last executing test programs: 17m29.807920697s ago: executing program 32 (id=16): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2404c805, &(0x7f00000001c0)={0xa, 0x22, 0x0, @loopback={0x2001001000000000}, 0x9}, 0x1c) close(0x3) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) fchdir(r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) write$nci(0xffffffffffffffff, 0x0, 0x102) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 13m57.896103085s ago: executing program 33 (id=465): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r2, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x18, 0x1, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m52.553231892s ago: executing program 34 (id=1513): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14}}, 0x94}}, 0x0) 5m40.860841086s ago: executing program 35 (id=2387): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010101}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000ac0)="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", 0x165}, {&(0x7f0000000800)}, {&(0x7f0000000400)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5", 0x8c}], 0x3, &(0x7f0000000580)=ANY=[], 0x18}, 0x8080) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r2, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/79, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)={0x1, 0x0, [{0x1000, 0xf5, &(0x7f00000008c0)=""/245}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x10000001}) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x40, 0x17, 0xd, "16ac705d980943ec253dc4b6b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r8 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 5m40.61979569s ago: executing program 36 (id=2390): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') process_mrelease(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 3m20.758966576s ago: executing program 5 (id=2979): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 3m20.553850808s ago: executing program 5 (id=2982): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m20.177498255s ago: executing program 5 (id=2984): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3m16.570770835s ago: executing program 5 (id=2995): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 3m16.297233851s ago: executing program 5 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 3m15.514721475s ago: executing program 5 (id=2999): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') process_mrelease(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 2m58.694170513s ago: executing program 37 (id=2999): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') process_mrelease(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 1m32.432343439s ago: executing program 7 (id=3451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffff}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014100000000009500000000000000d3033dee42100a3168d3604e4c13b2f2568c0aaa3cb385a8fa082896627e11afbb80a6bdff74efb9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x1}, 0x0, 0x0, 0xc6, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffc}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040005}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) 1m30.808525233s ago: executing program 7 (id=3457): r0 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m29.735096522s ago: executing program 7 (id=3461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) 1m28.463280015s ago: executing program 7 (id=3468): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1210415, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 1m28.10140178s ago: executing program 7 (id=3470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffff}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014100000000009500000000000000d3033dee42100a3168d3604e4c13b2f2568c0aaa3cb385a8fa082896627e11afbb80a6bdff74efb9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x1}, 0x0, 0x0, 0xc6, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffc}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040005}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) 1m26.932258069s ago: executing program 7 (id=3475): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000001c0)={{0x1, @addr=0x9}, "e4d6cb2ac0fd4cad5a635ae4d1558eb897a5c2d3de9bd074488121d2dafa3116", 0x1}) 1m25.149402336s ago: executing program 38 (id=3475): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000001c0)={{0x1, @addr=0x9}, "e4d6cb2ac0fd4cad5a635ae4d1558eb897a5c2d3de9bd074488121d2dafa3116", 0x1}) 1m13.352293336s ago: executing program 4 (id=3526): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x4570f01f, 0x9, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0x6, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x1, 0x1, 0x1, 0x8, 0x100, 0x6, 0x12000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0x1002, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x3ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x7f, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x800, 0x10010001, 0xffffbffd, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x0, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r2, 0x0, 0x0) 1m13.036918178s ago: executing program 4 (id=3528): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1m12.872724068s ago: executing program 4 (id=3530): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x404) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1m9.410456013s ago: executing program 4 (id=3542): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@fat=@check_normal}, {@utf8}, {@shortname_win95}, {@utf8}, {@fat=@nfs}, {@utf8}, {@utf8}, {@fat=@discard}, {@rodir}, {@utf8no}, {@fat=@quiet}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2be, &(0x7f0000002880)="$eJzs3cFr024YwPFn7dZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUplYq4nbz6t8xPHpSUP+BXbx5Fy9DELxMECNrkq3tquvGaqb9fmDk3fvm6ftmbzKehOXd1s3nDyol1yiZDYmlVGIi67Itkt0pBcaCbaxdTkindbkw9fXD6eu3bl/JFwoLS6qL+eWLOVWdOfPm0ZMXZ981pm68nHmdlM3sna0vuY+b/23+v/VjOfx0R8TUFcdpmCu2patlt2KoXrMt07W0XHWtekM72ku2U6u11KyuTqdrdct11ay2tGK1tOFoo95S855ZrqphGDqdllETP3REcWNpycwPZTCIwmS/yno9b8b7NhY3/sSgAADAyRJV/n+/7GrZ1arTld/vz/9jcoj8X2Sk8/+jqkU9AAzVTv6fDq7fbuT/AAAAAAAAAAAAAAAAAAAAAAD8DbY9L+N5Xibchl9JEUmJSPh91OPEcDD/o63jxb2UiP2sWWwW/a3fni9JWWyxZG5C5Hv7fAj45cXLhYU5bcvKW3steFdwvVmMSzKMD2X7x8/78boTH/S/tiYTku7sPycZme0fn+sT3ywm5Pw5Lxn0bIkhGXl/VxyxZbV9Xu/FP51XvXS10BM/2d7vl8aGNycAAAAAABw3Q3dlu+9//dUkDUPDZUN62v3KvecDkjng+UDP/fW4nBqP7rgBAAAAABglbkIqpm1bdbf1+F8vhP//4Fg+UCTqw0kNuvO4iAQ1r07KXAxSiIlIb9PEvpr+hfhvZ/mbd0D4Z5Hu62L2yNOdiPqH6cV3z9VPD/0rYJDwKH8rAQAAABiGMOnnz9kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjOoKuIhfsfZRGyju7i0RwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDL8DAAA//9xXRHz") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m9.013598676s ago: executing program 4 (id=3546): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x2, 0x1200, 0x3e, 0xb, 0x0, 0x2}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 1m7.599256925s ago: executing program 4 (id=3555): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7fd877140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m6.967068026s ago: executing program 39 (id=3555): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7fd877140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m0.487950558s ago: executing program 3 (id=3579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 59.929122815s ago: executing program 3 (id=3581): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x5, {{0x5, 0xce7, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 56.241526381s ago: executing program 3 (id=3592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x3e}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 55.637727764s ago: executing program 3 (id=3597): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x3, 0x577, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0xa800, 0x1400}]) 54.650266146s ago: executing program 3 (id=3599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffff}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014100000000009500000000000000d3033dee42100a3168d3604e4c13b2f2568c0aaa3cb385a8fa082896627e11afbb80a6bdff74efb9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x1}, 0x0, 0x0, 0xc6, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffc}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040005}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) 53.886580995s ago: executing program 3 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 53.061629873s ago: executing program 40 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 46.192254871s ago: executing program 0 (id=3627): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x4, @remote, 0x3}, r4, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 45.947662264s ago: executing program 0 (id=3628): r0 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 45.690719207s ago: executing program 0 (id=3629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) 45.219906396s ago: executing program 0 (id=3630): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\xd3\xabmf3\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x8005, 0x0, 0x0, 0x11, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204, 0x28]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@nouid32}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x5, 0x783, &(0x7f0000001340)="$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") bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 44.375114733s ago: executing program 0 (id=3631): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0xb8e3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x9d0e}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, &(0x7f0000000000)={0x1, 0x690000}) 43.565607915s ago: executing program 0 (id=3636): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [{}, {0x20, '{{(9%},:]-+\\@}$\xc8\x02\xf5\xbf\x97\xa1\xd8.\xe7\x8f\x16\xf0`\x1d\xdbY?\xa3\xc8\xb7]\xcc\x1b\xa6\b\x98\xac=\x91\xa8\xcf\x81\xe7X`\x97o\xe7_\xd7\x10s\t\xcbU(\xa8\xf4^F}\x82\x01\xc5\x1dX\xd9T)=\"L\v\xaaRbD\x01/\x7f\xe08W\x13\xf8W>&\x83\xb8\xad\x00\'g\xf5{\v\x1b\x10\xc9\xc8\xda\xaf)\x83K\xed\xf9\x8b\f\xaa\x0e\xb8\x90\xea\xbepv\x87Z\xd5\x18T\xe84\xa8\xf5p\xf2\x9c\xf0,\xae\x9aR\xae\x95-\xbb\xf5\x00\xa4\xba\xaa\x9f\x12@'}, {}]}, 0x9f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8, [0xfffffffd, 0x52c5], 0x5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 42.856184602s ago: executing program 41 (id=3636): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [{}, {0x20, '{{(9%},:]-+\\@}$\xc8\x02\xf5\xbf\x97\xa1\xd8.\xe7\x8f\x16\xf0`\x1d\xdbY?\xa3\xc8\xb7]\xcc\x1b\xa6\b\x98\xac=\x91\xa8\xcf\x81\xe7X`\x97o\xe7_\xd7\x10s\t\xcbU(\xa8\xf4^F}\x82\x01\xc5\x1dX\xd9T)=\"L\v\xaaRbD\x01/\x7f\xe08W\x13\xf8W>&\x83\xb8\xad\x00\'g\xf5{\v\x1b\x10\xc9\xc8\xda\xaf)\x83K\xed\xf9\x8b\f\xaa\x0e\xb8\x90\xea\xbepv\x87Z\xd5\x18T\xe84\xa8\xf5p\xf2\x9c\xf0,\xae\x9aR\xae\x95-\xbb\xf5\x00\xa4\xba\xaa\x9f\x12@'}, {}]}, 0x9f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8, [0xfffffffd, 0x52c5], 0x5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 29.201322989s ago: executing program 9 (id=3692): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 28.904608274s ago: executing program 9 (id=3693): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 28.428441726s ago: executing program 9 (id=3695): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x100) dup3(r1, r0, 0x0) 27.881188373s ago: executing program 9 (id=3696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 27.4430256s ago: executing program 9 (id=3698): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.173008682s ago: executing program 9 (id=3704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) 25.385901417s ago: executing program 42 (id=3704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) 17.160556157s ago: executing program 2 (id=3734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20004021, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 16.975725965s ago: executing program 2 (id=3735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 15.866846468s ago: executing program 2 (id=3737): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0,6', 0xc) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f00000001c0)="0000000001") 15.360232581s ago: executing program 2 (id=3738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000300)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x30, 0x35, 0x39, 0x33]}}, {@treelog}, {@commit={'commit', 0x3d, 0xb}}, {@acl}, {@ssd}]}, 0xff, 0x5122, &(0x7f000000b580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x275a, 0x0) syz_clone(0x2000, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000240)="366dccdf775ef77f18ffef43") write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 13.921407816s ago: executing program 2 (id=3743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0x0) ptrace(0x4207, r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 11.781740532s ago: executing program 2 (id=3746): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f00000000c0)='streaming/class/hs/h\x00', &(0x7f0000001b00)='./my_configfs\x00') 10.962590361s ago: executing program 43 (id=3746): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f00000000c0)='streaming/class/hs/h\x00', &(0x7f0000001b00)='./my_configfs\x00') 5.661576104s ago: executing program 6 (id=3759): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.206795853s ago: executing program 1 (id=3765): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8", 0x4}], 0x1, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 2.781469372s ago: executing program 1 (id=3769): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.307730351s ago: executing program 8 (id=3770): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 2.204392657s ago: executing program 6 (id=3771): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff) 2.150096827s ago: executing program 1 (id=3772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 1.954032505s ago: executing program 8 (id=3773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.809545851s ago: executing program 8 (id=3774): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010101}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000ac0)="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", 0x165}, {&(0x7f0000000800)}, {&(0x7f0000000400)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000", 0x95}], 0x3, &(0x7f0000000580)=ANY=[], 0x18}, 0x8080) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r2, 0x0, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/79, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)={0x1, 0x0, [{0x1000, 0xf5, &(0x7f00000008c0)=""/245}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x10000001}) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x40, 0x17, 0xd, "16ac705d980943ec253dc4b6b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r8 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.394673321s ago: executing program 1 (id=3775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.145554215s ago: executing program 1 (id=3776): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.050475187s ago: executing program 6 (id=3777): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='tcp\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='127.0.0.1\n\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) r2 = syz_socket_connect_nvme_tcp() sendto(r2, &(0x7f0000000200)="17030300050102030405", 0xa, 0x0, 0x0, 0x0) 1.029071527s ago: executing program 8 (id=3778): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb7f}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@sb={'sb', 0x3d, 0x4}}, {@errors_remount}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2f62}}, {@debug}, {@dioread_lock}, {@nodioread_nolock}]}, 0xfe, 0x457, &(0x7f00000004c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x808, &(0x7f00000002c0), 0xfe, 0x479, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 800.613951ms ago: executing program 6 (id=3779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x1090, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 627.710115ms ago: executing program 6 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 605.529844ms ago: executing program 8 (id=3781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x3}) 462.028348ms ago: executing program 8 (id=3782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 188.262968ms ago: executing program 6 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000006580)='./file0/file0/file0\x00', &(0x7f00000065c0), 0x100) 0s ago: executing program 1 (id=3784): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): stem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1067.313311][T18834] XFS (loop8): Ending clean mount [ 1067.356928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.367583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.376777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.385041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.393280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.401546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.409847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.418061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.352662][ T186] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1068.564703][T11836] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1068.633662][ T186] usb 10-1: Using ep0 maxpacket: 8 [ 1068.689555][ T186] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1068.738540][T18870] loop7: detected capacity change from 0 to 2048 [ 1068.748317][ T186] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.831630][ T186] usb 10-1: Product: syz [ 1068.853993][T18870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.858390][ T186] usb 10-1: Manufacturer: syz [ 1068.919047][T18870] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1068.991137][ T186] usb 10-1: SerialNumber: syz [ 1069.023209][ T186] usb 10-1: config 0 descriptor?? [ 1069.143501][ T8186] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.251674][T10993] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1069.281110][ T186] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1069.444042][T10993] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1069.466152][T10993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.485446][T10993] usb 5-1: Product: syz [ 1069.497373][T10993] usb 5-1: Manufacturer: syz [ 1069.504424][T17330] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1069.514395][T10993] usb 5-1: SerialNumber: syz [ 1069.577042][T10993] usb 5-1: config 0 descriptor?? [ 1069.582650][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3399'. [ 1069.640894][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3399'. [ 1069.822775][T10993] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1069.977446][ T5780] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1069.994430][ T186] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1070.036006][ T186] usb 10-1: USB disconnect, device number 19 [ 1070.163637][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 1070.177742][ T5780] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1070.196046][ T5780] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1070.235702][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.301543][ T5780] usb 4-1: config 0 descriptor?? [ 1071.013485][ T5780] usbhid 4-1:0.0: can't add hid device: -71 [ 1071.148258][ T5780] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1071.281602][T10993] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1071.318065][ T5780] usb 4-1: USB disconnect, device number 25 [ 1071.357700][T10993] usb 5-1: USB disconnect, device number 48 [ 1071.525274][T18934] ucma_write: process 790 (syz.8.3410) changed security contexts after opening file descriptor, this is not allowed. [ 1071.994459][ T5780] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1072.080058][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1072.200945][ T5780] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.233788][ T5780] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1072.258692][ T5780] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.270707][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1072.301627][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1072.304381][ T5780] usb 9-1: config 0 descriptor?? [ 1072.318040][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 1072.342171][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.358307][ T10] usb 4-1: Product: syz [ 1072.376948][ T10] usb 4-1: Manufacturer: syz [ 1072.392557][ T10] usb 4-1: SerialNumber: syz [ 1072.437706][T15846] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1072.596304][ T5780] usbhid 9-1:0.0: can't add hid device: -71 [ 1072.611312][T15846] usb 5-1: Using ep0 maxpacket: 32 [ 1072.618276][ T5780] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1072.637959][T15846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1072.668144][ T5780] usb 9-1: USB disconnect, device number 32 [ 1072.673769][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input38 [ 1072.685662][T15846] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1072.707204][T15846] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1072.745146][T15846] usb 5-1: config 14 has no interface number 0 [ 1072.764761][ T4971] bcm5974 4-1:1.0: could not read from device [ 1072.774403][T15846] usb 5-1: config 14 has no interface number 1 [ 1072.800427][T15846] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1072.801015][ T4971] bcm5974 4-1:1.0: could not read from device [ 1072.823421][T10993] net_ratelimit: 99 callbacks suppressed [ 1072.823438][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.834996][ T10] usb 4-1: USB disconnect, device number 26 [ 1072.872326][T15846] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1072.886848][ T4971] bcm5974 4-1:1.0: could not read from device [ 1072.919392][T15846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1072.965723][T15846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1072.990677][T15846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1073.014746][T15846] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.060786][T15846] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1073.088599][T15846] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1073.116919][T15846] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1073.144728][T15846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.185555][ T5780] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1073.216861][T15846] usb 5-1: Product: syz [ 1073.240241][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.300288][T15846] usb 5-1: Manufacturer: syz [ 1073.392334][T15846] usb 5-1: SerialNumber: syz [ 1073.472741][ T5780] usb 9-1: Using ep0 maxpacket: 32 [ 1073.573652][ T5780] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.730130][ T5780] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1073.871558][ T5780] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.934255][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.084100][ T5780] usb 9-1: config 0 descriptor?? [ 1074.153713][ T5780] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1074.235599][ T5780] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1074.291409][T15846] legousbtower 5-1:14.57: interrupt endpoints not found [ 1074.697158][ T5780] usb 9-1: USB disconnect, device number 33 [ 1074.723970][T15846] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1074.757627][ T5780] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1074.775011][T15846] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1074.941155][ T5871] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1075.062478][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.091609][T18980] loop9: detected capacity change from 0 to 32768 [ 1075.118883][ T5871] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.176290][ T5871] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.198702][ T5871] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1075.240367][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.285256][ T5871] usb 8-1: config 0 descriptor?? [ 1075.295970][T18991] loop3: detected capacity change from 0 to 32768 [ 1075.329058][T18991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3430 (18991) [ 1075.396309][T18991] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1075.430632][T18991] BTRFS info (device loop3): using sha256 checksum algorithm [ 1075.601864][T18993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.640702][T19024] loop9: detected capacity change from 0 to 512 [ 1075.657480][T19024] EXT4-fs: Invalid want_extra_isize -1 [ 1075.686966][T18991] BTRFS info (device loop3): enabling ssd optimizations [ 1075.687929][T10993] usb 5-1: USB disconnect, device number 49 [ 1075.699061][T18993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.755477][T18991] BTRFS info (device loop3): turning on async discard [ 1075.801251][T18993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.832021][T18991] BTRFS info (device loop3): enabling free space tree [ 1075.887349][T18993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.905706][ T10] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1075.912193][T10993] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1076.201039][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.657276][ T5780] usb 8-1: USB disconnect, device number 41 [ 1076.762864][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.817853][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1076.842239][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.868062][T17330] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1077.084291][T19039] loop9: detected capacity change from 0 to 512 [ 1077.155408][T19039] EXT4-fs: Invalid want_extra_isize -1 [ 1077.176700][ T5780] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1078.055798][ T10] wacom 0003:056A:00B1.0027: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 1078.317523][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.570437][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1078.590367][ T10] wacom 0003:056A:00B1.0027: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.8-1/input0 [ 1078.690654][ T10] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:00B1.0027/input/input39 [ 1078.899904][T19064] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 1079.232384][T19071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.304723][T19071] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1079.499096][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.567620][ T5743] usb 9-1: USB disconnect, device number 34 [ 1080.015037][T19064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1080.091291][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.104668][T19068] bond1: (slave dummy0): making interface the new active one [ 1080.130461][T19068] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1080.316058][T19092] loop7: detected capacity change from 0 to 512 [ 1080.369122][T19092] EXT4-fs: Invalid want_extra_isize -1 [ 1080.502069][T19099] loop9: detected capacity change from 0 to 512 [ 1080.527715][T19099] EXT4-fs: Invalid want_extra_isize -1 [ 1080.825579][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.835927][T15846] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1081.701224][ T5743] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1081.844787][T15846] usb 5-1: Using ep0 maxpacket: 32 [ 1081.876334][T15846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.910315][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.052674][ T5743] usb 4-1: Using ep0 maxpacket: 32 [ 1082.071052][T15846] usb 5-1: config 0 has no interfaces? [ 1082.109775][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.142856][T15846] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1082.173453][ T5743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1082.229388][T15846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.254560][ T5743] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.299004][T15846] usb 5-1: config 0 descriptor?? [ 1082.308804][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.358548][ T5743] usb 4-1: Product: syz [ 1082.380161][ T5743] usb 4-1: Manufacturer: syz [ 1082.400228][T19077] loop2: detected capacity change from 0 to 40427 [ 1082.409924][ T5743] usb 4-1: SerialNumber: syz [ 1082.425045][T19116] netlink: 'syz.7.3457': attribute type 4 has an invalid length. [ 1082.477793][T19077] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 1082.487890][ T5743] usb 4-1: config 0 descriptor?? [ 1082.494734][T19118] netlink: 'syz.7.3457': attribute type 4 has an invalid length. [ 1082.516051][T19095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1082.533878][T19077] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1082.569229][T19077] F2FS-fs (loop2): Image doesn't support compression [ 1082.618879][T19077] F2FS-fs (loop2): build fault injection rate: 690 [ 1082.648315][T19077] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 1082.685738][T19077] F2FS-fs (loop2): invalid crc value [ 1082.914701][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1082.949145][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1082.964751][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xcc34 instead [ 1083.041535][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.072586][T19077] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1083.086707][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x37f3 instead [ 1083.167671][T19077] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1083.184379][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1083.198116][T19077] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1083.232203][T19077] F2FS-fs (loop2): Start checkpoint disabled! [ 1083.286579][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1083.353871][T19077] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1083.361214][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1083.383850][T15193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.383997][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1083.428839][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1083.453529][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1083.477728][T19128] jffs2: Further such events for this erase block will not be printed [ 1083.496433][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1083.517306][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1083.573546][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xcc34 instead [ 1083.584761][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x37f3 instead [ 1083.596668][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1083.608860][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1083.646224][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1083.669499][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1083.682202][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1083.693468][T19128] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1083.740137][T19128] jffs2: Further such events for this erase block will not be printed [ 1083.771731][T19128] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1083.813552][T19128] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1083.886138][ T5871] usb 4-1: USB disconnect, device number 27 [ 1084.167827][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.221596][T19160] loop9: detected capacity change from 0 to 512 [ 1084.230778][T19160] EXT4-fs: Invalid want_extra_isize -1 [ 1084.311002][T19163] loop2: detected capacity change from 0 to 128 [ 1084.361178][T19163] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1084.480354][T19163] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1085.394538][T15846] usb 5-1: USB disconnect, device number 50 [ 1085.422554][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.640724][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3472'. [ 1085.711246][ T5888] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1085.857970][ T31] audit: type=1326 audit(1785920658.370:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.3.3471" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b7539e0d9 code=0x0 [ 1085.953356][T19183] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 1086.602881][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.683589][T15193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.197706][ T5969] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.317906][ T5759] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1087.435114][ T5969] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.488059][ T5759] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1087.517670][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.654525][ T5759] usb 3-1: config 0 descriptor?? [ 1087.724467][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.733128][T15846] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1087.802172][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1087.816856][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1087.831312][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1087.843975][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1087.851483][ T5743] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1087.863045][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1087.905501][ T5759] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1087.926612][ T5969] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.937156][T15846] usb 9-1: Using ep0 maxpacket: 32 [ 1087.948242][T15846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.961576][T15846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.989924][T15846] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1088.020325][T15846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.029599][ T5743] usb 5-1: Using ep0 maxpacket: 8 [ 1088.054868][ T5743] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1088.079934][ T5743] usb 5-1: config 179 has no interface number 0 [ 1088.090223][T15846] usb 9-1: config 0 descriptor?? [ 1088.115981][ T5743] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1088.153951][ T5743] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1088.210890][ T5743] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1088.240348][ T5743] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1088.291440][ T5759] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1088.302324][ T5743] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1088.308787][ T5969] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.329590][ T5759] [drm] Initialized udl on minor 2 [ 1088.355250][ T5743] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1088.392594][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.431293][T19209] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1088.570283][T15846] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1088.599338][ T5759] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1088.631793][T15846] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1088.645602][ T5759] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1088.689833][ T5743] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1088.753104][ T5743] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1088.761838][ T5759] usb 3-1: USB disconnect, device number 16 [ 1088.777145][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.792463][T15846] ft260 0003:0403:6030.0028: chip code: 0000 0000 [ 1088.813830][ T5743] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1088.857205][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.867956][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.002416][ T186] usb 5-1: USB disconnect, device number 51 [ 1089.002529][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1089.016697][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1089.036558][T15846] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 1089.054713][T19234] loop3: detected capacity change from 0 to 512 [ 1089.082986][T19234] EXT4-fs: Invalid want_extra_isize -1 [ 1089.369497][T15846] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 1089.999926][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.016789][T19208] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x3f43, size 0, write) [ 1090.041134][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.146906][ T51] Bluetooth: hci5: command tx timeout [ 1090.268264][ T5969] bridge_slave_1: left allmulticast mode [ 1090.279807][T19249] loop9: detected capacity change from 0 to 512 [ 1090.309171][ T5969] bridge_slave_1: left promiscuous mode [ 1090.335909][T19249] EXT4-fs: Invalid want_extra_isize -1 [ 1090.341504][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.611144][ T5969] bridge_slave_0: left allmulticast mode [ 1090.652602][ T5969] bridge_slave_0: left promiscuous mode [ 1090.683291][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.244551][ T186] usb 9-1: USB disconnect, device number 35 [ 1091.394121][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.465813][T19265] input: syz0 as /devices/virtual/input/input42 [ 1092.183169][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.401019][ T51] Bluetooth: hci5: command tx timeout [ 1092.494545][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.662053][T19276] loop3: detected capacity change from 0 to 2048 [ 1092.687416][T19276] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1092.745095][T19276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.834739][T19283] file system registered [ 1092.844108][ T31] audit: type=1800 audit(1785920664.811:267): pid=19283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3497" name="UDC" dev="configfs" ino=48382 res=0 errno=0 [ 1093.014705][T19289] loop9: detected capacity change from 0 to 512 [ 1093.023764][T19289] EXT4-fs: Invalid want_extra_isize -1 [ 1093.172490][ T5929] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1093.628587][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.949767][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.055019][ T5929] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.107536][ T5929] usb 9-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1094.182481][ T5929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.242917][ T5929] usb 9-1: config 0 descriptor?? [ 1094.296998][ T5929] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1094.467509][T19306] loop3: detected capacity change from 0 to 512 [ 1094.481884][T19306] EXT4-fs: Invalid want_extra_isize -1 [ 1094.631619][ T5929] usb 9-1: USB disconnect, device number 36 [ 1094.656055][ T51] Bluetooth: hci5: command tx timeout [ 1094.748780][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.099092][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.451430][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.499426][ T5969] bond0 (unregistering): Released all slaves [ 1095.639144][T19300] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1095.830235][ T5969] tipc: Left network mode [ 1095.880132][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.765813][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.820725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.848045][T19326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.920257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.931285][ T51] Bluetooth: hci5: command tx timeout [ 1096.937757][T19327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.946245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.957113][T19325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.998730][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.258641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.288687][T15193] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1097.330701][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3513'. [ 1097.470247][T15193] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1097.497517][T15193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.528252][T15193] usb 4-1: Product: syz [ 1097.547704][T15193] usb 4-1: Manufacturer: syz [ 1097.563528][T15193] usb 4-1: SerialNumber: syz [ 1097.604765][T15193] usb 4-1: config 0 descriptor?? [ 1097.703877][ T5969] hsr_slave_0: left promiscuous mode [ 1097.719900][ T5969] hsr_slave_1: left promiscuous mode [ 1097.735124][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.742712][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.757695][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.767419][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.830639][ T5969] veth1_macvtap: left promiscuous mode [ 1097.843721][ T5969] veth0_macvtap: left promiscuous mode [ 1097.862293][T15193] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1097.876700][ T5969] veth1_vlan: left promiscuous mode [ 1097.887624][ T5969] veth0_vlan: left promiscuous mode [ 1098.041143][T19360] loop4: detected capacity change from 0 to 8 [ 1098.083956][T19360] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1098.109831][T19360] SQUASHFS error: Failed to read block 0x28d: -5 [ 1098.133104][T19360] SQUASHFS error: Unable to read metadata cache entry [28b] [ 1098.149995][T19360] SQUASHFS error: Unable to read inode 0x11f [ 1098.814828][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1098.926710][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1098.976271][T15193] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1099.212678][T19387] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 1099.218717][T15193] usb 4-1: USB disconnect, device number 28 [ 1099.265305][T19394] input: syz0 as /devices/virtual/input/input43 [ 1099.368409][T19397] loop8: detected capacity change from 0 to 764 [ 1099.684932][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1100.117742][ T5759] IPVS: starting estimator thread 0... [ 1100.248540][T19418] IPVS: using max 26 ests per chain, 62400 per kthread [ 1101.270804][ T5969] IPVS: stop unused estimator thread 0... [ 1101.678087][ T5759] net_ratelimit: 4 callbacks suppressed [ 1101.678107][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.698821][T19213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.710542][T19213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.717777][T19213] bridge_slave_0: entered allmulticast mode [ 1101.725927][T19213] bridge_slave_0: entered promiscuous mode [ 1101.735172][T19213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.742443][T19213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.762203][T19213] bridge_slave_1: entered allmulticast mode [ 1101.770959][T19213] bridge_slave_1: entered promiscuous mode [ 1101.849383][T19213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.884459][T19213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.963463][T19213] team0: Port device team_slave_0 added [ 1101.989366][T19213] team0: Port device team_slave_1 added [ 1102.122720][T19213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.152366][T19213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.187942][T19213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.248136][T19213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.275066][T19213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.311407][T19213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.465988][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1102.499138][T19454] loop2: detected capacity change from 0 to 512 [ 1102.518087][T19454] EXT4-fs: Ignoring removed bh option [ 1102.545718][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.626576][T19213] hsr_slave_0: entered promiscuous mode [ 1102.644253][T19454] EXT4-fs (loop2): 1 truncate cleaned up [ 1102.689922][T19213] hsr_slave_1: entered promiscuous mode [ 1102.697173][T19454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.722997][T19456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1102.765442][T19213] debugfs: 'hsr0' already exists in 'hsr' [ 1102.784967][T19213] Cannot create hsr debugfs directory [ 1102.823479][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.868401][T14529] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.925288][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3539'. [ 1103.288077][T19467] loop4: detected capacity change from 0 to 128 [ 1103.505589][ T5627] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 1103.554992][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1103.569037][ T5627] FAT-fs (loop4): Filesystem has been set read-only [ 1103.602810][ T5627] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1103.623986][ T5627] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1103.752071][ T10] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1103.781409][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1103.811532][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.837817][ T10] usb 3-1: Product: syz [ 1103.850295][ T10] usb 3-1: Manufacturer: syz [ 1103.869848][ T10] usb 3-1: SerialNumber: syz [ 1103.944016][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.282889][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.386677][ T10] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1104.429323][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1104.851473][T19504] netlink: 'syz.9.3554': attribute type 1 has an invalid length. [ 1105.041599][T19504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.070603][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.168871][ T10] usb 3-1: USB disconnect, device number 17 [ 1105.433837][T19509] bond1: (slave ip6gretap1): making interface the new active one [ 1105.467076][T19509] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1105.532523][T19513] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1105.568252][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1105.768194][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1105.782851][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1105.792864][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1105.804959][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1105.814791][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1106.084120][T19531] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1106.219130][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.419027][T19541] vivid-001: ================= START STATUS ================= [ 1106.450921][T19541] vivid-001: Radio HW Seek Mode: Bounded [ 1106.469308][T19541] vivid-001: Radio Programmable HW Seek: false [ 1106.490660][T19541] vivid-001: RDS Rx I/O Mode: Block I/O [ 1106.524442][T19541] vivid-001: Generate RBDS Instead of RDS: false [ 1106.591200][T19541] vivid-001: RDS Reception: true [ 1106.633201][T19541] vivid-001: RDS Program Type: 0 inactive [ 1106.694906][T19541] vivid-001: RDS PS Name: inactive [ 1106.721515][T19213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1106.770719][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.788578][T19541] vivid-001: RDS Radio Text: inactive [ 1106.821020][T19213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1106.827947][T19541] vivid-001: RDS Traffic Announcement: false inactive [ 1106.848030][T19541] vivid-001: RDS Traffic Program: false inactive [ 1106.877075][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.906462][T19213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1106.920590][T19541] vivid-001: RDS Music: false inactive [ 1106.951066][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.967712][T19541] vivid-001: ================== END STATUS ================== [ 1107.040699][T19553] loop2: detected capacity change from 0 to 8192 [ 1107.070438][T19553] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1107.300473][T19563] loop9: detected capacity change from 0 to 32768 [ 1107.313849][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.339809][T19563] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1107.347230][T19213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1107.351565][T19563] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1107.377792][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.450353][T19553] ntfs3(loop2): ino=b, mi_enum_attr [ 1107.471332][T19553] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1107.479352][T19563] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1107.490190][ T5743] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1107.505654][ T5743] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1107.540435][T19553] ntfs3(loop2): Failed to load $Extend (-22). [ 1107.558000][T19553] ntfs3(loop2): Failed to initialize $Extend. [ 1107.575636][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.074823][T19582] No fuse device found [ 1108.082808][ T5743] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 532ms [ 1108.094248][ T5633] Bluetooth: hci1: command tx timeout [ 1108.114061][T19582] No fuse device found [ 1108.141898][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1108.150209][ T5743] gfs2: fsid=syz:syz.0: jid=0: Done [ 1108.159251][T19582] No fuse device found [ 1108.170042][T19563] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1108.198807][T19582] No fuse device found [ 1108.234852][T19582] No fuse device found [ 1108.244287][T19582] No fuse device found [ 1108.260494][T19582] No fuse device found [ 1108.269027][T19582] No fuse device found [ 1108.288148][T19582] No fuse device found [ 1108.293287][T19582] No fuse device found [ 1108.452745][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.819306][T19600] loop8: detected capacity change from 0 to 2048 [ 1108.895339][T19213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.949725][T19600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.039452][T19213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.056123][T19580] syz.2.3563 (19580): drop_caches: 2 [ 1109.132434][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.139664][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.479496][T11836] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.479958][T19613] loop3: detected capacity change from 0 to 32768 [ 