last executing test programs: 7.848827706s ago: executing program 3 (id=12): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 7.759874626s ago: executing program 5 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="06000000f4ffffff13800010888e", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.079883273s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000000680)="c0e0", 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r0, 0x4, 0x3}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001180)={r5, r0}, 0x14) sendmmsg$alg(r4, &(0x7f00000023c0)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x4008000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x2, 0x8000) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x3, 0x39a, &(0x7f00000002c0)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xe, 0x634e, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) 6.981251391s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x5, 0x3c5b, 0x7d, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x2, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0x15f, 0x129432e2, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x2ea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0xd37, 0x5, 0x4, 0x1b, 0x2000004, 0x9, 0x80000002, 0x9, 0x6, 0x147, 0x8200, 0x1, 0x8, 0x8, 0xffffffff, 0x20000004, 0x4, 0x3, 0x50, 0x2, 0xc, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x16, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x4cf, 0x0, 0x8, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e8, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x2000000c, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1003, 0x6d, 0x7, 0xa9, 0x4005, 0x6, 0x4006, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x80, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ee, 0x4, 0xb], [0x8001, 0xbb33, 0x6, 0xa, 0x1, 0x2, 0x5, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x17, 0x9, 0x1, 0x80000001, 0x10000, 0x2000004, 0x7fff, 0x80, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0xb, 0x9602, 0xc, 0xaf, 0x5, 0x6, 0x22a, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x6, 0x1, 0x59, 0x0, 0x4, 0x7a, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.955090842s ago: executing program 5 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x2c615222993adfb3, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x35}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000a00)={0x14, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 6.4897224s ago: executing program 3 (id=15): mount$overlay(0x0, 0x0, 0x0, 0xc008, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vcs(0xffffffffffffff9c, 0x0, 0xa100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') lseek(r3, 0x2000, 0x0) 6.409195574s ago: executing program 1 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000680001c14c000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018009c65e3dd6f70b595eef626faedd44999e6f78a82400000002800000008000000060000000100000f030008000200000008000000000000008f54b7991700000000"], 0x0, 0x48, 0x0, 0xffffffff}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) setgroups(0x1, &(0x7f0000000200)=[0x0]) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="6dc5974d57c5523de558770626ac25197ca74f3f7329bd7db1450936c02352a72e40d50db52a5ff27a16e90fc3c16541bef2a0f434266f21b1c25aefe82215b1e0aaa0fa13906fed28ad6177d68b4300d97aa2ab9624cfdf170a39575e248d088a8c43bd3d43625667182188c02157c0b0dcf5ff", @ANYRES16=r6, @ANYRESOCT=r3, @ANYRESDEC=r6, @ANYRES16=r0], 0x0, 0x150f, &(0x7f00000041c0)="$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") open(&(0x7f0000000100)='./file1\x00', 0x6000, 0x0) 6.287365879s ago: executing program 5 (id=17): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780), 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.072292971s ago: executing program 4 (id=5): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002e8b1d3ad258005bbce177a4325169ff47daa86a2a98ebcd173b56520a59aaf2a6f338e7aaa7fa0d7782566d1149413ef38bb1f49a2b76c423"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x1ed) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, &(0x7f00000002c0)=""/52, 0x34) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 5.873964153s ago: executing program 2 (id=18): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettimeofday(0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESOCT=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 4.749486642s ago: executing program 3 (id=19): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f00000001c0)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESOCT=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x80d8, 0x0, 0x0, 0x0, 0x101}) 4.452433254s ago: executing program 0 (id=20): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x1841c, &(0x7f0000000200)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x48) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) close_range(r0, 0xffffffffffffffff, 0x0) 4.131863026s ago: executing program 3 (id=21): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 3.968509336s ago: executing program 5 (id=22): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0xfffffffffffffffc) 3.86500821s ago: executing program 4 (id=23): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4d12, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7f, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 2.807191284s ago: executing program 2 (id=24): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x40, 0xb, 0x1, "b2"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xe}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.434412131s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x01', 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 2.39419308s ago: executing program 3 (id=26): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x3, 0x3, 0x2, 'syz1\x00'}) getsockopt$packet_buf(r0, 0x107, 0x19, &(0x7f0000000300)=""/68, &(0x7f0000000380)=0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c9) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x10a) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x4, @desc3}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffb) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x41) getdents64(r4, 0x0, 0x0) 2.334751547s ago: executing program 1 (id=27): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 2.018894273s ago: executing program 4 (id=28): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1.880781216s ago: executing program 5 (id=29): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.698624958s ago: executing program 0 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="4b000ffd096c", 0x6}], 0x1}}], 0x1, 0x40c0) 1.316867703s ago: executing program 5 (id=31): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711831000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x0, 0x8000, 0x46, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x7800, 