last executing test programs: 2m39.704824431s ago: executing program 0 (id=128): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) 2m32.103489635s ago: executing program 0 (id=141): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = userfaultfd(0x80001) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r7 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r8 = dup(r7) read(r8, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 2m30.334984307s ago: executing program 0 (id=145): socket(0x200000000000011, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000280)) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0xf0bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x9}, {0x0, 0xfff1}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m27.673320242s ago: executing program 0 (id=152): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000280)={0x2, 0x494e4f4b, 0x0, 0x8, 0x3, @stepwise={{0x7fff, 0x10001}, {0xb81d99c, 0x10001}, {0x1, 0xfff}}}) fanotify_init(0x0, 0x80000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f00000000c0)=0xad5, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), 0x0, 0x1000000}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r5, &(0x7f0000000180)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x201) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2m25.668396761s ago: executing program 0 (id=156): r0 = msgget$private(0x0, 0x19b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getitimer(0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="05c839a110fe5b2d"]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts}, 0x2) msgsnd(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x401, 0xbe573b18f6e31390) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x1010186, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@abort}, {@data_writeback}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_continue}]}, 0x2, 0x46b, &(0x7f0000000fc0)="$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") ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, r2, 0xee00, r3, 0xffffffffffffffff, 0x80, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x6, 0x2, 0x12, 0x4, 0x8001, 0x8, r4}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0x2020) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="18000000010000", 0x7) 2m22.792161458s ago: executing program 0 (id=167): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r6 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r6) 2m7.211184335s ago: executing program 32 (id=167): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r6 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r6) 2m7.156743859s ago: executing program 5 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.582971431s ago: executing program 5 (id=208): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6360, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m1.224699831s ago: executing program 5 (id=214): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1m59.847524683s ago: executing program 5 (id=218): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000280)={0x2, 0x494e4f4b, 0x0, 0x8, 0x3, @stepwise={{0x7fff, 0x10001}, {0xb81d99c, 0x10001}, {0x1, 0xfff}}}) fanotify_init(0x0, 0x80000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f00000000c0)=0xad5, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), 0x0, 0x1000000}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r5, &(0x7f0000000180)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x201) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1m56.523996028s ago: executing program 5 (id=222): listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file7\x00', 0x0, &(0x7f0000001000)={[{@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}]}, 0x1, 0x55c, &(0x7f00000004c0)="$eJzs2kGLEmEYB/Bn1XSLIM/RYaBLJ9k6d0jChSUhMDwUHRpYuzgRjJfR036QPkGfp0/QR/C0N2Mb2c3aikh31vX3A5kH/zPyvCi+7+F59+DD+Pjj5P3bL59i/1kSjYionUa0oxb1KO0tr7WIuB2rTgIA2DaDQdqtugc2K8+76dkZrvVLMvxcSUMAAAAAAAAAAAD8t3+d/9+L5srz5v8BYPuY/992X/96R5530+by/LbK/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQndPF4t7iD6+q+wMA1s/+DwC7x/4PALvH/g8Au+fV6zcvuv1+b5Ak+xHzk2JYDMtrmR8e9XsHyXfti6fmRTGsn+ePyzxZzW/FnWX+5NK8GY8elvlZ9vxl/6e8FcebXz4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwg05yrn3x7rwohvUy7/wuL6vDo37vYHnDat6I+40rWwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwBpPpbJxm2ShXbHHRuVt+m+v5wKdVL+fSorX8xV6Xfm56UeW/EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKXJdDZOs2yUT6ruBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4LibT2TjNslG+waLqNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD1vgUAAP//PY+L7w==") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_cancel(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.471508638s ago: executing program 5 (id=229): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x311000, 0x1000, 0x40000, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) 1m36.461425878s ago: executing program 33 (id=229): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x311000, 0x1000, 0x40000, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) 1m1.482431451s ago: executing program 2 (id=320): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(r3, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(r5, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000000)) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) 1m0.263684989s ago: executing program 2 (id=321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}) 55.666410783s ago: executing program 2 (id=328): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f7701"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f00000001c0)=[{0x0, 0x1001, 0x0, &(0x7f0000000080)}, {0x888, 0x201, 0x0, 0x0}], 0x2}) 51.366873288s ago: executing program 2 (id=336): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x20000000, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x42, 0x0) listen(r2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 49.261814187s ago: executing program 2 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="6c0000001800050604000000000000000a400000fe040001000000001400010020010db800c0000000000000000000010c00080008000200dc05000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x6c) write(r0, &(0x7f0000000000)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000", 0x5c) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800030000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800040000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800050000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800060000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800070000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800", 0x54) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000c00000000000000000001080004000100", 0x36) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800100000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800130000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800140000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800160000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800170000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800180000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800190000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) 48.438415828s ago: executing program 2 (id=345): unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 32.722269927s ago: executing program 34 (id=345): unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 27.111654231s ago: executing program 3 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x10) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 20.69211422s ago: executing program 3 (id=392): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "ddbccf094c550200000000df4e4dbd0026249a6ebed6cc47890c190000000000000000000000000000000000000000ffffffff00", 0x31}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x13220c28) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x81a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@user_xattr}, {@barrier}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) 17.626879272s ago: executing program 3 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="280300", @ANYRES32=0x0, @ANYBLOB="0004000091f90000140003006272696467655f736c6176655f310000880018800400018080000180070002002cf4000008000100000000000800010004000000140004006938bfe7c3b8ae42240b16c0ed6b8768140004000c9b73b021b79fd2025f27082114a6d0140004009feccbb316587f1fafb7dbd8e9ed8d8d14000400f33646b47b166d68a8a26e25f05ece0a130002006272696467655f736c6176655f31000005002700060000000a000100c28360e46eb900000a0002"], 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) splice(r3, 0x0, r3, 0x0, 0x2, 0x8) r4 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4001c00) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 14.879678548s ago: executing program 6 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x10) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 14.151949549s ago: executing program 7 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x101) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118c", 0x3, 0x800, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r5, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 13.537699067s ago: executing program 3 (id=405): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x28) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 11.458835936s ago: executing program 4 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlockall(0x7) munlockall() 11.252852485s ago: executing program 7 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) 11.016758119s ago: executing program 1 (id=408): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 10.963717866s ago: executing program 3 (id=409): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) getpgrp(0x0) 8.840221074s ago: executing program 7 (id=410): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 8.696701746s ago: executing program 4 (id=411): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@nombcache}]}, 0x1, 0x571, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20000088) 8.396495369s ago: executing program 1 (id=412): r0 = msgget$private(0x0, 0x19b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x80, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts}, 0x2) msgsnd(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x401, 0xbe573b18f6e31390) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x1010186, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@abort}, {@data_writeback}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_continue}]}, 0x2, 0x46b, &(0x7f0000000fc0)="$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") ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, r2, 0xee00, r3, 0xffffffffffffffff, 0x80, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x6, 0x2, 0x12, 0x4, 0x8001, 0x8, r4}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0x2020) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="18000000010000", 0x7) 8.120092656s ago: executing program 4 (id=413): socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c6572726f72733d72656d5d0d94de3fdc14218202e06d6f756e742d726f2c757466382c0054196adf651c308bbed3e943b683de163d484370b85d24ac823b7dd236a3cbcccd8c1fec6d8ce3ada228c8bb5dae12bc9a5e7ae91cef079671964c83eb0000000000000000000000000000005d57b478f5605c80cd4da15eecd51392fd072adc66cfa185450c65b9edf195d1c17ab85b42f80563eb7b2be87fa4334c78e81af6a6aacf6b8e48f80f73bfb2f8e1ad0fdf350fcb801bb0ed47bd26d29b5022de992f7aacbc9ef83fc68e02d995787ae409089252dba3a08c836dec12f4e7703a2aa93e6a6715f4607bd3d749e50941a05dadf7ce7ee1e48c25387145b78dd6ac5c23c9b4cc72020059d309af89f30478991f24ef05b7e1"], 0x1, 0x1535, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) 7.774723549s ago: executing program 1 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e7, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.626784815s ago: executing program 1 (id=415): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8750c000) 6.085206548s ago: executing program 1 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="280300", @ANYRES32=0x0, @ANYBLOB="0004000091f90000140003006272696467655f736c6176655f310000880018800400018080000180070002002cf4000008000100000000000800010004000000140004006938bfe7c3b8ae42240b16c0ed6b8768140004000c9b73b021b79fd2025f27082114a6d0140004009feccbb316587f1fafb7dbd8e9ed8d8d14000400f33646b47b166d68a8a26e25f05ece0a130002006272696467655f736c6176655f31000005002700060000000a000100c28360e46eb900000a0002"], 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) splice(r3, 0x0, r3, 0x0, 0x2, 0x8) r4 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4001c00) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 6.083631436s ago: executing program 6 (id=417): unshare(0x20000) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='oom_score_adj & 100\x00', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) close(r1) prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='new_name\x00') 5.239323176s ago: executing program 7 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x311380) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x2, 0xfffffffe, 0x0, 0x5}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000780)={0x0, 0xffff, 0x0, 0x0, r0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r5, &(0x7f0000000040)="10", 0xffffffb7, 0x8080c61) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) 5.134104079s ago: executing program 4 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x10) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 3.229643744s ago: executing program 6 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x101) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118c", 0x3, 0x800, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r5, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 2.606173877s ago: executing program 1 (id=421): socket$can_raw(0x1d, 0x3, 0x1) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.604898779s ago: executing program 4 (id=422): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x181000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000200), 0x1000800, 0x0) 2.434981153s ago: executing program 7 (id=423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.421755922s ago: executing program 6 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) 855.691168ms ago: executing program 6 (id=425): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 568.134836ms ago: executing program 3 (id=426): syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xd, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1c}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x4, 0x1, [0x9]}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0x1, {0x7, 0x25, 0x1, 0x4, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x53, 0x6, 0xfd, {0x7, 0x25, 0x1, 0x8, 0x3, 0x8}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 426.734576ms ago: executing program 6 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0x1ed) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/rndis.rn0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='dummy_udc.0\n\x00', 0xc) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) 215.811273ms ago: executing program 4 (id=428): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) read$watch_queue(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc30e3000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 0s ago: executing program 7 (id=429): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) kernel console output (not intermixed with test programs): ev/nullb0" [ 112.984325][ T5920] VFS: Can't find a romfs filesystem on dev nullb0. [ 112.984325][ T5920] [ 114.132825][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.291035][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 115.373850][ T5872] net_ratelimit: 6 callbacks suppressed [ 115.373893][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.444618][ T5940] ceph: No mds server is up or the cluster is laggy [ 115.642491][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 115.703741][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 115.795847][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.887412][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 115.946955][ T9] usb 6-1: Product: syz [ 116.026038][ T9] usb 6-1: Manufacturer: syz [ 116.092536][ T9] usb 6-1: SerialNumber: syz [ 