db5901ee420e3168c682a82133a40a06df45aa763a413230718fe8d07ab4344f66f4a20e2980ee62b825a7682ce89df7f97200fc36b265910224ab0323"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 33.618664761s ago: executing program 42 (id=4449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x0) 32.246263184s ago: executing program 0 (id=4455): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 32.187225315s ago: executing program 8 (id=4450): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='ehci-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) 32.076630838s ago: executing program 8 (id=4457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000380)='file0\x00', 0x6) 32.060805618s ago: executing program 0 (id=4459): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/kcov\x00', 0x2, 0x0) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, r1, 0x0) 32.044773308s ago: executing program 2 (id=4458): mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='ACME\n\x00', 0x5) 31.97995516s ago: executing program 8 (id=4460): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x94, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x8001, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x47, 0x0, &(0x7f0000000300)="3aff0adf42cb650707b5db5901ee420e3168c682a82133a40a06df45aa763a413230718fe8d07ab4344f66f4a20e2980ee62b825a7682ce89df7f97200fc36b265910224ab0323"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 31.97978966s ago: executing program 2 (id=4461): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x800000000000000c, 0x0, r0}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f00005c3000/0x2000)=nil, 0x2000, 0x0, 0xf132, 0xffffffffffffffff, 0x2000) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x5f1, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') 31.653948788s ago: executing program 3 (id=4462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/events/kvm/kvm_inj_exception/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debugfs/tracing/events/kvm/kvm_inj_exception/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debugfs/tracing/events/kvm/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000500)=@x86={0x1, 0xd, 0x1}) 31.588996169s ago: executing program 3 (id=4463): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) 31.54079162s ago: executing program 3 (id=4464): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 31.476229472s ago: executing program 3 (id=4465): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) read(r1, &(0x7f0000000c00), 0x64) 31.415994143s ago: executing program 3 (id=4466): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) 31.038762083s ago: executing program 8 (id=4467): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) read(r1, &(0x7f0000000c00), 0x64) 31.017652203s ago: executing program 2 (id=4468): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 30.990254744s ago: executing program 8 (id=4469): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) 30.984807853s ago: executing program 2 (id=4470): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000700)=0x2) write(r1, &(0x7f0000000800)='a\n\x00', 0x2) write(r1, &(0x7f0000000900)='b\n\x00', 0x2) read(r2, &(0x7f0000000b00), 0x64) read(r2, &(0x7f0000000c00), 0x64) 30.910693885s ago: executing program 2 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) 30.501517965s ago: executing program 0 (id=4473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='7\n\x00', 0x2) 30.417694177s ago: executing program 0 (id=4474): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 29.436517541s ago: executing program 0 (id=4477): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000700)=0x2) write(r1, &(0x7f0000000800)='a\n\x00', 0x2) read(r2, &(0x7f0000000b00), 0x64) read(r2, &(0x7f0000000c00), 0x64) 29.377551072s ago: executing program 0 (id=4478): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 16.318659032s ago: executing program 43 (id=4466): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) 15.893766462s ago: executing program 44 (id=4469): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) 15.851954133s ago: executing program 45 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) 14.31641141s ago: executing program 46 (id=4478): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 13.199322326s ago: executing program 6 (id=4504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./data\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000200)='\n03U\x00\x00\x00\x00\b\x00\x00\x00', 0xc) pread64(r2, &(0x7f000000c120), 0x4, 0x0) pread64(r2, &(0x7f000000c140), 0x4, 0x4) pread64(r2, &(0x7f000000c14c), 0x4, 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dwc3-haps\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='0000:00:01.0\x00', 0xc) close(r4) 13.103044989s ago: executing program 6 (id=4512): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='0123456789', 0xa) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000540)='1280', 0x4) close(r1) r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r2, &(0x7f0000000600)='720', 0x3) close(r2) r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r3, &(0x7f00000006c0)='1843200', 0x7) close(r3) r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r4, &(0x7f0000000780)='333333', 0x6) close(r4) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb) close(r5) 13.022710351s ago: executing program 6 (id=4515): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 11.851605128s ago: executing program 6 (id=4533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 11.071977077s ago: executing program 6 (id=4541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./data\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000200)='\n03U\x00\x00\x00\x00\b\x00\x00\x00', 0xc) pread64(r2, &(0x7f000000c140), 0x4, 0x4) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dwc3-haps\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='0000:00:01.0\x00', 0xc) close(r4) 11.071882417s ago: executing program 47 (id=4541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./data\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000200)='\n03U\x00\x00\x00\x00\b\x00\x00\x00', 0xc) pread64(r2, &(0x7f000000c140), 0x4, 0x4) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dwc3-haps\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='0000:00:01.0\x00', 0xc) close(r4) 8.752673922s ago: executing program 4 (id=4586): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 8.338660982s ago: executing program 4 (id=4593): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000000), 0x1000000, 0x0) r3 = syz_pidfd_open(0x0, 0x0) process_madvise(r3, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 7.344381025s ago: executing program 4 (id=4600): syz_read_part_table(0x5ea, &(0x7f0000000600)="$eJzs2zFo1FccB/DfXe6qjYNDO7lUHRxKF6WjN6jcnYrCcZpFSqugiHjTCcJJDwQt6A2KNxTHLCLcou3k9YZMCSlkDiFDSiBDlpZkCWTJlWte4Lgm0JZQCXw+8Of933u/+33/D259wYGWjT/6/X4mIvqHdq/oD71/N7I30SmWLh2vnKteT81i8vAPnw1eMzu/Tl1PpvlSmr+ZHO89X7+Y7yxe2zh1c7qVTfuP03PkbXdi9Ev2+EA+oneFmaNPnn4SLxqFewvl5sqz+bmr79eK1e6VVvuny/kLt1PdbBpzaXwQjXgU9+NW1KIWd6I+0jc/Ms+MBueG8+vlnfzXneXTW8fKnQ93z26Wei+nzqTyyj6eedho/sMTr260m+e/+vnzH79u/PJrdXVsu67mzwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCC8K8wcffK0Xn7RKNxbKDdXns3PXX2/Vqx2r7Ta45fzF25HRC4iZlN9Lo0PohGP4n7cilpk4k7U/2Xu4T3yX3eWT28dK3c+3D27Weq9nDqT6ip/6/DFfz7zsKH83CD/4YlXN9rN85GNTwfb1dWx7braoX2JAwAAAAAAAAAAAAAAAAAAgF0VS5eOV85Vr0dk4pvIxZe/f58drPfTffdMxF834U9GtL6NiKW0/mZyvPd8/WK+s3ht49TN6dZvaf1xeo687U6MRI39rwfjH/kzAAD//5O8kXc=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) close_range(r0, r1, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r3 = open_tree(r2, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1b38c26, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f", @ANYRESOCT=0x0, @ANYRES64, @ANYRES16=r0, @ANYRES64=0x0], 0x1, 0x2c6, &(0x7f0000001600)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1}) epoll_create1(0x80000) 4.18799213s ago: executing program 4 (id=4657): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.904224277s ago: executing program 4 (id=4662): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x94, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x8001, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x47, 0x0, &(0x7f0000000300)="3aff0adf42cb650707b5db5901ee420e3168c682a82133a40a06df45aa763a413230718fe8d07ab4344f66f4a20e2980ee62b825a7682ce89df7f97200fc36b265910224ab0323"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.829683449s ago: executing program 5 (id=4665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 3.729104941s ago: executing program 5 (id=4667): syz_read_part_table(0x5ea, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) close_range(r0, r1, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r3 = open_tree(r2, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1b38c26, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f", @ANYRESOCT=0x0, @ANYRES64, @ANYRES16=r0, @ANYRES64=0x0], 0x1, 0x2c6, &(0x7f0000001600)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) epoll_create1(0x80000) 2.966355199s ago: executing program 4 (id=4677): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, 0xffffffffffffffff, 0x0) 2.439378322s ago: executing program 7 (id=4689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='ACM', 0x3) 2.379924224s ago: executing program 7 (id=4690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r3) 1.790044017s ago: executing program 1 (id=4692): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='0123456789', 0xa) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='1280', 0x4) close(0xffffffffffffffff) r1 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000600)='720', 0x3) close(r1) close(0xffffffffffffffff) r2 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r2, &(0x7f0000000780)='333333', 0x6) close(r2) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) close(r3) unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 1.727009769s ago: executing program 5 (id=4693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 1.68005485s ago: executing program 5 (id=4694): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x1000000, 0x0) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 1.554661173s ago: executing program 1 (id=4695): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.480520565s ago: executing program 1 (id=4696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x1000000, 0x0) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 1.120076623s ago: executing program 9 (id=4702): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) 1.119872213s ago: executing program 9 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r3, &(0x7f0000000000), 0x1000000, 0x0) pread64(r3, &(0x7f0000000000), 0x1000000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) 1.025637236s ago: executing program 5 (id=4704): fsopen(&(0x7f0000000040)='fusectl\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) close(0x4) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_genetlink_get_family_id$team(&(0x7f0000000200), r4) 699.851173ms ago: executing program 1 (id=4705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 679.866784ms ago: executing program 7 (id=4706): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r3, &(0x7f0000000000), 0x1000000, 0x0) pread64(r3, &(0x7f0000000000), 0x1000000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='1000000\n\x00', 0x8) syz_pidfd_open(0x0, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) 662.457974ms ago: executing program 9 (id=4707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000000), 0x1000000, 0x0) r3 = syz_pidfd_open(0x0, 0x0) process_madvise(r3, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 225.380694ms ago: executing program 7 (id=4708): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='0123456789', 0xa) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000540)='1280', 0x4) close(r1) r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r2, &(0x7f0000000600)='720', 0x3) close(r2) close(0xffffffffffffffff) r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r3, &(0x7f0000000780)='333333', 0x6) close(r3) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) close(r4) unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 225.282804ms ago: executing program 1 (id=4709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 173.975426ms ago: executing program 1 (id=4710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000000), 0x1000000, 0x0) r1 = syz_pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 168.330286ms ago: executing program 9 (id=4720): openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='file0\x00', 0x6) 139.150766ms ago: executing program 5 (id=4711): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 114.364987ms ago: executing program 9 (id=4712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 113.701687ms ago: executing program 7 (id=4713): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) 56.160488ms ago: executing program 7 (id=4714): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='012345678', 0x9) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000540), 0x0) close(r1) r2 = open(0x0, 0x241, 0x1ff) write(r2, &(0x7f0000000600)='72', 0x2) close(r2) r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r3, &(0x7f00000006c0)='1843200', 0x7) close(r3) r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r4, &(0x7f0000000780)='333333', 0x6) close(r4) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb) close(r5) unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 0s ago: executing program 9 (id=4715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000000), 0x1000000, 0x0) r3 = syz_pidfd_open(0x0, 0x0) process_madvise(r3, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) kernel console output (not intermixed with test programs): ][T12817] lvs: probe of 3-0:1.0 failed with error -22 [ 896.636528][T12817] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 896.643244][T12817] lvs: probe of 4-0:1.0 failed with error -22 [ 896.649413][T12825] lvs: probe of 1-0:1.0 failed with error -22 [ 896.662365][T12825] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.669357][T12817] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 896.676073][T12817] lvs: probe of 5-0:1.0 failed with error -22 [ 896.686454][T12825] lvs: probe of 2-0:1.0 failed with error -22 [ 896.694993][T12827] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.699936][T12825] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 896.706079][T12827] lvs: probe of 1-0:1.0 failed with error -22 [ 896.711442][T12825] lvs: probe of 3-0:1.0 failed with error -22 [ 896.718432][T12819] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.723026][T12825] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 896.728036][T12827] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.734892][T12825] lvs: probe of 4-0:1.0 failed with error -22 [ 896.741101][T12819] lvs: probe of 1-0:1.0 failed with error -22 [ 896.748495][T12825] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 896.754464][T12827] lvs: probe of 2-0:1.0 failed with error -22 [ 896.760447][T12825] lvs: probe of 5-0:1.0 failed with error -22 [ 896.766350][T12819] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.773649][T12827] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 896.785674][T12827] lvs: probe of 3-0:1.0 failed with error -22 [ 896.792040][T12827] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 896.796599][T12819] lvs: probe of 2-0:1.0 failed with error -22 [ 896.799469][T12827] lvs: probe of 4-0:1.0 failed with error -22 [ 896.811293][T12827] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 896.815869][T12819] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 896.819161][T12827] lvs: probe of 5-0:1.0 failed with error -22 [ 896.831821][T12819] lvs: probe of 3-0:1.0 failed with error -22 [ 896.838110][T12819] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 896.845690][T12819] lvs: probe of 4-0:1.0 failed with error -22 [ 896.852118][T12830] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.859102][T12819] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 896.876768][T12819] lvs: probe of 5-0:1.0 failed with error -22 [ 896.886490][T12830] lvs: probe of 1-0:1.0 failed with error -22 [ 896.892940][T12830] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.896655][T12833] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.900215][T12830] lvs: probe of 2-0:1.0 failed with error -22 [ 896.912725][T12830] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 896.923003][T12833] lvs: probe of 1-0:1.0 failed with error -22 [ 896.929891][T12820] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.930621][T12833] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.943786][T12833] lvs: probe of 2-0:1.0 failed with error -22 [ 896.948334][T12820] lvs: probe of 1-0:1.0 failed with error -22 [ 896.952297][T12830] lvs: probe of 3-0:1.0 failed with error -22 [ 896.961967][T12820] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 896.969277][T12820] lvs: probe of 2-0:1.0 failed with error -22 [ 896.975571][T12830] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 896.976000][T12839] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 896.983117][T12830] lvs: probe of 4-0:1.0 failed with error -22 [ 896.995498][T12830] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.002246][T12830] lvs: probe of 5-0:1.0 failed with error -22 [ 897.008411][T12833] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.008427][T12833] lvs: probe of 3-0:1.0 failed with error -22 [ 897.008645][T12833] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.015125][T12839] lvs: probe of 1-0:1.0 failed with error -22 [ 897.034397][T12820] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.056643][T12820] lvs: probe of 3-0:1.0 failed with error -22 [ 897.063377][T12833] lvs: probe of 4-0:1.0 failed with error -22 [ 897.064066][T12839] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.072012][T12831] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.076368][T12839] lvs: probe of 2-0:1.0 failed with error -22 [ 897.084399][T12833] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.089270][T12820] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.097288][T12831] lvs: probe of 1-0:1.0 failed with error -22 [ 897.102988][T12833] lvs: probe of 5-0:1.0 failed with error -22 [ 897.112983][T12843] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.117628][T12839] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.127406][T12831] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.128529][T12843] lvs: probe of 1-0:1.0 failed with error -22 [ 897.136740][T12831] lvs: probe of 2-0:1.0 failed with error -22 [ 897.141116][T12820] lvs: probe of 4-0:1.0 failed with error -22 [ 897.148077][T12839] lvs: probe of 3-0:1.0 failed with error -22 [ 897.153583][T12820] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.159512][T12831] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.166963][T12843] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.172798][T12838] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.186156][T12839] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.186577][T12820] lvs: probe of 5-0:1.0 failed with error -22 [ 897.193816][T12839] lvs: probe of 4-0:1.0 failed with error -22 [ 897.205138][T12831] lvs: probe of 3-0:1.0 failed with error -22 [ 897.211278][T12838] lvs: probe of 1-0:1.0 failed with error -22 [ 897.216510][T12843] lvs: probe of 2-0:1.0 failed with error -22 [ 897.217835][T12839] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.230302][T12831] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.237112][T12843] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.238111][T12838] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.256477][T12831] lvs: probe of 4-0:1.0 failed with error -22 [ 897.264736][T12848] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.271500][T12839] lvs: probe of 5-0:1.0 failed with error -22 [ 897.277621][T12838] lvs: probe of 2-0:1.0 failed with error -22 [ 897.278244][T12843] lvs: probe of 3-0:1.0 failed with error -22 [ 897.289902][T12848] lvs: probe of 1-0:1.0 failed with error -22 [ 897.292714][T12843] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.296118][T12838] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.303718][T12843] lvs: probe of 4-0:1.0 failed with error -22 [ 897.309644][T12831] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.316849][T12849] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.324154][T12831] lvs: probe of 5-0:1.0 failed with error -22 [ 897.336535][T12843] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.343563][T12838] lvs: probe of 3-0:1.0 failed with error -22 [ 897.346520][T12849] lvs: probe of 1-0:1.0 failed with error -22 [ 897.356023][T12843] lvs: probe of 5-0:1.0 failed with error -22 [ 897.356749][T12838] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.373217][T12851] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.380382][T12851] lvs: probe of 1-0:1.0 failed with error -22 [ 897.386893][T12838] lvs: probe of 4-0:1.0 failed with error -22 [ 897.396597][T12851] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.403301][T12851] lvs: probe of 2-0:1.0 failed with error -22 [ 897.414095][T12838] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.420929][T12851] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.440002][T12838] lvs: probe of 5-0:1.0 failed with error -22 [ 897.447020][T12851] lvs: probe of 3-0:1.0 failed with error -22 [ 897.453676][T12840] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.460990][T12851] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.467231][T12840] lvs: probe of 1-0:1.0 failed with error -22 [ 897.482036][T12851] lvs: probe of 4-0:1.0 failed with error -22 [ 897.488577][T12851] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.492166][T12840] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.496018][T12851] lvs: probe of 5-0:1.0 failed with error -22 [ 897.510669][T12859] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.517216][T12840] lvs: probe of 2-0:1.0 failed with error -22 [ 897.531483][T12840] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.538329][T12859] lvs: probe of 1-0:1.0 failed with error -22 [ 897.546729][T12859] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.553531][T12859] lvs: probe of 2-0:1.0 failed with error -22 [ 897.556730][T12861] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.568066][T12840] lvs: probe of 3-0:1.0 failed with error -22 [ 897.574591][T12859] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.583046][T12861] lvs: probe of 1-0:1.0 failed with error -22 [ 897.590349][T12840] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.595459][T12852] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.598027][T12859] lvs: probe of 3-0:1.0 failed with error -22 [ 897.604119][T12861] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.610272][T12840] lvs: probe of 4-0:1.0 failed with error -22 [ 897.618221][T12852] lvs: probe of 1-0:1.0 failed with error -22 [ 897.623826][T12859] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.629608][T12867] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.636456][T12840] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.642736][T12861] lvs: probe of 2-0:1.0 failed with error -22 [ 897.655178][T12859] lvs: probe of 4-0:1.0 failed with error -22 [ 897.655538][T12867] lvs: probe of 1-0:1.0 failed with error -22 [ 897.661870][T12840] lvs: probe of 5-0:1.0 failed with error -22 [ 897.667852][T12852] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.674217][T12859] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.686720][T12861] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.693560][T12861] lvs: probe of 3-0:1.0 failed with error -22 [ 897.696555][T12859] lvs: probe of 5-0:1.0 failed with error -22 [ 897.700216][T12852] lvs: probe of 2-0:1.0 failed with error -22 [ 897.714161][T12864] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.716847][T12861] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.727605][T12864] lvs: probe of 1-0:1.0 failed with error -22 [ 897.739391][T12867] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.746131][T12867] lvs: probe of 2-0:1.0 failed with error -22 [ 897.750914][T12861] lvs: probe of 4-0:1.0 failed with error -22 [ 897.752512][T12852] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.763069][T12861] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.772182][T12861] lvs: probe of 5-0:1.0 failed with error -22 [ 897.776931][T12852] lvs: probe of 3-0:1.0 failed with error -22 [ 897.784533][T12864] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.786288][T12868] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.798237][T12864] lvs: probe of 2-0:1.0 failed with error -22 [ 897.801624][T12852] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.807191][T12867] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.811829][T12852] lvs: probe of 4-0:1.0 failed with error -22 [ 897.823964][T12868] lvs: probe of 1-0:1.0 failed with error -22 [ 897.830084][T12867] lvs: probe of 3-0:1.0 failed with error -22 [ 897.830340][T12864] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.836945][T12852] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.843691][T12867] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.849852][T12868] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.857211][T12864] lvs: probe of 3-0:1.0 failed with error -22 [ 897.863483][T12852] lvs: probe of 5-0:1.0 failed with error -22 [ 897.875469][T12868] lvs: probe of 2-0:1.0 failed with error -22 [ 897.881586][T12867] lvs: probe of 4-0:1.0 failed with error -22 [ 897.882075][T12864] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.889018][T12868] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 897.895234][T12855] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.908093][T12867] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.914796][T12867] lvs: probe of 5-0:1.0 failed with error -22 [ 897.916613][T12868] lvs: probe of 3-0:1.0 failed with error -22 [ 897.921848][T12864] lvs: probe of 4-0:1.0 failed with error -22 [ 897.933846][T12864] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 897.940717][T12864] lvs: probe of 5-0:1.0 failed with error -22 [ 897.946817][T12855] lvs: probe of 1-0:1.0 failed with error -22 [ 897.947002][T12855] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 897.954189][T12869] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.966755][T12869] lvs: probe of 1-0:1.0 failed with error -22 [ 897.972980][T12871] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 897.973007][T12868] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 897.980752][T12871] lvs: probe of 1-0:1.0 failed with error -22 [ 897.987034][T12855] lvs: probe of 2-0:1.0 failed with error -22 [ 897.999560][T12868] lvs: probe of 4-0:1.0 failed with error -22 [ 898.005784][T12868] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.012843][T12869] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.019733][T12855] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.026499][T12869] lvs: probe of 2-0:1.0 failed with error -22 [ 898.027003][T12868] lvs: probe of 5-0:1.0 failed with error -22 [ 898.033524][T12855] lvs: probe of 3-0:1.0 failed with error -22 [ 898.038980][T12871] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.045330][T12869] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.058539][T12855] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.067555][T12855] lvs: probe of 4-0:1.0 failed with error -22 [ 898.070923][T12871] lvs: probe of 2-0:1.0 failed with error -22 [ 898.074355][T12869] lvs: probe of 3-0:1.0 failed with error -22 [ 898.085944][T12855] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.085944][T12870] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.085959][T12870] lvs: probe of 1-0:1.0 failed with error -22 [ 898.093889][T12855] lvs: probe of 5-0:1.0 failed with error -22 [ 898.099909][T12869] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.105894][T12871] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.112053][T12870] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.126712][T12871] lvs: probe of 3-0:1.0 failed with error -22 [ 898.132205][T12869] lvs: probe of 4-0:1.0 failed with error -22 [ 898.168450][T12885] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.175182][T12885] lvs: probe of 1-0:1.0 failed with error -22 [ 898.181612][T12870] lvs: probe of 2-0:1.0 failed with error -22 [ 898.187773][T12869] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.187790][T12869] lvs: probe of 5-0:1.0 failed with error -22 [ 898.201067][T12871] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.208719][T12871] lvs: probe of 4-0:1.0 failed with error -22 [ 898.215223][T12871] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.222390][T12871] lvs: probe of 5-0:1.0 failed with error -22 [ 898.229768][T12872] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.236826][T12885] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.243578][T12885] lvs: probe of 2-0:1.0 failed with error -22 [ 898.252415][T12870] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.260013][T12872] lvs: probe of 1-0:1.0 failed with error -22 [ 898.267204][T12870] lvs: probe of 3-0:1.0 failed with error -22 [ 898.273411][T12872] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.280383][T12872] lvs: probe of 2-0:1.0 failed with error -22 [ 898.286890][T12885] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.286898][T12889] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.286912][T12889] lvs: probe of 1-0:1.0 failed with error -22 [ 898.293710][T12885] lvs: probe of 3-0:1.0 failed with error -22 [ 898.312951][T12870] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.319795][T12870] lvs: probe of 4-0:1.0 failed with error -22 [ 898.319863][T12889] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.326053][T12870] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.339719][T12872] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.340414][T12889] lvs: probe of 2-0:1.0 failed with error -22 [ 898.349536][T12885] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.352798][T12872] lvs: probe of 3-0:1.0 failed with error -22 [ 898.359575][T12885] lvs: probe of 4-0:1.0 failed with error -22 [ 898.371632][T12870] lvs: probe of 5-0:1.0 failed with error -22 [ 898.380009][T12889] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.387049][T12889] lvs: probe of 3-0:1.0 failed with error -22 [ 898.393686][T12885] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.400906][T12872] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.401518][T12895] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.408380][T12872] lvs: probe of 4-0:1.0 failed with error -22 [ 898.418069][T12895] lvs: probe of 1-0:1.0 failed with error -22 [ 898.421653][T12885] lvs: probe of 5-0:1.0 failed with error -22 [ 898.431110][T12895] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.439639][T12895] lvs: probe of 2-0:1.0 failed with error -22 [ 898.446922][T12872] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.453681][T12872] lvs: probe of 5-0:1.0 failed with error -22 [ 898.459996][T12889] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.467604][T12895] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.474361][T12895] lvs: probe of 3-0:1.0 failed with error -22 [ 898.487659][T12898] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.500310][T12889] lvs: probe of 4-0:1.0 failed with error -22 [ 898.506470][T12898] lvs: probe of 1-0:1.0 failed with error -22 [ 898.513005][T12895] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.513005][T12889] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.513023][T12895] lvs: probe of 4-0:1.0 failed with error -22 [ 898.520065][T12898] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.533799][T12889] lvs: probe of 5-0:1.0 failed with error -22 [ 898.541895][T12898] lvs: probe of 2-0:1.0 failed with error -22 [ 898.555934][T12895] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.556964][T12901] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.569605][T12895] lvs: probe of 5-0:1.0 failed with error -22 [ 898.571792][T12898] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.582554][T12901] lvs: probe of 1-0:1.0 failed with error -22 [ 898.588977][T12898] lvs: probe of 3-0:1.0 failed with error -22 [ 898.595389][T12901] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.595391][T12892] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.595406][T12892] lvs: probe of 1-0:1.0 failed with error -22 [ 898.602576][T12898] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.616999][T12896] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.623287][T12901] lvs: probe of 2-0:1.0 failed with error -22 [ 898.635163][T12898] lvs: probe of 4-0:1.0 failed with error -22 [ 898.641390][T12896] lvs: probe of 1-0:1.0 failed with error -22 [ 898.641645][T12901] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.647726][T12892] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.654765][T12898] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.666676][T12892] lvs: probe of 2-0:1.0 failed with error -22 [ 