0xfffffffd, 0x6}}) sendto$packet(r2, &(0x7f0000000100)="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", 0xfd, 0x48840, &(0x7f00000002c0)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @random="ac494f0364c1"}, 0x14) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) 1.29837327s ago: executing program 0 (id=32): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x1806, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8000004) 1.038579722s ago: executing program 3 (id=33): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 835.47875ms ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='\n', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 550.00987ms ago: executing program 4 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 379.384635ms ago: executing program 1 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 330.134032ms ago: executing program 0 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='dummy_udc.0', 0xb) 196.403227ms ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001020000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=39): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, 0x0, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 91.331272][ T933] cfg80211: failed to load regulatory.db [ 92.768744][ T5606] cgroup: Unknown subsys name 'net' [ 92.871748][ T5606] cgroup: Unknown subsys name 'cpuset' [ 92.882165][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.700859][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.959759][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.969339][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.977076][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.992340][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.012451][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.020036][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.029651][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.030189][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.038785][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.054099][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.065025][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.075838][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.079999][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.093801][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.104258][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.112426][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.120716][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.128494][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.139030][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.142108][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.156454][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.164707][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.178570][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.187556][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.196799][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.208375][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.221726][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.237432][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.255663][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.266108][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.088552][ T5633] Bluetooth: hci1: command tx timeout [ 101.166991][ T5633] Bluetooth: hci0: command tx timeout [ 101.246364][ T5633] Bluetooth: hci2: command tx timeout [ 101.246492][ T4935] Bluetooth: hci3: command tx timeout [ 101.326485][ T4935] Bluetooth: hci5: command tx timeout [ 101.332974][ T5633] Bluetooth: hci4: command tx timeout [ 101.814144][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.821654][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.829032][ T5638] bridge_slave_0: entered allmulticast mode [ 101.837409][ T5638] bridge_slave_0: entered promiscuous mode [ 101.906180][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.913830][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.923186][ T5638] bridge_slave_1: entered allmulticast mode [ 101.931015][ T5638] bridge_slave_1: entered promiscuous mode [ 102.132968][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.140429][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.147935][ T5632] bridge_slave_0: entered allmulticast mode [ 102.156566][ T5632] bridge_slave_0: entered promiscuous mode [ 102.168701][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.214544][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.221994][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.229305][ T5629] bridge_slave_0: entered allmulticast mode [ 102.237327][ T5629] bridge_slave_0: entered promiscuous mode [ 102.267297][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.274555][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.282080][ T5632] bridge_slave_1: entered allmulticast mode [ 102.290119][ T5632] bridge_slave_1: entered promiscuous mode [ 102.299663][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.318291][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.325515][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.333062][ T5626] bridge_slave_0: entered allmulticast mode [ 102.340693][ T5626] bridge_slave_0: entered promiscuous mode [ 102.350592][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.357829][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.365134][ T5626] bridge_slave_1: entered allmulticast mode [ 102.373342][ T5626] bridge_slave_1: entered promiscuous mode [ 102.381208][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.388963][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.396152][ T5629] bridge_slave_1: entered allmulticast mode [ 102.404282][ T5629] bridge_slave_1: entered promiscuous mode [ 102.484533][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.491917][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.499595][ T5636] bridge_slave_0: entered allmulticast mode [ 102.507490][ T5636] bridge_slave_0: entered promiscuous mode [ 102.584918][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.594746][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.602148][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.610722][ T5636] bridge_slave_1: entered allmulticast mode [ 102.618956][ T5636] bridge_slave_1: entered promiscuous mode [ 102.629885][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.641650][ T5638] team0: Port device team_slave_0 added [ 102.664155][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.676716][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.702698][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.728055][ T5638] team0: Port device team_slave_1 added [ 102.733913][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.741480][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.748747][ T5634] bridge_slave_0: entered