1109.509976][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.517154][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.551846][T19613] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1109.564412][T19613] CPU: 1 UID: 0 PID: 19613 Comm: syz.3.3570 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.564448][T19613] Tainted: [L]=SOFTLOCKUP [ 1109.564458][T19613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.564474][T19613] Call Trace: [ 1109.564484][T19613] [ 1109.564495][T19613] dump_stack_lvl+0xe8/0x150 [ 1109.564539][T19613] sysfs_create_dir_ns+0x271/0x2a0 [ 1109.564581][T19613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1109.564622][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.564653][T19613] ? do_raw_spin_unlock+0xf5/0x210 [ 1109.564692][T19613] kobject_add_internal+0x622/0xcd0 [ 1109.564727][T19613] kobject_init_and_add+0x12b/0x1a0 [ 1109.564778][T19613] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1109.564822][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.564852][T19613] ? __raw_spin_lock_init+0x45/0x100 [ 1109.564885][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.564913][T19613] ? __init_swait_queue_head+0xa8/0x150 [ 1109.564944][T19613] gfs2_sys_fs_add+0x257/0x480 [ 1109.564987][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565016][T19613] ? is_dynamic_key+0x1aa/0x1c0 [ 1109.565054][T19613] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 1109.565101][T19613] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1109.565157][T19613] gfs2_fill_super+0x1328/0x20b0 [ 1109.565202][T19613] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1109.565229][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565264][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565294][T19613] ? sb_set_blocksize+0x155/0x240 [ 1109.565334][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565362][T19613] ? setup_bdev_super+0x4c1/0x5b0 [ 1109.565394][T19613] get_tree_bdev_flags+0x430/0x4f0 [ 1109.565423][T19613] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1109.565452][T19613] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1109.565482][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565521][T19613] gfs2_get_tree+0x51/0x1e0 [ 1109.565554][T19613] vfs_get_tree+0x92/0x2a0 [ 1109.565585][T19613] do_new_mount+0x319/0xdc0 [ 1109.565620][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565656][T19613] ? __pfx_do_new_mount+0x10/0x10 [ 1109.565693][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565723][T19613] ? ns_capable+0x89/0xe0 [ 1109.565756][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565785][T19613] ? path_mount+0x647/0x1040 [ 1109.565824][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.565853][T19613] ? user_path_at+0xd4/0x160 [ 1109.565897][T19613] __se_sys_mount+0x31d/0x420 [ 1109.565940][T19613] ? __pfx___se_sys_mount+0x10/0x10 [ 1109.565982][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.566019][T19613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.566048][T19613] ? __x64_sys_mount+0x20/0xc0 [ 1109.566084][T19613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.566114][T19613] do_syscall_64+0x174/0x580 [ 1109.566147][T19613] ? trace_irq_disable+0x3b/0x140 [ 1109.566189][T19613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.566216][T19613] RIP: 0033:0x7f8b7539f34a [ 1109.566239][T19613] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.566260][T19613] RSP: 002b:00007f8b761cee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1109.566286][T19613] RAX: ffffffffffffffda RBX: 00007f8b761ceee0 RCX: 00007f8b7539f34a [ 1109.566306][T19613] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f8b761ceea0 [ 1109.566324][T19613] RBP: 0000200000037f40 R08: 00007f8b761ceee0 R09: 0000000001010084 [ 1109.566343][T19613] R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000008c0 [ 1109.566360][T19613] R13: 00007f8b761ceea0 R14: 0000000000037f58 R15: 0000200000000480 [ 1109.566398][T19613] [ 1109.566425][T19613] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1109.941945][T19613] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1109.949569][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.081232][T15193] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1110.199346][T19522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.236117][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.247752][T19522] bridge_slave_0: entered allmulticast mode [ 1110.271512][T19522] bridge_slave_0: entered promiscuous mode [ 1110.285914][T15193] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1110.301497][T19624] loop8: detected capacity change from 0 to 2048 [ 1110.304371][T15193] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1110.344729][T19522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.352927][ T5633] Bluetooth: hci1: command tx timeout [ 1110.363073][T15193] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.377024][T19522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.399340][T15193] usb 3-1: config 220 has no interface number 2 [ 1110.408304][T19522] bridge_slave_1: entered allmulticast mode [ 1110.414455][T15193] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1110.429111][T15193] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1110.432697][T19522] bridge_slave_1: entered promiscuous mode [ 1110.436514][T15193] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1110.452957][T19624] loop8: p2 < > p3 < p5 > p4 [ 1110.462159][T19624] loop8: partition table partially beyond EOD, truncated [ 1110.474312][T19628] loop3: detected capacity change from 0 to 512 [ 1110.485600][T19624] loop8: p2 start 4278190080 is beyond EOD, truncated [ 1110.492545][T15193] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1110.500873][T19628] EXT4-fs: Invalid want_extra_isize -1 [ 1110.512526][T15193] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1110.534348][T15193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.563425][T15193] usb 3-1: Product: syz [ 1110.573902][T15193] usb 3-1: Manufacturer: syz [ 1110.583442][T19624] loop8: p4 size 8192 extends beyond EOD, truncated [ 1110.594400][T15193] usb 3-1: SerialNumber: syz [ 1110.644860][T19624] loop8: p5 size 8192 extends beyond EOD, truncated [ 1110.812983][T19522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.053669][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.425998][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.524711][T15193] usb 3-1: selecting invalid altsetting 0 [ 1111.635746][T19522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.658239][T15193] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1111.737147][T15193] uvcvideo 3-1:220.0: No valid video chain found. [ 1111.813941][T15193] usb 3-1: selecting invalid altsetting 0 [ 1111.850566][T15193] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1111.889022][T15193] usb 3-1: USB disconnect, device number 18 [ 1111.939110][T19522] team0: Port device team_slave_0 added [ 1112.003579][T19522] team0: Port device team_slave_1 added [ 1112.169384][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.238288][T19522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.259610][T19522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.317570][T19659] input: syz1 as /devices/virtual/input/input44 [ 1112.362439][T19522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.426485][T19522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.472267][T19522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.586671][T19522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.610217][ T5633] Bluetooth: hci1: command tx timeout [ 1112.904067][T19670] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1112.910601][T19670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1112.919279][T19522] hsr_slave_0: entered promiscuous mode [ 1112.932776][T19522] hsr_slave_1: entered promiscuous mode [ 1112.950189][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.966022][T19522] debugfs: 'hsr0' already exists in 'hsr' [ 1112.973012][T19670] vhci_hcd vhci_hcd.0: Device attached [ 1112.987049][T19647] loop2: detected capacity change from 0 to 32768 [ 1112.992508][T19522] Cannot create hsr debugfs directory [ 1113.220191][T15193] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1113.278819][ T5759] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1113.332023][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.463159][ T5759] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.488085][ T5759] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.517073][ T5759] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1113.562031][ T5759] usb 9-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 1113.597082][ T5759] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.616334][ T5759] usb 9-1: Product: syz [ 1113.635383][ T5759] usb 9-1: Manufacturer: syz [ 1113.653354][ T5759] usb 9-1: SerialNumber: syz [ 1113.690885][ T5759] kaweth 9-1:1.0: couldn't find required endpoints [ 1113.912451][ T5929] usb 9-1: USB disconnect, device number 37 [ 1113.928398][T19671] vhci_hcd: connection reset by peer [ 1113.951333][ T168] vhci_hcd vhci_hcd.8: stop threads [ 1113.964369][ T168] vhci_hcd vhci_hcd.8: release socket [ 1113.990665][ T168] vhci_hcd vhci_hcd.8: disconnect device [ 1114.182997][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1114.381505][T19700] loop2: detected capacity change from 0 to 512 [ 1114.388991][T19700] EXT4-fs: Invalid want_extra_isize -1 [ 1114.434259][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.653426][T19213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.910781][ T5633] Bluetooth: hci1: command tx timeout [ 1115.364778][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.590993][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.608804][T19213] veth0_vlan: entered promiscuous mode [ 1115.625296][T19213] veth1_vlan: entered promiscuous mode [ 1116.065478][T19717] loop8: detected capacity change from 0 to 512 [ 1116.085070][T19717] ext4: Unknown parameter 'noacl' [ 1116.109378][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3590'. [ 1116.232673][T19213] veth0_macvtap: entered promiscuous mode [ 1116.299091][T19213] veth1_macvtap: entered promiscuous mode [ 1116.406964][T19213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.482717][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.492065][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.528739][T19213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.544153][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.577040][T19732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.602563][T19732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.841967][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.078634][T19746] loop3: detected capacity change from 0 to 1024 [ 1117.145915][T15846] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1117.148386][T19746] EXT4-fs: Ignoring removed orlov option [ 1117.193746][T19746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.319454][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.352458][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.415222][T15846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1117.433190][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.457009][T15846] usb 3-1: not running at top speed; connect to a high speed hub [ 1117.477435][T15846] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1117.488347][T15846] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1117.499840][T19522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1117.522482][T15846] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.540758][T19522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1117.558426][T19522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1117.565143][T19746] loop3: detected capacity change from 1024 to 64 [ 1117.566908][T15846] usb 3-1: config 14 has no interface number 0 [ 1117.590862][T15846] usb 3-1: config 14 has no interface number 1 [ 1117.603635][T19522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1117.617554][T15846] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1117.651990][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.652625][T15846] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1117.691179][T19522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1117.704468][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.706442][T15846] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1117.743254][T19522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1117.757445][T19522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1117.773520][T15846] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1117.802112][T19522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1117.817663][T17330] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /71/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 1117.856073][T15846] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1117.883004][T15846] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1117.910659][T15846] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1117.931085][T15846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.963267][T15846] usb 3-1: Product: syz [ 1117.975368][T15846] usb 3-1: Manufacturer: syz [ 1117.980005][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.980027][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.031229][T17330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.047319][T15846] usb 3-1: SerialNumber: syz [ 1118.120501][T19749] kmmpd-loop3: attempt to access beyond end of device [ 1118.120501][T19749] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1118.165126][T19749] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 1118.287175][T19768] binder: 19767:19768 ioctl c0306201 200000000640 returned -22 [ 1118.533501][T15846] legousbtower 3-1:14.57: interrupt endpoints not found [ 1118.559603][T19522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.653967][T19522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.672335][ T5352] net_ratelimit: 28 callbacks suppressed [ 1118.672353][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.698479][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.705673][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.757588][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.764783][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.778894][T15193] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1118.785490][T18793] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1118.932816][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.964854][T18793] usb 10-1: Using ep0 maxpacket: 8 [ 1118.971734][T15846] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1118.979395][T18793] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1119.012602][T15846] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1119.022922][T18793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1119.045873][T18793] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1119.071016][T18793] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.125143][T18793] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1119.160548][T18793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.417338][T18793] usb 10-1: GET_CAPABILITIES returned 0 [ 1119.444242][T18793] usbtmc 10-1:16.0: can't read capabilities [ 1119.816788][ T31] audit: type=1800 audit(1785920689.705:268): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3594" name="file1" dev="ramfs" ino=50233 res=0 errno=0 [ 1119.891821][T19214] usb 3-1: USB disconnect, device number 19 [ 1119.891835][ C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1119.920267][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1119.937934][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1119.954538][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1119.965694][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1119.978485][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1120.066756][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.150586][T19214] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1120.231036][T15193] usb 10-1: USB disconnect, device number 20 [ 1120.387923][T19810] loop0: detected capacity change from 0 to 2048 [ 1120.456204][T19815] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1120.486795][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1120.498246][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.498280][ T51] Tainted: [L]=SOFTLOCKUP [ 1120.498290][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1120.498305][ T51] Workqueue: hci5 hci_rx_work [ 1120.498341][ T51] Call Trace: [ 1120.498350][ T51] [ 1120.498360][ T51] dump_stack_lvl+0xe8/0x150 [ 1120.498405][ T51] sysfs_create_dir_ns+0x271/0x2a0 [ 1120.498442][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1120.498479][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.498507][ T51] ? do_raw_spin_unlock+0xf5/0x210 [ 1120.498544][ T51] kobject_add_internal+0x622/0xcd0 [ 1120.498579][ T51] kobject_add+0x163/0x240 [ 1120.498617][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.498656][ T51] ? __pfx_kobject_add+0x10/0x10 [ 1120.498692][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.498725][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.498759][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.498789][ T51] ? get_device_parent+0x366/0x3a0 [ 1120.498827][ T51] device_add+0x3fa/0xb80 [ 1120.498861][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 1120.498899][ T51] le_conn_complete_evt+0xfef/0x1580 [ 1120.498938][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1120.498965][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.499002][ T51] ? __mutex_unlock_slowpath+0x731/0x900 [ 1120.499043][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.499073][ T51] ? skb_pull_data+0xf0/0x200 [ 1120.499116][ T51] hci_le_conn_complete_evt+0x187/0x470 [ 1120.499166][ T51] hci_event_packet+0x67a/0xf10 [ 1120.499210][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1120.499249][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 1120.499291][ T51] ? replace_chunk+0x730/0xb80 [ 1120.499324][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.499354][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 1120.499386][ T51] hci_rx_work+0x3ee/0x1020 [ 1120.499432][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 1120.499464][ T51] process_scheduled_works+0xa8e/0x14e0 [ 1120.499529][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 1120.499568][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.499598][ T51] ? assign_work+0x3cf/0x5d0 [ 1120.499635][ T51] worker_thread+0xa47/0xfb0 [ 1120.499705][ T51] kthread+0x388/0x470 [ 1120.499743][ T51] ? __pfx_worker_thread+0x10/0x10 [ 1120.499773][ T51] ? __pfx_kthread+0x10/0x10 [ 1120.499813][ T51] ret_from_fork+0x514/0xb70 [ 1120.499856][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 1120.499894][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1120.499923][ T51] ? __switch_to+0xc89/0x1420 [ 1120.499961][ T51] ? __pfx_kthread+0x10/0x10 [ 1120.500006][ T51] ret_from_fork_asm+0x1a/0x30 [ 1120.500051][ T51] [ 1120.771552][ T51] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1120.788556][ T51] Bluetooth: hci5: failed to register connection device [ 1121.114053][T19522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.167956][T19825] binder_alloc: 19823: binder_alloc_buf size -608 failed, no address space [ 1121.212723][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.264795][T19825] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1121.652035][T18793] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1121.825344][T18793] usb 10-1: Using ep0 maxpacket: 32 [ 1121.846179][T18793] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1121.860510][T18793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.870374][T18793] usb 10-1: Product: syz [ 1121.875920][T18793] usb 10-1: Manufacturer: syz [ 1121.884866][T18793] usb 10-1: SerialNumber: syz [ 1121.923560][T18793] usb 10-1: config 0 descriptor?? [ 1121.953339][T18793] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1121.968158][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.226969][ T51] Bluetooth: hci4: command tx timeout [ 1122.341781][T19522] veth0_vlan: entered promiscuous mode [ 1122.353411][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.423405][T19522] veth1_vlan: entered promiscuous mode [ 1122.969909][T19872] loop0: detected capacity change from 0 to 1024 [ 1122.978816][T19872] EXT4-fs: Ignoring removed bh option [ 1123.040577][T19872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.284794][T19877] loop2: detected capacity change from 0 to 32768 [ 1123.293241][T19877] btrfs: Deprecated parameter 'usebackuproot' [ 1123.299382][T19877] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1123.334687][T19877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3612 (19877) [ 1123.359465][T15193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.375950][T19877] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1123.386178][T19877] BTRFS info (device loop2): using crc32c checksum algorithm [ 1123.430304][T19799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.442397][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.474940][T19799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.503027][T19799] bridge_slave_0: entered allmulticast mode [ 1123.535774][ T5969] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1123.536530][T19799] bridge_slave_0: entered promiscuous mode [ 1123.599998][T19877] BTRFS error (device loop2): failed to load root extent [ 1123.613505][T19877] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1123.625993][ T37] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1123.640676][T19866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.658785][T19877] BTRFS warning (device loop2): couldn't read tree root [ 1123.661611][T19866] batadv_slave_1: entered promiscuous mode [ 1123.665830][T19877] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1123.680488][T19898] EXT4-fs (loop0): shut down requested (1) [ 1123.689565][ T5969] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1123.739232][T19877] BTRFS warning (device loop2): couldn't read tree root [ 1123.747182][T19877] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1123.775246][T19877] BTRFS info (device loop2): rebuilding free space tree [ 1123.828075][T19877] BTRFS info (device loop2): disabling free space tree [ 1123.838687][T19877] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1123.848404][T19877] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1123.872509][T19877] BTRFS info (device loop2): checking UUID tree [ 1123.880582][T19877] BTRFS info (device loop2): enabling ssd optimizations [ 1123.887683][T19877] BTRFS info (device loop2): turning on async discard [ 1123.894479][T19877] BTRFS info (device loop2): force clearing of disk cache [ 1123.901771][T19877] BTRFS info (device loop2): enabling auto defrag [ 1123.908275][T19877] BTRFS info (device loop2): trying to use backup root at mount time [ 1123.916370][T19877] BTRFS info (device loop2): use zstd compression, level 3 [ 1123.930858][T19799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.003731][T19799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.016274][T19213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.036283][T19799] bridge_slave_1: entered allmulticast mode [ 1124.077734][T19799] bridge_slave_1: entered promiscuous mode [ 1124.207726][T18793] gspca_ov534_9: reg_r err -71 [ 1124.239215][T19522] veth0_macvtap: entered promiscuous mode [ 1124.317187][T14529] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.387350][T19522] veth1_macvtap: entered promiscuous mode [ 1124.454835][T19799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.469911][T18793] gspca_ov534_9: Unknown sensor 0000 [ 1124.470009][T18793] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1124.494654][ T51] Bluetooth: hci4: command tx timeout [ 1124.543936][T19799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.582812][T18793] usb 10-1: USB disconnect, device number 21 [ 1124.659407][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.834657][T19799] team0: Port device team_slave_0 added [ 1124.881250][T19799] team0: Port device team_slave_1 added [ 1125.171795][T19522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.230704][T19799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.269899][T15193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.279378][T19799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.370654][T19799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.422650][T19926] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3618'. [ 1125.464869][T19799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.493222][T19799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.628717][T19799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.725806][T19522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.784136][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.878710][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.955859][T19941] sd 0:0:1:0: PR command failed: 1026 [ 1125.986573][T19941] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1126.029467][T19799] hsr_slave_0: entered promiscuous mode [ 1126.034430][T19941] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1126.068266][T19799] hsr_slave_1: entered promiscuous mode [ 1126.098027][T19799] debugfs: 'hsr0' already exists in 'hsr' [ 1126.118452][T19799] Cannot create hsr debugfs directory [ 1126.393830][ T3366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.627970][T15846] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1126.735368][ T51] Bluetooth: hci4: command tx timeout [ 1126.822344][T15846] usb 9-1: Using ep0 maxpacket: 8 [ 1126.830124][T15193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.830972][T15846] usb 9-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1126.873747][T15846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1126.890167][T15846] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1126.913858][T15846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.915804][ T6100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.922760][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.958605][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.979281][T15846] usb 9-1: config 0 descriptor?? [ 1126.991533][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.053822][ T3366] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.443796][T19982] loop0: detected capacity change from 0 to 256 [ 1127.446641][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.479447][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.508480][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.520415][T19982] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1127.524163][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.552306][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.588656][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.621640][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.659782][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.695091][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x6 [ 1127.727524][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.761623][T15846] zydacron 0003:13EC:0006.0029: reserved main item tag 0xe [ 1127.786013][T15846] zydacron 0003:13EC:0006.0029: unknown main item tag 0x0 [ 1127.801383][T19982] loop0: detected capacity change from 256 to 64 [ 1127.824684][T15846] zydacron 0003:13EC:0006.0029: item fetching failed at offset 24/40 [ 1127.869830][T15846] zydacron 0003:13EC:0006.0029: parse failed [ 1127.883645][T15846] zydacron 0003:13EC:0006.0029: probe with driver zydacron failed with error -22 [ 1127.894989][T19982] loop0: [ 1127.923333][T15846] usb 9-1: USB disconnect, device number 38 [ 1128.078545][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.555887][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.990821][ T51] Bluetooth: hci4: command tx timeout [ 1129.183537][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.228353][T20001] loop8: detected capacity change from 0 to 32768 [ 1129.297503][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.797402][T20021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.837157][T20021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.983622][T20026] binder: 20025:20026 ioctl c0306201 200000000080 returned -14 [ 1130.043775][T20026] binder: 20025:20026 ioctl c0306201 2000000003c0 returned -14 [ 1130.063129][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.129216][T20031] binder: 20028:20031 ioctl c0306201 200000000680 returned -14 [ 1130.168264][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1130.188727][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1130.202094][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1130.224189][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1130.243462][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1130.307256][T15846] net_ratelimit: 4 callbacks suppressed [ 1130.307276][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.355030][T18793] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1130.558933][T18793] usb 7-1: Using ep0 maxpacket: 16 [ 1130.587626][T18793] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1130.617612][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.631413][T18793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1130.672706][T18793] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1130.699491][T18793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.729528][T18793] usb 7-1: Product: syz [ 1130.755704][T18793] usb 7-1: Manufacturer: syz [ 1130.772137][T18793] usb 7-1: SerialNumber: syz [ 1130.799876][T18793] usb 7-1: config 0 descriptor?? [ 1130.831445][T15193] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1130.854995][T18793] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1130.900823][T18793] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1130.975452][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.008617][T15193] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1131.016558][T20056] loop8: detected capacity change from 0 to 1024 [ 1131.021712][T15193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.178637][T15846] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1131.364557][T15846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.397524][T15846] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1131.418400][T15846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.433624][T15846] usb 3-1: Product: syz [ 1131.437809][T15846] usb 3-1: Manufacturer: syz [ 1131.442795][T15846] usb 3-1: SerialNumber: syz [ 1131.449566][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.473558][T15846] usb 3-1: config 0 descriptor?? [ 1131.491822][T15846] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1131.500262][T18793] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1131.528442][T18793] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1131.606013][T19799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.657624][T19799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.679491][T15193] lg-g15 0003:046D:C222.002A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.9-1/input0 [ 1131.697400][T19799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.780951][T19799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.827844][T19799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1131.859354][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.903367][T19799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.995270][T19799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.051867][T19799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1132.182838][T15846] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1132.203876][T15846] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1132.207607][T18793] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1132.247461][T15846] usb 3-1: USB disconnect, device number 20 [ 1132.301537][ T1009] bridge_slave_1: left allmulticast mode [ 1132.315166][ T1009] bridge_slave_1: left promiscuous mode [ 1132.332314][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.369477][ T1009] bridge_slave_0: left allmulticast mode [ 1132.379056][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1132.379120][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.385906][T20073] loop8: detected capacity change from 0 to 32768 [ 1132.414699][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.445153][ T1009] bridge_slave_0: left promiscuous mode [ 1132.450727][T20073] ERROR: (device loop8): diAllocAG: ipimap->i_size is wrong [ 1132.450727][T20073] [ 1132.465100][T18793] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1132.468480][ T5633] Bluetooth: hci5: command tx timeout [ 1132.482660][T18793] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1132.492797][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.510310][T20073] ERROR: (device loop8): remounting filesystem as read-only [ 1132.527002][T20073] ialloc: diAlloc returned -5! [ 1132.536420][T18793] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1132.556850][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.565776][T18793] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1132.606086][T18793] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1132.651224][T18793] usb 7-1: USB disconnect, device number 48 [ 1132.903267][T15193] lg-g15 