898.668089][T12898] lvs: probe of 5-0:1.0 failed with error -22 [ 898.680029][T12904] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.681087][T12896] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.687531][T12901] lvs: probe of 3-0:1.0 failed with error -22 [ 898.697061][T12896] lvs: probe of 2-0:1.0 failed with error -22 [ 898.699863][T12904] lvs: probe of 1-0:1.0 failed with error -22 [ 898.711959][T12901] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.711959][T12892] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.712002][T12901] lvs: probe of 4-0:1.0 failed with error -22 [ 898.719573][T12892] lvs: probe of 3-0:1.0 failed with error -22 [ 898.725856][T12904] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.744424][T12896] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.753712][T12896] lvs: probe of 3-0:1.0 failed with error -22 [ 898.754607][T12904] lvs: probe of 2-0:1.0 failed with error -22 [ 898.766253][T12892] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.766253][T12901] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.766268][T12901] lvs: probe of 5-0:1.0 failed with error -22 [ 898.773696][T12892] lvs: probe of 4-0:1.0 failed with error -22 [ 898.780473][T12904] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.794942][T12896] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.807921][T12904] lvs: probe of 3-0:1.0 failed with error -22 [ 898.814711][T12905] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.820063][T12892] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.831675][T12896] lvs: probe of 4-0:1.0 failed with error -22 [ 898.838263][T12905] lvs: probe of 1-0:1.0 failed with error -22 [ 898.838402][T12892] lvs: probe of 5-0:1.0 failed with error -22 [ 898.845298][T12905] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.852663][T12904] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.858911][T12905] lvs: probe of 2-0:1.0 failed with error -22 [ 898.866391][T12894] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.871187][T12896] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.883867][T12904] lvs: probe of 4-0:1.0 failed with error -22 [ 898.884720][T12896] lvs: probe of 5-0:1.0 failed with error -22 [ 898.890508][T12894] lvs: probe of 1-0:1.0 failed with error -22 [ 898.896781][T12905] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.903293][T12894] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.908980][T12912] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.915811][T12894] lvs: probe of 2-0:1.0 failed with error -22 [ 898.923034][T12905] lvs: probe of 3-0:1.0 failed with error -22 [ 898.928703][T12904] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 898.934758][T12912] lvs: probe of 1-0:1.0 failed with error -22 [ 898.943750][T12904] lvs: probe of 5-0:1.0 failed with error -22 [ 898.947731][T12905] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.954314][T12894] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 898.960766][T12902] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 898.968196][T12894] lvs: probe of 3-0:1.0 failed with error -22 [ 898.973813][T12912] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 898.980241][T12905] lvs: probe of 4-0:1.0 failed with error -22 [ 898.986709][T12902] lvs: probe of 1-0:1.0 failed with error -22 [ 898.993763][T12894] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 898.998842][T12912] lvs: probe of 2-0:1.0 failed with error -22 [ 899.005687][T12905] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.011901][T12908] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 899.018281][T12894] lvs: probe of 4-0:1.0 failed with error -22 [ 899.024998][T12908] lvs: probe of 1-0:1.0 failed with error -22 [ 899.031071][T12905] lvs: probe of 5-0:1.0 failed with error -22 [ 899.037616][T12902] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.046917][T12894] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.050041][T12912] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.063001][T12902] lvs: probe of 2-0:1.0 failed with error -22 [ 899.063020][T12894] lvs: probe of 5-0:1.0 failed with error -22 [ 899.069854][T12908] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.075597][T12907] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 899.082316][T12912] lvs: probe of 3-0:1.0 failed with error -22 [ 899.094938][T12907] lvs: probe of 1-0:1.0 failed with error -22 [ 899.095095][T12902] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.108004][T12912] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.114701][T12912] lvs: probe of 4-0:1.0 failed with error -22 [ 899.121277][T12908] lvs: probe of 2-0:1.0 failed with error -22 [ 899.132237][T12902] lvs: probe of 3-0:1.0 failed with error -22 [ 899.138540][T12907] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.138627][T12908] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.145254][T12907] lvs: probe of 2-0:1.0 failed with error -22 [ 899.152861][T12902] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.164928][T12912] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.171667][T12902] lvs: probe of 4-0:1.0 failed with error -22 [ 899.177890][T12908] lvs: probe of 3-0:1.0 failed with error -22 [ 899.184101][T12912] lvs: probe of 5-0:1.0 failed with error -22 [ 899.185189][T12902] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.196037][T12914] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 899.197749][T12902] lvs: probe of 5-0:1.0 failed with error -22 [ 899.218025][T12914] lvs: probe of 1-0:1.0 failed with error -22 [ 899.234915][T12907] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.234926][T12908] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.234941][T12908] lvs: probe of 4-0:1.0 failed with error -22 [ 899.244088][T12907] lvs: probe of 3-0:1.0 failed with error -22 [ 899.253804][T12908] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.254830][T12914] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.262264][T12908] lvs: probe of 5-0:1.0 failed with error -22 [ 899.274021][T12907] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.287175][T12914] lvs: probe of 2-0:1.0 failed with error -22 [ 899.293452][T12914] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.294066][T12909] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 899.300285][T12907] lvs: probe of 4-0:1.0 failed with error -22 [ 899.313108][T12914] lvs: probe of 3-0:1.0 failed with error -22 [ 899.313279][T12914] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.313293][T12914] lvs: probe of 4-0:1.0 failed with error -22 [ 899.313360][T12914] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.313372][T12914] lvs: probe of 5-0:1.0 failed with error -22 [ 899.313685][T12907] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.313698][T12907] lvs: probe of 5-0:1.0 failed with error -22 [ 899.327509][T12909] lvs: probe of 1-0:1.0 failed with error -22 [ 899.327616][T12915] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 899.327621][T12909] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.327631][T12915] lvs: probe of 1-0:1.0 failed with error -22 [ 899.327635][T12909] lvs: probe of 2-0:1.0 failed with error -22 [ 899.327732][T12909] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.327734][T12915] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 899.327745][T12909] lvs: probe of 3-0:1.0 failed with error -22 [ 899.327748][T12915] lvs: probe of 2-0:1.0 failed with error -22 [ 899.327822][T12909] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.327828][T12915] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 899.327835][T12909] lvs: probe of 4-0:1.0 failed with error -22 [ 899.327841][T12915] lvs: probe of 3-0:1.0 failed with error -22 [ 899.327911][T12909] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.327917][T12915] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 899.327924][T12909] lvs: probe of 5-0:1.0 failed with error -22 [ 899.327931][T12915] lvs: probe of 4-0:1.0 failed with error -22 [ 899.328024][T12915] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 899.328037][T12915] lvs: probe of 5-0:1.0 failed with error -22 [ 899.451958][T12937] loop4: detected capacity change from 0 to 512 [ 899.459328][T12937] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 899.461256][T12937] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4102: bg 0: block 255: padding at end of block bitmap is not set [ 899.461445][T12937] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 899.461606][T12937] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4102: invalid indirect mapped block 1 (level 1) [ 899.461784][T12937] EXT4-fs (loop4): 1 truncate cleaned up [ 899.461802][T12937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 899.822202][T12940] fuse: Bad value for 'fd' [ 900.045724][T12945] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 900.063940][T12945] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 900.194714][T12954] loop5: detected capacity change from 0 to 2048 [ 900.386542][T12957] loop7: detected capacity change from 0 to 512 [ 900.706902][ T6323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 900.974832][T12960] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 900.982018][T12960] lvs: probe of 1-0:1.0 failed with error -22 [ 900.988395][T12960] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 900.995154][T12960] lvs: probe of 2-0:1.0 failed with error -22 [ 901.001509][T12960] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 901.008239][T12960] lvs: probe of 3-0:1.0 failed with error -22 [ 901.014412][T12960] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 901.021153][T12960] lvs: probe of 4-0:1.0 failed with error -22 [ 901.027402][T12960] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 901.034186][T12960] lvs: probe of 5-0:1.0 failed with error -22 [ 901.086986][ T6323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.097160][ T6323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.177028][ T6323] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 901.186192][ T6323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 901.194585][ T6323] usb 6-1: SerialNumber: syz [ 901.209005][T12962] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 901.215803][T12962] lvs: probe of 1-0:1.0 failed with error -22 [ 901.222132][T12962] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 901.228896][T12962] lvs: probe of 2-0:1.0 failed with error -22 [ 901.235061][T12962] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 901.242190][T12962] lvs: probe of 3-0:1.0 failed with error -22 [ 901.248606][T12962] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 901.255351][T12962] lvs: probe of 4-0:1.0 failed with error -22 [ 901.261559][T12962] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 901.268445][T12962] lvs: probe of 5-0:1.0 failed with error -22 [ 901.511583][T12954] loop5: detected capacity change from 0 to 256 [ 902.247845][ T6323] usb 6-1: 0:2 : does not exist [ 902.266112][ T6323] usb 6-1: USB disconnect, device number 2 [ 902.277161][T12963] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 902.283886][T12963] lvs: probe of 1-0:1.0 failed with error -22 [ 902.304750][ T1150] android_work: did not send uevent (0 0 0000000000000000) [ 902.318142][T12971] using random self ethernet address [ 902.330488][T12971] using random host ethernet address [ 902.335990][T12963] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 902.353581][T12963] lvs: probe of 2-0:1.0 failed with error -22 [ 902.370627][T12963] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 902.377447][T12963] lvs: probe of 3-0:1.0 failed with error -22 [ 902.383681][T12963] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 902.390697][T12963] lvs: probe of 4-0:1.0 failed with error -22 [ 902.396924][T12963] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 902.403724][T12963] lvs: probe of 5-0:1.0 failed with error -22 [ 902.519613][T12964] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 902.526564][T12964] lvs: probe of 1-0:1.0 failed with error -22 [ 902.548286][T12964] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 902.579149][T12964] lvs: probe of 2-0:1.0 failed with error -22 [ 902.590016][T12983] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 902.591270][T12964] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 902.652737][T12964] lvs: probe of 3-0:1.0 failed with error -22 [ 902.659772][T12983] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 902.667835][T12964] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 902.697236][T12964] lvs: probe of 4-0:1.0 failed with error -22 [ 902.697356][T12964] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 902.697371][T12964] lvs: probe of 5-0:1.0 failed with error -22 [ 903.091855][T12994] fuse: Bad value for 'fd' [ 903.147527][T12998] loop7: detected capacity change from 0 to 2048 [ 903.299193][T13002] loop3: detected capacity change from 0 to 512 [ 903.467218][ T1150] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 903.670838][ T8671] android_work: did not send uevent (0 0 0000000000000000) [ 903.703498][T13013] loop5: detected capacity change from 0 to 512 [ 903.713231][T13013] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 903.737349][T13013] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4126: bg 0: block 255: padding at end of block bitmap is not set [ 903.752170][T13013] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 903.761560][T13013] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4126: invalid indirect mapped block 1 (level 1) [ 903.775034][T13013] EXT4-fs (loop5): 1 truncate cleaned up [ 903.781088][T13013] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 903.847380][ T1150] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.866020][ T1150] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.935536][ T708] android_work: did not send uevent (0 0 0000000000000000) [ 903.967392][ T1150] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 903.977278][ T1150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 903.986393][ T1150] usb 8-1: SerialNumber: syz [ 903.998641][T13024] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 904.017538][T13024] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 904.187327][ T8671] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 904.305764][T12998] loop7: detected capacity change from 0 to 256 [ 904.634797][T13038] fuse: Bad value for 'fd' [ 904.757386][ T8671] usb 6-1: Using ep0 maxpacket: 16 [ 904.917491][ T8671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.928694][ T8671] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 904.942006][ T8671] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 904.957765][ T8671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.971320][ T8671] usb 6-1: config 0 descriptor?? [ 905.164348][T13049] using random self ethernet address [ 905.169730][T13049] using random host ethernet address [ 905.288287][ T1150] usb 8-1: 0:2 : does not exist [ 905.298851][ T1150] usb 8-1: USB disconnect, device number 10 [ 905.468704][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.475986][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.483920][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.491342][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.498739][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.506175][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.515597][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.523095][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.530500][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.537930][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.545172][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.552636][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.559991][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.567246][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.574681][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.582037][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.589818][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.597341][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.604832][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.612303][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.619701][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.627196][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.634690][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.640752][ T1150] android_work: did not send uevent (0 0 0000000000000000) [ 