116.171000][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.289161][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.374735][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.543781][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 116.560285][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 116.569058][ T9] usb 6-1: config 0 descriptor?? [ 116.608431][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 116.653112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.547923][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 117.562915][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.573793][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 117.586945][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 117.610362][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.720649][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 117.828454][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.861836][ T5952] loop1: detected capacity change from 0 to 512 [ 117.876156][ T5952] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.890404][ T5952] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.891452][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 117.919632][ T5952] EXT4-fs (loop1): 1 truncate cleaned up [ 117.929985][ T5952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.967377][ T9] usb 6-1: media controller created [ 118.005788][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.071271][ T5956] loop5: detected capacity change from 0 to 1024 [ 118.101405][ T9] usb 6-1: selecting invalid altsetting 3 [ 118.118478][ T9] ttusb2: set interface to alts=3 failed [ 118.262256][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.293398][ T5956] EXT4-fs: Ignoring removed orlov option [ 118.862579][ T5956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.041423][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.146376][ T9] DVB: Unable to find symbol tda10086_attach() [ 119.167769][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 119.183535][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 119.200201][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 119.234715][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 119.271650][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 119.295282][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.385885][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 120.448750][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.470230][ T9] usb 6-1: USB disconnect, device number 2 [ 121.489668][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.669148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.677762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.850983][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.237606][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.593694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 123.723157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.872607][ T5986] binder: 5983:5986 ioctl c0306201 0 returned -14 [ 124.483036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.944769][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.579495][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 125.617887][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.654097][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.091500][ T6000] file system registered [ 126.102811][ T5774] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.231346][ T5624] ffs_data_put(): freeing [ 126.277206][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 126.354052][ T5774] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 126.433136][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.628959][ T5774] usb 1-1: Product: syz [ 126.757502][ T5774] usb 1-1: Manufacturer: syz [ 126.866986][ T5774] usb 1-1: SerialNumber: syz [ 126.922934][ T5781] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.965092][ T5774] usb 1-1: config 0 descriptor?? [ 127.006248][ T5774] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 127.098278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.106462][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.135243][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 127.169349][ T5781] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 127.203124][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.225421][ T5781] usb 2-1: Product: syz [ 127.235716][ T5781] usb 2-1: Manufacturer: syz [ 127.253769][ T5781] usb 2-1: SerialNumber: syz [ 127.274443][ T5781] usb 2-1: config 0 descriptor?? [ 127.299597][ T5781] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 127.321118][ T5781] dvb-usb: bulk message failed: -22 (4/0) [ 127.607664][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.620102][ T5781] dvb-usb: bulk message failed: -22 (5/0) [ 127.626198][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.644771][ T5781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.654806][ T5781] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 127.663541][ T5781] usb 2-1: media controller created [ 127.710964][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.187830][ T5774] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 128.243455][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.633350][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.644254][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.652362][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.744940][ T5781] usb 2-1: selecting invalid altsetting 3 [ 128.780941][ T5781] ttusb2: set interface to alts=3 failed [ 129.094175][ T6028] loop5: detected capacity change from 0 to 16 [ 129.217905][ T6028] erofs (device loop5): mounted with root inode @ nid 36. [ 129.678603][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.917067][ T5781] DVB: Unable to find symbol tda10086_attach() [ 129.978506][ T5767] usb 1-1: USB disconnect, device number 3 [ 129.989967][ T6030] NILFS (nullb0): couldn't find nilfs on the device [ 130.192427][ T5781] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 130.202058][ T5781] dvb-usb: bulk message failed: -22 (4/0) [ 130.207959][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.218193][ T5781] dvb-usb: bulk message failed: -22 (5/0) [ 130.224049][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.234955][ T5781] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 130.249956][ T5781] usb 2-1: USB disconnect, device number 2 [ 131.021625][ T6039] loop1: detected capacity change from 0 to 256 [ 131.226706][ T6039] exFAT-fs (loop1): bogus data start sector [ 131.227238][ T6039] exFAT-fs (loop1): failed to read boot sector [ 131.227258][ T6039] exFAT-fs (loop1): failed to recognize exfat type [ 131.901235][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.161332][ T5781] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 132.226197][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.235276][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.243358][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.253470][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.661487][ T6043] loop2: detected capacity change from 0 to 512 [ 132.734614][ T6043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.881149][ T6046] loop0: detected capacity change from 0 to 128 [ 132.922586][ T6043] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.974406][ T6046] udf: Unknown parameter 'shOrtBœ' [ 133.034236][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.040134][ T6043] EXT4-fs (loop2): 1 truncate cleaned up [ 133.097591][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.182788][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.221181][ T6053] loop0: detected capacity change from 0 to 16 [ 133.236662][ T6053] erofs: Unknown parameter 'ÿÿOrtBœ' [ 133.276235][ T6044] udevd[6044]: incorrect erofs checksum on /dev/loop0 [ 133.336982][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.337079][ T30] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 133.342169][ T30] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 133.342212][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.342249][ T30] usb 6-1: Product: syz [ 133.342277][ T30] usb 6-1: Manufacturer: syz [ 133.342305][ T30] usb 6-1: SerialNumber: syz [ 133.382649][ T30] usb-storage 6-1:1.0: USB Mass Storage device detected [ 133.498040][ T30] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 133.499528][ T30] scsi host1: usb-storage 6-1:1.0 [ 134.050082][ T30] usb 6-1: USB disconnect, device number 3 [ 134.210462][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.556655][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.593583][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.601738][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.097329][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.325482][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.648301][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.719592][ T6096] loop1: detected capacity change from 0 to 16 [ 136.778631][ T6096] erofs (device loop1): mounted with root inode @ nid 36. [ 136.809496][ T6096] 9pnet_virtio: no channels available for device syz [ 136.828536][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.856572][ T6100] erofs (device loop1): invalid h_shared_count 83 @ nid 46 [ 136.905426][ T5767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.012824][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.049178][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 137.082801][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 137.093697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.128415][ T5767] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 137.133155][ T6104] loop3: detected capacity change from 0 to 2048 [ 137.145453][ T9] usb 3-1: Product: syz [ 137.155388][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.165568][ T9] usb 3-1: Manufacturer: syz [ 137.180680][ T9] usb 3-1: SerialNumber: syz [ 137.252292][ T5767] usb 1-1: Product: syz [ 137.273124][ T6104] ======================================================= [ 137.273124][ T6104] WARNING: The mand mount option has been deprecated and [ 137.273124][ T6104] and is ignored by this kernel. Remove the mand [ 137.273124][ T6104] option from the mount to silence this warning. [ 137.273124][ T6104] ======================================================= [ 137.351703][ T5767] usb 1-1: Manufacturer: syz [ 137.388344][ T5767] usb 1-1: SerialNumber: syz [ 137.696453][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.723316][ T6113] loop4: detected capacity change from 0 to 128 [ 137.783021][ T6111] loop1: detected capacity change from 0 to 512 [ 137.866037][ T6113] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.918898][ T5767] usb 1-1: config 0 descriptor?? [ 138.019496][ T9] usb 3-1: config 0 descriptor?? [ 138.239092][ T5767] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 138.363200][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 138.376203][ T6113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806e018, mo2=0002] [ 138.387989][ T6113] System zones: 1-3, 19-19, 35-36 [ 138.396644][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 138.405170][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.426752][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 138.458174][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.498787][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.515448][ T6113] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.779794][ T6113] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.114763][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.156451][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.310388][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.430671][ T5767] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 139.446808][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.485577][ T6113] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 139.528270][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 139.553679][ T9] usb 3-1: media controller created [ 139.587513][ T5767] usb 1-1: USB disconnect, device number 4 [ 139.603296][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.724330][ T6126] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 139.914375][ T9] usb 3-1: selecting invalid altsetting 3 [ 139.955118][ T9] ttusb2: set interface to alts=3 failed [ 140.096926][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.097053][ T6120] loop5: detected capacity change from 0 to 4096 [ 140.116289][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.162522][ T6120] EXT4-fs: inline encryption not supported [ 140.241316][ T6120] EXT4-fs: Ignoring removed oldalloc option [ 140.267895][ T5633] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.287755][ T9] DVB: Unable to find symbol tda10086_attach() [ 140.297656][ T6120] EXT4-fs (loop5): Test dummy encryption mode enabled [ 140.332474][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 140.351071][ T6120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 140.383821][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 140.392747][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 140.403229][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 140.409011][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 140.422236][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 140.434543][ T6120] System zones: 0-5 [ 140.440859][ T9] usb 3-1: USB disconnect, device number 2 [ 140.465502][ T6120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.483408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.491559][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.641709][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 140.664170][ T6145] loop1: detected capacity change from 0 to 512 [ 140.673602][ T6145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.689316][ T6145] EXT4-fs (loop1): 1 truncate cleaned up [ 140.697715][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.636018][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.692280][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 141.814383][ T31] audit: type=1800 audit(1785195107.746:65): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.69" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 142.033459][ T31] audit: type=1800 audit(1785195107.746:66): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.69" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 143.048955][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.903304][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.913544][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.954694][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.070131][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.084442][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.228553][ T6170] loop1: detected capacity change from 0 to 1024 [ 146.243775][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.251978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.386793][ T6170] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 148.332862][ T6170] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 148.347587][ T6170] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.75: Failed to acquire dquot type 0 [ 148.358918][ T6170] loop1: lost filesystem error report for type 5 error -5 [ 148.362759][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 148.376841][ C0] EXT4-fs (loop1): initial error at time 1785195114: ext4_acquire_dquot:7039 [ 148.385724][ C0] EXT4-fs (loop1): last error at time 1785195114: ext4_acquire_dquot:7039 [ 148.400228][ T6170] EXT4-fs (loop1): 1 truncate cleaned up [ 148.419529][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.437784][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.248059][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.321390][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.443123][ T5872] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 149.497845][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.597705][ T6195] Zero length message leads to an empty skb [ 149.620283][ T5872] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 150.538710][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.550078][ T5872] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 150.576791][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.617412][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.634032][ T5872] usb 6-1: config 0 descriptor?? [ 150.662188][ T6191] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 151.011832][ T6205] loop0: detected capacity change from 0 to 512 [ 151.038863][ T6205] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.097343][ T6205] EXT4-fs (loop0): 1 truncate cleaned up [ 151.131309][ T6205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.146003][ T5872] uclogic 0003:2179:0053.0001: interface is invalid, ignoring [ 151.327553][ T5872] usb 6-1: USB disconnect, device number 4 [ 151.685796][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.372593][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.617644][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.736274][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.033009][ T5767] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.044982][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.146290][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.205596][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.790323][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.032782][ T5767] usb 6-1: Using ep0 maxpacket: 16 [ 155.050518][ T5767] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 155.082153][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.090279][ T5767] usb 6-1: Product: syz [ 155.097862][ T5767] usb 6-1: Manufacturer: syz [ 155.102487][ T5767] usb 6-1: SerialNumber: syz [ 155.120865][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.125559][ T5767] usb 6-1: config 0 descriptor?? [ 155.394394][ T5914] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.602964][ T5767] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 155.654523][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.760154][ T5767] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 155.881617][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 156.592955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.644867][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.658363][ T5767] usb 6-1: USB disconnect, device number 5 [ 156.743621][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.905437][ T5914] usb 4-1: device descriptor read/all, error -71 [ 157.546851][ T6267] NILFS (nullb0): couldn't find nilfs on the device [ 157.799642][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.331973][ T6277] loop2: detected capacity change from 0 to 256 [ 159.147608][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.155770][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.183401][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.206559][ T6277] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 161.567517][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.605013][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.973248][ T5782] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.301441][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.576436][ T5782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.672645][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.694072][ T5782] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 162.748056][ T5782] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 162.825276][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.862515][ T5782] usb 3-1: Product: syz [ 162.875492][ T5782] usb 3-1: Manufacturer: syz [ 162.894756][ T5782] usb 3-1: SerialNumber: syz [ 162.957694][ T5782] usb-storage 3-1:1.0: USB Mass Storage device detected [ 163.062803][ T5739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.189736][ T5782] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 163.203333][ T5782] scsi host1: usb-storage 3-1:1.0 [ 164.273006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 164.496832][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.922832][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.944492][ T5739] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 166.438655][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.451102][ T5739] usb 5-1: config 0 descriptor?? [ 166.466598][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.475516][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.533597][ T5782] usb 3-1: USB disconnect, device number 3 [ 166.844552][ T5739] usb 5-1: can't set config #0, error -71 [ 166.896986][ T5739] usb 5-1: USB disconnect, device number 2 [ 167.098109][ T6318] NILFS (nullb0): couldn't find nilfs on the device [ 167.552023][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.602988][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.342790][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 168.537765][ T5872] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 168.585683][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.665528][ T5872] usb 6-1: Product: syz [ 168.670628][ T5872] usb 6-1: Manufacturer: syz [ 168.688409][ T5872] usb 6-1: SerialNumber: syz [ 169.310587][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.802945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 169.946890][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.960461][ T5872] usb 6-1: config 0 descriptor?? [ 170.121549][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.145100][ T5872] usb 6-1: can't set config #0, error -71 [ 170.162405][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.185933][ T5872] usb 6-1: USB disconnect, device number 6 [ 170.253451][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.365266][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.388674][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.525192][ T6352] loop5: detected capacity change from 0 to 512 [ 170.634185][ T6352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.651503][ T6360] 9p: Bad value for 'wfdno' [ 170.659898][ T5630] Bluetooth: hci1: Malformed HCI Event [ 170.684060][ T6360] Bluetooth: MGMT ver 1.23 [ 170.791221][ T6352] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.021112][ T5872] net_ratelimit: 1 callbacks suppressed [ 172.021138][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.035131][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.085458][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.105545][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.486552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.806144][ T31] audit: type=1800 audit(1785195138.316:67): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.124" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 173.099643][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.156717][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.165717][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.223175][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.065958][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.204456][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.875914][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.023010][ T6383] NILFS (nullb0): couldn't find nilfs on the device [ 176.389412][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.479272][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.538388][ T5872] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 176.583260][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.646399][ T5872] usb 1-1: config 0 descriptor?? [ 176.908912][ T6395] loop3: detected capacity change from 0 to 16 [ 176.928633][ T6395] erofs (device loop3): mounted with root inode @ nid 36. [ 178.174683][ T30] net_ratelimit: 1 callbacks suppressed [ 178.174710][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.410700][ T6406] 9p: Bad value for 'wfdno' [ 178.421223][ T5630] Bluetooth: hci3: Malformed HCI Event [ 178.431385][ T6406] loop3: detected capacity change from 0 to 512 [ 178.542779][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.561028][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 178.579687][ T6406] EXT4-fs: Mount option(s) incompatible with ext2 [ 178.627487][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.675942][ T5872] usb 1-1: USB disconnect, device number 5 [ 178.881957][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 178.950024][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.971573][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 179.004874][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.026562][ T9] usb 2-1: Product: syz [ 179.039986][ T9] usb 2-1: Manufacturer: syz [ 179.073915][ T9] usb 2-1: SerialNumber: syz [ 179.106639][ T9] usb 2-1: config 0 descriptor?? [ 179.138330][ T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 179.240545][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.526457][ T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 180.388919][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.734298][ T6438] veth1_to_bond: entered allmulticast mode [ 180.832112][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 180.917151][ T5914] usb 2-1: USB disconnect, device number 3 [ 181.212286][ T6443] loop1: detected capacity change from 0 to 512 [ 181.229272][ T6443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.277535][ T6438] veth1_to_bond (unregistering): left allmulticast mode [ 181.320388][ T6443] EXT4-fs (loop1): 1 truncate cleaned up [ 181.380525][ T6443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.482445][ T6448] NILFS (nullb0): couldn't find nilfs on the device [ 181.900131][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.003206][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.004380][ T6438] bond0: (slave bond_slave_1): Releasing backup interface [ 182.082932][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.764973][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.999132][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.365302][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.613104][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.756217][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.817490][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.858877][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.892177][ T30] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 183.926528][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.934400][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.979654][ T5872] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 184.024464][ T30] usb 3-1: config 0 descriptor?? [ 184.037141][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.077875][ T5872] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 184.116355][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.157610][ T5872] usb 5-1: Product: syz [ 184.174774][ T5872] usb 5-1: Manufacturer: syz [ 184.194995][ T5872] usb 5-1: SerialNumber: syz [ 184.966164][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 185.030234][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 185.032451][ T5872] usb-storage 5-1:1.0: USB Mass Storage device detected [ 185.076678][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.095789][ T5872] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 185.106617][ T5872] scsi host1: usb-storage 5-1:1.0 [ 185.123447][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.133877][ T30] usb 3-1: USB disconnect, device number 4 [ 185.216157][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.257233][ T5767] usb 5-1: USB disconnect, device number 3 [ 185.451851][ T6482] 9p: Bad value for 'wfdno' [ 185.481347][ T5630] Bluetooth: hci0: Malformed HCI Event [ 185.678528][ T6491] loop1: detected capacity change from 0 to 256 [ 185.722216][ T6491] exfat: Deprecated parameter 'utf8' [ 185.747875][ T6482] loop0: detected capacity change from 0 to 512 [ 185.749865][ T6491] exfat: Deprecated parameter 'namecase' [ 185.790419][ T6491] exfat: Deprecated parameter 'namecase' [ 185.813696][ T6491] exfat: Bad value for 'umask' [ 185.868197][ T6482] EXT4-fs: Mount option(s) incompatible with ext2 [ 186.026262][ T6493] bridge0: port 3(syz_tun) entered blocking state [ 186.105129][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.220981][ T6493] bridge0: port 3(syz_tun) entered disabled state [ 186.407295][ T6493] syz_tun: entered allmulticast mode [ 186.601928][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.621156][ T6493] syz_tun: entered promiscuous mode [ 186.682424][ T6493] bridge0: port 3(syz_tun) entered blocking state [ 186.689756][ T6493] bridge0: port 3(syz_tun) entered forwarding state [ 186.722761][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 186.733677][ T30] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 186.742944][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.751697][ T30] usb 6-1: Product: syz [ 186.756100][ T30] usb 6-1: Manufacturer: syz [ 186.760732][ T30] usb 6-1: SerialNumber: syz [ 186.935774][ T30] usb 6-1: config 0 descriptor?? [ 187.022625][ T6505] NILFS (nullb0): couldn't find nilfs on the device [ 187.730193][ T30] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 187.743904][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.902813][ T30] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 188.491612][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.860402][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.047566][ T5914] usb 6-1: USB disconnect, device number 7 [ 190.484968][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.526964][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.535233][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.903524][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.208402][ T6561] NILFS (nullb0): couldn't find nilfs on the device [ 192.897298][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.910631][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.964636][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.989752][ T5872] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 193.037294][ T5872] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 193.064426][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.141840][ T5872] usb 6-1: Product: syz [ 193.167227][ T5872] usb 6-1: Manufacturer: syz [ 193.195822][ T5872] usb 6-1: SerialNumber: syz [ 193.209451][ T6565] input: syz0 as /devices/virtual/input/input5 [ 193.307813][ T5872] usb-storage 6-1:1.0: USB Mass Storage device detected [ 193.366815][ T5872] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 193.428394][ T5872] scsi host1: usb-storage 6-1:1.0 [ 193.605106][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.611489][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.487413][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.512358][ T5872] usb 6-1: USB disconnect, device number 8 [ 194.571089][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.172129][ T6582] loop1: detected capacity change from 0 to 40427 [ 195.191341][ T6582] F2FS-fs (loop1): invalid crc value [ 195.274584][ T6582] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 195.286316][ T6582] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 195.294187][ T6582] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 195.306820][ T6582] F2FS-fs (loop1): Start checkpoint disabled! [ 195.324819][ T6582] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 195.334484][ T6582] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 195.487703][ T6591] syz.1.183: attempt to access beyond end of device [ 195.487703][ T6591] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 195.731573][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.790650][ T49] kworker/u8:3: attempt to access beyond end of device [ 196.790650][ T49] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 197.039857][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.141683][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 197.141735][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 197.141760][ T49] Workqueue: writeback wb_workfn (flush-7:1) [ 197.141823][ T49] Call Trace: [ 197.141835][ T49] [ 197.141849][ T49] dump_stack_lvl+0x100/0x190 [ 197.141893][ T49] f2fs_stop_checkpoint+0x5e6/0xb30 [ 197.141954][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.141999][ T49] ? errseq_set+0xe3/0x150 [ 197.142055][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.142110][ T49] f2fs_write_end_bio+0xf53/0x1340 [ 197.142152][ T49] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 197.142196][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.142250][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 197.142287][ T49] bio_endio+0x778/0x8e0 [ 197.142334][ T49] submit_bio_noacct+0x64c/0x1ff0 [ 197.142402][ T49] f2fs_submit_write_bio+0x133/0x330 [ 