allmulticast mode [ 102.756486][ T5634] bridge_slave_0: entered promiscuous mode [ 102.769344][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.837120][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.844368][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.851873][ T5634] bridge_slave_1: entered allmulticast mode [ 102.859934][ T5634] bridge_slave_1: entered promiscuous mode [ 102.897762][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.910317][ T5632] team0: Port device team_slave_0 added [ 102.960356][ T5629] team0: Port device team_slave_0 added [ 102.970990][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.982788][ T5632] team0: Port device team_slave_1 added [ 102.989733][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.997235][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.024421][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.053343][ T5626] team0: Port device team_slave_0 added [ 103.061436][ T5629] team0: Port device team_slave_1 added [ 103.108634][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.115887][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.142405][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.157462][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.166640][ T5633] Bluetooth: hci1: command tx timeout [ 103.171006][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.184009][ T5626] team0: Port device team_slave_1 added [ 103.256359][ T5633] Bluetooth: hci0: command tx timeout [ 103.270728][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.278382][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.304624][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.319173][ T5636] team0: Port device team_slave_0 added [ 103.325942][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.333193][ T5633] Bluetooth: hci3: command tx timeout [ 103.336528][ T5633] Bluetooth: hci2: command tx timeout [ 103.340332][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.371007][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.384568][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.391593][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.418753][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.429656][ T5633] Bluetooth: hci4: command tx timeout [ 103.430681][ T4935] Bluetooth: hci5: command tx timeout [ 103.481790][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.488931][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.515369][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.530865][ T5636] team0: Port device team_slave_1 added [ 103.575625][ T5634] team0: Port device team_slave_0 added [ 103.582367][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.589574][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.615741][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.652456][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.660249][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.686887][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.700178][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.707286][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.733713][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.747785][ T5634] team0: Port device team_slave_1 added [ 103.754202][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.761326][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.787392][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.830061][ T5638] hsr_slave_0: entered promiscuous mode [ 103.837276][ T5638] hsr_slave_1: entered promiscuous mode [ 103.881412][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.888786][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.914893][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.929609][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.936675][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.962881][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.093959][ T5632] hsr_slave_0: entered promiscuous mode [ 104.100907][ T5632] hsr_slave_1: entered promiscuous mode [ 104.108000][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 104.113927][ T5632] Cannot create hsr debugfs directory [ 104.214208][ T5626] hsr_slave_0: entered promiscuous mode [ 104.221097][ T5626] hsr_slave_1: entered promiscuous mode [ 104.227616][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 104.233349][ T5626] Cannot create hsr debugfs directory [ 104.246959][ T5629] hsr_slave_0: entered promiscuous mode [ 104.253660][ T5629] hsr_slave_1: entered promiscuous mode [ 104.260497][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 104.266427][ T5629] Cannot create hsr debugfs directory [ 104.334480][ T5636] hsr_slave_0: entered promiscuous mode [ 104.341808][ T5636] hsr_slave_1: entered promiscuous mode [ 104.348423][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 104.354158][ T5636] Cannot create hsr debugfs directory [ 104.370802][ T5634] hsr_slave_0: entered promiscuous mode [ 104.377909][ T5634] hsr_slave_1: entered promiscuous mode [ 104.384527][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 104.390316][ T5634] Cannot create hsr debugfs directory [ 105.186745][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.206921][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.215359][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.227137][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.235436][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.246344][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.246378][ T4935] Bluetooth: hci1: command tx timeout [ 105.260345][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.270734][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.327497][ T4935] Bluetooth: hci0: command tx timeout [ 105.355647][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.370285][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.378484][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.389697][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.407378][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.417310][ T4935] Bluetooth: hci2: command tx timeout [ 105.417799][ T5633] Bluetooth: hci3: command tx timeout [ 105.424921][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.438815][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.450740][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.487004][ T5633] Bluetooth: hci5: command tx timeout [ 105.487028][ T4935] Bluetooth: hci4: command tx timeout [ 105.599261][ T5632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.611594][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.621379][ T5632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.632361][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.646297][ T5632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.658462][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.667213][ T5632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.679075][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.776107][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.828290][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.840934][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.849007][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.859168][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.869395][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.880095][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.888866][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.900246][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.003625][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.054681][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.062343][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.072970][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.080277][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.143971][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.155656][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.169213][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.198776][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.211840][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.241507][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.255051][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.289858][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.300984][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.343393][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.388497][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.411811][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.422997][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.432255][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.443357][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.469050][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.480074][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.502431][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.509742][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.527579][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.539001][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.580436][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.587643][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.600710][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.682070][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.689331][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.747703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.755043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.809662][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.953878][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.020417][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.027645][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.070903][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.135902][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.143236][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.239229][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.328388][ T4935] Bluetooth: hci1: command tx timeout [ 107.345255][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.407041][ T4935] Bluetooth: hci0: command tx timeout [ 107.443366][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.476066][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.489082][ T4935] Bluetooth: hci2: command tx timeout [ 107.496995][ T4935] Bluetooth: hci3: command tx timeout [ 107.525560][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.532790][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.544187][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.551398][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.567882][ T4935] Bluetooth: hci4: command tx timeout [ 107.578555][ T4935] Bluetooth: hci5: command tx timeout [ 107.645397][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.652650][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.679680][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.686984][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.735932][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.142973][ T5638] veth0_vlan: entered promiscuous mode [ 108.239010][ T5638] veth1_vlan: entered promiscuous mode [ 108.532247][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.554272][ T5638] veth0_macvtap: entered promiscuous mode [ 108.620433][ T5638] veth1_macvtap: entered promiscuous mode [ 108.693567][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.764571][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.839411][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.035365][ T5636] veth0_vlan: entered promiscuous mode [ 109.056665][ T1121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.129318][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.194909][ T5636] veth1_vlan: entered promiscuous mode [ 109.227140][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.346882][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.518077][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.555183][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.556826][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.601315][ T5636] veth0_macvtap: entered promiscuous mode [ 109.680496][ T5636] veth1_macvtap: entered promiscuous mode [ 109.692648][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.752986][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.774292][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.841218][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.855585][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.923801][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.925638][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.095746][ T5626] veth0_vlan: entered promiscuous mode [ 110.114953][ T5632] veth0_vlan: entered promiscuous mode [ 110.182561][ T5626] veth1_vlan: entered promiscuous mode [ 110.194553][ T5854] loop0: detected capacity change from 0 to 2048 [ 110.201769][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.222132][ T5854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.267513][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.341358][ T5632] veth1_vlan: entered promiscuous mode [ 110.477315][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.491769][ T5634] veth0_vlan: entered promiscuous mode [ 110.499134][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.518451][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.559259][ T5634] veth1_vlan: entered promiscuous mode [ 110.640017][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.653505][ T5626] veth0_macvtap: entered promiscuous mode [ 110.674099][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.692439][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.713118][ T5626] veth1_macvtap: entered promiscuous mode [ 110.784567][ T5632] veth0_macvtap: entered promiscuous mode [ 110.821976][ T5632] veth1_macvtap: entered promiscuous mode [ 110.877169][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.900455][ T5634] veth0_macvtap: entered promiscuous mode [ 110.940679][ T5634] veth1_macvtap: entered promiscuous mode [ 110.959357][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.960786][ T5862] loop3: detected capacity change from 0 to 512 [ 110.972909][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.012975][ T5862] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.022909][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.049375][ T5862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.062919][ T5629] veth0_vlan: entered promiscuous mode [ 111.070033][ T5862] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 111.114407][ T5862] EXT4-fs warning (device loop3): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.134343][ T5862] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 111.153528][ T5862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.4: bg 0: block 15: invalid block bitmap [ 111.158614][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.172100][ T5862] loop3: lost filesystem error report for type 5 error -117 [ 111.176755][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.184051][ T5862] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 111.184558][ C1] EXT4-fs (loop3): initial error at time 1785660710: ext4_validate_block_bitmap:431 [ 111.191107][ T5862] loop3: lost filesystem error report for type 5 error -117 [ 111.199438][ C1] [ 111.199455][ C1] EXT4-fs (loop3): last error at time 1785660710: ext4_validate_block_bitmap:431 [ 111.241536][ T5862] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.4: data will be lost [ 111.254051][ T5862] EXT4-fs (loop3): 1 truncate cleaned up [ 111.264689][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.285590][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.296701][ T1121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.326287][ T5629] veth1_vlan: entered promiscuous mode [ 111.394297][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.403527][ T921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.403616][ T921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.403679][ T921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.403748][ T921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.417428][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.463665][ T921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.512467][ T921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.536730][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.562509][ T5629] veth0_macvtap: entered promiscuous mode [ 111.684823][ T5629] veth1_macvtap: entered promiscuous mode [ 111.738282][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.759459][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.787582][ T921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.805310][ T921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.847709][ T1121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.916551][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.017910][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.091705][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.171216][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.200181][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.251617][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.328756][ T5878] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.430648][ T5877] loop5: detected capacity change from 0 to 2048 [ 113.533752][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.642032][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.663005][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.828302][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.916479][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.007208][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.028263][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.081375][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.121612][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.196239][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.420953][ T5746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.549910][ T5885] loop3: detected capacity change from 0 to 512 [ 114.698768][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.793541][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.839735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.850053][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.865862][ T5885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.889855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.893868][ T5746] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.942605][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.955817][ T5885] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.034954][ T5746] usb 1-1: config 0 descriptor?? [ 115.149701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.160480][ T5896] loop2: detected capacity change from 0 to 1024 [ 115.200926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.277973][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.351293][ T30] audit: type=1804 audit(1785660715.141:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 115.552929][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.656099][ T5904] EXT4-fs (loop2): shut down requested (2) [ 115.903232][ T5908] loop1: detected capacity change from 0 to 256 [ 115.911333][ T5908] exfat: Unknown parameter 'mÅ—MWÅR' [ 115.948831][ T5910] loop5: detected capacity change from 0 to 1024 [ 115.972334][ T5746] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.001247][ T5910] ======================================================= [ 116.001247][ T5910] WARNING: The mand mount option has been deprecated and [ 116.001247][ T5910] and is ignored by this kernel. Remove the mand [ 116.001247][ T5910] option from the mount to silence this warning. [ 116.001247][ T5910] ======================================================= [ 116.353866][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.412004][ T5916] loop4: detected capacity change from 0 to 1024 [ 116.444318][ T5910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.742758][ T5910] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.297055][ T5910] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.17: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.328694][ T5774] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 117.335591][ T37] wlan1: Trigger new scan to find an IBSS to join [ 117.367820][ T5910] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 117.394089][ T5925] loop2: detected capacity change from 0 to 128 [ 117.411660][ T5910] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.411660][ T5910] [ 117.529240][ T5925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.598145][ T5929] loop3: detected capacity change from 0 to 1024 [ 117.617707][ T5929] hfsplus: failed to load extents file [ 117.625081][ T5916] hfsplus: xattr search failed [ 117.673913][ T5925] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.734171][ T5903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 117.858000][ T5931] loop0: detected capacity change from 0 to 128 [ 117.912189][ T36] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 117.963699][ T5931] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.009788][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 118.077162][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.077162][ T36] [ 118.117810][ T30] audit: type=1800 audit(1785660717.921:3): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file2" dev="loop0" ino=95 res=0 errno=0 [ 118.466301][ T5935] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 119.082714][ T933] usb 1-1: USB disconnect, device number 2 [ 119.100089][ T1111] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 119.172835][ T5626] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.191074][ T1111] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 119.277315][ T1111] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.277315][ T1111] [ 119.383547][ T5632] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 119.431360][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.813208][ T5947] loop3: detected capacity change from 0 to 512 [ 119.830515][ T5947] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.868702][ T5947] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.919739][ T5947] EXT4-fs (loop3): 1 truncate cleaned up [ 119.955224][ T5947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.034882][ T5947] syz.3.26 (pid 5947) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 120.038471][ T5804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.055223][ T5945] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 120.276613][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 120.311402][ T5804] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 120.351207][ T5804] usb 3-1: config 0 has no interface number 0 [ 120.389946][ T5804] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 120.440173][ T5804] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 120.493397][ T5804] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 120.531399][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.556888][ T5804] usb 3-1: Product: syz [ 120.580221][ T5804] usb 3-1: Manufacturer: syz [ 120.598742][ T5804] usb 3-1: SerialNumber: syz [ 120.615006][ T5947] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 120.666170][ T5804] usb 3-1: config 0 descriptor?? [ 120.690182][ T5942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.730535][ T5942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.900969][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.047930][ T5942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.088574][ T5942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.322713][ T5980] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 121.334112][ T36] wlan1: Trigger new scan to find an IBSS to join [ 121.344857][ T5804] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 121.509557][ T933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.693762][ T933] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.751367][ T933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.798800][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.832648][ T5989] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 121.835509][ T933] usb 4-1: SerialNumber: syz [ 121.863506][ T5989] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 121.893618][ T5989] ================================================================== [ 121.901730][ T5989] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 121.909511][ T5989] Read of size 8 at addr ffff88807c6663f0 by task syz.0.37/5989 [ 121.917160][ T5989] [ 121.919491][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 121.919532][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.919554][ T5989] Call Trace: [ 121.919565][ T5989] [ 121.919578][ T5989] dump_stack_lvl+0x100/0x190 [ 121.919625][ T5989] print_report+0x13d/0x4b0 [ 121.919677][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.919721][ T5989] ? __virt_addr_valid+0x239/0x430 [ 121.919769][ T5989] ? dummy_free_request+0x8a/0x90 [ 121.919827][ T5989] kasan_report+0xdf/0x1c0 [ 121.919865][ T5989] ? dummy_free_request+0x8a/0x90 [ 121.919932][ T5989] dummy_free_request+0x8a/0x90 [ 121.919989][ T5989] uvc_function_bind+0x181a/0x1939 [ 121.920035][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.920080][ T5989] ? __pfx_uvc_function_bind+0x10/0x10 [ 121.920119][ T5989] usb_add_function+0x219/0x890 [ 121.920175][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.920221][ T5989] configfs_composite_bind+0xd83/0x1960 [ 121.920284][ T5989] ? kernfs_create_link+0x1bd/0x240 [ 121.920334][ T5989] gadget_bind_driver+0x28c/0xbf0 [ 121.920372][ T5989] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 121.920427][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.920474][ T5989] ? __pfx_gadget_bind_driver+0x10/0x10 [ 121.920514][ T5989] really_probe+0x241/0xa60 [ 121.920566][ T5989] __driver_probe_device+0x20e/0x450 [ 121.920622][ T5989] driver_probe_device+0x4a/0x140 [ 121.920673][ T5989] __driver_attach+0x21f/0x5b0 [ 121.920722][ T5989] ? __pfx___driver_attach+0x10/0x10 [ 121.920775][ T5989] bus_for_each_dev+0x13e/0x1d0 [ 121.920813][ T5989] ? __pfx_bus_for_each_dev+0x10/0x10 [ 121.920850][ T5989] ? bus_add_driver+0x2b5/0x5b0 [ 121.920894][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.920944][ T5989] bus_add_driver+0x305/0x5b0 [ 121.920989][ T5989] driver_register+0x1e2/0x360 [ 121.921045][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.921091][ T5989] usb_gadget_register_driver_owner+0x132/0x210 [ 121.921133][ T5989] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 121.921188][ T5989] configfs_write_iter+0x302/0x4e0 [ 121.921248][ T5989] vfs_write+0x6ac/0x1050 [ 121.921299][ T5989] ? __pfx_configfs_write_iter+0x10/0x10 [ 121.921361][ T5989] ? __pfx_vfs_write+0x10/0x10 [ 121.921420][ T5989] ksys_write+0x12a/0x250 [ 121.921465][ T5989] ? __pfx_ksys_write+0x10/0x10 [ 121.921515][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.921574][ T5989] do_syscall_64+0x115/0x870 [ 121.921637][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.921677][ T5989] RIP: 0033:0x7fdd6199e019 [ 121.921705][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.921739][ T5989] RSP: 002b:00007fdd627fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.921776][ T5989] RAX: ffffffffffffffda RBX: 00007fdd61c25fa0 RCX: 00007fdd6199e019 [ 121.921800][ T5989] RDX: 000000000000000b RSI: 0000200000000900 RDI: 