905.642672][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.656645][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.664075][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.673253][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.680725][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.693874][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.707641][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.715213][ T8671] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 905.724979][T13060] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 905.731890][ T8671] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 905.740568][ T8671] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 905.751963][T13061] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 905.769851][T13060] lvs: probe of 1-0:1.0 failed with error -22 [ 905.771403][T13061] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 905.784131][T13060] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 905.790995][T13060] lvs: probe of 2-0:1.0 failed with error -22 [ 905.797126][ T8671] microsoft 0003:045E:07DA.0006: no inputs found [ 905.803742][T13060] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 905.810617][ T8671] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 905.831204][ T8671] usb 6-1: USB disconnect, device number 3 [ 905.837326][T13060] lvs: probe of 3-0:1.0 failed with error -22 [ 905.847746][T13060] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 905.861748][T13060] lvs: probe of 4-0:1.0 failed with error -22 [ 905.871909][T13060] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 905.886043][T13060] lvs: probe of 5-0:1.0 failed with error -22 [ 905.914946][T13074] loop3: detected capacity change from 0 to 512 [ 905.941684][T13076] loop7: detected capacity change from 0 to 512 [ 905.974796][T13079] loop8: detected capacity change from 0 to 512 [ 905.977660][T13076] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 905.992179][T13076] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.056574][T13079] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 906.064693][T13079] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 906.073701][T13079] EXT4-fs (loop8): 1 truncate cleaned up [ 906.079397][T13079] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 906.099886][T13063] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 906.106593][T13063] lvs: probe of 1-0:1.0 failed with error -22 [ 906.111411][T13079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 906.122011][T13063] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 906.134093][T13063] lvs: probe of 2-0:1.0 failed with error -22 [ 906.173143][T13070] fido_id[13070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 906.196977][T13084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13084 comm=syz.7.4146 [ 906.248836][T13063] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 906.271645][T13063] lvs: probe of 3-0:1.0 failed with error -22 [ 906.335671][T13063] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 906.353508][T13063] lvs: probe of 4-0:1.0 failed with error -22 [ 906.488370][T13063] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 906.531055][T13063] lvs: probe of 5-0:1.0 failed with error -22 [ 906.540021][T13065] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 906.547310][T13065] lvs: probe of 1-0:1.0 failed with error -22 [ 906.555210][T13065] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 906.563157][T13065] lvs: probe of 2-0:1.0 failed with error -22 [ 906.570611][T13065] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 906.577499][T13065] lvs: probe of 3-0:1.0 failed with error -22 [ 906.732453][T13065] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 906.768079][T13065] lvs: probe of 4-0:1.0 failed with error -22 [ 906.887697][T13065] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 906.959002][T13065] lvs: probe of 5-0:1.0 failed with error -22 [ 907.193684][T13108] fuse: Invalid rootmode [ 907.532207][T13112] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 907.558004][T13112] ------------[ cut here ]------------ [ 907.563500][T13112] WARNING: CPU: 0 PID: 13112 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1c8a/0x2020 [ 907.624673][T13112] Modules linked in: [ 907.644559][T13112] CPU: 0 PID: 13112 Comm: syz.8.4155 Not tainted syzkaller #0 [ 907.667863][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.692844][T13112] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c8a/0x2020 [ 907.709671][T13112] Code: e8 5b 05 9a 00 e9 9c ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c cb e6 ff ff 4c 89 ff e8 40 05 9a 00 e9 be e6 ff ff e8 26 96 5a 00 <0f> 0b e9 38 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ce e6 ff ff 4c [ 907.795996][T13112] RSP: 0018:ffffc90000b07bc0 EFLAGS: 00010283 [ 907.803580][T13122] loop7: detected capacity change from 0 to 2048 [ 907.810034][T13112] RAX: ffffffff810f20ba RBX: dffffc0000000000 RCX: 0000000000080000 [ 907.824535][T13112] RDX: ffffc90004778000 RSI: 000000000000003d RDI: 000000000000003e [ 907.834198][T13112] RBP: ffffc90000b07cb0 R08: ffff8881104c93c7 R09: 1ffff11022099278 [ 907.843505][T13112] R10: dffffc0000000000 R11: ffffed1022099279 R12: 0000000000000000 [ 907.852707][T13112] R13: ffff88810ecc4000 R14: ffff88810ecc4090 R15: ffff888123996000 [ 907.861495][T13112] FS: 00007f8036f2e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 907.870842][T13112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.877634][T13112] CR2: 0000000000000000 CR3: 0000000129117000 CR4: 00000000003526b0 [ 907.886863][T13112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 907.915362][T13112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 907.915384][T13112] Call Trace: [ 907.915392][T13112] [ 907.915401][T13112] ? memcpy+0x56/0x70 [ 907.915434][T13112] ? __kasan_check_write+0x14/0x20 [ 907.915456][T13112] ? mutex_lock_killable+0x9b/0x1c0 [ 907.915482][T13112] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 907.915509][T13112] kvm_vcpu_ioctl+0x8ed/0xc00 [ 907.915541][T13112] ? __sanitizer_cov_trace_switch+0x64/0xe0 [ 907.915602][T13112] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 907.915624][T13112] ? selinux_file_ioctl+0x3ad/0x4c0 [ 907.915650][T13112] ? selinux_file_alloc_security+0x120/0x120 [ 907.915675][T13112] ? __fget_files+0x2e1/0x340 [ 907.915695][T13112] ? security_file_ioctl+0x84/0xa0 [ 907.915718][T13112] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 907.915740][T13112] __se_sys_ioctl+0x121/0x1a0 [ 907.915764][T13112] __x64_sys_ioctl+0x7b/0x90 [ 907.915799][T13112] x64_sys_call+0x2f/0x9a0 [ 907.915818][T13112] do_syscall_64+0x4c/0xa0 [ 907.915836][T13112] ? clear_bhb_loop+0x50/0xa0 [ 907.915871][T13112] ? clear_bhb_loop+0x50/0xa0 [ 907.915890][T13112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 907.915911][T13112] RIP: 0033:0x7f80384d4f99 [ 907.915929][T13112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.915948][T13112] RSP: 002b:00007f8036f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.915972][T13112] RAX: ffffffffffffffda RBX: 00007f803875cfa0 RCX: 00007f80384d4f99 [ 907.915989][T13112] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 907.916003][T13112] RBP: 00007f803856bec4 R08: 0000000000000000 R09: 0000000000000000 [ 907.916018][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.916030][T13112] R13: 00007f803875d038 R14: 00007f803875cfa0 R15: 00007ffe36542ba8 [ 907.916050][T13112] [ 907.916057][T13112] ---[ end trace c48fa71973d9ed88 ]--- [ 908.040602][T13133] loop4: detected capacity change from 0 to 512 [ 908.046922][T13134] loop8: detected capacity change from 0 to 512 [ 908.063748][T13128] loop3: detected capacity change from 0 to 512 [ 908.084917][T13133] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 908.183961][T13133] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 908.185396][T13133] EXT4-fs (loop4): 1 truncate cleaned up [ 908.197786][T13133] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 908.230692][T13128] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 908.247798][ T1150] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 908.248282][T13128] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4160: bg 0: block 255: padding at end of block bitmap is not set [ 908.251693][T13128] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 908.251908][T13128] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4160: invalid indirect mapped block 1 (level 1) [ 908.252116][T13128] EXT4-fs (loop3): 1 truncate cleaned up [ 908.252138][T13128] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 908.253287][T13133] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 908.383494][T13143] loop5: detected capacity change from 0 to 512 [ 908.399828][T13143] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 908.410982][T13143] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.585483][T13147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13147 comm=syz.5.4164 [ 908.757984][ T1150] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.768759][ T1150] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.862809][ T1150] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.911099][ T1150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 908.920987][ T1150] usb 8-1: SerialNumber: syz [ 909.378493][T13122] loop7: detected capacity change from 0 to 256 [ 909.510726][T13159] loop8: detected capacity change from 0 to 512 [ 909.529647][T13159] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 909.554175][T13159] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.580250][T13165] usb0: HOST MAC d2:63:75:95:de:18 [ 909.589209][T13165] usb0: MAC 4a:8c:bf:f9:64:79 [ 909.754411][T13171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13171 comm=syz.8.4170 [ 910.181914][ T384] android_work: did not send uevent (0 0 0000000000000000) [ 910.478865][ T1150] usb 8-1: 0:2 : does not exist [ 910.496082][ T1150] usb 8-1: USB disconnect, device number 11 [ 913.042438][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 913.060725][T13195] loop8: detected capacity change from 0 to 512 [ 913.076655][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.085055][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 913.093294][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.102299][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.113484][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.121811][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.130163][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.152902][T13202] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 913.201955][T13195] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 913.225879][T13195] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 913.227196][T13208] loop7: detected capacity change from 0 to 512 [ 913.252657][T13195] EXT4-fs (loop8): 1 truncate cleaned up [ 913.269795][T13195] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 913.321399][T13208] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 913.369415][T13208] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.395094][T13220] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 913.459348][T13224] loop4: detected capacity change from 0 to 2048 [ 913.472769][ T30] audit: type=1400 audit(1785419144.164:630): avc: denied { write } for pid=13221 comm="syz.3.4181" name="enable" dev="tracefs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 913.620945][T13230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13230 comm=syz.7.4179 [ 914.150054][T13232] Mass Storage Function, version: 2009/09/11 [ 914.166340][T13232] LUN: removable file: (no medium) [ 914.177350][ T30] audit: type=1400 audit(1785419144.914:631): avc: denied { read } for pid=13231 comm="syz.3.4184" name="cdrom" dev="configfs" ino=74844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 914.956163][ T384] android_work: did not send uevent (0 0 0000000000000000) [ 916.380186][T13269] loop5: detected capacity change from 0 to 512 [ 916.492933][T13269] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 916.522800][T13269] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 916.547375][T13269] EXT4-fs (loop5): 1 truncate cleaned up [ 916.558855][T13269] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 916.591701][T13269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 916.649764][ T799] android_work: did not send uevent (0 0 0000000000000000) [ 916.750212][T13285] loop7: detected capacity change from 0 to 512 [ 916.876244][T13285] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 916.899625][T13285] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.334206][T13306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13306 comm=syz.7.4201 [ 918.146897][T13314] loop5: detected capacity change from 0 to 512 [ 918.272221][T13314] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 918.287469][T13314] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 918.314795][T13317] loop3: detected capacity change from 0 to 2048 [ 918.332167][T13314] EXT4-fs (loop5): 1 truncate cleaned up [ 918.337859][T13314] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 918.431561][T13328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 918.521592][T13340] loop8: detected capacity change from 0 to 512 [ 918.767194][T13340] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 918.791706][T13340] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.018088][T13350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13350 comm=syz.8.4220 [ 920.853448][T13387] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 920.865898][T13387] lvs: probe of 1-0:1.0 failed with error -22 [ 920.873689][T13387] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 920.880177][T13389] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 920.887171][T13389] lvs: probe of 1-0:1.0 failed with error -22 [ 920.890119][T13391] loop5: detected capacity change from 0 to 512 [ 920.899817][T13387] lvs: probe of 2-0:1.0 failed with error -22 [ 920.906345][T13387] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 920.913443][T13387] lvs: probe of 3-0:1.0 failed with error -22 [ 920.919944][T13387] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 920.926710][T13387] lvs: probe of 4-0:1.0 failed with error -22 [ 920.933108][T13387] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 920.939982][T13387] lvs: probe of 5-0:1.0 failed with error -22 [ 920.959183][T13389] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 920.965970][T13389] lvs: probe of 2-0:1.0 failed with error -22 [ 920.972546][T13389] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 920.979413][T13389] lvs: probe of 3-0:1.0 failed with error -22 [ 920.985923][T13389] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 920.992694][T13389] lvs: probe of 4-0:1.0 failed with error -22 [ 921.000056][T13389] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 921.007095][T13389] lvs: probe of 5-0:1.0 failed with error -22 [ 921.014014][T13396] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 921.020931][T13396] lvs: probe of 1-0:1.0 failed with error -22 [ 921.027424][T13396] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 921.035109][T13393] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 921.058526][T13393] lvs: probe of 1-0:1.0 failed with error -22 [ 921.078706][T13396] lvs: probe of 2-0:1.0 failed with error -22 [ 921.085596][T13393] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 921.093135][T13396] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 921.100071][T13393] lvs: probe of 2-0:1.0 failed with error -22 [ 921.106334][T13396] lvs: probe of 3-0:1.0 failed with error -22 [ 921.130276][T13397] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 921.146133][T13396] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 921.155149][T13391] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 921.166639][T13393] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 921.173536][T13396] lvs: probe of 4-0:1.0 failed with error -22 [ 921.180941][T13391] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.191783][T13397] lvs: probe of 2-0:1.0 failed with error -22 [ 921.198360][T13396] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 921.205509][T13393] lvs: probe of 3-0:1.0 failed with error -22 [ 921.214669][T13396] lvs: probe of 5-0:1.0 failed with error -22 [ 921.224334][T13393] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 921.232154][T13393] lvs: probe of 4-0:1.0 failed with error -22 [ 921.245747][T13393] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 921.261948][T13393] lvs: probe of 5-0:1.0 failed with error -22 [ 921.334536][T13408] loop7: detected capacity change from 0 to 512 [ 