197.142464][ T49] __submit_merged_bio+0x330/0x7b0 [ 197.142500][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.142559][ T49] __submit_merged_write_cond+0x3fe/0x510 [ 197.142608][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 197.142662][ T49] ? __pfx___might_resched+0x10/0x10 [ 197.142702][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.142744][ T49] ? folio_clear_dirty_for_io+0x178/0x960 [ 197.142808][ T49] f2fs_write_cache_pages+0x20e9/0x2630 [ 197.142877][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 197.142963][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143073][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143116][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.143173][ T49] f2fs_write_data_pages+0x799/0x16d0 [ 197.143233][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 197.143295][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 197.143345][ T49] do_writepages+0x278/0x600 [ 197.143414][ T49] ? __pfx_do_writepages+0x10/0x10 [ 197.143478][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143528][ T49] __writeback_single_inode+0x164/0x1300 [ 197.143584][ T49] ? find_held_lock+0x2b/0x80 [ 197.143641][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143693][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 197.143742][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143785][ T49] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.143835][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.143892][ T49] writeback_sb_inodes+0x766/0x1c50 [ 197.143959][ T49] ? unwind_next_frame+0x3be/0x2090 [ 197.144025][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 197.144132][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144180][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.144234][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144277][ T49] ? queue_io+0x287/0x530 [ 197.144326][ T49] wb_writeback+0x1c0/0xb50 [ 197.144392][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 197.144451][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144498][ T49] ? mark_held_locks+0x40/0x70 [ 197.144539][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.144587][ T49] wb_workfn+0x143/0xc80 [ 197.144643][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144697][ T49] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.144739][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 197.144797][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144848][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144896][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.144940][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.145000][ T49] process_one_work+0xa23/0x1940 [ 197.145057][ T49] ? __pfx_process_one_work+0x10/0x10 [ 197.145091][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.145149][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.145200][ T49] worker_thread+0x5ef/0xe50 [ 197.145255][ T49] ? kthread+0x13a/0x450 [ 197.145309][ T49] ? __pfx_worker_thread+0x10/0x10 [ 197.145343][ T49] kthread+0x370/0x450 [ 197.145398][ T49] ? __pfx_kthread+0x10/0x10 [ 197.145459][ T49] ret_from_fork+0x72b/0xd50 [ 197.145510][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 197.145560][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.145604][ T49] ? __switch_to+0x800/0x10f0 [ 197.145666][ T49] ? __switch_to_asm+0x39/0x70 [ 197.145718][ T49] ? __pfx_kthread+0x10/0x10 [ 197.145778][ T49] ret_from_fork_asm+0x1a/0x30 [ 197.145852][ T49] [ 197.715060][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 197.723599][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 197.723651][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 197.723674][ T49] Workqueue: writeback wb_workfn (flush-7:1) [ 197.723735][ T49] Call Trace: [ 197.723746][ T49] [ 197.723759][ T49] dump_stack_lvl+0x100/0x190 [ 197.723804][ T49] f2fs_stop_checkpoint+0x5e6/0xb30 [ 197.723865][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.723909][ T49] ? errseq_set+0xe3/0x150 [ 197.723966][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.724018][ T49] f2fs_write_end_bio+0xf53/0x1340 [ 197.724062][ T49] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 197.724108][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.724163][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 197.724201][ T49] bio_endio+0x778/0x8e0 [ 197.724249][ T49] submit_bio_noacct+0x64c/0x1ff0 [ 197.724320][ T49] f2fs_submit_write_bio+0x133/0x330 [ 197.724382][ T49] __submit_merged_bio+0x330/0x7b0 [ 197.724419][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.724479][ T49] __submit_merged_write_cond+0x3fe/0x510 [ 197.724529][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 197.724582][ T49] ? __pfx___might_resched+0x10/0x10 [ 197.724622][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.724715][ T49] ? folio_clear_dirty_for_io+0x178/0x960 [ 197.724783][ T49] f2fs_write_cache_pages+0x20e9/0x2630 [ 197.724858][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 197.724952][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725075][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725119][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.725179][ T49] f2fs_write_data_pages+0x799/0x16d0 [ 197.725242][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 197.725308][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 197.725359][ T49] do_writepages+0x278/0x600 [ 197.725425][ T49] ? __pfx_do_writepages+0x10/0x10 [ 197.725487][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725538][ T49] __writeback_single_inode+0x164/0x1300 [ 197.725587][ T49] ? find_held_lock+0x2b/0x80 [ 197.725650][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725697][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 197.725746][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725790][ T49] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.725840][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.725892][ T49] writeback_sb_inodes+0x766/0x1c50 [ 197.725964][ T49] ? unwind_next_frame+0x3be/0x2090 [ 197.726023][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 197.726143][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726187][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.726238][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726283][ T49] ? queue_io+0x287/0x530 [ 197.726325][ T49] wb_writeback+0x1c0/0xb50 [ 197.726382][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 197.726439][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726478][ T49] ? mark_held_locks+0x40/0x70 [ 197.726523][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.726567][ T49] wb_workfn+0x143/0xc80 [ 197.726620][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726666][ T49] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.726705][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 197.726753][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726801][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726848][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.726887][ T49] ? rcu_is_watching+0x12/0xc0 [ 197.726947][ T49] process_one_work+0xa23/0x1940 [ 197.727005][ T49] ? __pfx_process_one_work+0x10/0x10 [ 197.727038][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.727098][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.727150][ T49] worker_thread+0x5ef/0xe50 [ 197.727205][ T49] ? kthread+0x13a/0x450 [ 197.727256][ T49] ? __pfx_worker_thread+0x10/0x10 [ 197.727286][ T49] kthread+0x370/0x450 [ 197.727337][ T49] ? __pfx_kthread+0x10/0x10 [ 197.727395][ T49] ret_from_fork+0x72b/0xd50 [ 197.727443][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 197.727493][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.727535][ T49] ? __switch_to+0x800/0x10f0 [ 197.727587][ T49] ? __switch_to_asm+0x39/0x70 [ 197.727636][ T49] ? __pfx_kthread+0x10/0x10 [ 197.727738][ T49] ret_from_fork_asm+0x1a/0x30 [ 197.727812][ T49] [ 197.728135][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 198.027600][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.553608][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.884833][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.101601][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.242490][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.829886][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.901406][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.989358][ T6666] NILFS (nullb0): couldn't find nilfs on the device [ 204.607213][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.947185][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.149035][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.843279][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.858207][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.866674][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.880445][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.896227][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.902872][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.930969][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.201059][ T5638] Bluetooth: hci6: command tx timeout [ 209.354360][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.627968][ T6713] NILFS (nullb0): couldn't find nilfs on the device [ 210.898871][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.972597][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.282817][ T5630] Bluetooth: hci6: command tx timeout [ 211.321701][ T6732] NILFS (nullb0): couldn't find nilfs on the device [ 212.003322][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.183181][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.258810][ T6738] loop4: detected capacity change from 0 to 40427 [ 213.278381][ T6738] F2FS-fs (loop4): invalid crc value [ 213.323344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 213.362771][ T5630] Bluetooth: hci6: command tx timeout [ 213.372379][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.398803][ T6738] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 213.410487][ T6738] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 213.418154][ T6738] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 213.430194][ T6738] F2FS-fs (loop4): Start checkpoint disabled! [ 213.441155][ T6738] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 213.450953][ T6738] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 213.661003][ T6743] syz.4.220: attempt to access beyond end of device [ 213.661003][ T6743] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 214.076254][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.471291][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.519850][ T12] kworker/u8:0: attempt to access beyond end of device [ 214.519850][ T12] loop4: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 214.626261][ T12] kworker/u8:0: attempt to access beyond end of device [ 214.626261][ T12] loop4: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 215.497898][ T5625] Bluetooth: hci6: command tx timeout [ 215.679406][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.688509][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 215.688554][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 215.688578][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 215.688639][ T12] Call Trace: [ 215.688650][ T12] [ 215.688663][ T12] dump_stack_lvl+0x100/0x190 [ 215.688713][ T12] f2fs_stop_checkpoint+0x5e6/0xb30 [ 215.688773][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.688819][ T12] ? errseq_set+0xe3/0x150 [ 215.688874][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.688925][ T12] f2fs_write_end_bio+0xf53/0x1340 [ 215.688967][ T12] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 215.689012][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.689068][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 215.689106][ T12] bio_endio+0x778/0x8e0 [ 215.689152][ T12] submit_bio_noacct+0x64c/0x1ff0 [ 215.689219][ T12] f2fs_submit_write_bio+0x133/0x330 [ 215.689280][ T12] __submit_merged_bio+0x330/0x7b0 [ 215.689316][ T12] ? rcu_is_watching+0x12/0xc0 [ 215.689375][ T12] __submit_merged_write_cond+0x3fe/0x510 [ 215.689422][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 215.689470][ T12] ? __pfx___might_resched+0x10/0x10 [ 215.689509][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.689553][ T12] ? folio_clear_dirty_for_io+0x178/0x960 [ 215.689619][ T12] f2fs_write_cache_pages+0x20e9/0x2630 [ 215.689694][ T12] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 215.689749][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.689794][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.689837][ T12] ? find_held_lock+0x2b/0x80 [ 215.689891][ T12] ? nr_blockdev_pages+0xde/0x120 [ 215.689945][ T12] ? nr_blockdev_pages+0xde/0x120 [ 215.689997][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690060][ T12] ? si_meminfo+0x118/0x230 [ 215.690101][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690146][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690252][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690296][ T12] ? rcu_is_watching+0x12/0xc0 [ 215.690354][ T12] f2fs_write_data_pages+0x799/0x16d0 [ 215.690400][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690456][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.690518][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.690568][ T12] do_writepages+0x278/0x600 [ 215.690633][ T12] ? __pfx_do_writepages+0x10/0x10 [ 215.690697][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690747][ T12] __writeback_single_inode+0x164/0x1300 [ 215.690796][ T12] ? find_held_lock+0x2b/0x80 [ 215.690853][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690899][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 215.690948][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.690990][ T12] ? do_raw_spin_unlock+0x145/0x1e0 [ 215.691039][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691087][ T12] writeback_sb_inodes+0x766/0x1c50 [ 215.691156][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 215.691202][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691246][ T12] ? find_held_lock+0x2b/0x80 [ 215.691299][ T12] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 215.691413][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691456][ T12] ? rcu_is_watching+0x12/0xc0 [ 215.691507][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691550][ T12] ? queue_io+0x287/0x530 [ 215.691594][ T12] wb_writeback+0x1c0/0xb50 [ 215.691654][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 215.691720][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691763][ T12] ? mark_held_locks+0x40/0x70 [ 215.691803][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.691848][ T12] wb_workfn+0x143/0xc80 [ 215.691900][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.691944][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 215.691986][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 215.692038][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692086][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692133][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692176][ T12] ? rcu_is_watching+0x12/0xc0 [ 215.692234][ T12] process_one_work+0xa23/0x1940 [ 215.692289][ T12] ? __pfx_process_one_work+0x10/0x10 [ 215.692323][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692381][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692432][ T12] worker_thread+0x5ef/0xe50 [ 215.692484][ T12] ? kthread+0x13a/0x450 [ 215.692539][ T12] ? __pfx_worker_thread+0x10/0x10 [ 215.692573][ T12] kthread+0x370/0x450 [ 215.692628][ T12] ? __pfx_kthread+0x10/0x10 [ 215.692698][ T12] ret_from_fork+0x72b/0xd50 [ 215.692749][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 215.692799][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.692843][ T12] ? __switch_to+0x800/0x10f0 [ 215.692900][ T12] ? __switch_to_asm+0x39/0x70 [ 215.692950][ T12] ? __pfx_kthread+0x10/0x10 [ 215.693010][ T12] ret_from_fork_asm+0x1a/0x30 [ 215.693083][ T12] [ 216.168228][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 216.174344][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 216.180368][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 216.186468][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 216.193872][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 216.448601][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 