last executing test programs: 19.949439581s ago: executing program 3 (id=184): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 19.844486159s ago: executing program 3 (id=185): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x1, 0x413}}}, 0x7) 18.859506079s ago: executing program 3 (id=189): accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r3, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r3, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) ustat(0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) 17.703901232s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0xa) 17.443267746s ago: executing program 3 (id=200): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x20000000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000", @ANYRESDEC=r4], 0x0, 0x0, 0x0}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x416eb135, 0x12) 17.032809352s ago: executing program 3 (id=205): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x2843, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) mount(0x0, 0x0, 0x0, 0x8410, 0x0) openat$snapshot(0xffffff9c, 0x0, 0xc4041, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) 16.682176088s ago: executing program 32 (id=205): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x2843, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) mount(0x0, 0x0, 0x0, 0x8410, 0x0) openat$snapshot(0xffffff9c, 0x0, 0xc4041, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) 3.912443628s ago: executing program 1 (id=286): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) listen(r0, 0xda8d) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10a001, 0x97) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) 3.801619066s ago: executing program 1 (id=287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="180000000100", 0x6) 3.677564363s ago: executing program 1 (id=288): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) 3.09213972s ago: executing program 1 (id=290): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.153839792s ago: executing program 2 (id=296): mremap(&(0x7f0000d5d000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 2.129373237s ago: executing program 0 (id=297): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) 1.987631156s ago: executing program 0 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 1.912247319s ago: executing program 4 (id=206): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.787883679s ago: executing program 2 (id=299): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.694584324s ago: executing program 4 (id=300): clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffffc, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x4, 0xf604, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000150000032dbd7000fcdbdf25030000004a003a0049e6484f6269616a05d5804f9e6f69d750d7b92fb6ca68aacb62e35f9a314da2c342ed5b053680684e5dd342ba8775ce811db023e2001c1cd406415ef123339d", @ANYRES32=r0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4004}, 0x24006800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000001980)={0x30000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xe0000003}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000e40)=0x60, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000100)='^/\x00', 0x2400, &(0x7f0000000140)={@align=0x1, {0xe584, 0x7ff, 0xfffffffd, 0x5}}, 0x6, &(0x7f0000000200), &(0x7f0000000300)=0x5}, {[0x1, 0x80000003, 0x9, 0x6]}, 0x34c1, 0xa3, &(0x7f00000003c0)=""/163}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={r6, &(0x7f0000000500)=':\\&!\x90[[\x00', 0x8100, &(0x7f0000000540)={@align=0x2, {0x5b, 0x20, 0x4, 0x4}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e23, @local}, 0x10) nanosleep(&(0x7f0000000880), &(0x7f00000008c0)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.516007494s ago: executing program 4 (id=301): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x3, 0x20, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="08b0c3085013bd5d1082b1ab0693ca86ef9062db7362115dc4e1628c07e49ce7f5ffe2826cba0129e6b42049c8a7b02d420d76a7c138253eadec88bf1f9b4b482f4ae17cf921f067c38d8651ef405e853cf3d8351c8ecc3f184835f334a6fd725ee993f6c5c1286dbb1c483f", 0x6c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)=ANY=[@ANYBLOB]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) 1.503534179s ago: executing program 2 (id=309): clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffffc, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x4, 0xf604, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000150000032dbd7000fcdbdf25030000004a003a0049e6484f6269616a05d5804f9e6f69d750d7b92fb6ca68aacb62e35f9a314da2c342ed5b053680684e5dd342ba8775ce811db023e2001c1cd406415ef123339d", @ANYRES32=r0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4004}, 0x24006800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000001980)={0x30000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xe0000003}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000e40)=0x60, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000100)='^/\x00', 0x2400, &(0x7f0000000140)={@align=0x1, {0xe584, 0x7ff, 0xfffffffd, 0x5}}, 0x6, &(0x7f0000000200), &(0x7f0000000300)=0x5}, {[0x1, 0x80000003, 0x9, 0x6]}, 0x34c1, 0xa3, &(0x7f00000003c0)=""/163}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={r6, &(0x7f0000000500)=':\\&!\x90[[\x00', 0x8100, &(0x7f0000000540)={@align=0x2, {0x5b, 0x20, 0x4, 0x4}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e23, @local}, 0x10) nanosleep(&(0x7f0000000880), &(0x7f00000008c0)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.038660247s ago: executing program 1 (id=302): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) listen(r0, 0xda8d) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10a001, 0x97) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 524.720594ms ago: executing program 4 (id=303): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') 520.782104ms ago: executing program 2 (id=304): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="180000000100", 0x6) 493.387284ms ago: executing program 0 (id=305): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r2, r1, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) 395.889228ms ago: executing program 1 (id=306): r0 = gettid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbd621000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 339.333166ms ago: executing program 4 (id=307): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={0x0}) 268.604622ms ago: executing program 2 (id=308): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='dummy_udc.0', 0xb) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000001) dup(r5) close_range(r4, 0xffffffffffffffff, 0x0) 222.375128ms ago: executing program 0 (id=310): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 174.830041ms ago: executing program 2 (id=311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(0x0, 0x3, 0x141200) close_range(r0, 0xffffffffffffffff, 0x0) 27.707106ms ago: executing program 0 (id=312): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=313): clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffffc, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x4, 0xf604, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000150000032dbd7000fcdbdf25030000004a003a0049e6484f6269616a05d5804f9e6f69d750d7b92fb6ca68aacb62e35f9a314da2c342ed5b053680684e5dd342ba8775ce811db023e2001c1cd406415ef123339d", @ANYRES32=r0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4004}, 0x24006800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000001980)={0x30000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xe0000003}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000e40)=0x60, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000100)='^/\x00', 0x2400, &(0x7f0000000140)={@align=0x1, {0xe584, 0x7ff, 0xfffffffd, 0x5}}, 0x6, &(0x7f0000000200), &(0x7f0000000300)=0x5}, {[0x1, 0x80000003, 0x9, 0x6]}, 0x34c1, 0xa3, &(0x7f00000003c0)=""/163}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={r6, &(0x7f0000000500)=':\\&!