921.424704][T13412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13412 comm=syz.5.4236 [ 922.372838][T13438] loop5: detected capacity change from 0 to 2048 [ 922.719496][ T708] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 922.848699][T13440] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 922.855512][T13440] lvs: probe of 1-0:1.0 failed with error -22 [ 922.862009][T13440] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 922.868722][T13440] lvs: probe of 2-0:1.0 failed with error -22 [ 922.875701][T13440] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 922.883238][T13440] lvs: probe of 3-0:1.0 failed with error -22 [ 922.890943][T13440] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 922.898291][T13440] lvs: probe of 4-0:1.0 failed with error -22 [ 922.905523][T13440] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 922.907672][T13443] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 922.913363][T13440] lvs: probe of 5-0:1.0 failed with error -22 [ 922.934353][T13443] lvs: probe of 1-0:1.0 failed with error -22 [ 922.951685][T13443] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 922.966523][T13443] lvs: probe of 2-0:1.0 failed with error -22 [ 922.993794][T13443] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 923.001141][T13443] lvs: probe of 3-0:1.0 failed with error -22 [ 923.007392][T13443] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 923.014378][T13443] lvs: probe of 4-0:1.0 failed with error -22 [ 923.020854][T13443] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 923.027689][T13443] lvs: probe of 5-0:1.0 failed with error -22 [ 923.099617][ T708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.109951][ T708] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.209666][ T708] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.218932][ T708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.227570][ T708] usb 6-1: SerialNumber: syz [ 923.248738][T13466] loop3: detected capacity change from 0 to 512 [ 923.542334][T13438] loop5: detected capacity change from 0 to 256 [ 923.961211][T13471] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 923.967976][T13471] lvs: probe of 1-0:1.0 failed with error -22 [ 923.974287][T13471] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 923.981048][T13471] lvs: probe of 2-0:1.0 failed with error -22 [ 923.987258][T13471] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 923.994009][T13471] lvs: probe of 3-0:1.0 failed with error -22 [ 924.000341][T13471] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.007013][T13471] lvs: probe of 4-0:1.0 failed with error -22 [ 924.013409][T13471] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.020243][T13471] lvs: probe of 5-0:1.0 failed with error -22 [ 924.099720][T13476] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.106508][T13476] lvs: probe of 1-0:1.0 failed with error -22 [ 924.112926][T13476] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.119744][T13476] lvs: probe of 2-0:1.0 failed with error -22 [ 924.126033][T13476] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.133157][T13476] lvs: probe of 3-0:1.0 failed with error -22 [ 924.140404][T13476] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.147118][T13476] lvs: probe of 4-0:1.0 failed with error -22 [ 924.153701][T13476] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.160639][T13476] lvs: probe of 5-0:1.0 failed with error -22 [ 924.240617][ T708] usb 6-1: 0:2 : does not exist [ 924.248685][T13449] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.256005][ T708] usb 6-1: USB disconnect, device number 4 [ 924.262101][T13449] lvs: probe of 1-0:1.0 failed with error -22 [ 924.268596][T13445] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.276556][T13449] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.279802][T13445] lvs: probe of 1-0:1.0 failed with error -22 [ 924.285508][T13449] lvs: probe of 2-0:1.0 failed with error -22 [ 924.291156][T13472] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.296091][T13449] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.303385][T13445] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.308858][T13449] lvs: probe of 3-0:1.0 failed with error -22 [ 924.316085][T13472] lvs: probe of 1-0:1.0 failed with error -22 [ 924.325710][T13449] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.328682][T13445] lvs: probe of 2-0:1.0 failed with error -22 [ 924.339832][T13449] lvs: probe of 4-0:1.0 failed with error -22 [ 924.341580][T13445] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.346881][T13472] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.354144][T13445] lvs: probe of 3-0:1.0 failed with error -22 [ 924.360261][T13449] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.367219][T13445] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.373880][T13449] lvs: probe of 5-0:1.0 failed with error -22 [ 924.380455][T13445] lvs: probe of 4-0:1.0 failed with error -22 [ 924.385673][T13472] lvs: probe of 2-0:1.0 failed with error -22 [ 924.395746][T13445] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.398254][T13472] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.405315][T13445] lvs: probe of 5-0:1.0 failed with error -22 [ 924.411242][T13472] lvs: probe of 3-0:1.0 failed with error -22 [ 924.411493][T13472] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.430057][T13472] lvs: probe of 4-0:1.0 failed with error -22 [ 924.436214][T13472] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.443016][T13472] lvs: probe of 5-0:1.0 failed with error -22 [ 924.490404][T13448] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.490768][T11454] udevd[11454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 924.497147][T13448] lvs: probe of 1-0:1.0 failed with error -22 [ 924.519582][T13448] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.519945][T13452] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.533079][T13448] lvs: probe of 2-0:1.0 failed with error -22 [ 924.534967][T13452] lvs: probe of 1-0:1.0 failed with error -22 [ 924.543571][T13448] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.546611][T13452] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.559771][T13448] lvs: probe of 3-0:1.0 failed with error -22 [ 924.567762][T13452] lvs: probe of 2-0:1.0 failed with error -22 [ 924.574062][T13448] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.576152][T13452] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.593208][T13452] lvs: probe of 3-0:1.0 failed with error -22 [ 924.602202][T13478] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.609896][T13478] lvs: probe of 1-0:1.0 failed with error -22 [ 924.616146][T13448] lvs: probe of 4-0:1.0 failed with error -22 [ 924.629603][T13478] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.636545][T13448] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.646693][T13482] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.653510][T13448] lvs: probe of 5-0:1.0 failed with error -22 [ 924.660141][T13478] lvs: probe of 2-0:1.0 failed with error -22 [ 924.666365][T13482] lvs: probe of 1-0:1.0 failed with error -22 [ 924.678715][T13478] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.685548][T13482] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.710635][T13482] lvs: probe of 2-0:1.0 failed with error -22 [ 924.720127][T13478] lvs: probe of 3-0:1.0 failed with error -22 [ 924.728381][T13452] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.735137][T13452] lvs: probe of 4-0:1.0 failed with error -22 [ 924.741368][T13452] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.748235][T13452] lvs: probe of 5-0:1.0 failed with error -22 [ 924.754886][T13478] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.762055][T13482] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 924.769762][T13478] lvs: probe of 4-0:1.0 failed with error -22 [ 924.776141][T13478] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.784540][T13478] lvs: probe of 5-0:1.0 failed with error -22 [ 924.790701][T13482] lvs: probe of 3-0:1.0 failed with error -22 [ 924.797010][T13482] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 924.820167][T13486] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 924.835549][T13482] lvs: probe of 4-0:1.0 failed with error -22 [ 924.845265][T13482] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 924.852553][T13486] lvs: probe of 1-0:1.0 failed with error -22 [ 924.859380][T13486] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 924.866859][T13482] lvs: probe of 5-0:1.0 failed with error -22 [ 924.873528][T13486] lvs: probe of 2-0:1.0 failed with error -22 [ 925.026243][T13484] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 925.065077][T13497] loop4: detected capacity change from 0 to 512 [ 925.107764][T13486] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 925.131076][T13484] lvs: probe of 1-0:1.0 failed with error -22 [ 925.202772][T13497] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 925.286119][T13486] lvs: probe of 3-0:1.0 failed with error -22 [ 925.345248][T13484] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 925.357489][T13478] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 925.376025][T13497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4269: bg 0: block 255: padding at end of block bitmap is not set [ 925.841672][T13486] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 925.854873][T13484] lvs: probe of 2-0:1.0 failed with error -22 [ 925.862162][T13486] lvs: probe of 4-0:1.0 failed with error -22 [ 925.882191][T13484] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 925.888905][T13484] lvs: probe of 3-0:1.0 failed with error -22 [ 925.895776][T13486] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 925.916566][T13486] lvs: probe of 5-0:1.0 failed with error -22 [ 925.940149][T13497] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 925.954619][T13497] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4269: invalid indirect mapped block 1 (level 1) [ 925.978005][T13478] lvs: probe of 1-0:1.0 failed with error -22 [ 925.999449][T13484] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 926.006442][T13484] lvs: probe of 4-0:1.0 failed with error -22 [ 926.013287][T13497] EXT4-fs (loop4): 1 truncate cleaned up [ 926.023670][T13484] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 926.030358][T13497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 926.056354][T13484] lvs: probe of 5-0:1.0 failed with error -22 [ 926.077274][T13515] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 926.084344][T13515] lvs: probe of 1-0:1.0 failed with error -22 [ 926.091352][T13515] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 926.097947][T13513] loop3: detected capacity change from 0 to 2048 [ 926.106548][T13515] lvs: probe of 2-0:1.0 failed with error -22 [ 926.112821][T13488] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 926.118648][T13516] loop5: detected capacity change from 0 to 512 [ 926.119733][T13488] lvs: probe of 1-0:1.0 failed with error -22 [ 926.126828][T13515] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 926.133081][T13488] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 926.139166][T13515] lvs: probe of 3-0:1.0 failed with error -22 [ 926.145505][T13488] lvs: probe of 2-0:1.0 failed with error -22 [ 926.153985][T13515] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 926.164772][T13515] lvs: probe of 4-0:1.0 failed with error -22 [ 926.171308][T13515] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 926.176731][T13488] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 926.178163][T13515] lvs: probe of 5-0:1.0 failed with error -22 [ 926.184899][T13488] lvs: probe of 3-0:1.0 failed with error -22 [ 926.197043][T13488] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 926.208938][T13488] lvs: probe of 4-0:1.0 failed with error -22 [ 926.215194][T13488] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 926.230723][T13488] lvs: probe of 5-0:1.0 failed with error -22 [ 927.489617][T13550] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.516821][T13550] lvs: probe of 1-0:1.0 failed with error -22 [ 927.531435][T13550] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 927.538250][T13550] lvs: probe of 2-0:1.0 failed with error -22 [ 927.544891][T13550] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 927.551779][T13550] lvs: probe of 3-0:1.0 failed with error -22 [ 927.558013][T13550] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 927.565054][T13550] lvs: probe of 4-0:1.0 failed with error -22 [ 927.573903][T13550] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 927.581782][T13550] lvs: probe of 5-0:1.0 failed with error -22 [ 927.588239][T13552] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.595664][T13552] lvs: probe of 1-0:1.0 failed with error -22 [ 927.614403][T13552] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 927.645244][T13552] lvs: probe of 2-0:1.0 failed with error -22 [ 927.671278][T13552] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 927.680115][T13552] lvs: probe of 3-0:1.0 failed with error -22 [ 927.689730][T13552] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 927.710190][T13552] lvs: probe of 4-0:1.0 failed with error -22 [ 927.717592][T13556] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.736715][T13552] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 927.739059][T13556] lvs: probe of 1-0:1.0 failed with error -22 [ 927.750329][T13552] lvs: probe of 5-0:1.0 failed with error -22 [ 927.756850][T13558] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.763872][T13558] lvs: probe of 1-0:1.0 failed with error -22 [ 927.772020][T13558] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 927.783701][T13558] lvs: probe of 2-0:1.0 failed with error -22 [ 927.795216][T13558] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 927.808465][T13558] lvs: probe of 3-0:1.0 failed with error -22 [ 927.815349][T13558] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 927.822312][T13558] lvs: probe of 4-0:1.0 failed with error -22 [ 927.829207][T13558] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 927.836467][T13558] lvs: probe of 5-0:1.0 failed with error -22 [ 927.850932][T13560] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.861777][T13560] lvs: probe of 1-0:1.0 failed with error -22 [ 927.868365][T13560] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 927.876147][T13560] lvs: probe of 2-0:1.0 failed with error -22 [ 927.882883][T13560] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 927.889706][T13560] lvs: probe of 3-0:1.0 failed with error -22 [ 927.911677][T13560] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 927.925701][T13558] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 927.926247][T13560] lvs: probe of 4-0:1.0 failed with error -22 [ 927.938983][T13560] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 927.951427][T13560] lvs: probe of 5-0:1.0 failed with error -22 [ 927.957744][T13558] lvs: probe of 1-0:1.0 failed with error -22 [ 927.973765][T13558] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 928.010238][T13558] lvs: probe of 2-0:1.0 failed with error -22 [ 928.025231][T13560] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 928.037019][T13560] lvs: probe of 4-0:1.0 failed with error -22 [ 928.071962][T13558] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 928.078313][T13573] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 928.088937][T13558] lvs: probe of 5-0:1.0 failed with error -22 [ 928.093647][T13573] lvs: probe of 1-0:1.0 failed with error -22 [ 928.103306][T13573] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 928.117583][T13573] lvs: probe of 2-0:1.0 failed with error -22 [ 928.148640][T13573] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 928.165102][T13573] lvs: probe of 3-0:1.0 failed with error -22 [ 928.185511][T13573] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 928.203003][T13573] lvs: probe of 4-0:1.0 failed with error -22 [ 928.219531][T13573] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 928.229240][T13579] loop7: detected capacity change from 0 to 512 [ 928.245809][T13573] lvs: probe of 5-0:1.0 failed with error -22 [ 928.290249][T13575] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 928.314153][T13575] lvs: probe of 1-0:1.0 failed with error -22 [ 928.352974][T13575] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 928.375557][T13575] lvs: probe of 2-0:1.0 failed with error -22 [ 928.387696][T13575] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 928.395275][T13575] lvs: probe of 3-0:1.0 failed with error -22 [ 928.401698][T13575] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 