216.460107][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 216.460151][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.460174][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 216.460235][ T12] Call Trace: [ 216.460246][ T12] [ 216.460259][ T12] dump_stack_lvl+0x100/0x190 [ 216.460301][ T12] f2fs_stop_checkpoint+0x5e6/0xb30 [ 216.460361][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.460407][ T12] ? errseq_set+0xe3/0x150 [ 216.460464][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.460518][ T12] f2fs_write_end_bio+0xf53/0x1340 [ 216.460562][ T12] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 216.460627][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.460720][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 216.460760][ T12] bio_endio+0x778/0x8e0 [ 216.460807][ T12] submit_bio_noacct+0x64c/0x1ff0 [ 216.460877][ T12] f2fs_submit_write_bio+0x133/0x330 [ 216.460939][ T12] __submit_merged_bio+0x330/0x7b0 [ 216.460976][ T12] ? rcu_is_watching+0x12/0xc0 [ 216.461037][ T12] __submit_merged_write_cond+0x3fe/0x510 [ 216.461087][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 216.461140][ T12] ? __pfx___might_resched+0x10/0x10 [ 216.461180][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461225][ T12] ? folio_clear_dirty_for_io+0x178/0x960 [ 216.461293][ T12] f2fs_write_cache_pages+0x20e9/0x2630 [ 216.461368][ T12] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 216.461426][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461473][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461517][ T12] ? find_held_lock+0x2b/0x80 [ 216.461572][ T12] ? nr_blockdev_pages+0xde/0x120 [ 216.461627][ T12] ? nr_blockdev_pages+0xde/0x120 [ 216.461679][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461752][ T12] ? si_meminfo+0x118/0x230 [ 216.461793][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461838][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.461959][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462004][ T12] ? rcu_is_watching+0x12/0xc0 [ 216.462064][ T12] f2fs_write_data_pages+0x799/0x16d0 [ 216.462111][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462170][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 216.462236][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 216.462289][ T12] do_writepages+0x278/0x600 [ 216.462355][ T12] ? __pfx_do_writepages+0x10/0x10 [ 216.462418][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462470][ T12] __writeback_single_inode+0x164/0x1300 [ 216.462519][ T12] ? find_held_lock+0x2b/0x80 [ 216.462576][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462624][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 216.462679][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462728][ T12] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.462780][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.462832][ T12] writeback_sb_inodes+0x766/0x1c50 [ 216.462907][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 216.462956][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463001][ T12] ? find_held_lock+0x2b/0x80 [ 216.463056][ T12] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 216.463174][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463217][ T12] ? rcu_is_watching+0x12/0xc0 [ 216.463264][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463305][ T12] ? queue_io+0x287/0x530 [ 216.463347][ T12] wb_writeback+0x1c0/0xb50 [ 216.463407][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 216.463470][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463515][ T12] ? mark_held_locks+0x40/0x70 [ 216.463556][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.463603][ T12] wb_workfn+0x143/0xc80 [ 216.463658][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463711][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.463754][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 216.463808][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463859][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463908][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.463951][ T12] ? rcu_is_watching+0x12/0xc0 [ 216.464013][ T12] process_one_work+0xa23/0x1940 [ 216.464074][ T12] ? __pfx_process_one_work+0x10/0x10 [ 216.464108][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.464171][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.464225][ T12] worker_thread+0x5ef/0xe50 [ 216.464283][ T12] ? kthread+0x13a/0x450 [ 216.464338][ T12] ? __pfx_worker_thread+0x10/0x10 [ 216.464372][ T12] kthread+0x370/0x450 [ 216.464428][ T12] ? __pfx_kthread+0x10/0x10 [ 216.464490][ T12] ret_from_fork+0x72b/0xd50 [ 216.464542][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 216.464594][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.464637][ T12] ? __switch_to+0x800/0x10f0 [ 216.464700][ T12] ? __switch_to_asm+0x39/0x70 [ 216.464750][ T12] ? __pfx_kthread+0x10/0x10 [ 216.464811][ T12] ret_from_fork_asm+0x1a/0x30 [ 216.464890][ T12] [ 216.954975][ T6753] loop5: detected capacity change from 0 to 2048 [ 216.968392][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.980095][ T6753] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9) [ 217.323925][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.537647][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 217.581090][ T6761] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 218.047977][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.437277][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.918581][ T6786] NILFS (nullb0): couldn't find nilfs on the device [ 220.529895][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.599742][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.950047][ T6793] loop1: detected capacity change from 0 to 128 [ 221.744274][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.762962][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.787742][ T6793] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.840574][ T6793] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.164010][ T5631] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.296290][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.260150][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.951409][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.131043][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.174916][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.214733][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.233107][ T6679] bridge_slave_0: entered allmulticast mode [ 225.282297][ T6679] bridge_slave_0: entered promiscuous mode [ 225.327234][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.360915][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.384954][ T6679] bridge_slave_1: entered allmulticast mode [ 225.408633][ T6679] bridge_slave_1: entered promiscuous mode [ 225.530803][ T6821] loop1: detected capacity change from 0 to 2048 [ 226.340156][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.454285][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.484522][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.514112][ T6821] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.239: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 226.561512][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.588828][ T6821] EXT4-fs (loop1): Remounting filesystem read-only [ 226.684412][ T6679] team0: Port device team_slave_0 added [ 226.707619][ T6679] team0: Port device team_slave_1 added [ 226.882125][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.615689][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.742592][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.058031][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.082159][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.202844][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.551865][ T6859] NILFS (nullb0): couldn't find nilfs on the device [ 229.225123][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.256721][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.309456][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.379859][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.727694][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 231.024454][ T6679] hsr_slave_0: entered promiscuous mode [ 231.042759][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 231.047301][ T6679] hsr_slave_1: entered promiscuous mode [ 231.060238][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.069167][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.081753][ T6679] debugfs: 'hsr0' already exists in 'hsr' [ 231.097693][ T5914] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 231.110718][ T6679] Cannot create hsr debugfs directory [ 231.129559][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.164697][ T5914] usb 2-1: Product: syz [ 231.185015][ T5914] usb 2-1: Manufacturer: syz [ 231.216288][ T5914] usb 2-1: SerialNumber: syz [ 231.252341][ T5914] usb 2-1: config 0 descriptor?? [ 231.286685][ T5914] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 232.473020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 232.592679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 232.772678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 233.469179][ T5914] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 234.135068][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.154060][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.296512][ T30] usb 2-1: USB disconnect, device number 4 [ 234.639914][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.538029][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.805425][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.818560][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.833165][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.852749][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.862774][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.173308][ T5739] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.346732][ T5739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.410254][ T5739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.494247][ T6924] NILFS (nullb0): couldn't find nilfs on the device [ 236.572776][ T5739] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 237.202525][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.215696][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.232119][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.361968][ T6922] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 237.401909][ T5739] usb 4-1: config 0 descriptor?? [ 237.725011][ T6679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.925355][ T5630] Bluetooth: hci0: command tx timeout [ 238.334946][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.354223][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.361288][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.368646][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.376062][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.383243][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.390244][ T5739] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 238.581601][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.598819][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.632831][ T5739] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 238.655710][ T6679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.797830][ T5739] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 238.833564][ T5739] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 238.884314][ T5739] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -32 [ 238.888974][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.239540][ T5739] usb 4-1: USB disconnect, device number 5 [ 239.316108][ T6679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.405789][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.451496][ T6679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.515203][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.525755][ T6937] fido_id[6937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 239.603349][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.689459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.706141][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.749700][ T5630] Bluetooth: hci0: command tx timeout [ 241.817406][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.937669][ T5872] kernel read not supported for file /rfkill (pid: 5872 comm: kworker/0:7) [ 242.104050][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 242.160393][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.276782][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.348365][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.355637][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.470816][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.478025][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.723669][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.891384][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.405101][ T6980] NILFS (nullb0): couldn't find nilfs on the device [ 243.772961][ T5630] Bluetooth: hci0: command tx timeout [ 244.136825][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.171631][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.472325][ T6988] loop4: detected capacity change from 0 to 1024 [ 244.524334][ T6988] EXT4-fs: Ignoring removed orlov option [ 244.646393][ T6988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.834756][ T6988] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.905602][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.016957][ T6998] NILFS (nullb0): couldn't find nilfs on the device [ 245.495342][ T31] audit: type=1800 audit(1785195211.545:68): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.274" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 245.542160][ T6988] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.274: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.603801][ T31] audit: type=1800 audit(1785195211.595:69): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.274" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 245.639156][ T6988] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 245.673871][ T6988] EXT4-fs (loop4): This should not happen!! Data will be lost [ 245.673871][ T6988] [ 245.695522][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.769963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.845852][ T5630] Bluetooth: hci0: command tx timeout [ 246.005151][ T6995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 246.017234][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.029358][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.039717][ T6905] bridge_slave_0: entered allmulticast mode [ 246.048393][ T6905] bridge_slave_0: entered promiscuous mode [ 246.059593][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.067193][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.075340][ T6905] bridge_slave_1: entered allmulticast mode [ 246.083994][ T6905] bridge_slave_1: entered promiscuous mode [ 246.162291][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.176899][ T5633] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 246.215388][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.229086][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.441074][ T6905] team0: Port device team_slave_0 added [ 246.486963][ T6905] team0: Port device team_slave_1 added [ 246.619091][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.642570][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.066494][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.282558][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.328743][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.365370][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.471249][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.622055][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.692759][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 249.605840][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.656019][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.693653][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 249.728567][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 249.745096][ T6905] hsr_slave_0: entered promiscuous mode [ 249.791984][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.806707][ T6905] hsr_slave_1: entered promiscuous mode [ 