0000000000000007 [ 121.921821][ T5989] RBP: 00007fdd61a3500c R08: 0000000000000000 R09: 0000000000000000 [ 121.921861][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.921886][ T5989] R13: 00007fdd61c26038 R14: 00007fdd61c25fa0 R15: 00007ffd472b7318 [ 121.921925][ T5989] [ 121.921936][ T5989] [ 122.242885][ T5989] Allocated by task 5945: [ 122.247217][ T5989] kasan_save_stack+0x30/0x50 [ 122.251936][ T5989] kasan_save_track+0x14/0x30 [ 122.256647][ T5989] __kasan_kmalloc+0xaa/0xb0 [ 122.261297][ T5989] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 122.267133][ T5989] kthread_create_worker_on_node+0xe2/0x220 [ 122.273073][ T5989] uvcg_video_init+0x278/0x6e0 [ 122.277876][ T5989] uvc_function_bind+0x136e/0x1939 [ 122.283007][ T5989] usb_add_function+0x219/0x890 [ 122.287966][ T5989] configfs_composite_bind+0xd83/0x1960 [ 122.293543][ T5989] gadget_bind_driver+0x28c/0xbf0 [ 122.298581][ T5989] really_probe+0x241/0xa60 [ 122.303112][ T5989] __driver_probe_device+0x20e/0x450 [ 122.308510][ T5989] driver_probe_device+0x4a/0x140 [ 122.313560][ T5989] __driver_attach+0x21f/0x5b0 [ 122.318352][ T5989] bus_for_each_dev+0x13e/0x1d0 [ 122.323308][ T5989] bus_add_driver+0x305/0x5b0 [ 122.328445][ T5989] driver_register+0x1e2/0x360 [ 122.333387][ T5989] usb_gadget_register_driver_owner+0x132/0x210 [ 122.339642][ T5989] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 122.345344][ T5989] configfs_write_iter+0x302/0x4e0 [ 122.350494][ T5989] vfs_write+0x6ac/0x1050 [ 122.354844][ T5989] ksys_write+0x12a/0x250 [ 122.359193][ T5989] do_syscall_64+0x115/0x870 [ 122.364070][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.369983][ T5989] [ 122.372296][ T5989] The buggy address belongs to the object at ffff88807c666300 [ 122.372296][ T5989] which belongs to the cache kmalloc-128 of size 128 [ 122.386447][ T5989] The buggy address is located 120 bytes to the right of [ 122.386447][ T5989] allocated 120-byte region [ffff88807c666300, ffff88807c666378) [ 122.401129][ T5989] [ 122.403455][ T5989] The buggy address belongs to the physical page: [ 122.409913][ T5989] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c666 [ 122.418681][ T5989] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 122.425797][ T5989] page_type: f5(slab) [ 122.430007][ T5989] raw: 00fff00000000000 ffff88813fe21a00 dead000000000100 dead000000000122 [ 122.438604][ T5989] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 122.447184][ T5989] page dumped because: kasan: bad access detected [ 122.453706][ T5989] page_owner tracks the page as allocated [ 122.459448][ T5989] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5900, tgid 5900 (udevd), ts 119959620029, free_ts 119921384537 [ 122.479917][ T5989] post_alloc_hook+0xfd/0x120 [ 122.484661][ T5989] get_page_from_freelist+0xf48/0x3530 [ 122.490191][ T5989] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 122.496124][ T5989] new_slab+0xa2/0x640 [ 122.500255][ T5989] refill_objects+0xe3/0x410 [ 122.504894][ T5989] __pcs_replace_empty_main+0x376/0x680 [ 122.510467][ T5989] __kmalloc_cache_noprof+0x479/0x6c0 [ 122.515879][ T5989] kernfs_fop_open+0x9fa/0xd50 [ 122.520694][ T5989] do_dentry_open+0x6ab/0x14d0 [ 122.525485][ T5989] vfs_open+0x82/0x3f0 [ 122.529637][ T5989] path_openat+0x2873/0x4280 [ 122.534348][ T5989] do_file_open+0x20e/0x430 [ 122.538880][ T5989] do_sys_openat2+0x10f/0x1e0 [ 122.543570][ T5989] __x64_sys_openat+0x12d/0x210 [ 122.548637][ T5989] do_syscall_64+0x115/0x870 [ 122.553259][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.559178][ T5989] page last free pid 4986 tgid 4986 stack trace: [ 122.565593][ T5989] __free_frozen_pages+0x79f/0x1090 [ 122.570866][ T5989] qlist_free_all+0x47/0xf0 [ 122.575402][ T5989] kasan_quarantine_reduce+0x1a0/0x1f0 [ 122.580895][ T5989] __kasan_slab_alloc+0x69/0x90 [ 122.585758][ T5989] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 122.591252][ T5989] do_getname+0x35/0x390 [ 122.595519][ T5989] do_readlinkat+0xa9/0x370 [ 122.600104][ T5989] __x64_sys_readlink+0x78/0xc0 [ 122.604978][ T5989] do_syscall_64+0x115/0x870 [ 122.609644][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.615563][ T5989] [ 122.617901][ T5989] Memory state around the buggy address: [ 122.623620][ T5989] ffff88807c666280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.631868][ T5989] ffff88807c666300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 122.640025][ T5989] >ffff88807c666380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.648087][ T5989] ^ [ 122.655812][ T5989] ffff88807c666400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.663906][ T5989] ffff88807c666480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.672317][ T5989] ================================================================== [ 122.906134][ T5989] Disabling lock debugging due to kernel taint [ 122.949568][ T5989] ------------[ cut here ]------------ [ 122.955449][ T5989] !list_empty(&req->queue) [ 122.955469][ T5989] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7d/0x90, CPU#0: syz.0.37/5989 [ 122.971834][ T5989] Modules linked in: [ 122.975938][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.0.37 Tainted: G B syzkaller #0 PREEMPT(full) [ 122.987390][ T5989] Tainted: [B]=BAD_PAGE [ 122.991783][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.001918][ T5989] RIP: 0010:dummy_free_request+0x7d/0x90 [ 123.008731][ T5989] Code: 13 9e fa e8 a5 9d 3a fa 5b 5d e9 e9 8d 40 f9 e8 99 9d 3a fa 90 0f 0b 90 e8 90 9d 3a fa 5b 5d e9 d4 8d 40 f9 e8 84 9d 3a fa 90 <0f> 0b 90 eb c7 48 89 ef e8 b6 2f aa fa eb b4 0f 1f 40 00 90 90 90 [ 123.029004][ T5989] RSP: 0018:ffffc90004da7890 EFLAGS: 00010246 [ 123.035780][ T5989] RAX: 0000000000080000 RBX: ffff88807c666400 RCX: ffffc90003c91000 [ 123.044176][ T5989] RDX: 0000000000080000 RSI: ffffffff87cfb33c RDI: ffff88807f469f00 [ 123.052948][ T5989] RBP: ffff88807c6663f0 R08: 0000000000000007 R09: 0000000000000000 [ 123.061347][ T5989] R10: 0000000000000000 R11: 6e696c6261736944 R12: ffff88801eb84c00 [ 123.069793][ T5989] R13: 00000000ffffffea R14: 0000000000000400 R15: ffff88802aa88528 [ 123.078258][ T5989] FS: 00007fdd627fd6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 123.087713][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.094404][ T5989] CR2: 00007fffe0431138 CR3: 000000007f0e5000 CR4: 0000000000350ef0 [ 123.103529][ T5989] Call Trace: [ 123.107514][ T5989] [ 123.110466][ T5989] uvc_function_bind+0x181a/0x1939 [ 123.115620][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.121663][ T5989] ? __pfx_uvc_function_bind+0x10/0x10 [ 123.127496][ T5989] usb_add_function+0x219/0x890 [ 123.132854][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.138616][ T5989] configfs_composite_bind+0xd83/0x1960 [ 123.144232][ T5989] ? kernfs_create_link+0x1bd/0x240 [ 123.149509][ T5989] gadget_bind_driver+0x28c/0xbf0 [ 123.154561][ T5989] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 