928.408584][T13575] lvs: probe of 4-0:1.0 failed with error -22 [ 928.415078][T13575] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 928.424175][T13575] lvs: probe of 5-0:1.0 failed with error -22 [ 928.431165][T13578] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 928.438258][T13578] lvs: probe of 1-0:1.0 failed with error -22 [ 928.445083][T13578] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 928.452709][T13578] lvs: probe of 2-0:1.0 failed with error -22 [ 928.459075][T13578] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 928.468800][T13578] lvs: probe of 3-0:1.0 failed with error -22 [ 928.475268][T13578] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 928.482201][T13578] lvs: probe of 4-0:1.0 failed with error -22 [ 928.488438][T13578] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 928.495531][T13578] lvs: probe of 5-0:1.0 failed with error -22 [ 928.997436][T13588] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 929.004829][T13588] lvs: probe of 1-0:1.0 failed with error -22 [ 929.011511][T13588] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 929.018327][T13588] lvs: probe of 2-0:1.0 failed with error -22 [ 929.025235][T13588] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 929.032283][T13588] lvs: probe of 3-0:1.0 failed with error -22 [ 929.038605][T13588] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 929.050965][T13588] lvs: probe of 4-0:1.0 failed with error -22 [ 929.072050][T13588] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 929.079165][T13588] lvs: probe of 5-0:1.0 failed with error -22 [ 929.086089][T13591] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 929.110061][T13591] lvs: probe of 1-0:1.0 failed with error -22 [ 929.116653][T13591] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 929.132100][T13591] lvs: probe of 2-0:1.0 failed with error -22 [ 929.138401][T13591] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 929.145422][T13591] lvs: probe of 3-0:1.0 failed with error -22 [ 929.183792][T13591] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 929.190782][T13591] lvs: probe of 4-0:1.0 failed with error -22 [ 929.198313][T13591] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 929.206208][T13591] lvs: probe of 5-0:1.0 failed with error -22 [ 929.575540][T13605] fuse: Invalid rootmode [ 929.612903][T13608] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 929.654242][T13608] lvs: probe of 1-0:1.0 failed with error -22 [ 929.660619][T13608] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 929.667344][T13608] lvs: probe of 2-0:1.0 failed with error -22 [ 929.673574][T13608] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 929.680297][T13608] lvs: probe of 3-0:1.0 failed with error -22 [ 929.686519][T13608] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 929.693431][T13608] lvs: probe of 4-0:1.0 failed with error -22 [ 929.699672][T13608] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 929.706677][T13608] lvs: probe of 5-0:1.0 failed with error -22 [ 929.713163][T13613] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 929.719891][T13613] lvs: probe of 1-0:1.0 failed with error -22 [ 929.747371][T13613] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 929.761651][T13613] lvs: probe of 2-0:1.0 failed with error -22 [ 929.767988][T13613] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 929.792448][T13613] lvs: probe of 3-0:1.0 failed with error -22 [ 929.827878][T13613] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 929.837928][T13613] lvs: probe of 4-0:1.0 failed with error -22 [ 929.844853][T13613] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 929.855995][T13613] lvs: probe of 5-0:1.0 failed with error -22 [ 929.864048][T13627] loop8: detected capacity change from 0 to 2048 [ 929.890890][T13630] loop4: detected capacity change from 0 to 512 [ 929.962150][T13642] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 929.968937][T13642] lvs: probe of 1-0:1.0 failed with error -22 [ 929.979944][T13642] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 929.987559][T13642] lvs: probe of 2-0:1.0 failed with error -22 [ 930.008089][T13642] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 930.017261][T13642] lvs: probe of 3-0:1.0 failed with error -22 [ 930.023642][T13642] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 930.030752][T13642] lvs: probe of 4-0:1.0 failed with error -22 [ 930.038592][T13642] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 930.045659][T13642] lvs: probe of 5-0:1.0 failed with error -22 [ 930.190379][ T708] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 931.177777][T13662] mass_storage.0/lun.0: file too small: file0 [ 932.522257][T13679] fuse: Invalid rootmode [ 932.561519][T13684] mass_storage.0/lun.0: unable to open backing file: file0 [ 932.589433][T13686] mass_storage.0/lun.0: unable to open backing file: file0 [ 932.674701][T13691] mass_storage.0/lun.0: file too small: file0 [ 932.690753][ T708] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.710974][ T708] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.813760][ T708] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 932.823485][ T708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 932.831761][ T708] usb 9-1: SerialNumber: syz [ 932.872777][ T708] usb 9-1: can't set config #1, error -71 [ 932.914008][ T708] usb 9-1: USB disconnect, device number 3 [ 932.998125][T13719] mass_storage.0/lun.0: file too small: file0 [ 934.044232][T13717] fuse: Invalid rootmode [ 934.114732][T13729] mass_storage.0/lun.0: unable to open backing file: file0 [ 934.203388][T13732] mass_storage.0/lun.0: file too small: file0 [ 934.307683][T13739] loop4: detected capacity change from 0 to 2048 [ 934.486474][T13750] mass_storage.0/lun.0: unable to open backing file: file0 [ 934.616720][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 934.641547][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.669923][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 934.690822][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 934.722403][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 934.743414][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 934.769542][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 934.785425][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.231698][T13771] fuse: Invalid rootmode [ 935.582308][T13797] loop3: detected capacity change from 0 to 512 [ 935.623779][T13797] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 935.632300][T13797] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 935.640894][T13797] EXT4-fs (loop3): 1 truncate cleaned up [ 935.646712][T13797] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 936.155996][ T8671] android_work: did not send uevent (0 0 0000000000000000) [ 936.400412][T13834] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 936.409880][T13834] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 936.912853][T13849] fuse: Invalid rootmode [ 938.061528][T13866] loop4: detected capacity change from 0 to 512 [ 938.112096][T13866] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 938.120308][T13866] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 938.132188][T13866] EXT4-fs (loop4): 1 truncate cleaned up [ 938.146793][T13866] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 938.982412][ T384] android_work: did not send uevent (0 0 0000000000000000) [ 939.060389][T13913] mass_storage.0/lun.0: unable to open backing file: file0 [ 939.227641][T13922] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 939.247547][T13922] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 939.288931][T13932] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 939.298274][T13932] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 939.558219][T13934] loop7: detected capacity change from 0 to 40427 [ 939.571329][T13934] F2FS-fs (loop7): fault_injection options not supported [ 939.589521][T13934] F2FS-fs (loop7): fault_type options not supported [ 939.597234][T13934] F2FS-fs (loop7): invalid crc value [ 939.611486][T13934] F2FS-fs (loop7): Found nat_bits in checkpoint [ 939.679875][T13934] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 939.736298][ T30] audit: type=1400 audit(1785419170.471:632): avc: denied { read } for pid=13933 comm="syz.7.4432" name="file0" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 939.771144][T12037] attempt to access beyond end of device [ 939.771144][T12037] loop7: rw=524288, want=45072, limit=40427 [ 939.782876][ T30] audit: type=1400 audit(1785419170.501:633): avc: denied { rename } for pid=13933 comm="syz.7.4432" name="file0" dev="overlay" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 939.806014][T12037] attempt to access beyond end of device [ 939.806014][T12037] loop7: rw=0, want=45072, limit=40427 [ 939.808825][T13940] loop8: detected capacity change from 0 to 40427 [ 939.821644][ T30] audit: type=1400 audit(1785419170.501:634): avc: denied { setattr } for pid=13933 comm="syz.7.4432" name="#54" dev="loop7" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 939.851628][T13940] F2FS-fs (loop8): fault_injection options not supported [ 939.872910][ T7211] attempt to access beyond end of device [ 939.872910][ T7211] loop7: rw=2049, want=45120, limit=40427 [ 939.882280][T13940] F2FS-fs (loop8): fault_type options not supported [ 939.895038][T13940] F2FS-fs (loop8): invalid crc value [ 939.902473][T13940] F2FS-fs (loop8): Found nat_bits in checkpoint [ 939.942341][T13940] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 939.999564][T13950] loop5: detected capacity change from 0 to 40427 [ 940.011724][T13950] F2FS-fs (loop5): fault_injection options not supported [ 940.019020][T13950] F2FS-fs (loop5): fault_type options not supported [ 940.026440][T13950] F2FS-fs (loop5): invalid crc value [ 940.032952][T13950] F2FS-fs (loop5): Found nat_bits in checkpoint [ 940.076692][T12027] attempt to access beyond end of device [ 940.076692][T12027] loop8: rw=524288, want=45072, limit=40427 [ 940.107296][T12027] attempt to access beyond end of device [ 940.107296][T12027] loop8: rw=0, want=45072, limit=40427 [ 940.109386][T13950] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 940.182923][ T10] attempt to access beyond end of device [ 940.182923][ T10] loop8: rw=2049, want=45120, limit=40427 [ 940.220242][T12028] attempt to access beyond end of device [ 940.220242][T12028] loop5: rw=524288, want=45072, limit=40427 [ 940.233194][T12028] attempt to access beyond end of device [ 940.233194][T12028] loop5: rw=0, want=45072, limit=40427 [ 940.282901][ T45] attempt to access beyond end of device [ 940.282901][ T45] loop5: rw=2049, want=45120, limit=40427 [ 940.305556][T13966] mass_storage.0/lun.0: unable to open backing file: file0 [ 940.523286][T13971] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.544170][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.560675][T13971] device bridge_slave_0 entered promiscuous mode [ 940.568516][ T7211] device bridge_slave_1 left promiscuous mode [ 940.577286][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.592299][ T7211] device bridge_slave_0 left promiscuous mode [ 940.608605][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.617297][ T7211] device veth1_macvtap left promiscuous mode [ 940.643662][ T7211] device veth0_vlan left promiscuous mode [ 940.825536][T13971] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.832680][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.840321][T13971] device bridge_slave_1 entered promiscuous mode [ 941.003363][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.010585][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.018432][T13977] device bridge_slave_0 entered promiscuous mode [ 941.025564][T13978] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.032756][T13978] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.040390][T13978] device bridge_slave_0 entered promiscuous mode [ 941.048220][T13978] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.055453][T13978] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.063159][T13978] device bridge_slave_1 entered promiscuous mode [ 941.076503][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.083717][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.091462][T13977] device bridge_slave_1 entered promiscuous mode [ 941.194710][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.211931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.230756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 941.239940][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 941.248652][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.255726][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.263435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 941.272901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 941.281128][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.288201][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.307474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 941.330437][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 941.340249][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.360948][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 941.370537][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.388085][T13991] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 941.411779][T13991] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 941.434324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.456321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.464639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.473441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.492788][T13971] device veth0_vlan entered promiscuous mode [ 941.503704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.511460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.526157][T13971] device veth1_macvtap entered promiscuous mode [ 941.536346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.566692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.574528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.582078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 941.590327][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.597393][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.605652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 941.614148][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.621257][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.628929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 941.637228][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.644308][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.651791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 941.660060][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.667129][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.674584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.682717][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.690930][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 941.699305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 941.707819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 941.715717][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 941.732647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.741179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.753454][T13993] loop4: detected capacity change from 0 to 40427 [ 941.767999][T13977] device veth0_vlan entered promiscuous mode [ 941.777489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.786062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.794583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.802230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.809637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.818774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.832756][T13993] F2FS-fs (loop4): fault_injection options not supported [ 941.846907][T13977] device veth1_macvtap entered promiscuous mode [ 941.853477][T13993] F2FS-fs (loop4): fault_type options not supported [ 941.860227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.867703][T13993] F2FS-fs (loop4): invalid crc value [ 941.890536][T13978] device veth0_vlan entered promiscuous mode [ 941.897324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 941.901283][T13993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 941.908677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.920447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.930031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.943979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.970879][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.989081][T13993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 