\x90[[\x00', 0x8100, &(0x7f0000000540)={@align=0x2, {0x5b, 0x20, 0x4, 0x4}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e23, @local}, 0x10) nanosleep(&(0x7f0000000880), &(0x7f00000008c0)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 84.712388][ T5603] cgroup: Unknown subsys name 'net' [ 84.802009][ T5603] cgroup: Unknown subsys name 'cpuset' [ 84.811834][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.555055][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.042736][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.045895][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.052752][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.059509][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.062487][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.066829][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.071027][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.072678][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.077037][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.082495][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.084961][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.088821][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.090495][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.091360][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.092289][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.096149][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.166242][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.168323][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.192744][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.207945][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.856275][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857349][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.857922][ T5615] bridge_slave_0: entered allmulticast mode [ 90.863393][ T5615] bridge_slave_0: entered promiscuous mode [ 90.913551][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.913656][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.913779][ T5617] bridge_slave_0: entered allmulticast mode [ 90.915436][ T5617] bridge_slave_0: entered promiscuous mode [ 90.931458][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.931746][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.932200][ T5615] bridge_slave_1: entered allmulticast mode [ 90.945136][ T5615] bridge_slave_1: entered promiscuous mode [ 90.985712][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.985811][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.985990][ T5614] bridge_slave_0: entered allmulticast mode [ 90.987487][ T5614] bridge_slave_0: entered promiscuous mode [ 91.020885][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.020980][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.021373][ T5617] bridge_slave_1: entered allmulticast mode [ 91.022778][ T5617] bridge_slave_1: entered promiscuous mode [ 91.055333][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.055440][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.055585][ T5614] bridge_slave_1: entered allmulticast mode [ 91.057103][ T5614] bridge_slave_1: entered promiscuous mode [ 91.103781][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.151146][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.169136][ T54] Bluetooth: hci2: command tx timeout [ 91.187649][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.208329][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.208605][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.208707][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.208866][ T5616] bridge_slave_0: entered allmulticast mode [ 91.210491][ T5616] bridge_slave_0: entered promiscuous mode [ 91.247985][ T5620] Bluetooth: hci0: command tx timeout [ 91.248161][ T4932] Bluetooth: hci1: command tx timeout [ 91.248271][ T54] Bluetooth: hci3: command tx timeout [ 91.250619][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.282081][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.302783][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.302884][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.303008][ T5616] bridge_slave_1: entered allmulticast mode [ 91.304515][ T5616] bridge_slave_1: entered promiscuous mode [ 91.338875][ T5615] team0: Port device team_slave_0 added [ 91.383740][ T5615] team0: Port device team_slave_1 added [ 91.402031][ T5614] team0: Port device team_slave_0 added [ 91.419711][ T5617] team0: Port device team_slave_0 added [ 91.438481][ T5614] team0: Port device team_slave_1 added [ 91.439479][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.439491][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.439510][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.443254][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.445839][ T5617] team0: Port device team_slave_1 added [ 91.522134][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.522151][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.522175][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.559181][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.597937][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.597960][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.597979][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.654218][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.654234][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.654258][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.657065][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.657081][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.657109][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.661528][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.661570][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.661645][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.797280][ T5616] team0: Port device team_slave_0 added [ 91.829103][ T5616] team0: Port device team_slave_1 added [ 91.861387][ T5615] hsr_slave_0: entered promiscuous mode [ 91.862269][ T5615] hsr_slave_1: entered promiscuous mode [ 91.912365][ T5614] hsr_slave_0: entered promiscuous mode [ 91.913140][ T5614] hsr_slave_1: entered promiscuous mode [ 91.913708][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 91.913793][ T5614] Cannot create hsr debugfs directory [ 91.943514][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.943533][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.943560][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.960674][ T5617] hsr_slave_0: entered promiscuous mode [ 91.963989][ T5617] hsr_slave_1: entered promiscuous mode [ 91.966467][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 91.966521][ T5617] Cannot create hsr debugfs directory [ 92.038563][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.038580][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.038604][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.062620][ T1001] cfg80211: failed to load regulatory.db [ 92.244290][ T5616] hsr_slave_0: entered promiscuous mode [ 92.245073][ T5616] hsr_slave_1: entered promiscuous mode [ 92.245596][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 92.245621][ T5616] Cannot create hsr debugfs directory [ 92.597302][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.611474][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.613799][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.633184][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.635516][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.655157][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.672277][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.676778][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.747964][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.755141][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.756274][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.781007][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.781855][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.786524][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.816065][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.825418][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.910585][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.914553][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.915663][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.939293][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.963238][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.966521][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.982255][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.993500][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.065351][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.076867][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.089312][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.092814][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.114193][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.118230][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.138739][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.142332][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.225041][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.248549][ T54] Bluetooth: hci2: command tx timeout [ 93.304722][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.329129][ T54] Bluetooth: hci3: command tx timeout [ 93.329165][ T54] Bluetooth: hci1: command tx timeout [ 93.329189][ T54] Bluetooth: hci0: command tx timeout [ 93.353895][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.357116][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.357232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.392198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.392272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.459737][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.480009][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.485650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.485740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.531399][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.533425][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.533499][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.585099][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.620885][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.620959][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.623526][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.623605][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.626883][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.705639][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.705753][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.746572][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.746676][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.724189][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.884349][ T5615] veth0_vlan: entered promiscuous mode [ 94.916329][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.926026][ T5615] veth1_vlan: entered promiscuous mode [ 94.964346][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.078891][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.109928][ T5615] veth0_macvtap: entered promiscuous mode [ 95.116543][ T5616] veth0_vlan: entered promiscuous mode [ 95.136833][ T5615] veth1_macvtap: entered promiscuous mode [ 95.150128][ T5614] veth0_vlan: entered promiscuous mode [ 95.175547][ T5616] veth1_vlan: entered promiscuous mode [ 95.189881][ T5614] veth1_vlan: entered promiscuous mode [ 95.213827][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.243025][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.279463][ T253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.331064][ T5620] Bluetooth: hci2: command tx timeout [ 95.354287][ T5616] veth0_macvtap: entered promiscuous mode [ 95.364833][ T5617] veth0_vlan: entered promiscuous mode [ 95.406732][ T5614] veth0_macvtap: entered promiscuous mode [ 95.408229][ T54] Bluetooth: hci1: command tx timeout [ 95.408262][ T54] Bluetooth: hci3: command tx timeout [ 95.408338][ T5620] Bluetooth: hci0: command tx timeout [ 95.434744][ T5617] veth1_vlan: entered promiscuous mode [ 95.444035][ T5616] veth1_macvtap: entered promiscuous mode [ 95.482726][ T5614] veth1_macvtap: entered promiscuous mode [ 95.536054][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.570284][ T283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571583][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.573737][ T283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.607274][ T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.607304][ T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.624713][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.636629][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.667149][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.711562][ T5617] veth0_macvtap: entered promiscuous mode [ 95.729320][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.729342][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.765258][ T5617] veth1_macvtap: entered promiscuous mode [ 95.882600][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.943984][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.000569][ T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.000591][ T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.015643][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.132770][ T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.132795][ T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.217201][ T547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.217263][ T547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.217302][ T547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279805][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.280172][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.280189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.340516][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340945][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.432870][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.518029][ T283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.543133][ T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.543156][ T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.567910][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.568087][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.608568][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.639215][ T118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.639794][ T118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.643837][ T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.643856][ T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.779353][ T5703] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.948389][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 96.951116][ T5703] usb 4-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.955945][ T5703] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.956004][ T5703] usb 4-1: config 0 has no interface number 0 [ 96.989133][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.989163][ T5703] usb 4-1: Product: syz [ 96.989178][ T5703] usb 4-1: Manufacturer: syz [ 96.989193][ T5703] usb 4-1: SerialNumber: syz [ 97.039250][ T5703] usb 4-1: config 0 descriptor?? [ 97.638336][ T5779] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 98.154947][ T5703] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 98.171813][ T5620] Bluetooth: hci2: command tx timeout [ 98.171852][ T5620] Bluetooth: hci0: command tx timeout [ 98.171865][ T4932] Bluetooth: hci1: command tx timeout [ 98.171876][ T5620] Bluetooth: hci3: command tx timeout [ 98.946122][ T5703] gspca_spca1528: reg_w err -110 [ 98.958031][ T5703] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 99.136315][ T5782] fuse: Unknown parameter 'user_id00000000000000000000' [ 99.255920][ T5782] FAULT_INJECTION: forcing a failure. [ 99.255920][ T5782] name failslab, interval 1, probability 0, space 0, times 1 [ 99.255969][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 99.255997][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.256020][ T5782] Call Trace: [ 99.256033][ T5782] [ 99.256043][ T5782] dump_stack_lvl+0xe8/0x150 [ 99.256079][ T5782] should_fail_ex+0x3eb/0x540 [ 99.256109][ T5782] should_failslab+0xa8/0x100 [ 99.256144][ T5782] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 99.256173][ T5782] ? __split_page_owner+0x2c/0x330 [ 99.256204][ T5782] ? snd_pcm_hw_rule_add+0x196/0x800 [ 99.256227][ T5782] ? snd_pcm_hw_rule_add+0x196/0x800 [ 99.256255][ T5782] ? snd_pcm_hw_rule_add+0x196/0x800 [ 99.256280][ T5782] krealloc_node_align_noprof+0x19a/0x390 [ 99.256315][ T5782] snd_pcm_hw_rule_add+0x196/0x800 [ 99.256341][ T5782] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 99.256376][ T5782] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 99.256401][ T5782] ? snd_pcm_attach_substream+0x845/0xb10 [ 99.256443][ T5782] snd_pcm_open_substream+0xae4/0x24f0 [ 99.256480][ T5782] ? snd_pcm_open+0x17d/0x690 [ 99.256524][ T5782] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 99.256564][ T5782] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.256594][ T5782] snd_pcm_open+0x1dc/0x690 [ 99.256638][ T5782] ? __pfx_snd_pcm_open+0x10/0x10 [ 99.256671][ T5782] ? __pfx_default_wake_function+0x10/0x10 [ 99.256719][ T5782] snd_pcm_capture_open+0x62/0xc0 [ 99.256745][ T5782] chrdev_open+0x4d9/0x600 [ 99.256781][ T5782] ? __pfx_chrdev_open+0x10/0x10 [ 99.256826][ T5782] ? devcgroup_check_permission+0x31/0x8f0 [ 99.256884][ T5782] ? __pfx_chrdev_open+0x10/0x10 [ 99.256916][ T5782] do_dentry_open+0x80e/0x1360 [ 99.256963][ T5782] vfs_open_consume+0x4a/0x350 [ 99.256995][ T5782] ? path_openat+0x148a/0x1da0 [ 99.257027][ T5782] path_openat+0x14a6/0x1da0 [ 99.257078][ T5782] do_file_open+0x23e/0x4a0 [ 99.257114][ T5782] ? __pfx_do_file_open+0x10/0x10 [ 99.257167][ T5782] ? _raw_spin_unlock+0x28/0x50 [ 99.257189][ T5782] ? alloc_fd+0x6af/0x760 [ 99.257225][ T5782] do_sys_openat2+0x115/0x200 [ 99.257263][ T5782] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.257306][ T5782] ? do_user_addr_fault+0xd3f/0x1480 [ 99.257345][ T5782] __x64_sys_openat+0x138/0x170 [ 99.257387][ T5782] do_syscall_64+0x166/0x520 [ 99.257414][ T5782] ? trace_irq_disable+0x3b/0x140 [ 99.257440][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.257462][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 99.257489][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.257512][ T5782] RIP: 0033:0x7f8fc755e98e [ 99.257543][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.257561][ T5782] RSP: 002b:00007f8fc838ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.257590][ T5782] RAX: ffffffffffffffda RBX: 00007f8fc838b6c0 RCX: 00007f8fc755e98e [ 99.257607][ T5782] RDX: 0000000000000002 RSI: 00007f8fc838ac00 RDI: ffffffffffffff9c [ 99.257623][ T5782] RBP: 00007f8fc838ac00 R08: 0000000000000000 R09: 0000000000000000 [ 99.257637][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.257651][ T5782] R13: 00007f8fc7826128 R14: 00007f8fc7826090 R15: 00007ffe8fe73228 [ 99.257687][ T5782] [ 100.105222][ T1001] usb 4-1: USB disconnect, device number 2 [ 100.178705][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.327881][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 100.328779][ T32] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 100.388368][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.388496][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.562767][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.562969][ T32] usb 2-1: Product: syz [ 100.563010][ T32] usb 2-1: Manufacturer: syz [ 100.563158][ T32] usb 2-1: SerialNumber: syz [ 100.966818][ T32] usb 2-1: 0:2 : does not exist [ 101.147338][ T5799] Zero length message leads to an empty skb [ 101.210624][ T32] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 101.348637][ T32] usb 2-1: USB disconnect, device number 2 [ 101.410665][ T5804] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.439777][ T5803] Config c/1 of g1 needs at least one function. [ 101.440111][ T5803] udc dummy_udc.0: failed to start g1: -22 [ 101.440135][ T5803] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 101.442866][ T5803] UDC core: g1: couldn't find an available UDC or it's busy [ 101.489822][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.513239][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 101.513482][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 101.552735][ T5804] netlink: zone id is out of range [ 101.552754][ T5804] netlink: zone id is out of range [ 101.552764][ T5804] netlink: zone id is out of range [ 101.552773][ T5804] netlink: zone id is out of range [ 101.552802][ T5804] netlink: zone id is out of range [ 101.552811][ T5804] netlink: zone id is out of range [ 101.552820][ T5804] netlink: zone id is out of range [ 101.552828][ T5804] netlink: zone id is out of range [ 101.552837][ T5804] netlink: zone id is out of range [ 101.552846][ T5804] netlink: zone id is out of range [ 103.278898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.022205][ T5828] Config c/1 of g1 needs at least one function. [ 105.022336][ T5828] udc dummy_udc.0: failed to start g1: -22 [ 105.022368][ T5828] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 105.024363][ T5828] UDC core: g1: couldn't find an available UDC or it's busy [ 105.246489][ T5823] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 105.246520][ T5823] device-mapper: ioctl: error adding target to table [ 105.438066][ T5621] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.587968][ T5621] usb 1-1: Using ep0 maxpacket: 16 [ 105.590638][ T5621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.590690][ T5621] usb 1-1: New USB device found: idVendor=19d2, idProduct=1138, bcdDevice=5a.3e [ 105.620816][ T5621] usb 1-1: config 9 has an invalid interface number: 55 but max is 0 [ 105.620838][ T5621] usb 1-1: config 9 has no interface number 0 [ 105.620859][ T5621] usb 1-1: config 9 interface 55 has no altsetting 0 [ 105.646199][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.646232][ T5621] usb 1-1: Product: syz [ 105.646242][ T5621] usb 1-1: Manufacturer: syz [ 105.646253][ T5621] usb 1-1: SerialNumber: syz [ 105.900578][ T5621] option 1-1:9.55: GSM modem (1-port) converter detected [ 105.933514][ T5621] usb 1-1: USB disconnect, device number 2 [ 105.950541][ T5621] option 1-1:9.55: device disconnected [ 107.494670][ T5724] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.647773][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 107.650337][ T5724] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.653675][ T5724] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.653716][ T5724] usb 4-1: config 0 has no interface number 0 [ 108.293159][ T5857] Config c/1 of g1 needs at least one function. [ 108.293290][ T5857] udc dummy_udc.0: failed to start g1: -22 [ 108.293313][ T5857] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 108.294064][ T5857] UDC core: g1: couldn't find an available UDC or it's busy [ 108.365914][ T5859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.662723][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.662751][ T5724] usb 4-1: Product: syz [ 108.662764][ T5724] usb 4-1: Manufacturer: syz [ 108.662777][ T5724] usb 4-1: SerialNumber: syz [ 110.078856][ T5724] usb 4-1: config 0 descriptor?? [ 110.082949][ T5724] usb 4-1: can't set config #0, error -71 [ 110.543547][ T5724] usb 4-1: USB disconnect, device number 3 [ 110.832570][ T5886] Config c/1 of g1 needs at least one function. [ 110.832703][ T5886] udc dummy_udc.0: failed to start g1: -22 [ 110.832728][ T5886] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 110.833512][ T5886] UDC core: g1: couldn't find an available UDC or it's busy [ 111.301524][ T5894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.458843][ T191] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 111.689310][ T191] usb 1-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 111.692331][ T191] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 111.692374][ T191] usb 1-1: can't read configurations, error -71 [ 112.067948][ T5911] Config c/1 of g1 needs at least one function. [ 112.068077][ T5911] udc dummy_udc.0: failed to start g1: -22 [ 112.068099][ T5911] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 112.068849][ T5911] UDC core: g1: couldn't find an available UDC or it's busy [ 112.101912][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.267827][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 112.268441][ T5724] usb 4-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 112.269329][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 112.269390][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 112.269419][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 112.269436][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 112.269454][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 112.274132][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.274163][ T5724] usb 4-1: Product: syz [ 112.274175][ T5724] usb 4-1: Manufacturer: syz [ 112.274186][ T5724] usb 4-1: SerialNumber: syz [ 112.317652][ T5724] usb 4-1: config 0 descriptor?? [ 112.541617][ T5704] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.770161][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 112.786274][ T5704] usb 2-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 112.851556][ T5704] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 112.851599][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.851753][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.851859][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.851907][ T5704] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.852014][ T5704] usb 2-1: config 0 has no interface number 0 [ 112.852307][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 112.852359][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.852487][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.852672][ T5704] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.852773][ T5704] usb 2-1: config 0 interface 125 has no altsetting 0 [ 112.852795][ T5704] usb 2-1: config 0 interface 125 has no altsetting 2 [ 113.064910][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.064980][ T5704] usb 2-1: Product: syz [ 113.065087][ T5704] usb 2-1: Manufacturer: syz [ 113.065142][ T5704] usb 2-1: SerialNumber: syz [ 113.156881][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 113.183858][ T5724] input input5: Device does not respond to id packet M [ 113.211080][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 113.211139][ T5724] input input5: Device does not respond to id packet P [ 113.256477][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 113.256671][ T5724] input input5: Device does not respond to id packet B [ 113.313564][ T5704] usb 2-1: config 0 descriptor?? [ 113.627072][ T5704] usb 2-1: selecting invalid altsetting 2 [ 113.636989][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 113.644753][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 113.645226][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 113.646405][ T5724] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 113.685111][ T5724] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 113.750930][ T5724] usb 4-1: USB disconnect, device number 4 [ 114.107141][ T5935] Config c/1 of g1 needs at least one function. [ 114.107286][ T5935] udc dummy_udc.0: failed to start g1: -22 [ 114.107302][ T5935] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 114.111299][ T5935] UDC core: g1: couldn't find an available UDC or it's busy [ 114.209191][ T5936] vxcan0: tx address claim with dest, not broadcast [ 114.751187][ C0] usb 2-1: async_complete: urb error -71 [ 114.751296][ C0] usb 2-1: async_complete: urb error -71 [ 114.885202][ T5704] get_1284_register: usb error -71 [ 114.899840][ T5704] usb 2-1: USB disconnect, device number 3 [ 115.161486][ T5947] No source specified [ 115.796438][ T54] Bluetooth: Wrong link type (-57) [ 115.857120][ T5946] Bluetooth: MGMT ver 1.23 [ 115.997792][ T5704] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.157871][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 116.158650][ T5704] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.159700][ T5704] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 116.159727][ T5704] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.159758][ T5704] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 116.159778][ T5704] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 116.159797][ T5704] usb 4-1: config 168 interface 0 has no altsetting 0 [ 116.160933][ T5704] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 116.160969][ T5704] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.161017][ T5704] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 116.161036][ T5704] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 116.161055][ T5704] usb 4-1: config 168 interface 0 has no altsetting 0 [ 116.162014][ T5704] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 116.162049][ T5704] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 116.162087][ T5704] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 116.162116][ T5704] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 116.162138][ T5704] usb 4-1: config 168 interface 0 has no altsetting 0 [ 116.164287][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.164312][ T5704] usb 4-1: Product: syz [ 116.164327][ T5704] usb 4-1: Manufacturer: syz [ 116.164342][ T5704] usb 4-1: SerialNumber: syz [ 116.368200][ T5724] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 116.494033][ T5704] adutux 4-1:168.0: interrupt endpoints not found [ 116.516761][ T5704] usb 4-1: USB disconnect, device number 5 [ 116.530265][ T5724] usb 1-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 116.534089][ T5724] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.534114][ T5724] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.555983][ T5724] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 116.556019][ T5724] usb 1-1: Product: syz [ 116.556062][ T5724] usb 1-1: Manufacturer: syz [ 116.607975][ T5724] hub 1-1:4.0: USB hub found [ 116.889583][ T5724] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 116.911726][ T5724] usb 1-1: USB disconnect, device number 5 [ 117.706999][ T5971] warning: `syz.3.