249.830888][ T9] usb 3-1: Product: syz [ 249.836473][ T6905] debugfs: 'hsr0' already exists in 'hsr' [ 249.854970][ T9] usb 3-1: Manufacturer: syz [ 249.863543][ T6905] Cannot create hsr debugfs directory [ 249.882808][ T9] usb 3-1: SerialNumber: syz [ 249.939464][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.941406][ T9] usb 3-1: config 0 descriptor?? [ 249.980745][ T3280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.999490][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.010269][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.049026][ T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 250.723497][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.757359][ T9] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 251.784236][ T9] usb 3-1: USB disconnect, device number 5 [ 251.796109][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.861924][ T6905] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.905853][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.933915][ T6905] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.956413][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.992892][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 252.061446][ T6905] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 252.106625][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.124523][ T6905] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 252.156715][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.209921][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.249580][ T6679] veth0_vlan: entered promiscuous mode [ 252.265128][ T5914] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 252.306785][ T5914] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 252.307050][ T6679] veth1_vlan: entered promiscuous mode [ 252.363586][ T5914] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.412687][ T5914] usb 2-1: config 1 interface 0 has no altsetting 0 [ 252.444589][ T5914] usb 2-1: string descriptor 0 read error: -22 [ 252.471127][ T5914] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.509558][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.520237][ T6679] veth0_macvtap: entered promiscuous mode [ 252.556295][ T7043] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 252.629570][ T6679] veth1_macvtap: entered promiscuous mode [ 252.705159][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.724833][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.759827][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.825554][ T6905] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.840630][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.841986][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.877009][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.884303][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.926002][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.935798][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.956248][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.993462][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.000622][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.047618][ T5914] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 253.061689][ T7066] loop4: detected capacity change from 0 to 256 [ 253.124658][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.200578][ T7066] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 253.210249][ T7069] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 253.228095][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0003/input/input6 [ 253.529527][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.568885][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.666860][ T5914] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 254.090696][ T5914] usb 2-1: USB disconnect, device number 5 [ 254.295428][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.341276][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.228844][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.237545][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.240157][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.247664][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.253455][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.268058][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.340363][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.471389][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.483796][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.499315][ T7086] loop1: detected capacity change from 0 to 256 [ 256.515398][ T7076] fido_id[7076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 256.587461][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.598746][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.609805][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.627419][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.424062][ T7098] NILFS (nullb0): couldn't find nilfs on the device [ 258.379105][ T7104] loop6: detected capacity change from 0 to 16 [ 259.241711][ T7104] erofs (device loop6): mounted with root inode @ nid 36. [ 261.163662][ T5781] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 261.354821][ T5781] usb 3-1: Using ep0 maxpacket: 8 [ 261.384824][ T5781] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.417723][ T5781] usb 3-1: config 0 has no interface number 0 [ 261.444183][ T5782] net_ratelimit: 3 callbacks suppressed [ 261.444206][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.465840][ T5781] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 261.500813][ T5781] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 261.544201][ T5781] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.559620][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.647714][ T5781] usb 3-1: config 0 descriptor?? [ 261.711945][ T5781] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 263.176836][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.342488][ T5782] usb 3-1: USB disconnect, device number 6 [ 263.391047][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.407727][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.653487][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 263.715642][ T7142] loop3: detected capacity change from 0 to 512 [ 263.756015][ T7142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.825824][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.837203][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.847521][ T5871] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 263.857031][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.874720][ T5871] usb 7-1: config 0 descriptor?? [ 264.053177][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.229466][ T7155] loop3: detected capacity change from 0 to 512 [ 264.236941][ T6905] veth0_vlan: entered promiscuous mode [ 264.265049][ T7155] EXT4-fs: Ignoring removed orlov option [ 264.274331][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.316695][ T7155] EXT4-fs: Mount option(s) incompatible with ext3 [ 264.327478][ T6905] veth1_vlan: entered promiscuous mode [ 264.341579][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.372302][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.396519][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.401922][ T7157] loop4: detected capacity change from 0 to 128 [ 264.425200][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.448461][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.463383][ T6905] veth0_macvtap: entered promiscuous mode [ 264.472471][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.507064][ T7157] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.534066][ T5871] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 264.542906][ T6905] veth1_macvtap: entered promiscuous mode [ 264.598291][ T5871] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 264.620096][ T7157] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.722237][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.760312][ T5871] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 264.828667][ T5871] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 264.861218][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.223912][ T7163] loop4: detected capacity change from 128 to 0 [ 265.469410][ T7157] EXT4-fs error (device loop4): ext4_get_inode_loc:5023: inode #12: block 36: comm syz.4.308: unable to read itable block [ 265.513863][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.590189][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 265.642456][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 265.656982][ T5871] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -32 [ 265.684058][ T5871] usb 7-1: USB disconnect, device number 2 [ 265.694475][ T6981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.725088][ T7157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 265.748958][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 265.755742][ T7161] fido_id[7161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 265.800718][ T6981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.835910][ T6981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.850989][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 265.892833][ T7157] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.308: mark_inode_dirty error [ 265.977509][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 266.015486][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 266.056242][ T7157] EXT4-fs error (device loop4): ext4_get_inode_loc:5023: inode #12: block 36: comm syz.4.308: unable to read itable block [ 266.096167][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.116591][ T6981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.340072][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 266.594534][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 266.844289][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.866223][ T7155] netlink: 'syz.3.307': attribute type 4 has an invalid length. [ 266.881662][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.888182][ T7157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 266.901989][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.913234][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.915165][ T7155] netlink: 'syz.3.307': attribute type 5 has an invalid length. [ 266.967132][ T7155] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.307'. [ 266.983138][ T7186] loop3: detected capacity change from 0 to 4096 [ 266.997696][ T7186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 267.008398][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 267.016953][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.052110][ T7186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.217733][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 267.259628][ T7157] EXT4-fs error (device loop4): ext4_mkdir:3033: inode #12: comm syz.4.308: mark_inode_dirty error [ 267.338359][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 267.379069][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 267.406213][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 267.421617][ T7191] loop6: detected capacity change from 0 to 512 [ 267.442342][ T7191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.445509][ T7157] EXT4-fs error (device loop4): ext4_get_inode_loc:5023: inode #12: block 36: comm syz.4.308: unable to read itable block [ 267.475601][ T7191] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 267.551038][ T7191] EXT4-fs (loop6): 1 truncate cleaned up [ 267.566551][ T7191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.607010][ T31] audit: type=1800 audit(1785195233.655:70): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.313" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 267.704333][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.719248][ T7157] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -5 [ 267.719405][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 267.765215][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.828010][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 267.859775][ T7157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 267.919231][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 267.924165][ T7197] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 268.836415][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.875034][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.894972][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 268.923074][ T7157] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #12: comm syz.4.308: mark_inode_dirty error [ 268.943165][ T7157] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -5 [ 268.943252][ T7157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 268.956338][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.969524][ T7157] EXT4-fs (loop4): I/O error while writing superblock [ 268.985925][ T7157] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -5) [ 269.191498][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.209344][ T6679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.221235][ T5633] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 269.913846][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.923513][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.140202][ T7219] NILFS (nullb0): couldn't find nilfs on the device [ 271.064247][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.133807][ T5760] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 271.230913][ T7225] loop6: detected capacity change from 0 to 512 [ 271.262214][ T7225] EXT4-fs (loop6): orphan cleanup on readonly fs [ 271.276926][ T7225] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 271.306265][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.322091][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.332578][ T5760] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 271.344683][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.346152][ T7225] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 271.369178][ T5760] usb 3-1: config 0 descriptor?? [ 271.382663][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 271.389151][ C1] EXT4-fs (loop6): initial error at time 1785195237: ext4_mb_generate_buddy:1314 [ 271.398354][ C1] EXT4-fs (loop6): last error at time 1785195237: ext4_mb_generate_buddy:1314 [ 272.162348][ T7231] vivid-005: kernel_thread() failed [ 272.396297][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.406463][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.417480][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.424434][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.431261][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.438203][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.445110][ T5760] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 272.458430][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.471408][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.481049][ T7225] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.323: attempt to clear invalid blocks 2 len 1 [ 272.499553][ T5760] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 272.530665][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.548600][ T5760] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 272.573215][ T5760] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 272.580034][ T7225] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 272.590199][ T7225] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.323: invalid indirect mapped block 1819239214 (level 0) [ 272.602577][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.633740][ T5760] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -32 [ 272.717685][ T5760] usb 3-1: USB disconnect, device number 7 [ 272.733789][ T7225] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 272.742703][ T7225] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.323: invalid indirect mapped block 1819239214 (level 1) [ 274.711816][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.743491][ T7225] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 274.761333][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.840124][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 274.877062][ T7225] EXT4-fs (loop6): 1 truncate cleaned up [ 274.969586][ T7225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.263071][ T6679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.535619][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.694097][ T5782] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 275.830901][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.864533][ T3280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.875649][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 275.891418][ T5782] usb 3-1: no configurations [ 275.914244][ T5782] usb 3-1: can't read configurations, error -22 [ 276.084415][ T5782] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 276.236616][ T3280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.292773][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 276.321997][ T5782] usb 3-1: no configurations [ 276.346338][ T5782] usb 3-1: can't read configurations, error -22 [ 276.382595][ T5782] usb usb3-port1: attempt power cycle [ 276.554780][ T3280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.445511][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.553422][ T5782] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.156001][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.322110][ T5782] usb 3-1: device descriptor read/8, error -71 [ 279.335192][ T3280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.522403][ T7265] loop6: detected capacity change from 0 to 256 [ 279.551779][ T7265] exfat: Deprecated parameter 'utf8' [ 279.640688][ T7265] exfat: Deprecated parameter 'namecase' [ 279.688709][ T7271] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 279.776189][ T7265] exfat: Deprecated parameter 'namecase' [ 280.419880][ T7265] exfat: Bad value for 'umask' [ 280.562395][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.689676][ T7275] ubi0: attaching mtd0 [ 280.722441][ T7275] ubi0: scanning is finished [ 280.727228][ T7275] ubi0: empty MTD device detected [ 281.542967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.575123][ T7275] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 281.748650][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.214968][ T3280] bridge_slave_1: left allmulticast mode [ 282.266211][ T3280] bridge_slave_1: left promiscuous mode [ 282.296810][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.356301][ T7294] loop6: detected capacity change from 0 to 512 [ 282.394224][ T7294] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.447272][ T7301] loop3: detected capacity change from 0 to 512 [ 282.476824][ T3280] bridge_slave_0: left allmulticast mode [ 282.485831][ T7294] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 282.514872][ T3280] bridge_slave_0: left promiscuous mode [ 282.558681][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.591495][ T7294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 282.605489][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.619203][ T7294] EXT4-fs error (device loop6): ext4_iget_extra_inode:5179: inode #15: comm syz.6.342: corrupted in-inode xattr: e_value size too large [ 282.669057][ T7310] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 282.702376][ T7294] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.702933][ C1] EXT4-fs (loop6): initial error at time 1785195248: ext4_iget_extra_inode:5179: inode 15 [ 282.712875][ T7301] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.722742][ C1] EXT4-fs (loop6): last error at time 1785195248: ext4_iget_extra_inode:5179: inode 15 [ 282.789337][ T7294] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.342: couldn't read orphan inode 15 (err -117) [ 282.834624][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.896818][ T7294] loop6: lost filesystem error report for type 5 error -117 [ 283.138588][ T7321] loop7: detected capacity change from 0 to 16 [ 285.164433][ T31] audit: type=1800 audit(1785195249.355:71): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.344" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 285.195012][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.222957][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.231245][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.464172][ T7321] erofs (device loop7): mounted with root inode @ nid 36. [ 285.529005][ T7294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.551285][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.780603][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.904764][ T6679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.178268][ T7336] NILFS (nullb0): couldn't find nilfs on the device [ 288.303476][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.559533][ T3280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.658418][ T3280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.906705][ T3280] bond0 (unregistering): Released all slaves [ 289.813729][ T7354] NILFS (nullb0): couldn't find nilfs on the device [ 289.902903][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.588080][ T7358] MTRR 2 not used [ 290.858505][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 290.971113][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.363325][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.566612][ T7371] blktrace: Concurrent blktraces are not allowed on loop6 [ 292.352001][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.494136][ T3280] hsr_slave_0: left promiscuous mode [ 292.516464][ T3280] hsr_slave_1: left promiscuous mode [ 292.564760][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.609327][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.535267][ T7379] loop3: detected capacity change from 0 to 16 [ 293.583178][ T7381] loop4: detected capacity change from 0 to 16 [ 293.642015][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.661202][ T7381] erofs (device loop4): mounted with root inode @ nid 36. [ 293.661836][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.670013][ T7379] erofs (device loop3): mounted with root inode @ nid 36. [ 294.563622][ T3280] veth1_macvtap: left promiscuous mode [ 294.614109][ T3280] veth0_macvtap: left promiscuous mode [ 294.643392][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.677639][ T3280] veth1_vlan: left promiscuous mode [ 294.723578][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.776998][ T3280] veth0_vlan: left promiscuous mode [ 294.808037][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.022954][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.308175][ T31] audit: type=1800 audit(1785195263.365:72): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.364" name="UDC" dev="configfs" ino=13172 res=0 errno=0 [ 297.843636][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.098619][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.637861][ T5767] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 299.032713][ T5782] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 299.048943][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.067088][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.080087][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.092575][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.100890][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.124337][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.237805][ T5782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.259828][ T5782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.280757][ T5782] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 299.309447][ T5782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.371094][ T5782] usb 7-1: config 0 descriptor?? [ 299.429878][ T3280] team0 (unregistering): Port device team_slave_1 removed [ 299.569636][ T3280] team0 (unregistering): Port device team_slave_0 removed [ 299.892157][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 299.906694][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 299.916684][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 300.123341][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 300.131016][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 300.138024][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 300.148744][ T5782] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 300.176659][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.260484][ T7424] blktrace: Concurrent blktraces are not allowed on loop6 [ 301.040974][ T5782] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 301.075056][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.087632][ T5782] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 301.129772][ T5630] Bluetooth: hci5: command tx timeout [ 301.138383][ T5782] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 301.448757][ T7428] loop4: detected capacity change from 0 to 16 [ 301.587228][ T7428] erofs (device loop4): mounted with root inode @ nid 36. [ 301.749284][ T5782] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -32 [ 301.936808][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.019331][ T5782] usb 7-1: USB disconnect, device number 3 [ 302.304152][ T7431] fido_id[7431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 302.381336][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 302.456827][ T6936] bridge0: port 3(syz_tun) entered disabled state [ 302.567114][ T7443] loop3: detected capacity change from 0 to 16 [ 303.212878][ T5630] Bluetooth: hci5: command tx timeout [ 303.410743][ T7443] erofs (device loop3): mounted with root inode @ nid 36. [ 303.485204][ T6936] syz_tun (unregistering): left allmulticast mode [ 303.493895][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.584904][ T6936] syz_tun (unregistering): left promiscuous mode [ 303.630599][ T6936] bridge0: port 3(syz_tun) entered disabled state [ 305.153735][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.172990][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.801956][ T5630] Bluetooth: hci5: command tx timeout [ 305.858868][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.208424][ T7458] loop1: detected capacity change from 0 to 256 [ 306.389964][ T7471] NILFS (nullb0): couldn't find nilfs on the device [ 306.422493][ T7458] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 306.667598][ T7458] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 306.934955][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.562091][ T3280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.843207][ T5630] Bluetooth: hci5: command tx timeout [ 307.978998][ T3280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.029108][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.164012][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.223563][ T3280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.333952][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 308.522399][ T3280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.543712][ T7486] loop7: detected capacity change from 0 to 40427 [ 308.568319][ T7486] F2FS-fs: heap/no_heap options were deprecated [ 308.609325][ T7486] F2FS-fs (loop7): build fault injection rate: 19 [ 308.626686][ T7486] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 308.661933][ T7486] F2FS-fs (loop7): invalid crc value [ 308.819421][ T7514] loop1: detected capacity change from 0 to 16 [ 309.000773][ T7514] erofs (device loop1): mounted with root inode @ nid 36. [ 309.594697][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.689817][ T7486] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x10a0 [ 310.160775][ T7486] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe15/0x1710 [ 310.447166][ T7486] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 310.837008][ T7529] loop3: detected capacity change from 0 to 2048 [ 311.058587][ T7486] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 311.332112][ T7529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.475770][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.514263][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.133272][ T7532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 312.581539][ T3280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.626417][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.077059][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.484146][ T3280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.560400][ T7555] loop3: detected capacity change from 0 to 512 [ 313.697696][ T7555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.740625][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.817519][ T7555] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.830334][ T5630] Bluetooth: hci0: Malformed HCI Event [ 313.964207][ T3280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.986082][ T7564] loop7: detected capacity change from 0 to 512 [ 314.040958][ T7564] EXT4-fs: Mount option(s) incompatible with ext2 [ 314.194738][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.237616][ T7564] Bluetooth: MGMT ver 1.23 [ 314.252872][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.852021][ T31] audit: type=1800 audit(1785195280.345:73): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.397" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 314.914646][ T7416] bridge_slave_0: entered allmulticast mode [ 315.163254][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.171465][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.179962][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.215113][ T7416] bridge_slave_0: entered promiscuous mode [ 315.319878][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.396776][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.460526][ T7416] bridge_slave_1: entered allmulticast mode [ 315.556396][ T7416] bridge_slave_1: entered promiscuous mode [ 315.867946][ T6679] ffs_data_put(): freeing [ 316.161402][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.225846][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.487760][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.524345][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168938][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.292881][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 317.311527][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.355885][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.364050][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.401829][ T3280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.716860][ T7591] loop7: detected capacity change from 0 to 16 [ 319.257662][ T7591] erofs (device loop7): mounted with root inode @ nid 36. [ 319.375820][ T7416] team0: Port device team_slave_0 added [ 319.407704][ T7594] NILFS (nullb0): couldn't find nilfs on the device [ 319.445278][ T7416] team0: Port device team_slave_1 added [ 319.456468][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.481442][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.450671][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.458828][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.460539][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.499608][ T7601] udc dummy_udc.0: failed to start g1: -4 [ 321.518506][ T7601] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 321.569799][ T7601] UDC core: g1: couldn't find an available UDC or it's busy [ 321.622309][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.714969][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.773901][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.906284][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.016706][ T7612] loop4: detected capacity change from 0 to 512 [ 322.083366][ T7612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.160221][ T7612] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.311884][ T7612] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 322.349676][ T7416] hsr_slave_0: entered promiscuous mode [ 322.368296][ T7416] hsr_slave_1: entered promiscuous mode [ 322.404380][ T7416] debugfs: 'hsr0' already exists in 'hsr' [ 322.431557][ T7416] Cannot create hsr debugfs directory [ 322.478713][ T5630] Bluetooth: hci2: Malformed HCI Event [ 322.493233][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.591872][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.655715][ T7620] loop1: detected capacity change from 0 to 512 [ 322.706332][ T7620] EXT4-fs: Mount option(s) incompatible with ext2 [ 322.874753][ T7624] blktrace: Concurrent blktraces are not allowed on loop6 [ 322.895815][ T7627] loop4: detected capacity change from 0 to 256 [ 322.931368][ T7627] exfat: Bad value for 'uid' [ 322.953997][ T3280] bridge_slave_1: left allmulticast mode [ 322.966729][ T7627] exfat: Bad value for 'uid' [ 322.979693][ T3280] bridge_slave_1: left promiscuous mode [ 323.011258][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.145691][ T3280] bridge_slave_0: left allmulticast mode [ 323.202447][ T3280] bridge_slave_0: left promiscuous mode [ 323.246403][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.854788][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.942540][ T3280] bridge_slave_1: left allmulticast mode [ 323.980309][ T3280] bridge_slave_1: left promiscuous mode [ 324.012486][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.076297][ T5631] ffs_data_put(): freeing [ 324.094883][ T3280] bridge_slave_0: left allmulticast mode [ 324.149061][ T3280] bridge_slave_0: left promiscuous mode [ 324.185301][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.937756][ T7643] loop1: detected capacity change from 0 to 512 [ 325.065183][ T7643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.146935][ T7643] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.436207][ T31] audit: type=1800 audit(1785195291.675:74): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 326.805952][ T7655] loop7: detected capacity change from 0 to 512 [ 326.823703][ T7655] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 326.870266][ T7655] EXT4-fs (loop7): 1 truncate cleaned up [ 326.878455][ T7655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.429509][ T7659] NILFS (nullb0): couldn't find nilfs on the device [ 328.224613][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.375922][ T7664] loop4: detected capacity change from 0 to 256 [ 328.386899][ T6905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.337103][ T7664] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 329.425742][ T7664] FAT-fs (loop4): Filesystem has been set read-only [ 329.495280][ T7664] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 329.606922][ T7664] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 329.722840][ T31] audit: type=1800 audit(1785195295.755:75): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.422" name="file1" dev="loop4" ino=1048624 res=0 errno=0 [ 329.925506][ T7684] loop6: detected capacity change from 0 to 512 [ 329.961473][ T7684] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 329.979874][ T7684] EXT4-fs error (device loop6): ext4_iget_extra_inode:5179: inode #15: comm syz.6.425: corrupted in-inode xattr: e_value size too large [ 330.009475][ T7684] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.009912][ T7684] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.425: couldn't read orphan inode 15 (err -117) [ 330.019189][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 330.019223][ C0] EXT4-fs (loop6): initial error at time 1785195296: ext4_iget_extra_inode:5179: inode 15 [ 330.019279][ C0] EXT4-fs (loop6): last error at time 1785195296: ext4_iget_extra_inode:5179: inode 15 [ 330.057583][ T7684] loop6: lost filesystem error report for type 5 error -117 [ 330.065416][ T7684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.163233][ T5630] Bluetooth: hci0: command tx timeout [ 330.284619][ T3280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.295991][ T6679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.338927][ T3280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.392427][ T3280] bond0 (unregistering): Released all slaves [ 330.493857][ T5760] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 330.654298][ T5760] usb 4-1: Using ep0 maxpacket: 32 [ 330.680453][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.702015][ T5760] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 330.727510][ T5760] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.741964][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.766629][ T5760] usb 4-1: Product: syz [ 330.789053][ T5760] usb 4-1: Manufacturer: syz [ 330.813315][ T5760] usb 4-1: SerialNumber: syz [ 330.820809][ T7690] ================================================================== [ 330.828886][ T7690] BUG: KASAN: slab-use-after-free in pn_bind+0x550/0x5b0 [ 330.835920][ T7690] Write of size 8 at addr ffff888079834800 by task syz.6.427/7690 [ 330.843729][ T7690] [ 330.846055][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.6.427 Not tainted syzkaller #0 PREEMPT(full) [ 330.846100][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 330.846123][ T7690] Call Trace: [ 330.846135][ T7690] [ 330.846149][ T7690] dump_stack_lvl+0x100/0x190 [ 330.846196][ T7690] print_report+0x13d/0x4b0 [ 330.846255][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.846303][ T7690] ? __virt_addr_valid+0x239/0x430 [ 330.846350][ T7690] ? pn_bind+0x550/0x5b0 [ 330.846387][ T7690] kasan_report+0xdf/0x1c0 [ 330.846428][ T7690] ? pn_bind+0x550/0x5b0 [ 330.846471][ T7690] pn_bind+0x550/0x5b0 [ 330.846508][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.846555][ T7690] ? __pfx_pn_bind+0x10/0x10 [ 330.846594][ T7690] usb_add_function+0x219/0x890 [ 330.846651][ T7690] configfs_composite_bind+0xd83/0x1960 [ 330.846717][ T7690] gadget_bind_driver+0x28c/0xbf0 [ 330.846755][ T7690] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 330.846811][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.846863][ T7690] ? __pfx_gadget_bind_driver+0x10/0x10 [ 330.846903][ T7690] really_probe+0x241/0xa60 [ 330.846956][ T7690] __driver_probe_device+0x20e/0x450 [ 330.847009][ T7690] driver_probe_device+0x4a/0x140 [ 330.847060][ T7690] __driver_attach+0x21f/0x5b0 [ 330.847111][ T7690] ? __pfx___driver_attach+0x10/0x10 [ 330.847161][ T7690] bus_for_each_dev+0x13e/0x1d0 [ 330.847200][ T7690] ? __pfx_bus_for_each_dev+0x10/0x10 [ 330.847238][ T7690] ? bus_add_driver+0x2b5/0x5b0 [ 330.847281][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.847333][ T7690] bus_add_driver+0x305/0x5b0 [ 330.847381][ T7690] driver_register+0x1e2/0x360 [ 330.847435][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.847484][ T7690] usb_gadget_register_driver_owner+0x132/0x210 [ 330.847527][ T7690] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 330.847580][ T7690] configfs_write_iter+0x302/0x4e0 [ 330.847643][ T7690] vfs_write+0x6ac/0x1050 [ 330.847691][ T7690] ? __pfx_configfs_write_iter+0x10/0x10 [ 330.847752][ T7690] ? __pfx_vfs_write+0x10/0x10 [ 330.847815][ T7690] ksys_write+0x12a/0x250 [ 330.847868][ T7690] ? __pfx_ksys_write+0x10/0x10 [ 330.847917][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.847967][ T7690] do_syscall_64+0x115/0x870 [ 330.848018][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.848056][ T7690] RIP: 0033:0x7efe2179de99 [ 330.848084][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.848121][ T7690] RSP: 002b:00007efe226ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.848156][ T7690] RAX: ffffffffffffffda RBX: 00007efe21a25fa0 RCX: 00007efe2179de99 [ 330.848182][ T7690] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003 [ 330.848206][ T7690] RBP: 00007efe21833eaf R08: 0000000000000000 R09: 0000000000000000 [ 330.848230][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.848253][ T7690] R13: 00007efe21a26038 R14: 00007efe21a25fa0 R15: 00007ffdcdaa13c8 [ 330.848292][ T7690] [ 330.848305][ T7690] [ 331.147084][ T7690] Allocated by task 7605: [ 331.151404][ T7690] kasan_save_stack+0x30/0x50 [ 331.156109][ T7690] kasan_save_track+0x14/0x30 [ 331.160814][ T7690] __kasan_kmalloc+0xaa/0xb0 [ 331.165545][ T7690] __kvmalloc_node_noprof+0x34f/0x970 [ 331.170946][ T7690] alloc_netdev_mqs+0xd7/0x15c0 [ 331.175819][ T7690] gphonet_setup_default+0x37/0x80 [ 331.181004][ T7690] phonet_alloc_inst+0x83/0x130 [ 331.185863][ T7690] try_get_usb_function_instance+0x136/0x1f0 [ 331.191873][ T7690] usb_get_function_instance+0x16/0x70 [ 331.197359][ T7690] function_make+0x18c/0x3f0 [ 331.201966][ T7690] configfs_mkdir+0x51e/0xb70 [ 331.206683][ T7690] vfs_mkdir+0x361/0x850 [ 331.210933][ T7690] filename_mkdirat+0x48b/0x5e0 [ 331.215806][ T7690] __x64_sys_mkdirat+0x89/0xc0 [ 331.220598][ T7690] do_syscall_64+0x115/0x870 [ 331.225201][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.231100][ T7690] [ 331.233415][ T7690] Freed by task 7601: [ 331.237389][ T7690] kasan_save_stack+0x30/0x50 [ 331.242098][ T7690] kasan_save_track+0x14/0x30 [ 331.246799][ T7690] kasan_save_free_info+0x3b/0x70 [ 331.251851][ T7690] __kasan_slab_free+0x5f/0x80 [ 331.256613][ T7690] kfree+0x22b/0x6c0 [ 331.260518][ T7690] free_netdev+0x6a0/0x8c0 [ 331.264949][ T7690] pn_bind+0x3a7/0x5b0 [ 331.269022][ T7690] usb_add_function+0x219/0x890 [ 331.273978][ T7690] configfs_composite_bind+0xd83/0x1960 [ 331.279544][ T7690] gadget_bind_driver+0x28c/0xbf0 [ 331.284572][ T7690] really_probe+0x241/0xa60 [ 331.289090][ T7690] __driver_probe_device+0x20e/0x450 [ 331.294397][ T7690] driver_probe_device+0x4a/0x140 [ 331.299447][ T7690] __driver_attach+0x21f/0x5b0 [ 331.304235][ T7690] bus_for_each_dev+0x13e/0x1d0 [ 331.309095][ T7690] bus_add_driver+0x305/0x5b0 [ 331.313788][ T7690] driver_register+0x1e2/0x360 [ 331.318584][ T7690] usb_gadget_register_driver_owner+0x132/0x210 [ 331.324870][ T7690] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 331.330526][ T7690] configfs_write_iter+0x302/0x4e0 [ 331.335660][ T7690] vfs_write+0x6ac/0x1050 [ 331.340005][ T7690] ksys_write+0x12a/0x250 [ 331.344351][ T7690] do_syscall_64+0x115/0x870 [ 331.348958][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.354857][ T7690] [ 331.357172][ T7690] The buggy address belongs to the object at ffff888079834000 [ 331.357172][ T7690] which belongs to the cache kmalloc-cg-4k of size 4096 [ 331.371514][ T7690] The buggy address is located 2048 bytes inside of [ 331.371514][ T7690] freed 4096-byte region [ffff888079834000, ffff888079835000) [ 331.385489][ T7690] [ 331.387803][ T7690] The buggy address belongs to the physical page: [ 331.394208][ T7690] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79830 [ 331.402972][ T7690] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.411474][ T7690] memcg:ffff88805641db01 [ 331.415704][ T7690] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.423250][ T7690] page_type: f5(slab) [ 331.427250][ T7690] raw: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 331.435866][ T7690] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88805641db01 [ 331.444454][ T7690] head: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 331.453127][ T7690] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88805641db01 [ 331.461800][ T7690] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 331.470565][ T7690] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 331.479225][ T7690] page dumped because: kasan: bad access detected [ 331.485630][ T7690] page_owner tracks the page as allocated [ 331.491329][ T7690] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5634, tgid 5634 (syz-executor), ts 96098046094, free_ts 58791870916 [ 331.514465][ T7690] post_alloc_hook+0xfd/0x120 [ 331.519183][ T7690] get_page_from_freelist+0xf48/0x3530 [ 331.524681][ T7690] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 331.530607][ T7690] new_slab+0xa2/0x640 [ 331.534690][ T7690] refill_objects+0xe3/0x410 [ 331.539296][ T7690] __pcs_replace_empty_main+0x376/0x680 [ 331.544859][ T7690] __kvmalloc_node_noprof+0x793/0x970 [ 331.550278][ T7690] alloc_netdev_mqs+0xd7/0x15c0 [ 331.555144][ T7690] rtnl_create_link+0xc13/0xf80 [ 331.560015][ T7690] veth_newlink+0x203/0xa00 [ 331.564536][ T7690] rtnl_newlink+0x1499/0x2380 [ 331.569230][ T7690] rtnetlink_rcv_msg+0x95e/0xe90 [ 331.574186][ T7690] netlink_rcv_skb+0x159/0x420 [ 331.578958][ T7690] netlink_unicast+0x585/0x850 [ 331.583728][ T7690] netlink_sendmsg+0x8b0/0xda0 [ 331.588498][ T7690] __sys_sendto+0x48b/0x4e0 [ 331.593011][ T7690] page last free pid 5320 tgid 5320 stack trace: [ 331.599328][ T7690] __free_frozen_pages+0x79f/0x1090 [ 331.604575][ T7690] qlist_free_all+0x47/0xf0 [ 331.609099][ T7690] kasan_quarantine_reduce+0x1a0/0x1f0 [ 331.614585][ T7690] __kasan_slab_alloc+0x69/0x90 [ 331.619441][ T7690] __kmalloc_noprof+0x2bf/0x820 [ 331.624318][ T7690] tomoyo_realpath_from_path+0xb6/0x690 [ 331.629895][ T7690] tomoyo_path_perm+0x276/0x460 [ 331.634768][ T7690] security_inode_getattr+0x116/0x280 [ 331.640154][ T7690] vfs_fstat+0x4b/0xe0 [ 331.644247][ T7690] __do_sys_newfstat+0x8b/0x110 [ 331.649125][ T7690] do_syscall_64+0x115/0x870 [ 331.653727][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.659623][ T7690] [ 331.661976][ T7690] Memory state around the buggy address: [ 331.667597][ T7690] ffff888079834700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.675657][ T7690] ffff888079834780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.683713][ T7690] >ffff888079834800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.691766][ T7690] ^ [ 331.695820][ T7690] ffff888079834880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.703892][ T7690] ffff888079834900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.711944][ T7690] ================================================================== [ 331.740025][ T7690] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 331.747762][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.6.427 Not tainted syzkaller #0 PREEMPT(full) [ 331.756953][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 331.767017][ T7690] Call Trace: [ 331.770281][ T7690] [ 331.773197][ T7690] dump_stack_lvl+0x100/0x190 [ 331.777881][ T7690] vpanic+0x552/0x970 [ 331.781861][ T7690] ? __pfx_vpanic+0x10/0x10 [ 331.786365][ T7690] ? __pfx___schedule+0x10/0x10 [ 331.791338][ T7690] ? pn_bind+0x550/0x5b0 [ 331.795585][ T7690] panic+0xd1/0xe0 [ 331.799314][ T7690] ? __pfx_panic+0x10/0x10 [ 331.803776][ T7690] ? preempt_schedule_common+0x42/0xc0 [ 331.809266][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.814943][ T7690] ? preempt_schedule_thunk+0x16/0x40 [ 331.820348][ T7690] end_report.part.0+0x68/0x90 [ 331.825122][ T7690] kasan_report.cold+0xe/0x18 [ 331.829808][ T7690] ? pn_bind+0x550/0x5b0 [ 331.834072][ T7690] pn_bind+0x550/0x5b0 [ 331.838144][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.843779][ T7690] ? __pfx_pn_bind+0x10/0x10 [ 331.848368][ T7690] usb_add_function+0x219/0x890 [ 331.853228][ T7690] configfs_composite_bind+0xd83/0x1960 [ 331.858788][ T7690] gadget_bind_driver+0x28c/0xbf0 [ 331.863806][ T7690] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 331.869510][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.875143][ T7690] ? __pfx_gadget_bind_driver+0x10/0x10 [ 331.880685][ T7690] really_probe+0x241/0xa60 [ 331.885194][ T7690] __driver_probe_device+0x20e/0x450 [ 331.890507][ T7690] driver_probe_device+0x4a/0x140 [ 331.895540][ T7690] __driver_attach+0x21f/0x5b0 [ 331.900330][ T7690] ? __pfx___driver_attach+0x10/0x10 [ 331.905624][ T7690] bus_for_each_dev+0x13e/0x1d0 [ 331.910470][ T7690] ? __pfx_bus_for_each_dev+0x10/0x10 [ 331.915834][ T7690] ? bus_add_driver+0x2b5/0x5b0 [ 331.920688][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.926328][ T7690] bus_add_driver+0x305/0x5b0 [ 331.931004][ T7690] driver_register+0x1e2/0x360 [ 331.935789][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.941434][ T7690] usb_gadget_register_driver_owner+0x132/0x210 [ 331.947671][ T7690] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 331.953309][ T7690] configfs_write_iter+0x302/0x4e0 [ 331.958433][ T7690] vfs_write+0x6ac/0x1050 [ 331.962765][ T7690] ? __pfx_configfs_write_iter+0x10/0x10 [ 331.968410][ T7690] ? __pfx_vfs_write+0x10/0x10 [ 331.973188][ T7690] ksys_write+0x12a/0x250 [ 331.977519][ T7690] ? __pfx_ksys_write+0x10/0x10 [ 331.982369][ T7690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.988018][ T7690] do_syscall_64+0x115/0x870 [ 331.992619][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.998537][ T7690] RIP: 0033:0x7efe2179de99 [ 332.002942][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.022562][ T7690] RSP: 002b:00007efe226ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.030987][ T7690] RAX: ffffffffffffffda RBX: 00007efe21a25fa0 RCX: 00007efe2179de99 [ 332.038949][ T7690] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003 [ 332.047096][ T7690] RBP: 00007efe21833eaf R08: 0000000000000000 R09: 0000000000000000 [ 332.055064][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.063026][ T7690] R13: 00007efe21a26038 R14: 00007efe21a25fa0 R15: 00007ffdcdaa13c8 [ 332.071016][ T7690] [ 332.074268][ T7690] Kernel Offset: disabled [ 332.078580][ T7690] Rebooting in 86400 seconds..