942.011908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 942.023354][T13978] device veth1_macvtap entered promiscuous mode [ 942.044846][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 942.064667][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 942.072270][T14004] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 942.090107][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 942.104584][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 942.110030][T14004] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 942.126455][T12112] attempt to access beyond end of device [ 942.126455][T12112] loop4: rw=524288, want=45072, limit=40427 [ 942.175883][T14008] UDC core: couldn't find an available UDC or it's busy: -16 [ 942.184246][T14008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 942.804563][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.816370][ T30] audit: type=1400 audit(1785419173.551:635): avc: denied { read } for pid=8973 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 942.828781][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.851996][ T30] audit: type=1400 audit(1785419173.551:636): avc: denied { open } for pid=8973 comm="syz-executor" path="/301/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 942.874679][ T30] audit: type=1400 audit(1785419173.551:637): avc: denied { getattr } for pid=8973 comm="syz-executor" path="/301/dir0/uprobe_profile" dev="tracefs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 942.899142][ T30] audit: type=1400 audit(1785419173.551:638): avc: denied { write } for pid=8973 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 942.921433][T14025] device bridge_slave_0 entered promiscuous mode [ 942.937875][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.955918][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.969669][ T30] audit: type=1400 audit(1785419173.551:639): avc: denied { setattr } for pid=8973 comm="syz-executor" path="/301/dir0/uprobe_profile" dev="tracefs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 942.995918][T14025] device bridge_slave_1 entered promiscuous mode [ 943.253149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 943.277262][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 943.296955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 943.308903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 943.327496][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.334590][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.356976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 943.373546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 943.402522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 943.433699][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.440767][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.478792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 943.498851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 943.542798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 943.557056][T14025] device veth0_vlan entered promiscuous mode [ 943.573199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 943.581670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 943.610409][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 943.640741][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 943.673686][T14025] device veth1_macvtap entered promiscuous mode [ 943.695654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.714341][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 946.994319][T14060] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 947.012422][T14060] dwc3: probe of dwc3.1.auto failed with error -16 [ 948.210137][T14068] mass_storage.0/lun.0: unable to open backing file: file0 [ 948.376604][T14074] mass_storage.0/lun.0: file too small: file0 [ 950.410806][ T30] audit: type=1400 audit(1785419181.140:640): avc: denied { create } for pid=14087 comm="syz.4.4491" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 950.569487][ T30] audit: type=1400 audit(1785419181.300:641): avc: denied { add_name } for pid=14092 comm="syz.4.4493" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 950.610312][ T30] audit: type=1400 audit(1785419181.330:642): avc: denied { create } for pid=14092 comm="syz.4.4493" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 953.464395][T14105] fuse: Invalid rootmode [ 954.115374][T14108] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 954.154511][T14108] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.107805][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.127762][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.148451][T14119] device bridge_slave_0 entered promiscuous mode [ 958.168977][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.227321][T14119] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.250287][T14119] device bridge_slave_1 entered promiscuous mode [ 958.338112][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.345226][T14119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.352532][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.359614][T14119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.501822][ T1823] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.517000][ T1823] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.534920][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 958.550460][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 958.590726][ T1823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 958.608215][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.615420][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.639351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 958.653887][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.661051][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.732968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 958.786978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 958.820311][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.843889][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.851471][T14133] device bridge_slave_0 entered promiscuous mode [ 958.921894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 958.937056][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.954530][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.962045][T14133] device bridge_slave_1 entered promiscuous mode [ 958.992323][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.999976][T14134] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.008442][T14134] device bridge_slave_0 entered promiscuous mode [ 959.030003][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 959.044623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 959.063911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 959.094322][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.101422][T14134] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.110766][T14134] device bridge_slave_1 entered promiscuous mode [ 959.126948][T14119] device veth0_vlan entered promiscuous mode [ 959.150776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 959.174046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 959.199399][T14119] device veth1_macvtap entered promiscuous mode [ 959.264231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 959.272135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 959.294403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 959.354706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 959.374087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 959.473642][ T7211] device bridge_slave_1 left promiscuous mode [ 959.489044][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.524317][ T7211] device bridge_slave_0 left promiscuous mode [ 959.533982][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.552400][ T7211] device bridge_slave_1 left promiscuous mode [ 959.558622][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.574035][ T7211] device bridge_slave_0 left promiscuous mode [ 959.590320][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.613924][ T7211] device veth1_macvtap left promiscuous mode [ 959.620005][ T7211] device veth0_vlan left promiscuous mode [ 959.630183][ T7211] device veth1_macvtap left promiscuous mode [ 959.636294][ T7211] device veth0_vlan left promiscuous mode [ 960.104854][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 960.112930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 960.138574][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 960.152953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 960.168920][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.176114][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.198654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.215696][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.232526][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.239624][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.263973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 960.285061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 960.301655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 960.353935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 960.362313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 960.407090][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.414203][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.431779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.441406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.450505][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.457751][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.465966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 960.474601][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 960.482673][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 960.491037][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 960.515908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 960.523721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 960.532060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 960.541678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 960.550220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 960.577330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 960.586052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 960.594670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 960.603103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 960.628269][T14161] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.635485][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.642818][T14161] device bridge_slave_0 entered promiscuous mode [ 960.650907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 960.659418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 960.667616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 960.675202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 960.683689][T14161] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.690934][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.698487][T14161] device bridge_slave_1 entered promiscuous mode [ 960.707713][T14133] device veth0_vlan entered promiscuous mode [ 960.714097][ T799] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 960.725643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 960.733562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 960.741758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 960.749337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 960.757653][T14134] device veth0_vlan entered promiscuous mode [ 960.794969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 960.803176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.817895][T14133] device veth1_macvtap entered promiscuous mode [ 960.839054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 960.847051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 960.855697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.872037][T14134] device veth1_macvtap entered promiscuous mode [ 960.878794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 960.886644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 960.895252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.903614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 960.912013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 960.938703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 960.947245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.986219][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 960.994741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.048509][T14173] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 961.058314][T14173] dwc3: probe of dwc3.1.auto failed with error -16 [ 961.074634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.106338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.126334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.144339][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.151412][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.165891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 961.174402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.193122][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.200224][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.208432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 961.573557][T14181] fuse: Invalid rootmode [ 961.624102][ T799] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 961.633293][ T799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.641602][ T799] usb 10-1: Product: syz [ 961.658521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 961.663583][ T799] usb 10-1: Manufacturer: syz [ 961.672488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 961.684456][ T799] usb 10-1: SerialNumber: syz [ 961.699513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 961.714872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 961.747707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.757247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.772523][T14161] device veth0_vlan entered promiscuous mode [ 961.779422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 961.789144][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.812403][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.820055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.827933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 961.837329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.846708][T14161] device veth1_macvtap entered promiscuous mode [ 961.861511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 961.869979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 961.878499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 961.908175][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.928955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 962.026422][T14186] loop6: detected capacity change from 0 to 40427 [ 962.037479][ T7211] device bridge_slave_1 left promiscuous mode [ 962.043667][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.051416][ T7211] device bridge_slave_0 left promiscuous mode [ 962.067924][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.089116][T14186] F2FS-fs (loop6): fault_injection options not supported [ 962.101426][T14186] F2FS-fs (loop6): fault_type options not supported [ 962.120785][T14205] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 962.130709][T14186] F2FS-fs (loop6): invalid crc value [ 962.136240][ T7211] device veth1_macvtap left promiscuous mode [ 962.148662][ T7211] device veth0_vlan left promiscuous mode [ 962.161731][T14186] F2FS-fs (loop6): Found nat_bits in checkpoint [ 962.178028][T14205] dwc3: probe of dwc3.1.auto failed with error -16 [ 962.294180][T14186] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 962.377807][T14134] handle_bad_sector: 2 callbacks suppressed [ 962.377824][T14134] attempt to access beyond end of device [ 962.377824][T14134] loop6: rw=524288, want=45072, limit=40427 [ 962.445180][T14134] attempt to access beyond end of device [ 962.445180][T14134] loop6: rw=0, want=45072, limit=40427 [ 962.511594][ T1823] attempt to access beyond end of device [ 962.511594][ T1823] loop6: rw=2049, want=45120, limit=40427 [ 962.887308][T14243] fuse: Invalid rootmode [ 962.951674][ T306] usb 10-1: USB disconnect, device number 2 [ 963.286918][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.294027][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.346425][T14254] device bridge_slave_0 entered promiscuous mode [ 