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.228320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.788547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.351964][ T6004] FAULT_INJECTION: forcing a failure. [ 123.351964][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 123.352019][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.3.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.352052][ T6004] Tainted: [L]=SOFTLOCKUP [ 123.352061][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.352075][ T6004] Call Trace: [ 123.352084][ T6004] [ 123.352095][ T6004] dump_stack_lvl+0xe8/0x150 [ 123.352150][ T6004] should_fail_ex+0x3eb/0x540 [ 123.352181][ T6004] should_failslab+0xa8/0x100 [ 123.352213][ T6004] ? vm_area_dup+0x28/0x760 [ 123.352248][ T6004] kmem_cache_alloc_noprof+0x9c/0x600 [ 123.352275][ T6004] ? vm_area_dup+0x28/0x760 [ 123.352317][ T6004] vm_area_dup+0x28/0x760 [ 123.352354][ T6004] copy_vma+0x656/0xaf0 [ 123.352393][ T6004] ? __pfx_copy_vma+0x10/0x10 [ 123.352430][ T6004] ? __vma_start_exclude_readers+0x6dd/0x9b0 [ 123.352484][ T6004] ? move_vma+0x875/0x1a90 [ 123.352524][ T6004] move_vma+0xa99/0x1a90 [ 123.352575][ T6004] ? __pfx_move_vma+0x10/0x10 [ 123.352611][ T6004] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 123.352649][ T6004] ? mtree_load+0x12a/0x780 [ 123.352684][ T6004] ? mtree_load+0x12a/0x780 [ 123.352715][ T6004] ? __futex_wait+0x3c7/0x470 [ 123.352743][ T6004] ? mm_get_unmapped_area_vmaflags+0xd9/0x110 [ 123.352777][ T6004] ? cap_mmap_addr+0xaa/0xf0 [ 123.352809][ T6004] ? bpf_lsm_mmap_addr+0x9/0x50 [ 123.352837][ T6004] ? security_mmap_addr+0x71/0x240 [ 123.352879][ T6004] mremap_to+0x7f9/0x8d0 [ 123.352916][ T6004] ? check_prep_vma+0x81d/0xca0 [ 123.352944][ T6004] ? __pfx_mremap_to+0x10/0x10 [ 123.352994][ T6004] ? __pfx_check_prep_vma+0x10/0x10 [ 123.353025][ T6004] ? mas_find+0x642/0xcb0 [ 123.353057][ T6004] __se_sys_mremap+0xd48/0x12e0 [ 123.353099][ T6004] ? __pfx___se_sys_mremap+0x10/0x10 [ 123.353125][ T6004] ? do_futex+0x3e7/0x4e0 [ 123.353165][ T6004] ? __fget_files+0x3a2/0x420 [ 123.353190][ T6004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.353227][ T6004] ? __se_sys_futex+0x3a8/0x450 [ 123.353281][ T6004] ? __x64_sys_mremap+0x20/0xc0 [ 123.353312][ T6004] do_syscall_64+0x166/0x520 [ 123.353336][ T6004] ? trace_irq_disable+0x3b/0x140 [ 123.353362][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.353385][ T6004] ? clear_bhb_loop+0x70/0xc0 [ 123.353413][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.353436][ T6004] RIP: 0033:0x7f7dad99e159 [ 123.353467][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.353487][ T6004] RSP: 002b:00007f7dae80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 123.353529][ T6004] RAX: ffffffffffffffda RBX: 00007f7dadc25fa0 RCX: 00007f7dad99e159 [ 123.353547][ T6004] RDX: 0000000000600000 RSI: 0000000000600000 RDI: 0000200000000000 [ 123.353563][ T6004] RBP: 00007f7dada3506b R08: 0000200000a00000 R09: 0000000000000000 [ 123.353579][ T6004] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 123.353593][ T6004] R13: 00007f7dadc26038 R14: 00007f7dadc25fa0 R15: 00007ffd9f4a30c8 [ 123.353637][ T6004] [ 123.770153][ T54] Bluetooth: Wrong link type (-57) [ 124.207818][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.422768][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 125.433466][ T27] usb 4-1: New USB device found: idVendor=06cb, idProduct=2968, bcdDevice=0.00 [ 125.440685][ T27] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.440782][ T27] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.440858][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.440956][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.470495][ T27] usb 4-1: config 0 descriptor?? [ 125.908290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 126.057723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 126.728221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 126.917734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.017728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.137843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.217735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.777023][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 127.777132][ T27] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.799546][ T27] usb 4-1: USB disconnect, device number 6 [ 128.475536][ T6045] FAULT_INJECTION: forcing a failure. [ 128.475536][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 128.475574][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.1.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.475607][ T6045] Tainted: [L]=SOFTLOCKUP [ 128.475615][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.475629][ T6045] Call Trace: [ 128.475639][ T6045] [ 128.475650][ T6045] dump_stack_lvl+0xe8/0x150 [ 128.475688][ T6045] should_fail_ex+0x3eb/0x540 [ 128.475717][ T6045] should_failslab+0xa8/0x100 [ 128.475748][ T6045] ? vm_area_dup+0x28/0x760 [ 128.475784][ T6045] kmem_cache_alloc_noprof+0x9c/0x600 [ 128.475811][ T6045] ? vm_area_dup+0x28/0x760 [ 128.475853][ T6045] vm_area_dup+0x28/0x760 [ 128.475891][ T6045] copy_vma+0x656/0xaf0 [ 128.475931][ T6045] ? __pfx_copy_vma+0x10/0x10 [ 128.475967][ T6045] ? __vma_start_exclude_readers+0x6dd/0x9b0 [ 128.476019][ T6045] ? move_vma+0x875/0x1a90 [ 128.476057][ T6045] move_vma+0xa99/0x1a90 [ 128.476109][ T6045] ? __pfx_move_vma+0x10/0x10 [ 128.476144][ T6045] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 128.476190][ T6045] ? mtree_load+0x12a/0x780 [ 128.476227][ T6045] ? mtree_load+0x12a/0x780 [ 128.476257][ T6045] ? __futex_wait+0x3c7/0x470 [ 128.476284][ T6045] ? mm_get_unmapped_area_vmaflags+0xd9/0x110 [ 128.476317][ T6045] ? cap_mmap_addr+0xaa/0xf0 [ 128.476349][ T6045] ? bpf_lsm_mmap_addr+0x9/0x50 [ 128.476378][ T6045] ? security_mmap_addr+0x71/0x240 [ 128.476420][ T6045] mremap_to+0x7f9/0x8d0 [ 128.476452][ T6045] ? check_prep_vma+0x81d/0xca0 [ 128.476480][ T6045] ? __pfx_mremap_to+0x10/0x10 [ 128.476518][ T6045] ? __pfx_check_prep_vma+0x10/0x10 [ 128.476554][ T6045] ? mas_find+0x642/0xcb0 [ 128.476587][ T6045] __se_sys_mremap+0xd48/0x12e0 [ 128.476628][ T6045] ? __pfx___se_sys_mremap+0x10/0x10 [ 128.476653][ T6045] ? do_futex+0x3e7/0x4e0 [ 128.476693][ T6045] ? __fget_files+0x3a2/0x420 [ 128.476718][ T6045] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.476755][ T6045] ? __se_sys_futex+0x3a8/0x450 [ 128.476810][ T6045] ? __x64_sys_mremap+0x20/0xc0 [ 128.476841][ T6045] do_syscall_64+0x166/0x520 [ 128.476867][ T6045] ? trace_irq_disable+0x3b/0x140 [ 128.476894][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.476918][ T6045] ? clear_bhb_loop+0x70/0xc0 [ 128.476946][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.476969][ T6045] RIP: 0033:0x7f385c59e159 [ 128.476991][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.477010][ T6045] RSP: 002b:00007f385d425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 128.477036][ T6045] RAX: ffffffffffffffda RBX: 00007f385c825fa0 RCX: 00007f385c59e159 [ 128.477053][ T6045] RDX: 0000000000600000 RSI: 0000000000600000 RDI: 0000200000000000 [ 128.477068][ T6045] RBP: 00007f385c63506b R08: 0000200000a00000 R09: 0000000000000000 [ 128.477082][ T6045] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 128.477095][ T6045] R13: 00007f385c826038 R14: 00007f385c825fa0 R15: 00007ffcc0c73518 [ 128.477131][ T6045] [ 129.023143][ T6057] fuse: Unknown parameter '0x0000000000000003' [ 130.993464][ T6068] comedi comedi0: No hardware detected at I/O base 0x300 [ 131.316755][ T6069] gadgetfs: bound to dummy_udc driver [ 133.010920][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011010][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.511751][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 133.511868][ T6092] net_ratelimit: 333 callbacks suppressed [ 133.511883][ T6092] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 136.004832][ T6110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.996723][ T6122] Bluetooth: ISO socket layer initialized [ 137.810789][ T54] Bluetooth: Wrong link type (-57) [ 139.685791][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.327900][ T191] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.489033][ T191] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=0.00 [ 140.497283][ T191] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.497317][ T191] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 140.529749][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.529771][ T191] usb 2-1: Product: syz [ 140.529782][ T191] usb 2-1: Manufacturer: syz [ 140.571179][ T54] Bluetooth: Wrong link type (-57) [ 140.575242][ T191] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 141.337051][ T5621] usb 2-1: USB disconnect, device number 4 [ 142.132036][ T6173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.508711][ T54] Bluetooth: Wrong link type (-57) [ 144.110223][ T5621] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.268648][ T5621] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 144.269884][ T5621] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.269911][ T5621] usb 2-1: config 0 has no interface number 0 [ 144.273783][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.273804][ T5621] usb 2-1: Product: syz [ 144.273815][ T5621] usb 2-1: Manufacturer: syz [ 144.273826][ T5621] usb 2-1: SerialNumber: syz [ 144.282539][ T5621] usb 2-1: config 0 descriptor?? [ 144.617263][ T5621] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 144.694844][ T6221] Config c/1 of g1 needs at least one function. [ 144.696428][ T6221] udc dummy_udc.0: failed to start g1: -22 [ 144.696510][ T6221] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 144.701987][ T6221] UDC core: g1: couldn't find an available UDC or it's busy [ 145.274740][ T5621] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 145.274770][ T5621] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 145.398091][ T5724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.549708][ T5724] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 145.551044][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.551080][ T5724] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 145.551110][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.647963][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.798900][ T5703] usb 3-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 145.800063][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.802285][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.802317][ T5703] usb 3-1: Product: syz [ 145.802350][ T5703] usb 3-1: Manufacturer: syz [ 145.802361][ T5703] usb 3-1: SerialNumber: syz [ 145.850480][ T5703] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 145.850686][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 145.852247][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 145.852375][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 145.852560][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 145.852634][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 145.852728][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 145.852802][ T5703] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 145.856508][ T5703] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 146.212485][ T5704] usb 3-1: USB disconnect, device number 2 [ 146.224505][ T5704] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 146.227098][ T5704] keyspan 3-1:1.0: device disconnected [ 146.267999][ T5703] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.418502][ T5703] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.419505][ T5703] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.419523][ T5703] usb 1-1: config 0 has no interface number 0 [ 146.421546][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.421576][ T5703] usb 1-1: Product: syz [ 146.421587][ T5703] usb 1-1: Manufacturer: syz [ 146.421616][ T5703] usb 1-1: SerialNumber: syz [ 146.425089][ T5703] usb 1-1: config 0 descriptor?? [ 146.629291][ T5703] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 147.175107][ T54] Bluetooth: Wrong link type (-57) [ 147.442801][ T5724] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 147.442873][ T5724] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 147.443264][ T5724] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 147.556787][ T5724] usb 4-1: USB disconnect, device number 7 [ 148.282844][ T6253] UDC core: g1: couldn't find an available UDC or it's busy [ 148.708844][ T6259] process 'syz.1.181' launched '/dev/fd/4' with NULL argv: empty string added [ 148.967987][ T54] Bluetooth: Wrong link type (-57) [ 148.968090][ T54] Bluetooth: hci0: link tx timeout [ 148.968204][ T54] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.982857][ T6277] UDC core: g1: couldn't find an available UDC or it's busy [ 151.021482][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 151.121812][ T6293] ======================================================= [ 151.121812][ T6293] WARNING: The mand mount option has been deprecated and [ 151.121812][ T6293] and is ignored by this kernel. Remove the mand [ 151.121812][ T6293] option from the mount to silence this warning. [ 151.121812][ T6293] ======================================================= [ 151.319485][ T6301] configfs-gadget.g1 gadget.0: HOST MAC d2:8c:02:eb:39:6c [ 151.319517][ T6301] configfs-gadget.g1 gadget.0: MAC ee:7c:8a:46:0b:88 [ 151.419441][ T6305] xfs: Unknown parameter 'grpqZoTa' [ 151.577841][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.743556][ T10] usb 3-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 151.746409][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.746438][ T10] usb 3-1: config 0 has no interface number 0 [ 151.763517][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.763620][ T10] usb 3-1: Product: syz [ 151.763663][ T10] usb 3-1: Manufacturer: syz [ 151.763702][ T10] usb 3-1: SerialNumber: syz [ 151.798533][ T10] usb 3-1: config 0 descriptor?? [ 151.977411][ T617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.010429][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 152.182229][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.184043][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.195980][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.212659][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.213885][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.303716][ T617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.508645][ T617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.715404][ T617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.183019][ T617] bridge_slave_1: left allmulticast mode [ 153.183064][ T617] bridge_slave_1: left promiscuous mode [ 153.185528][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.267979][ T617] bridge_slave_0: left allmulticast mode [ 153.268008][ T617] bridge_slave_0: left promiscuous mode [ 153.269147][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.887937][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.888510][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.021741][ T617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.073931][ T617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.081083][ T617] bond0 (unregistering): Released all slaves [ 154.164232][ T6388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.289453][ T4932] Bluetooth: hci3: command tx timeout [ 156.367770][ T4932] Bluetooth: hci3: command tx timeout [ 156.571954][ T617] hsr_slave_0: left promiscuous mode [ 156.588947][ T617] hsr_slave_1: left promiscuous mode [ 156.595943][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.595982][ T617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.656131][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.656156][ T617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.742707][ T617] veth1_macvtap: left promiscuous mode [ 156.742773][ T617] veth0_macvtap: left promiscuous mode [ 156.742942][ T617] veth1_vlan: left promiscuous mode [ 156.743120][ T617] veth0_vlan: left promiscuous mode [ 157.106717][ T6429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.824466][ T617] team0 (unregistering): Port device team_slave_1 removed [ 157.867486][ T617] team0 (unregistering): Port device team_slave_0 removed [ 157.877753][ T6451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.117473][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.396444][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.396645][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.396803][ T6325] bridge_slave_0: entered allmulticast mode [ 158.399382][ T6325] bridge_slave_0: entered promiscuous mode [ 158.402487][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.402672][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.402805][ T6325] bridge_slave_1: entered allmulticast mode [ 158.404720][ T6325] bridge_slave_1: entered promiscuous mode [ 158.458283][ T4932] Bluetooth: hci3: command tx timeout [ 158.528985][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.545876][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.695502][ T6325] team0: Port device team_slave_0 added [ 158.729675][ T6325] team0: Port device team_slave_1 added [ 158.883263][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.883283][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.883312][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.885507][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.885526][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.885554][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.102556][ T6325] hsr_slave_0: entered promiscuous mode [ 159.103606][ T6325] hsr_slave_1: entered promiscuous mode [ 159.455615][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.726103][ T6325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.749658][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.752531][ T6325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.775688][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.786109][ T6325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.805465][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.806486][ T6325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.836794][ T6325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.022953][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.058304][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.066601][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.066760][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.121760][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.121881][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.524335][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 160.536548][ T4932] Bluetooth: hci3: command tx timeout [ 161.511131][ T6550] tmpfs: Unknown parameter 'QO V¢òÿ' [ 162.038844][ T33] audit: type=1326 audit(1790661570.