0003:046D:C222.002A: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 1132.950354][T20088] evm: overlay not supported [ 1132.996845][T15193] usb 10-1: USB disconnect, device number 22 [ 1133.675228][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.228837][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.295553][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.317226][ T1009] bond0 (unregistering): Released all slaves [ 1134.539945][T19214] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1134.722157][T19214] usb 7-1: Using ep0 maxpacket: 16 [ 1134.727352][ T5633] Bluetooth: hci5: command tx timeout [ 1134.739149][T19214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.752240][T19214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.767841][T19214] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.769617][T20116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.785982][T20116] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.787147][T19214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.801476][T19214] usb 7-1: Product: syz [ 1134.830777][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.839311][T19214] usb 7-1: Manufacturer: syz [ 1134.855784][T19214] usb 7-1: SerialNumber: syz [ 1134.908379][T19214] usb 7-1: 0:2 : does not exist [ 1135.118500][T19214] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1135.171739][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.271179][T19214] usb 7-1: USB disconnect, device number 49 [ 1135.283195][ T1009] hsr_slave_0: left promiscuous mode [ 1135.295655][ T1009] hsr_slave_1: left promiscuous mode [ 1135.310551][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.335854][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.365905][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.384786][T16843] udevd[16843]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.404102][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.479482][ T1009] veth1_macvtap: left promiscuous mode [ 1135.486958][ T1009] veth0_macvtap: left promiscuous mode [ 1135.493117][ T1009] veth1_vlan: left promiscuous mode [ 1135.498747][ T1009] veth0_vlan: left promiscuous mode [ 1135.860300][ T186] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1135.938103][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.049618][ T186] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1136.074337][ T31] audit: type=1800 audit(1785920704.699:269): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3664" name="streaming_maxpacket" dev="configfs" ino=52349 res=0 errno=0 [ 1136.095849][ T186] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1136.095883][ T186] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.095912][ T186] usb 9-1: config 0 has no interfaces? [ 1136.095953][ T186] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1136.095983][ T186] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.134598][ T186] usb 9-1: config 0 descriptor?? [ 1136.444635][T19214] usb 9-1: USB disconnect, device number 39 [ 1136.976681][ T5633] Bluetooth: hci5: command tx timeout [ 1136.984184][T20163] loop9: detected capacity change from 0 to 1024 [ 1137.052465][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.234389][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 1138.005162][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 1138.076629][T20165] (NULL device *): [drm] Primary plane not found [ 1138.190755][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.441986][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.580618][T15846] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1138.754283][T15846] usb 9-1: Using ep0 maxpacket: 8 [ 1138.766685][T15846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1138.794700][T15846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1138.836038][T15846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1138.889055][T15846] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.946591][T15846] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1139.002873][T15846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.207958][T20173] loop9: detected capacity change from 0 to 32768 [ 1139.220079][ T5633] Bluetooth: hci5: command tx timeout [ 1139.240602][T19799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.270494][T19799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.309481][T15846] usb 9-1: GET_CAPABILITIES returned 0 [ 1139.313024][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.315320][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.322135][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.333845][T15846] usbtmc 9-1:16.0: can't read capabilities [ 1139.528183][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.535374][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.032132][T19799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.115366][T20195] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1140.219503][T15846] usb 9-1: USB disconnect, device number 40 [ 1140.446611][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.459140][T20195] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1140.537736][T20195] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 1140.699909][T20029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.731808][T20029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.760427][T20029] bridge_slave_0: entered allmulticast mode [ 1140.779597][T20029] bridge_slave_0: entered promiscuous mode [ 1140.826322][T20029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.859196][T20029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.887255][T20029] bridge_slave_1: entered allmulticast mode [ 1140.927741][T20029] bridge_slave_1: entered promiscuous mode [ 1140.970255][T20220] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1140.979242][T20195] udc usbip-vudc.0: failed to start g1: -19 [ 1141.024022][T20222] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1141.177327][T20195] UDC core: g1: couldn't find an available UDC or it's busy [ 1141.246210][T20029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.296180][T20029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.439948][T20215] loop9: detected capacity change from 0 to 32768 [ 1141.456551][T20235] PKCS7: Unknown OID: [4] (bad) [ 1141.475880][T20029] team0: Port device team_slave_0 added [ 1141.482013][T20235] PKCS7: Only support pkcs7_signedData type [ 1141.499672][T20029] team0: Port device team_slave_1 added [ 1141.523907][T20215] JBD2: Ignoring recovery information on journal [ 1141.561312][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.682872][T20215] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1141.736757][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.858511][T20029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.898102][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.940709][ T31] audit: type=1800 audit(1785920710.079:270): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3678" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1141.988146][T20249] (syz.9.3678,20249,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 1142.026542][T20029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.097226][T20029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.120626][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.210927][T20029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.534630][T20029] hsr_slave_0: entered promiscuous mode [ 1142.553037][T20029] hsr_slave_1: entered promiscuous mode [ 1142.572975][T20029] debugfs: 'hsr0' already exists in 'hsr' [ 1142.597017][T20029] Cannot create hsr debugfs directory [ 1142.642337][T19799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.651571][T14526] ocfs2: Unmounting device (7,9) on (node local) [ 1142.762441][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.779094][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.133315][T15846] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1143.319304][T15846] usb 9-1: Using ep0 maxpacket: 8 [ 1143.342309][T15846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1143.381263][T19799] veth0_vlan: entered promiscuous mode [ 1143.391302][T15846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1143.411279][T19799] veth1_vlan: entered promiscuous mode [ 1143.423861][T15846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.478807][T15846] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.519581][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.524488][T15846] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1143.549134][T15846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.829340][T15846] usb 9-1: GET_CAPABILITIES returned 0 [ 1143.834984][T15846] usbtmc 9-1:16.0: can't read capabilities [ 1143.902880][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.057035][T19799] veth0_macvtap: entered promiscuous mode [ 1144.104911][T19799] veth1_macvtap: entered promiscuous mode [ 1144.669327][T15846] usb 9-1: USB disconnect, device number 41 [ 1144.744354][T19799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.890435][T20317] binder: 20316:20317 unknown command 0 [ 1144.896227][T20317] binder: 20316:20317 ioctl c0306201 200000000080 returned -22 [ 1145.064857][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.073005][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.193042][T19799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.305450][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.327136][T20323] binder: 20321:20323 ioctl c0306201 200000000080 returned -14 [ 1145.334054][ T5633] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1145.362534][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.362574][ T5633] Tainted: [L]=SOFTLOCKUP [ 1145.362585][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1145.362602][ T5633] Workqueue: hci1 hci_rx_work [ 1145.362641][ T5633] Call Trace: [ 1145.362652][ T5633] [ 1145.362664][ T5633] dump_stack_lvl+0xe8/0x150 [ 1145.362709][ T5633] sysfs_create_dir_ns+0x271/0x2a0 [ 1145.362754][ T5633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1145.362798][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.362827][ T5633] ? do_raw_spin_unlock+0xf5/0x210 [ 1145.362866][ T5633] kobject_add_internal+0x622/0xcd0 [ 1145.362904][ T5633] kobject_add+0x163/0x240 [ 1145.362945][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.362984][ T5633] ? __pfx_kobject_add+0x10/0x10 [ 1145.363029][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363061][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363095][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363124][ T5633] ? get_device_parent+0x366/0x3a0 [ 1145.363161][ T5633] device_add+0x3fa/0xb80 [ 1145.363195][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 1145.363231][ T5633] le_conn_complete_evt+0xfef/0x1580 [ 1145.363270][ T5633] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1145.363298][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363326][ T5633] ? __mutex_unlock_slowpath+0x731/0x900 [ 1145.363368][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363396][ T5633] ? skb_pull_data+0xf0/0x200 [ 1145.363442][ T5633] hci_le_conn_complete_evt+0x187/0x470 [ 1145.363491][ T5633] hci_event_packet+0x67a/0xf10 [ 1145.363533][ T5633] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1145.363571][ T5633] ? __pfx_hci_event_packet+0x10/0x10 [ 1145.363612][ T5633] ? replace_chunk+0x730/0xb80 [ 1145.363646][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363675][ T5633] ? hci_send_to_monitor+0xe2/0x590 [ 1145.363707][ T5633] hci_rx_work+0x3ee/0x1020 [ 1145.363752][ T5633] ? process_scheduled_works+0xa20/0x14e0 [ 1145.363785][ T5633] process_scheduled_works+0xa8e/0x14e0 [ 1145.363850][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 1145.363888][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.363918][ T5633] ? assign_work+0x3cf/0x5d0 [ 1145.363956][ T5633] worker_thread+0xa47/0xfb0 [ 1145.364028][ T5633] kthread+0x388/0x470 [ 1145.364068][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 1145.364097][ T5633] ? __pfx_kthread+0x10/0x10 [ 1145.364137][ T5633] ret_from_fork+0x514/0xb70 [ 1145.364180][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.364218][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1145.364248][ T5633] ? __switch_to+0xc89/0x1420 [ 1145.364285][ T5633] ? __pfx_kthread+0x10/0x10 [ 1145.364325][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1145.364369][ T5633] [ 1145.638054][ T5633] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1145.652588][ T5633] Bluetooth: hci1: failed to register connection device [ 1145.677368][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.698552][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.714141][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.794600][T20323] binder: 20321:20323 ioctl c0306201 2000000003c0 returned -14 [ 1146.168170][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.419200][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.450703][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.462342][T20342] loop6: detected capacity change from 0 to 512 [ 1146.525919][T20342] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1146.551406][T20342] UDF-fs: Scanning with blocksize 512 failed [ 1146.588166][T20342] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1146.625344][T20342] UDF-fs: Scanning with blocksize 1024 failed [ 1146.671569][T20342] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1146.688905][T20342] UDF-fs: Scanning with blocksize 2048 failed [ 1146.733405][T20342] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1146.778108][T20342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1146.910732][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.093771][T20349] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 42: i_size: 24576 lbcount: 28672 extent 15+28672 [ 1147.296035][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.361407][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.528564][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.559630][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.658862][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1147.678295][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1147.689419][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1147.701174][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1147.713394][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1147.966682][ T5871] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1148.206278][ T5871] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1148.224986][ T5871] usb 3-1: config 0 has no interface number 0 [ 1148.262275][ T5871] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1148.280014][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.302147][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.325316][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.334427][ T5871] usb 3-1: Product: syz [ 1148.346276][ T5871] usb 3-1: Manufacturer: syz [ 1148.402993][ T5871] usb 3-1: SerialNumber: syz [ 1148.410748][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.791983][T18793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1149.121219][T18793] usb 2-1: Using ep0 maxpacket: 32 [ 1149.188798][T20382] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1149.204854][ T5871] usb 3-1: config 0 descriptor?? [ 1149.245239][T18793] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1149.310776][T18793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.366526][T18793] usb 2-1: config 0 has no interface number 0 [ 1149.384644][T18793] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.421845][T20384] gadgetfs: bound to dummy_udc driver [ 1149.435814][T20029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1149.485700][T18793] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1149.500921][T20029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1149.508074][T18793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.537945][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.539130][T18793] usb 2-1: Product: syz [ 1149.553118][T20029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1149.587576][T18793] usb 2-1: Manufacturer: syz [ 1149.614927][T18793] usb 2-1: SerialNumber: syz [ 1149.692423][T20029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1149.718500][T18793] usb 2-1: config 0 descriptor?? [ 1149.736004][T20029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1149.770423][T20029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1149.806463][T18793] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1149.816258][T18793] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1149.993281][T18793] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1150.049246][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.168419][T20029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1150.224754][T20029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.235034][ T5871] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1150.260000][ T5871] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1150.290022][T18793] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1150.306280][ T5871] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1150.403260][ T5871] usb 3-1: USB disconnect, device number 21 [ 1150.665316][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.681430][ T5743] usb 2-1: USB disconnect, device number 2 [ 1150.884406][ T5743] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1151.485471][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.493823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.536847][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.610341][T20428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.620178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.629109][ T5759] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1151.868614][ T5759] usb 9-1: Using ep0 maxpacket: 8 [ 1151.881322][ T5759] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.900971][ T5759] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.930332][ T5759] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1151.945602][ T5759] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1151.958514][ T5759] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1151.977811][ T5759] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1152.014839][ T5759] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1152.024793][ T5743] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1152.043899][ T5759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.220138][ T5743] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.231696][ T5743] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1152.252529][ T5743] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1152.262403][ T5743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.270596][ T5743] usb 7-1: Product: syz [ 1152.274883][ T5743] usb 7-1: Manufacturer: syz [ 1152.279722][ T5743] usb 7-1: SerialNumber: syz [ 1152.286008][ T49] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1152.292411][ T5743] usb 7-1: config 0 descriptor?? [ 1152.297257][ T49] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 26:f0:7a:18:f7:a8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1152.321924][ T5759] usb 9-1: GET_CAPABILITIES returned 0 [ 1152.329865][ T49] bond1 (unregistering): (slave dummy0): making interface the new active one [ 1152.339568][ T5759] usbtmc 9-1:16.0: can't read capabilities [ 1152.348880][ T5743] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1152.386261][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.406292][ T5743] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1152.430194][ T5743] usb 7-1: media controller created [ 1152.478525][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.560500][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.577914][ T5743] DVB: Unable to find symbol tda10046_attach() [ 1152.584574][ T5743] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1152.593451][ T5743] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1152.606779][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.617732][ T49] bond0 (unregistering): Released all slaves [ 1152.618613][ T5759] usb 9-1: USB disconnect, device number 42 [ 1152.634589][ T49] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1152.646421][ T49] bond1 (unregistering): Released all slaves [ 1152.930607][ T5759] net_ratelimit: 4 callbacks suppressed [ 1152.930628][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.958646][T20029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.109943][T20459] loop2: detected capacity change from 0 to 512 [ 1153.127866][T20459] EXT4-fs: Invalid want_extra_isize -1 [ 1153.277611][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.549111][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.124842][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.283404][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.498099][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1154.522204][T20468] netlink: 'syz.8.3728': attribute type 1 has an invalid length. [ 1154.581511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.709709][T20029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.913222][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.936809][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.944007][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.962700][T20476] binder: 20475:20476 ioctl c0306201 200000000080 returned -14 [ 1155.000437][T20476] binder: 20475:20476 ioctl c0306201 2000000003c0 returned -14 [ 1155.014050][ T10] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1155.039950][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.047178][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.084747][ T49] hsr_slave_0: left promiscuous mode [ 1155.119053][ T49] hsr_slave_1: left promiscuous mode [ 1155.136671][ T5743] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1155.137095][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.148386][ T5743] usb 7-1: USB disconnect, device number 50 [ 1155.177534][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.218771][ T10] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1155.225238][ T49] veth1_macvtap: left promiscuous mode [ 1155.229319][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.243247][ T49] veth0_macvtap: left promiscuous mode [ 1155.243387][ T49] veth1_vlan: left promiscuous mode [ 1155.243481][ T49] veth0_vlan: left promiscuous mode [ 1155.273634][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.333326][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.361276][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1155.390545][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.410671][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.419063][T20483] binder: 20482:20483 ioctl c0306201 200000000080 returned -14 [ 1155.425445][T20483] binder: 20482:20483 ioctl c0306201 2000000003c0 returned -14 [ 1155.463636][ T10] usb 9-1: config 0 descriptor?? [ 1156.122760][ T10] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 1156.423800][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.665113][T20479] loop1: detected capacity change from 0 to 32768 [ 1156.708855][T20479] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3732 (20479) [ 1156.728075][ T10] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1156.768672][T20479] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1156.782093][T20479] BTRFS info (device loop1): using blake2b checksum algorithm [ 1156.787185][ T10] usb 9-1: USB disconnect, device number 43 [ 1156.885979][T20490] block2mtd: erasesize must be a divisor of device size [ 1156.977381][T20479] BTRFS info (device loop1): enabling ssd optimizations [ 1157.007831][T20479] BTRFS info (device loop1): turning on async discard [ 1157.043567][T20479] BTRFS info (device loop1): enabling free space tree [ 1157.055352][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1157.066878][T20505] fido_id[20505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1157.096918][T20479] BTRFS info (device loop1): use zstd compression, level 3 [ 1157.262674][ T31] audit: type=1800 audit(1785920724.251:271): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3732" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 1157.306552][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1157.352670][ T31] audit: type=1800 audit(1785920724.279:272): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3732" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 1157.522150][T20512] loop2: detected capacity change from 0 to 32768 [ 1157.529711][T20512] btrfs: Deprecated parameter 'usebackuproot' [ 1157.535829][T20512] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1157.547520][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.555824][T20512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3738 (20512) [ 1157.580963][T20512] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1157.591209][T20512] BTRFS info (device loop2): using crc32c checksum algorithm [ 1157.732444][ T6100] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1157.762672][T20512] BTRFS error (device loop2): failed to load root extent [ 1157.769800][T20512] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1157.783944][ T6123] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1157.850527][T20512] BTRFS warning (device loop2): couldn't read tree root [ 1157.857563][T20512] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1157.866953][ T6123] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1157.945281][T20512] BTRFS warning (device loop2): couldn't read tree root [ 1157.956604][T20512] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1158.061963][T20512] BTRFS info (device loop2): rebuilding free space tree [ 1158.109300][T20512] BTRFS info (device loop2): checking UUID tree [ 1158.116610][T20512] BTRFS info (device loop2): enabling ssd optimizations [ 1158.123647][T20512] BTRFS info (device loop2): turning on async discard [ 1158.130731][T20512] BTRFS info (device loop2): enabling free space tree [ 1158.137629][T20512] BTRFS info (device loop2): force clearing of disk cache [ 1158.144772][T20512] BTRFS info (device loop2): trying to use backup root at mount time [ 1158.152858][T20512] BTRFS info (device loop2): use zstd compression, level 3 [ 1158.160106][T20512] BTRFS info (device loop2): max_inline set to 4096 [ 1158.210113][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.345656][T20029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.672159][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.781095][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.355502][T19799] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1160.505706][T20533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1160.896004][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.513543][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.033505][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.037202][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1162.070887][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1162.080253][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1162.126787][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1162.136151][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1162.769879][T20571] fuse: fd is not a fuse device [ 1162.845809][T20573] fuse: fd is not a fuse device [ 1163.149975][T15846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.624150][ T49] IPVS: stop unused estimator thread 0... [ 1164.028440][T15846] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1164.036937][T20360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.086216][T20360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.106674][T20360] bridge_slave_0: entered allmulticast mode [ 1164.127200][T20360] bridge_slave_0: entered promiscuous mode [ 1164.200605][T20591] loop1: detected capacity change from 0 to 4096 [ 1164.279910][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.289298][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.316785][T15846] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1164.329678][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.339228][T15846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.361153][T15846] usb 7-1: Product: syz [ 1164.366124][ T5633] Bluetooth: hci3: command tx timeout [ 1164.378935][T15846] usb 7-1: Manufacturer: syz [ 1164.381654][T20591] ntfs3(loop1): Failed to load $Extend (-22). [ 1164.383594][T15846] usb 7-1: SerialNumber: syz [ 1164.411485][T20591] ntfs3(loop1): Failed to initialize $Extend. [ 1164.438619][T20360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.448208][T20360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.458962][T20360] bridge_slave_1: entered allmulticast mode [ 1164.468844][T20360] bridge_slave_1: entered promiscuous mode [ 1164.479573][ T31] audit: type=1800 audit(1785920730.913:273): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3753" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1164.565461][ T5969] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.656604][ T37] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.690876][T20598] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.711780][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.713438][T20598] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1164.737341][T20591] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.749541][T20591] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.760784][T20591] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.763573][T20360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.778767][T20591] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 1164.797144][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.817440][T20360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.844256][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1164.863526][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1164.928135][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.017854][T20360] team0: Port device team_slave_0 added [ 1165.070342][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.157682][T20360] team0: Port device team_slave_1 added [ 1165.201878][T20029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.313832][T20360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.323546][T20609] fuse: fd is not a fuse device [ 1165.334864][T20360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.369158][T20360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.404881][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.414053][T20360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.421295][T20360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.451493][T20360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.691207][T20360] hsr_slave_0: entered promiscuous mode [ 1165.702223][T20360] hsr_slave_1: entered promiscuous mode [ 1165.709400][T20360] debugfs: 'hsr0' already exists in 'hsr' [ 1165.715289][T20360] Cannot create hsr debugfs directory [ 1166.120729][ T49] bridge_slave_1: left allmulticast mode [ 1166.126540][ T49] bridge_slave_1: left promiscuous mode [ 1166.132531][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.145506][ T49] bridge_slave_0: left allmulticast mode [ 1166.162270][ T49] bridge_slave_0: left promiscuous mode [ 1166.178415][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.187719][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1166.211813][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1166.237354][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1166.270864][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1166.297063][T15846] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1166.323799][T15846] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1166.373047][T15846] usb 7-1: USB disconnect, device number 51 [ 1166.629534][ T5633] Bluetooth: hci3: command tx timeout [ 1166.703700][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.719353][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.730283][ T49] bond0 (unregistering): Released all slaves [ 1167.196364][T15846] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1167.398369][T15846] usb 7-1: Using ep0 maxpacket: 16 [ 1167.414104][T15846] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1167.430520][T15846] usb 7-1: config 0 has no interface number 0 [ 1167.464598][T15846] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1167.482004][T15846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.511739][T15846] usb 7-1: Product: syz [ 1167.525406][T15846] usb 7-1: Manufacturer: syz [ 1167.535353][T15846] usb 7-1: SerialNumber: syz [ 1167.566875][T15846] usb 7-1: config 0 descriptor?? [ 1167.842850][T15846] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1168.553945][T20566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.601284][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.626187][T20566] bridge_slave_0: entered allmulticast mode [ 1168.643237][T20566] bridge_slave_0: entered promiscuous mode [ 1168.815888][T20029] veth0_vlan: entered promiscuous mode [ 1168.836435][T20566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.848321][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.857900][T20566] bridge_slave_1: entered allmulticast mode [ 1168.873325][ T5633] Bluetooth: hci3: command tx timeout [ 1168.907390][T20566] bridge_slave_1: entered promiscuous