963.371136][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.416465][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.441319][T14254] device bridge_slave_1 entered promiscuous mode [ 963.679120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 963.691012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 963.731419][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 963.755308][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 963.764097][T14280] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 963.783831][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.787927][T14280] dwc3: probe of dwc3.1.auto failed with error -16 [ 963.791021][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.832567][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.862855][T14264] loop7: detected capacity change from 0 to 40427 [ 963.873324][T14285] loop1: detected capacity change from 0 to 512 [ 963.888226][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 963.899661][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 963.908571][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.915647][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.935138][ T7211] device bridge_slave_1 left promiscuous mode [ 963.941287][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.953488][T14285] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.4553: inode has both inline data and extents flags [ 963.967119][ T7211] device bridge_slave_0 left promiscuous mode [ 963.973271][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.977292][T14285] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4553: couldn't read orphan inode 15 (err -117) [ 963.993196][ T7211] device veth1_macvtap left promiscuous mode [ 964.004607][T14285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 964.016871][ T7211] device veth0_vlan left promiscuous mode [ 964.023316][T14264] F2FS-fs (loop7): fault_injection options not supported [ 964.062625][T14264] F2FS-fs (loop7): fault_type options not supported [ 964.071030][T14285] syz.1.4553 (pid 14285) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 964.109442][T14264] F2FS-fs (loop7): invalid crc value [ 964.139398][T14264] F2FS-fs (loop7): Found nat_bits in checkpoint [ 964.142080][T14295] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 964.188380][T14295] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 964.224626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.232553][T14264] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 964.233126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.288042][T14161] attempt to access beyond end of device [ 964.288042][T14161] loop7: rw=2049, want=45120, limit=40427 [ 964.310116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 964.339582][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.364217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.372138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.406058][T14254] device veth0_vlan entered promiscuous mode [ 964.421631][T14313] mass_storage.0/lun.0: file too small: file0 [ 964.438438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 964.469515][T14254] device veth1_macvtap entered promiscuous mode [ 964.497753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 964.539725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 964.553189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 964.762930][T14347] mass_storage.0/lun.0: file too small: file0 [ 964.925599][T14363] loop1: detected capacity change from 0 to 512 [ 964.959277][T14363] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.4582: inode has both inline data and extents flags [ 964.984619][T14363] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4582: couldn't read orphan inode 15 (err -117) [ 964.999805][T14342] loop5: detected capacity change from 0 to 40427 [ 965.009651][T14363] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 965.021937][T14342] F2FS-fs (loop5): fault_injection options not supported [ 965.029220][T14342] F2FS-fs (loop5): fault_type options not supported [ 965.045126][T14342] F2FS-fs (loop5): invalid crc value [ 965.059433][T14368] loop4: detected capacity change from 0 to 512 [ 965.069931][T14363] overlayfs: missing 'workdir' [ 965.094527][T14342] F2FS-fs (loop5): Found nat_bits in checkpoint [ 965.152680][T14368] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.4583: inode has both inline data and extents flags [ 965.199822][T14368] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4583: couldn't read orphan inode 15 (err -117) [ 965.244576][T14342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 965.268190][T14374] loop1: detected capacity change from 0 to 512 [ 965.284775][T14368] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 965.365170][T14254] attempt to access beyond end of device [ 965.365170][T14254] loop5: rw=2049, want=45112, limit=40427 [ 965.378167][T14374] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.4584: inode has both inline data and extents flags [ 965.379263][T14368] overlayfs: missing 'lowerdir' [ 965.448775][T14374] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4584: couldn't read orphan inode 15 (err -117) [ 965.504777][T14374] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 965.553697][T14378] loop4: detected capacity change from 0 to 512 [ 965.624052][T14381] using random self ethernet address [ 965.637529][T14378] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.4586: inode has both inline data and extents flags [ 965.674030][T14381] using random host ethernet address [ 965.744898][T14378] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4586: couldn't read orphan inode 15 (err -117) [ 965.774802][T14378] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 966.304541][T14407] loop7: detected capacity change from 0 to 512 [ 966.367412][T14407] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.4595: inode has both inline data and extents flags [ 966.478624][T14407] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.4595: couldn't read orphan inode 15 (err -117) [ 966.545049][T14407] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 966.604894][T14407] overlayfs: failed to resolve './file0': -2 [ 966.746348][T14415] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 966.765883][T14415] dwc3: probe of dwc3.1.auto failed with error -16 [ 967.003950][T14425] loop4: detected capacity change from 0 to 2048 [ 967.482097][T14432] loop9: detected capacity change from 0 to 40427 [ 967.502058][T14432] F2FS-fs (loop9): fault_injection options not supported [ 967.517259][T14432] F2FS-fs (loop9): fault_type options not supported [ 967.530892][T14432] F2FS-fs (loop9): invalid crc value [ 967.541674][T14432] F2FS-fs (loop9): Found nat_bits in checkpoint [ 967.593152][T14472] mass_storage.0/lun.0: unable to open backing file: file0 [ 967.600638][T14432] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 967.658150][T14119] attempt to access beyond end of device [ 967.658150][T14119] loop9: rw=2049, want=45104, limit=40427 [ 967.982346][T14505] loop9: detected capacity change from 0 to 512 [ 968.053262][T14505] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.4631: inode has both inline data and extents flags [ 968.066910][T14505] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.4631: couldn't read orphan inode 15 (err -117) [ 968.086246][T14505] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 968.284089][T14510] loop1: detected capacity change from 0 to 40427 [ 968.300479][T14510] F2FS-fs (loop1): fault_injection options not supported [ 968.313054][T14510] F2FS-fs (loop1): fault_type options not supported [ 968.322848][T14510] F2FS-fs (loop1): invalid crc value [ 968.329544][T14510] F2FS-fs (loop1): Found nat_bits in checkpoint [ 968.370900][T14510] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 968.549638][T14527] mass_storage.0/lun.0: unable to open backing file: file0 [ 968.836933][T14557] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 968.884592][T14557] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 969.747982][T14583] loop1: detected capacity change from 0 to 512 [ 969.881330][T14583] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.4656: inode has both inline data and extents flags [ 969.914918][T14583] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4656: couldn't read orphan inode 15 (err -117) [ 969.935237][T14583] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 970.026752][T14588] loop4: detected capacity change from 0 to 512 [ 970.112892][T14588] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.4657: inode has both inline data and extents flags [ 970.172248][T14588] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4657: couldn't read orphan inode 15 (err -117) [ 970.225233][T14588] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 970.339118][T14600] mass_storage.0/lun.0: unable to open backing file: file0 [ 970.384722][T14609] mass_storage.0/lun.0: unable to open backing file: file0 [ 970.445572][T14615] loop7: detected capacity change from 0 to 512 [ 970.487003][T14615] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 970.525249][T14615] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.531971][ T8671] android_work: did not send uevent (0 0 0000000000000000) [ 970.547330][T14619] loop5: detected capacity change from 0 to 2048 [ 970.730238][T14627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14627 comm=syz.7.4666 [ 970.965141][ T306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 971.345403][ T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.355859][ T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.436577][ T306] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 971.445667][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 971.453642][ T306] usb 6-1: SerialNumber: syz [ 971.510131][T14656] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 971.528940][T14656] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 971.604842][ T708] android_work: did not send uevent (0 0 0000000000000000) [ 971.728577][T14675] kobject_add_internal failed for usb1 (error: -2 parent: net) [ 971.736845][T14675] configfs-gadget gadget: rndis: can't bind, err -2 [ 971.744002][T14675] udc dummy_udc.0: failed to start g1: -2 [ 971.765159][T14619] loop5: detected capacity change from 0 to 256 [ 972.496230][ T306] usb 6-1: 0:2 : does not exist [ 972.508526][ T306] usb 6-1: USB disconnect, device number 5 [ 972.630642][ T30] audit: type=1400 audit(1785419203.357:643): avc: denied { remove_name } for pid=14700 comm="syz.1.4692" name="uvc.usb0" dev="configfs" ino=102073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 972.698212][ T30] audit: type=1400 audit(1785419203.397:644): avc: denied { unlink } for pid=14700 comm="syz.1.4692" name="uvc.usb0" dev="configfs" ino=102073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 972.748044][T14124] udevd[14124]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 973.224885][T14728] loop5: detected capacity change from 0 to 512 [ 973.286519][T14728] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 973.316083][T14728] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.497587][T14732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14732 comm=syz.5.4704 [ 974.219521][T14766] ------------[ cut here ]------------ [ 974.228156][T14766] kernel BUG at net/core/dev.c:10340! [ 974.233577][T14766] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 974.239772][T14766] CPU: 1 PID: 14766 Comm: syz.7.4714 Tainted: G W syzkaller #0 [ 974.248657][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.258736][T14766] RIP: 0010:register_netdevice+0x147a/0x1490 [ 974.264763][T14766] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 57 fd ff ff 4c 89 f7 e8 37 b4 e6 fd e9 4a fd ff ff e8 fd 44 a7 fd 0f 0b e8 f6 44 a7 fd <0f> 0b e8 ef 44 a7 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 974.284408][T14766] RSP: 0018:ffffc9000181f820 EFLAGS: 00010287 [ 974.290501][T14766] RAX: ffffffff83c271ea RBX: ffff8881260ec4e8 RCX: 0000000000080000 [ 974.298490][T14766] RDX: ffffc90010025000 RSI: 0000000000000495 RDI: 0000000000000496 [ 974.306507][T14766] RBP: ffffc9000181f968 R08: ffffffff86d17ca7 R09: 1ffffffff0da2f94 [ 974.314520][T14766] R10: dffffc0000000000 R11: fffffbfff0da2f95 R12: ffff8881260ec000 [ 974.322512][T14766] R13: dffffc0000000000 R14: 0000000000000003 R15: 1ffff11024c1d89d [ 974.330501][T14766] FS: 00007f93a2a9b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 974.339438][T14766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.346042][T14766] CR2: 0000001b32210ff8 CR3: 0000000125e04000 CR4: 00000000003526a0 [ 974.354044][T14766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 974.362019][T14766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 974.369996][T14766] Call Trace: [ 974.373284][T14766] [ 974.376234][T14766] ? __kasan_check_write+0x14/0x20 [ 974.381363][T14766] ? netif_stacked_transfer_operstate+0x220/0x220 [ 974.387788][T14766] ? __kasan_check_write+0x14/0x20 [ 974.392911][T14766] ? mutex_unlock+0x8f/0x230 [ 974.397527][T14766] register_netdev+0x3e/0x50 [ 974.402149][T14766] gether_register_netdev+0x7f/0x120 [ 974.407507][T14766] rndis_bind+0x2a0/0xcc0 [ 974.411855][T14766] usb_add_function+0x2c1/0x820 [ 974.416776][T14766] configfs_composite_bind+0xa9c/0x13a0 [ 974.422355][T14766] ? os_desc_qw_sign_store+0x140/0x140 [ 974.427818][T14766] udc_bind_to_driver+0x1fb/0x770 [ 974.432848][T14766] ? wait_for_completion_killable_timeout+0x10/0x10 [ 974.439879][T14766] usb_gadget_probe_driver+0x1fc/0x380 [ 974.445363][T14766] gadget_dev_desc_UDC_store+0x217/0x330 [ 974.451012][T14766] configfs_write_iter+0x312/0x400 [ 974.456181][T14766] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 974.461740][T14766] vfs_write+0x831/0xfd0 [ 974.465992][T14766] ? __kasan_check_read+0x11/0x20 [ 974.471046][T14766] ? file_end_write+0x1b0/0x1b0 [ 974.475921][T14766] ? wait_for_completion_killable_timeout+0x10/0x10 [ 974.482515][T14766] ? __fget_files+0x2e1/0x340 [ 974.487200][T14766] ? __fdget_pos+0x2d2/0x380 [ 974.491825][T14766] ? ksys_write+0x70/0x260 [ 974.496250][T14766] ksys_write+0x14a/0x260 [ 974.500582][T14766] ? __ia32_sys_read+0x90/0x90 [ 974.505384][T14766] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 974.511743][T14766] __x64_sys_write+0x7b/0x90 [ 974.516345][T14766] x64_sys_call+0x8ef/0x9a0 [ 974.520848][T14766] do_syscall_64+0x4c/0xa0 [ 974.525266][T14766] ? clear_bhb_loop+0x50/0xa0 [ 974.529953][T14766] ? clear_bhb_loop+0x50/0xa0 [ 974.534724][T14766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 974.540638][T14766] RIP: 0033:0x7f93a4041f99 [ 974.545060][T14766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.564694][T14766] RSP: 002b:00007f93a2a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 974.573137][T14766] RAX: ffffffffffffffda RBX: 00007f93a42c9fa0 RCX: 00007f93a4041f99 [ 974.581124][T14766] RDX: 000000000000000b RSI: 0000200000000c80 RDI: 0000000000000003 [ 974.589124][T14766] RBP: 00007f93a40d8ec4 R08: 0000000000000000 R09: 0000000000000000 [ 974.597107][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.605092][T14766] R13: 00007f93a42ca038 R14: 00007f93a42c9fa0 R15: 00007ffc549eb318 [ 974.613079][T14766] [ 974.616099][T14766] Modules linked in: [ 974.704560][T14766] ---[ end trace c48fa71973d9ed89 ]--- [ 974.710128][T14766] RIP: 0010:register_netdevice+0x147a/0x1490 [ 974.716445][T14766] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 57 fd ff ff 4c 89 f7 e8 37 b4 e6 fd e9 4a fd ff ff e8 fd 44 a7 fd 0f 0b e8 f6 44 a7 fd <0f> 0b e8 ef 44 a7 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 974.736770][T14766] RSP: 0018:ffffc9000181f820 EFLAGS: 00010287 [ 974.742937][T14766] RAX: ffffffff83c271ea RBX: ffff8881260ec4e8 RCX: 0000000000080000 [ 974.751237][T14766] RDX: ffffc90010025000 RSI: 0000000000000495 RDI: 0000000000000496 [ 974.759382][T14766] RBP: ffffc9000181f968 R08: ffffffff86d17ca7 R09: 1ffffffff0da2f94 [ 974.775722][T14766] R10: dffffc0000000000 R11: fffffbfff0da2f95 R12: ffff8881260ec000 [ 974.784885][T14766] R13: dffffc0000000000 R14: 0000000000000003 R15: 1ffff11024c1d89d [ 974.800098][T14766] FS: 00007f93a2a9b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 974.813159][T14766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.819907][T14766] CR2: 00007f4a99d9f2f8 CR3: 0000000125e04000 CR4: 00000000003526a0 [ 974.828344][T14766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 974.836544][T14766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 974.844674][T14766] Kernel panic - not syncing: Fatal exception [ 974.851093][T14766] Kernel Offset: disabled [ 974.855429][T14766] Rebooting in 86400 seconds..