123.160335][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.166043][ T5989] ? __pfx_gadget_bind_driver+0x10/0x10 [ 123.172258][ T5989] really_probe+0x241/0xa60 [ 123.177208][ T5989] __driver_probe_device+0x20e/0x450 [ 123.182548][ T5989] driver_probe_device+0x4a/0x140 [ 123.187657][ T5989] __driver_attach+0x21f/0x5b0 [ 123.192549][ T5989] ? __pfx___driver_attach+0x10/0x10 [ 123.198014][ T5989] bus_for_each_dev+0x13e/0x1d0 [ 123.202901][ T5989] ? __pfx_bus_for_each_dev+0x10/0x10 [ 123.208472][ T5989] ? bus_add_driver+0x2b5/0x5b0 [ 123.213357][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.219091][ T5989] bus_add_driver+0x305/0x5b0 [ 123.224201][ T5989] driver_register+0x1e2/0x360 [ 123.229472][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.235196][ T5989] usb_gadget_register_driver_owner+0x132/0x210 [ 123.241553][ T5989] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 123.247370][ T5989] configfs_write_iter+0x302/0x4e0 [ 123.252660][ T5989] vfs_write+0x6ac/0x1050 [ 123.257085][ T5989] ? __pfx_configfs_write_iter+0x10/0x10 [ 123.262777][ T5989] ? __pfx_vfs_write+0x10/0x10 [ 123.267668][ T5989] ksys_write+0x12a/0x250 [ 123.272030][ T5989] ? __pfx_ksys_write+0x10/0x10 [ 123.277818][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.283594][ T5989] do_syscall_64+0x115/0x870 [ 123.288359][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.294334][ T5989] RIP: 0033:0x7fdd6199e019 [ 123.298831][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.318648][ T5989] RSP: 002b:00007fdd627fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.330241][ T5989] RAX: ffffffffffffffda RBX: 00007fdd61c25fa0 RCX: 00007fdd6199e019 [ 123.339134][ T5989] RDX: 000000000000000b RSI: 0000200000000900 RDI: 0000000000000007 [ 123.347237][ T5989] RBP: 00007fdd61a3500c R08: 0000000000000000 R09: 0000000000000000 [ 123.355404][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.363618][ T5989] R13: 00007fdd61c26038 R14: 00007fdd61c25fa0 R15: 00007ffd472b7318 [ 123.371760][ T5989] [ 123.374836][ T5989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.382169][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.0.37 Tainted: G B syzkaller #0 PREEMPT(full) [ 123.392975][ T5989] Tainted: [B]=BAD_PAGE [ 123.397127][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.407192][ T5989] Call Trace: [ 123.410466][ T5989] [ 123.413393][ T5989] dump_stack_lvl+0x100/0x190 [ 123.418087][ T5989] vpanic+0x552/0x970 [ 123.422078][ T5989] ? __pfx_vpanic+0x10/0x10 [ 123.426585][ T5989] ? lock_release+0x24d/0x310 [ 123.431369][ T5989] panic+0xd1/0xe0 [ 123.435097][ T5989] ? __pfx_panic+0x10/0x10 [ 123.439533][ T5989] check_panic_on_warn.cold+0x19/0x34 [ 123.445009][ T5989] ? dummy_free_request+0x7d/0x90 [ 123.450069][ T5989] __warn.cold+0x191/0x318 [ 123.454591][ T5989] __report_bug+0x30f/0x440 [ 123.459118][ T5989] ? dummy_free_request+0x7d/0x90 [ 123.464181][ T5989] ? __pfx___report_bug+0x10/0x10 [ 123.469233][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.475004][ T5989] ? irqentry_exit+0x24d/0xa00 [ 123.479890][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.485745][ T5989] ? dummy_free_request+0x7d/0x90 [ 123.490813][ T5989] ? dummy_free_request+0x7d/0x90 [ 123.495871][ T5989] report_bug+0xb2/0x220 [ 123.500226][ T5989] ? dummy_free_request+0x7d/0x90 [ 123.505379][ T5989] handle_bug+0x16a/0x2a0 [ 123.509744][ T5989] exc_invalid_op+0x17/0x50 [ 123.514289][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 123.519265][ T5989] RIP: 0010:dummy_free_request+0x7d/0x90 [ 123.524959][ T5989] Code: 13 9e fa e8 a5 9d 3a fa 5b 5d e9 e9 8d 40 f9 e8 99 9d 3a fa 90 0f 0b 90 e8 90 9d 3a fa 5b 5d e9 d4 8d 40 f9 e8 84 9d 3a fa 90 <0f> 0b 90 eb c7 48 89 ef e8 b6 2f aa fa eb b4 0f 1f 40 00 90 90 90 [ 123.544761][ T5989] RSP: 0018:ffffc90004da7890 EFLAGS: 00010246 [ 123.550898][ T5989] RAX: 0000000000080000 RBX: ffff88807c666400 RCX: ffffc90003c91000 [ 123.558883][ T5989] RDX: 0000000000080000 RSI: ffffffff87cfb33c RDI: ffff88807f469f00 [ 123.566869][ T5989] RBP: ffff88807c6663f0 R08: 0000000000000007 R09: 0000000000000000 [ 123.574960][ T5989] R10: 0000000000000000 R11: 6e696c6261736944 R12: ffff88801eb84c00 [ 123.582975][ T5989] R13: 00000000ffffffea R14: 0000000000000400 R15: ffff88802aa88528 [ 123.590969][ T5989] ? dummy_free_request+0x7c/0x90 [ 123.596081][ T5989] uvc_function_bind+0x181a/0x1939 [ 123.601218][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.606971][ T5989] ? __pfx_uvc_function_bind+0x10/0x10 [ 123.612477][ T5989] usb_add_function+0x219/0x890 [ 123.617364][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.623203][ T5989] configfs_composite_bind+0xd83/0x1960 [ 123.628786][ T5989] ? kernfs_create_link+0x1bd/0x240 [ 123.634063][ T5989] gadget_bind_driver+0x28c/0xbf0 [ 123.639108][ T5989] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 123.644778][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.650527][ T5989] ? __pfx_gadget_bind_driver+0x10/0x10 [ 123.656094][ T5989] really_probe+0x241/0xa60 [ 123.660630][ T5989] __driver_probe_device+0x20e/0x450 [ 123.665971][ T5989] driver_probe_device+0x4a/0x140 [ 123.671038][ T5989] __driver_attach+0x21f/0x5b0 [ 123.675835][ T5989] ? __pfx___driver_attach+0x10/0x10 [ 123.681286][ T5989] bus_for_each_dev+0x13e/0x1d0 [ 123.686191][ T5989] ? __pfx_bus_for_each_dev+0x10/0x10 [ 123.691622][ T5989] ? bus_add_driver+0x2b5/0x5b0 [ 123.696506][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.702168][ T5989] bus_add_driver+0x305/0x5b0 [ 123.706872][ T5989] driver_register+0x1e2/0x360 [ 123.711762][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.717814][ T5989] usb_gadget_register_driver_owner+0x132/0x210 [ 123.724088][ T5989] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 123.729753][ T5989] configfs_write_iter+0x302/0x4e0 [ 123.735029][ T5989] vfs_write+0x6ac/0x1050 [ 123.739414][ T5989] ? __pfx_configfs_write_iter+0x10/0x10 [ 123.745087][ T5989] ? __pfx_vfs_write+0x10/0x10 [ 123.749919][ T5989] ksys_write+0x12a/0x250 [ 123.754294][ T5989] ? __pfx_ksys_write+0x10/0x10 [ 123.759177][ T5989] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.764875][ T5989] do_syscall_64+0x115/0x870 [ 123.769499][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.775491][ T5989] RIP: 0033:0x7fdd6199e019 [ 123.779922][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.799721][ T5989] RSP: 002b:00007fdd627fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.808166][ T5989] RAX: ffffffffffffffda RBX: 00007fdd61c25fa0 RCX: 00007fdd6199e019 [ 123.816145][ T5989] RDX: 000000000000000b RSI: 0000200000000900 RDI: 0000000000000007 [ 123.824125][ T5989] RBP: 00007fdd61a3500c R08: 0000000000000000 R09: 0000000000000000 [ 123.832104][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.840102][ T5989] R13: 00007fdd61c26038 R14: 00007fdd61c25fa0 R15: 00007ffd472b7318 [ 123.848094][ T5989] [ 123.851412][ T5989] Kernel Offset: disabled [ 123.855727][ T5989] Rebooting in 86400 seconds..