mode [ 1169.181400][T20566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.214154][T20566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.340521][ T49] hsr_slave_0: left promiscuous mode [ 1169.354150][ T49] hsr_slave_1: left promiscuous mode [ 1169.361957][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.369417][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.389368][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.397819][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.423182][ T49] veth1_macvtap: left promiscuous mode [ 1169.428804][ T49] veth0_macvtap: left promiscuous mode [ 1169.434530][ T49] veth1_vlan: left promiscuous mode [ 1169.440096][ T49] veth0_vlan: left promiscuous mode [ 1169.499865][T20690] fuse: fd is not a fuse device [ 1169.626909][T15846] gspca_spca1528: reg_w err -71 [ 1169.634124][T15846] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1169.648964][T15846] usb 7-1: USB disconnect, device number 52 [ 1169.747143][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1169.843744][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1169.866647][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1169.874936][T20698] netlink: 'syz.1.3769': attribute type 10 has an invalid length. [ 1169.883425][T20698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1170.043060][T20566] team0: Port device team_slave_0 added [ 1170.102269][T20698] dummy0: entered promiscuous mode [ 1170.125405][T20029] veth1_vlan: entered promiscuous mode [ 1170.146104][T20566] team0: Port device team_slave_1 added [ 1170.198501][T20566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.241915][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.335695][T20566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.446297][T20706] ubi0: attaching mtd0 [ 1170.557233][T20566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.567833][T20706] ubi0: scanning is finished [ 1170.579247][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.641643][T20714] UBIFS error (pid: 20714): cannot open "ubi0_0", error -19 [ 1170.668942][T20566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.758882][T20709] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1171.009363][T20029] veth0_macvtap: entered promiscuous mode [ 1171.028429][T20706] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1171.053196][T20706] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1171.064422][T20566] hsr_slave_0: entered promiscuous mode [ 1171.071113][T20566] hsr_slave_1: entered promiscuous mode [ 1171.077161][T20706] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1171.105183][T20706] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1171.126671][ T5633] Bluetooth: hci3: command tx timeout [ 1171.132128][T20706] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1171.146774][T20566] debugfs: 'hsr0' already exists in 'hsr' [ 1171.160535][T20566] Cannot create hsr debugfs directory [ 1171.167653][T20706] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1171.207874][ T49] IPVS: stop unused estimator thread 0... [ 1171.231439][T20706] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 885845122 [ 1171.257453][T20706] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1171.291836][T20724] ubi0: background thread "ubi_bgt0d" started, PID 20724 [ 1171.299050][T20029] veth1_macvtap: entered promiscuous mode [ 1171.675891][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3778'. [ 1171.816001][T20029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.003054][T20029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.061659][T20360] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1172.076856][T20360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1172.100943][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3780'. [ 1172.113600][ T168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.140972][T20360] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1172.152224][T20360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1172.161413][T20360] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1172.184498][T20360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1172.259498][T20360] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1172.290030][T20360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.331691][ T168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.375637][ T6123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.539502][T20566] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.682760][T20770] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1172.718594][T20770] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1172.740064][T20770] ================================================================== [ 1172.748134][T20770] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80 [ 1172.755861][T20770] Read of size 8 at addr ffff88802c0557f0 by task syz.1.3784/20770 [ 1172.763745][T20770] [ 1172.766063][T20770] CPU: 1 UID: 0 PID: 20770 Comm: syz.1.3784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.766094][T20770] Tainted: [L]=SOFTLOCKUP [ 1172.766103][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1172.766116][T20770] Call Trace: [ 1172.766126][T20770] [ 1172.766135][T20770] dump_stack_lvl+0xe8/0x150 [ 1172.766170][T20770] print_address_description+0x55/0x1e0 [ 1172.766203][T20770] ? dummy_free_request+0x3f/0x80 [ 1172.766230][T20770] print_report+0x58/0x70 [ 1172.766259][T20770] kasan_report+0x117/0x150 [ 1172.766295][T20770] ? dummy_free_request+0x3f/0x80 [ 1172.766326][T20770] dummy_free_request+0x3f/0x80 [ 1172.766353][T20770] uvc_function_bind+0xe5d/0x15a0 [ 1172.766390][T20770] usb_add_function+0x2e1/0x9f0 [ 1172.766417][T20770] configfs_composite_bind+0xde0/0x1410 [ 1172.766449][T20770] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1172.766474][T20770] gadget_bind_driver+0x2ca/0x9e0 [ 1172.766512][T20770] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1172.766543][T20770] really_probe+0x254/0xae0 [ 1172.766577][T20770] __driver_probe_device+0x1e8/0x360 [ 1172.766608][T20770] driver_probe_device+0x4f/0x240 [ 1172.766640][T20770] __driver_attach+0x339/0x600 [ 1172.766670][T20770] bus_for_each_dev+0x23b/0x2c0 [ 1172.766692][T20770] ? __pfx___driver_attach+0x10/0x10 [ 1172.766720][T20770] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1172.766744][T20770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.766770][T20770] ? do_raw_spin_unlock+0xf5/0x210 [ 1172.766799][T20770] bus_add_driver+0x345/0x670 [ 1172.766826][T20770] driver_register+0x23a/0x320 [ 1172.766860][T20770] usb_gadget_register_driver_owner+0xf9/0x270 [ 1172.766893][T20770] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1172.766927][T20770] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1172.766961][T20770] configfs_write_iter+0x337/0x430 [ 1172.766998][T20770] vfs_write+0x612/0xba0 [ 1172.767025][T20770] ? __pfx_vfs_write+0x10/0x10 [ 1172.767058][T20770] ? __fget_files+0x2a/0x420 [ 1172.767092][T20770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.767120][T20770] ksys_write+0x150/0x270 [ 1172.767143][T20770] ? __pfx_ksys_write+0x10/0x10 [ 1172.767169][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.767193][T20770] do_syscall_64+0x174/0x580 [ 1172.767222][T20770] ? trace_irq_disable+0x3b/0x140 [ 1172.767255][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.767277][T20770] RIP: 0033:0x7f963e59e0d9 [ 1172.767296][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.767316][T20770] RSP: 002b:00007f963c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.767338][T20770] RAX: ffffffffffffffda RBX: 00007f963e825fa0 RCX: 00007f963e59e0d9 [ 1172.767355][T20770] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003 [ 1172.767369][T20770] RBP: 00007f963e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1172.767384][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.767398][T20770] R13: 00007f963e826038 R14: 00007f963e825fa0 R15: 00007ffeb1acf738 [ 1172.767425][T20770] [ 1172.767433][T20770] [ 1173.068800][T20770] Allocated by task 14526: [ 1173.073200][T20770] kasan_save_track+0x3e/0x80 [ 1173.077878][T20770] __kasan_kmalloc+0x93/0xb0 [ 1173.082467][T20770] __kmalloc_cache_noprof+0x32d/0x660 [ 1173.087836][T20770] __hw_addr_create+0x62/0x240 [ 1173.092594][T20770] __hw_addr_add_ex+0x1ce/0x520 [ 1173.097459][T20770] dev_mc_add+0xa1/0x120 [ 1173.101694][T20770] igmp6_group_added+0x22b/0x7c0 [ 1173.106632][T20770] __ipv6_dev_mc_inc+0x88e/0xa40 [ 1173.111576][T20770] ipv6_add_dev+0xe45/0x13a0 [ 1173.116162][T20770] addrconf_notify+0x771/0x1050 [ 1173.120999][T20770] notifier_call_chain+0x1a5/0x3d0 [ 1173.126113][T20770] register_netdevice+0x18a4/0x1eb0 [ 1173.131306][T20770] veth_newlink+0x676/0xb70 [ 1173.135804][T20770] rtnl_newlink_create+0x310/0xb00 [ 1173.140909][T20770] rtnl_newlink+0x167f/0x1bd0 [ 1173.145574][T20770] rtnetlink_rcv_msg+0x802/0xc00 [ 1173.150502][T20770] netlink_rcv_skb+0x226/0x4a0 [ 1173.155286][T20770] netlink_unicast+0x7bb/0x940 [ 1173.160040][T20770] netlink_sendmsg+0x813/0xb40 [ 1173.164797][T20770] sock_sendmsg_nosec+0x13a/0x180 [ 1173.169821][T20770] __sys_sendto+0x408/0x5a0 [ 1173.174312][T20770] __x64_sys_sendto+0xde/0x100 [ 1173.179064][T20770] do_syscall_64+0x174/0x580 [ 1173.183649][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.189530][T20770] [ 1173.191836][T20770] Freed by task 15: [ 1173.195623][T20770] kasan_save_track+0x3e/0x80 [ 1173.200297][T20770] kasan_save_free_info+0x40/0x50 [ 1173.205314][T20770] __kasan_slab_free+0x5c/0x80 [ 1173.210072][T20770] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1173.215604][T20770] rcu_free_sheaf+0x31/0x200 [ 1173.220190][T20770] rcu_core+0x78b/0x10a0 [ 1173.224456][T20770] handle_softirqs+0x225/0x840 [ 1173.229223][T20770] run_ksoftirqd+0x36/0x60 [ 1173.233635][T20770] smpboot_thread_fn+0x57c/0xa80 [ 1173.238567][T20770] kthread+0x388/0x470 [ 1173.242640][T20770] ret_from_fork+0x514/0xb70 [ 1173.247232][T20770] ret_from_fork_asm+0x1a/0x30 [ 1173.251981][T20770] [ 1173.254287][T20770] The buggy address belongs to the object at ffff88802c055700 [ 1173.254287][T20770] which belongs to the cache kmalloc-128 of size 128 [ 1173.268325][T20770] The buggy address is located 112 bytes to the right of [ 1173.268325][T20770] allocated 128-byte region [ffff88802c055700, ffff88802c055780) [ 1173.282977][T20770] [ 1173.285308][T20770] The buggy address belongs to the physical page: [ 1173.291700][T20770] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c055900 pfn:0x2c055 [ 1173.301751][T20770] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1173.309807][T20770] page_type: f5(slab) [ 1173.313778][T20770] raw: 00fff00000000200 ffff88801b001a00 ffffea0000c87850 ffffea0001fa2f50 [ 1173.322351][T20770] raw: ffff88802c055900 0000000800100007 00000000f5000000 0000000000000000 [ 1173.330915][T20770] page dumped because: kasan: bad access detected [ 1173.337310][T20770] page_owner tracks the page as allocated [ 1173.343006][T20770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13376, tgid 13375 (syz.7.2018), ts 759783676231, free_ts 754571655378 [ 1173.363932][T20770] post_alloc_hook+0x1f9/0x250 [ 1173.368700][T20770] get_page_from_freelist+0x21fa/0x2270 [ 1173.374243][T20770] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1173.380049][T20770] allocate_slab+0x79/0x5e0 [ 1173.384540][T20770] refill_objects+0x2d5/0x350 [ 1173.389218][T20770] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1173.394752][T20770] __kmalloc_noprof+0x485/0x720 [ 1173.399597][T20770] hash_ipport6_resize+0xb93/0x1ce0 [ 1173.404794][T20770] call_ad+0x439/0xb50 [ 1173.408862][T20770] ip_set_ad+0x824/0x9d0 [ 1173.413095][T20770] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1173.418111][T20770] netlink_rcv_skb+0x226/0x4a0 [ 1173.422868][T20770] nfnetlink_rcv+0x2b9/0x28c0 [ 1173.427533][T20770] netlink_unicast+0x7bb/0x940 [ 1173.432287][T20770] netlink_sendmsg+0x813/0xb40 [ 1173.437044][T20770] sock_sendmsg_nosec+0x13a/0x180 [ 1173.442067][T20770] page last free pid 15 tgid 15 stack trace: [ 1173.448036][T20770] __free_frozen_pages+0xc1e/0xd10 [ 1173.453142][T20770] tlb_remove_table_rcu+0x85/0x100 [ 1173.458250][T20770] rcu_core+0x78b/0x10a0 [ 1173.462491][T20770] handle_softirqs+0x225/0x840 [ 1173.467248][T20770] run_ksoftirqd+0x36/0x60 [ 1173.471659][T20770] smpboot_thread_fn+0x57c/0xa80 [ 1173.476589][T20770] kthread+0x388/0x470 [ 1173.480660][T20770] ret_from_fork+0x514/0xb70 [ 1173.485250][T20770] ret_from_fork_asm+0x1a/0x30 [ 1173.490001][T20770] [ 1173.492311][T20770] Memory state around the buggy address: [ 1173.497919][T20770] ffff88802c055680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1173.505962][T20770] ffff88802c055700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1173.514007][T20770] >ffff88802c055780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1173.522063][T20770] ^ [ 1173.529770][T20770] ffff88802c055800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1173.537812][T20770] ffff88802c055880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1173.545852][T20770] ================================================================== [ 1173.588217][T20770] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1173.595453][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.1.3784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.606391][T20770] Tainted: [L]=SOFTLOCKUP [ 1173.610700][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1173.620740][T20770] Call Trace: [ 1173.624003][T20770] [ 1173.626918][T20770] vpanic+0x56c/0xa60 [ 1173.630907][T20770] ? __pfx_vpanic+0x10/0x10 [ 1173.635413][T20770] ? __pfx___schedule+0x10/0x10 [ 1173.640261][T20770] panic+0xc5/0xd0 [ 1173.643985][T20770] ? __pfx_panic+0x10/0x10 [ 1173.648402][T20770] ? preempt_schedule_thunk+0x16/0x40 [ 1173.653766][T20770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.659398][T20770] ? dummy_free_request+0x3f/0x80 [ 1173.664417][T20770] check_panic_on_warn+0x89/0xb0 [ 1173.669360][T20770] ? dummy_free_request+0x3f/0x80 [ 1173.674380][T20770] end_report+0x73/0x170 [ 1173.678625][T20770] ? dummy_free_request+0x3f/0x80 [ 1173.683668][T20770] kasan_report+0x128/0x150 [ 1173.688174][T20770] ? dummy_free_request+0x3f/0x80 [ 1173.693205][T20770] dummy_free_request+0x3f/0x80 [ 1173.698056][T20770] uvc_function_bind+0xe5d/0x15a0 [ 1173.703087][T20770] usb_add_function+0x2e1/0x9f0 [ 1173.707934][T20770] configfs_composite_bind+0xde0/0x1410 [ 1173.713485][T20770] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1173.719464][T20770] gadget_bind_driver+0x2ca/0x9e0 [ 1173.724505][T20770] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1173.730057][T20770] really_probe+0x254/0xae0 [ 1173.734566][T20770] __driver_probe_device+0x1e8/0x360 [ 1173.739849][T20770] driver_probe_device+0x4f/0x240 [ 1173.744873][T20770] __driver_attach+0x339/0x600 [ 1173.749635][T20770] bus_for_each_dev+0x23b/0x2c0 [ 1173.754478][T20770] ? __pfx___driver_attach+0x10/0x10 [ 1173.759763][T20770] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1173.765127][T20770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.770763][T20770] ? do_raw_spin_unlock+0xf5/0x210 [ 1173.775874][T20770] bus_add_driver+0x345/0x670 [ 1173.780548][T20770] driver_register+0x23a/0x320 [ 1173.785315][T20770] usb_gadget_register_driver_owner+0xf9/0x270 [ 1173.791473][T20770] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1173.797109][T20770] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1173.803267][T20770] configfs_write_iter+0x337/0x430 [ 1173.808382][T20770] vfs_write+0x612/0xba0 [ 1173.812620][T20770] ? __pfx_vfs_write+0x10/0x10 [ 1173.817378][T20770] ? __fget_files+0x2a/0x420 [ 1173.821970][T20770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.827596][T20770] ksys_write+0x150/0x270 [ 1173.831915][T20770] ? __pfx_ksys_write+0x10/0x10 [ 1173.836762][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.842818][T20770] do_syscall_64+0x174/0x580 [ 1173.847405][T20770] ? trace_irq_disable+0x3b/0x140 [ 1173.852430][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.858312][T20770] RIP: 0033:0x7f963e59e0d9 [ 1173.862715][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.882307][T20770] RSP: 002b:00007f963c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1173.890716][T20770] RAX: ffffffffffffffda RBX: 00007f963e825fa0 RCX: 00007f963e59e0d9 [ 1173.898675][T20770] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003 [ 1173.906631][T20770] RBP: 00007f963e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1173.914589][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.922547][T20770] R13: 00007f963e826038 R14: 00007f963e825fa0 R15: 00007ffeb1acf738 [ 1173.930516][T20770] [ 1173.933754][T20770] Kernel Offset: disabled [ 1173.938058][T20770] Rebooting in 86400 seconds..