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.039114][ T33] audit: type=1326 audit(1790661570.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.040230][ T33] audit: type=1326 audit(1790661570.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.040456][ T33] audit: type=1326 audit(1790661570.728:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.040677][ T33] audit: type=1326 audit(1790661570.728:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.041076][ T33] audit: type=1326 audit(1790661570.728:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.041355][ T33] audit: type=1326 audit(1790661570.728:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.041659][ T33] audit: type=1326 audit(1790661570.728:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.042707][ T33] audit: type=1326 audit(1790661570.728:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.043196][ T33] audit: type=1326 audit(1790661570.728:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.2.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9899e159 code=0x7ffc0000 [ 162.640106][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.893738][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 163.504339][ T6590] tmpfs: Unknown parameter 'QO V¢òÿ' [ 164.293819][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.422881][ T6325] veth0_vlan: entered promiscuous mode [ 164.451289][ T6608] capability: warning: `syz.0.280' uses 32-bit capabilities (legacy support in use) [ 164.500065][ T6325] veth1_vlan: entered promiscuous mode [ 164.651717][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.652209][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.687105][ T6325] veth0_macvtap: entered promiscuous mode [ 164.730469][ T6325] veth1_macvtap: entered promiscuous mode [ 164.816476][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.057825][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.127918][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.129280][ T665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.130065][ T665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.130150][ T665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.194225][ T6629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.723998][ T6633] tmpfs: Unknown parameter 'QO V¢òÿ' [ 166.353299][ T665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.353320][ T665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.590913][ T657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.590938][ T657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.657588][ T6649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.579774][ T6666] tmpfs: Unknown parameter 'QO V¢òÿ' [ 168.351292][ T6676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.667899][ T1001] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.674941][ T6677] [ 168.684824][ T6677] ====================================================== [ 168.692090][ T6677] WARNING: possible circular locking dependency detected [ 168.699238][ T6677] syzkaller #0 Tainted: G L [ 168.705461][ T6677] ------------------------------------------------------ [ 168.712699][ T6677] syz.1.306/6677 is trying to acquire lock: [ 168.718633][ T6677] ffff888053a2ac00 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x209/0x4d0 [ 168.728678][ T6677] [ 168.728678][ T6677] but task is already holding lock: [ 168.736085][ T6677] ffff8880669906d8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 168.747032][ T6677] [ 168.747032][ T6677] which lock already depends on the new lock. [ 168.747032][ T6677] [ 168.757652][ T6677] [ 168.757652][ T6677] the existing dependency chain (in reverse order) is: [ 168.766710][ T6677] [ 168.766710][ T6677] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 168.775445][ T6677] down_read+0x45/0x320 [ 168.780178][ T6677] lookup_slow+0x46/0x80 [ 168.784986][ T6677] ovl_lookup_single+0x323/0xe90 [ 168.790476][ T6677] ovl_lookup_layer+0x377/0x440 [ 168.795944][ T6677] ovl_lookup+0x9ae/0x1c80 [ 168.801012][ T6677] lookup_open+0x94b/0x1970 [ 168.806066][ T6677] path_openat+0x673/0x1da0 [ 168.811121][ T6677] do_file_open+0x23e/0x4a0 [ 168.816178][ T6677] do_sys_openat2+0x115/0x200 [ 168.821427][ T6677] __x64_sys_openat+0x138/0x170 [ 168.826851][ T6677] do_syscall_64+0x166/0x520 [ 168.832051][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.838539][ T6677] [ 168.838539][ T6677] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 168.846492][ T6677] __d_alloc_parallel+0xc32/0x1700 [ 168.852339][ T6677] __lookup_slow+0x82/0x2f0 [ 168.857431][ T6677] lookup_slow+0x59/0x80 [ 168.862230][ T6677] path_lookupat+0x3f5/0x8c0 [ 168.867369][ T6677] filename_lookup+0x265/0x5d0 [ 168.872688][ T6677] do_readlinkat+0xe3/0x510 [ 168.877743][ T6677] __x64_sys_readlink+0x7f/0x90 [ 168.883144][ T6677] do_syscall_64+0x166/0x520 [ 168.888286][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.894726][ T6677] [ 168.894726][ T6677] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 168.903188][ T6677] __lock_acquire+0x164c/0x2de0 [ 168.908632][ T6677] lock_acquire+0x115/0x350 [ 168.913766][ T6677] down_read_killable+0x4b/0x3b0 [ 168.919258][ T6677] iterate_dir+0x209/0x4d0 [ 168.924372][ T6677] ovl_dir_read+0x141/0x4a0 [ 168.929437][ T6677] ovl_dir_read_merged+0x2fb/0x520 [ 168.935358][ T6677] ovl_iterate+0xd5a/0x2160 [ 168.940417][ T6677] wrap_directory_iterator+0x96/0xe0 [ 168.946383][ T6677] iterate_dir+0x2e2/0x4d0 [ 168.951374][ T6677] __se_sys_getdents64+0xf1/0x280 [ 168.956959][ T6677] do_syscall_64+0x166/0x520 [ 168.962105][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.968545][ T6677] [ 168.968545][ T6677] other info that might help us debug this: [ 168.968545][ T6677] [ 168.978822][ T6677] Chain exists of: [ 168.978822][ T6677] &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth] [ 168.978822][ T6677] [ 168.993901][ T6677] Possible unsafe locking scenario: [ 168.993901][ T6677] [ 169.001373][ T6677] CPU0 CPU1 [ 169.006797][ T6677] ---- ---- [ 169.012178][ T6677] lock(&ovl_i_mutex_dir_key[depth]); [ 169.017676][ T6677] lock(DCACHE_PAR_LOOKUP); [ 169.024813][ T6677] lock(&ovl_i_mutex_dir_key[depth]); [ 169.032912][ T6677] rlock(&type->i_mutex_dir_key#4); [ 169.038242][ T6677] [ 169.038242][ T6677] *** DEADLOCK *** [ 169.038242][ T6677] [ 169.046494][ T6677] locks held by syz.1.306/6677: 2, last CPU#0: [ 169.052821][ T6677] #0: ffff88807e6490b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 169.062000][ T6677] #1: ffff8880669906d8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 169.073260][ T6677] [ 169.073260][ T6677] stack backtrace: [ 169.079174][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.1.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.090043][ T6677] Tainted: [L]=SOFTLOCKUP [ 169.094386][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.104552][ T6677] Call Trace: [ 169.107862][ T6677] [ 169.110817][ T6677] dump_stack_lvl+0xe8/0x150 [ 169.115439][ T6677] print_circular_bug+0x2e2/0x300 [ 169.120586][ T6677] check_noncircular+0x12f/0x150 [ 169.126093][ T6677] __lock_acquire+0x164c/0x2de0 [ 169.130981][ T6677] ? apparmor_file_open+0x523/0x6c0 [ 169.136226][ T6677] ? __pfx_aa_file_perm+0x10/0x10 [ 169.141281][ T6677] lock_acquire+0x115/0x350 [ 169.145820][ T6677] ? iterate_dir+0x209/0x4d0 [ 169.150446][ T6677] ? iterate_dir+0x209/0x4d0 [ 169.155066][ T6677] down_read_killable+0x4b/0x3b0 [ 169.160069][ T6677] ? iterate_dir+0x209/0x4d0 [ 169.164695][ T6677] iterate_dir+0x209/0x4d0 [ 169.169147][ T6677] ovl_dir_read+0x141/0x4a0 [ 169.173673][ T6677] ? __pfx_ovl_dir_read+0x10/0x10 [ 169.178813][ T6677] ? ovl_path_upper+0x105/0x170 [ 169.183704][ T6677] ? ovl_path_next+0x21a/0x430 [ 169.188505][ T6677] ovl_dir_read_merged+0x2fb/0x520 [ 169.193646][ T6677] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 169.199301][ T6677] ? __pfx_ovl_fill_merge+0x10/0x10 [ 169.204534][ T6677] ? __kasan_kmalloc+0x93/0xb0 [ 169.209423][ T6677] ? __kmalloc_cache_noprof+0x148/0x600 [ 169.215008][ T6677] ? ovl_iterate+0xcbc/0x2160 [ 169.219713][ T6677] ? ovl_iterate+0xcbc/0x2160 [ 169.224422][ T6677] ovl_iterate+0xd5a/0x2160 [ 169.229057][ T6677] ? check_path+0x21/0x40 [ 169.233423][ T6677] ? __pfx_ovl_iterate+0x10/0x10 [ 169.238386][ T6677] ? lockdep_unlock+0x5c/0xd0 [ 169.243090][ T6677] ? __lock_acquire+0x1511/0x2de0 [ 169.248138][ T6677] ? add_lock_to_list+0xc7/0x100 [ 169.253120][ T6677] ? lock_acquire+0x115/0x350 [ 169.257833][ T6677] ? down_write+0x166/0x200 [ 169.262365][ T6677] ? __pfx_down_write+0x10/0x10 [ 169.267351][ T6677] ? wrap_directory_iterator+0x52/0xe0 [ 169.272844][ T6677] ? __pfx_ovl_iterate+0x10/0x10 [ 169.277813][ T6677] wrap_directory_iterator+0x96/0xe0 [ 169.283139][ T6677] iterate_dir+0x2e2/0x4d0 [ 169.287685][ T6677] __se_sys_getdents64+0xf1/0x280 [ 169.292773][ T6677] ? __pfx___se_sys_getdents64+0x10/0x10 [ 169.298443][ T6677] ? __pfx_filldir64+0x10/0x10 [ 169.303241][ T6677] ? __x64_sys_getdents64+0x1d/0x80 [ 169.308687][ T6677] ? __sanitizer_cov_trace_pc+0x5e/0x80 [ 169.314255][ T6677] do_syscall_64+0x166/0x520 [ 169.318977][ T6677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.325072][ T6677] ? clear_bhb_loop+0x70/0xc0 [ 169.329789][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.335723][ T6677] RIP: 0033:0x7f385c59e159 [ 169.340167][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.360055][ T6677] RSP: 002b:00007f385d425028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 169.368587][ T6677] RAX: ffffffffffffffda RBX: 00007f385c825fa0 RCX: 00007f385c59e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.376618][ T6677] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 169.384617][ T6677] RBP: 00007f385c63506b R08: 0000000000000000 R09: 0000000000000000 [ 169.392807][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.400802][ T6677] R13: 00007f385c826038 R14: 00007f385c825fa0 R15: 00007ffcc0c73518 [ 169.408812][ T6677] [ 169.500406][ T1001] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 169.502644][ T1001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.504248][ T1001] usb 5-1: config 0 descriptor?? [ 170.031999][ T617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.069285][ T1001] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 170.069617][ T1001] [drm:udl_init] *ERROR* Selecting channel failed [ 170.075960][ T1001] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 170.075987][ T1001] [drm] Initialized udl on minor 1 [ 170.076882][ T1001] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 170.077255][ T1001] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 170.139624][ T32] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 170.140481][ T32] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 170.140613][ T32] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 170.166437][ T617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.195177][ T1001] usb 5-1: USB disconnect, device number 2 [ 170.247200][ T617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.313686][ T617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.416602][ T617] bridge_slave_1: left allmulticast mode [ 170.416629][ T617] bridge_slave_1: left promiscuous mode [ 170.416780][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.427341][ T617] bridge_slave_0: left allmulticast mode [ 170.430555][ T617] bridge_slave_0: left promiscuous mode [ 170.430888][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.512444][ T617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.513913][ T617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.514854][ T617] bond0 (unregistering): Released all slaves [ 170.700854][ T617] hsr_slave_0: left promiscuous mode [ 170.701310][ T617] hsr_slave_1: left promiscuous mode [ 170.701867][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.701885][ T617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.702435][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.702450][ T617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.705822][ T617] veth1_macvtap: left promiscuous mode [ 170.705855][ T617] veth0_macvtap: left promiscuous mode [ 170.705923][ T617] veth1_vlan: left promiscuous mode [ 170.705970][ T617] veth0_vlan: left promiscuous mode [ 170.901549][ T617] team0 (unregistering): Port device team_slave_1 removed [ 170.907215][ T617] team0 (unregistering): Port device team_slave_0 removed [ 171.012621][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.272984][ T617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.323799][ T617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.356032][ T617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.383596][ T617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.386801][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.494877][ T617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.557528][ T617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.602678][ T617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.653629][ T617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.729635][ T617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.786273][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.798041][ T617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.830032][ T617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.883678][ T617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.969879][ T617] bridge_slave_1: left allmulticast mode [ 171.969907][ T617] bridge_slave_1: left promiscuous mode [ 171.970067][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.973181][ T617] bridge_slave_0: left allmulticast mode [ 171.973206][ T617] bridge_slave_0: left promiscuous mode [ 171.973365][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.016814][ T617] bridge_slave_1: left allmulticast mode [ 172.016854][ T617] bridge_slave_1: left promiscuous mode [ 172.017002][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.030628][ T617] bridge_slave_0: left allmulticast mode [ 172.030703][ T617] bridge_slave_0: left promiscuous mode [ 172.033364][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.058553][ T617] bridge_slave_1: left allmulticast mode [ 172.058588][ T617] bridge_slave_1: left promiscuous mode [ 172.058739][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.060353][ T617] bridge_slave_0: left allmulticast mode [ 172.060375][ T617] bridge_slave_0: left promiscuous mode [ 172.060507][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.225204][ T617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.226881][ T617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.243570][ T617] bond0 (unregistering): Released all slaves [ 172.302411][ T617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.304059][ T617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.305106][ T617] bond0 (unregistering): Released all slaves [ 172.372349][ T617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.373756][ T617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.374596][ T617] bond0 (unregistering): Released all slaves [ 172.401385][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 172.777326][ T617] hsr_slave_0: left promiscuous mode [ 172.784017][ T617] hsr_slave_1: left promiscuous mode [ 172.784644][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.784678][ T617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.785241][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.785257][ T617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.825282][ T617] hsr_slave_0: left promiscuous mode [ 172.825798][ T617] hsr_slave_1: left promiscuous mode [ 172.826367][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.826385][ T617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.826939][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.826956][ T617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.869119][ T617] hsr_slave_0: left promiscuous mode [ 172.869622][ T617] hsr_slave_1: left promiscuous mode [ 172.870206][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.870223][ T617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.870924][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.870941][ T617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.915380][ T617] veth1_macvtap: left promiscuous mode [ 172.915481][ T617] veth0_macvtap: left promiscuous mode [ 172.915689][ T617] veth1_vlan: left promiscuous mode [ 172.915817][ T617] veth0_vlan: left promiscuous mode [ 172.930143][ T617] veth1_macvtap: left promiscuous mode [ 172.930232][ T617] veth0_macvtap: left promiscuous mode [ 172.930454][ T617] veth1_vlan: left promiscuous mode [ 172.930579][ T617] veth0_vlan: left promiscuous mode [ 172.940939][ T617] veth1_macvtap: left promiscuous mode [ 172.940967][ T617] veth0_macvtap: left promiscuous mode [ 172.941036][ T617] veth1_vlan: left promiscuous mode [ 172.941156][ T617] veth0_vlan: left promiscuous mode [ 173.169379][ T617] team0 (unregistering): Port device team_slave_1 removed [ 173.173336][ T617] team0 (unregistering): Port device team_slave_0 removed [ 173.299290][ T617] team0 (unregistering): Port device team_slave_1 removed [ 173.303155][ T617] team0 (unregistering): Port device team_slave_0 removed [ 173.443930][ T617] team0 (unregistering): Port device team_slave_1 removed [ 173.447980][ T617] team0 (unregistering): Port device team_slave_0 removed [ 173.514973][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 173.952878][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 174.265646][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 174.542381][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 174.823706][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 175.098202][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 175.377850][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 175.650375][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 176.925625][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 177.212947][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 177.488424][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 178.010490][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20