last executing test programs:

3m13.937464192s ago: executing program 4 (id=1307):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='0x1234\n', 0x7)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

3m13.506686622s ago: executing program 4 (id=1312):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

3m12.478079677s ago: executing program 4 (id=1317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xdddfb8c95d0a80d3}, 0x40000c0)

3m12.011395808s ago: executing program 4 (id=1320):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x112)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

3m9.615345578s ago: executing program 4 (id=1342):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x3000000}, 0x0)

3m6.279522019s ago: executing program 4 (id=1365):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b540)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x24040094)

3m5.028266889s ago: executing program 32 (id=1365):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b540)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x24040094)

6.687341277s ago: executing program 0 (id=2404):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ec", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="e73bc4d48202baeab155a2ae016656a5700b28e14b271fac", 0x18}, {&(0x7f0000001140)="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", 0x12d}, {&(0x7f00000001c0)="d4399c4e3ac489d96161f00690e23ee63faa85158217a485889823dfbb5492db0e272fefc80a54852eb3c90af5", 0x2d}], 0x3}}], 0x3, 0x60cd094)

6.687064597s ago: executing program 3 (id=2405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

6.423832943s ago: executing program 0 (id=2407):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r0)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000001000)='rd_pages=8', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='1', 0x1)
close(r2)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r3, &(0x7f0000001700)='1', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r4, &(0x7f0000001900)='1', 0x1)
close(r4)

6.398886774s ago: executing program 3 (id=2408):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0)
sendfile(r4, r2, 0x0, 0x100000000)

6.110565071s ago: executing program 0 (id=2411):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.013410133s ago: executing program 3 (id=2413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000440)="85", &(0x7f0000000080)=@udp6=r1, 0x1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)

5.855490997s ago: executing program 0 (id=2415):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x4, 0xa}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x20008090)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.727527091s ago: executing program 3 (id=2416):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840)
sendmsg$kcm(r0, 0x0, 0x0)

5.463457917s ago: executing program 3 (id=2418):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

5.198944173s ago: executing program 3 (id=2420):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000001806fffe800000000000000000000000000039fe8000000000000000000000000000aa4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac4790b5"], 0x0)

4.248768136s ago: executing program 2 (id=2425):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

3.916881424s ago: executing program 1 (id=2429):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ec", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="e73bc4d48202baeab155a2ae016656a5700b28e14b271fac", 0x18}, {&(0x7f0000001140)="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", 0x12d}, {&(0x7f00000001c0)="d4399c4e3ac489d96161f00690e23ee63faa85158217a485889823dfbb5492db0e272fefc80a54852eb3c90af5", 0x2d}], 0x3}}], 0x3, 0x60cd094)

3.793096067s ago: executing program 1 (id=2430):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

3.636949891s ago: executing program 1 (id=2432):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r0)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000001000)='rd_pages=8', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='1', 0x1)
close(r2)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r3, &(0x7f0000001700)='1', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r4, &(0x7f0000001900)='1', 0x1)
close(r4)

2.88074848s ago: executing program 1 (id=2433):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000001c00), 0xc)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
io_setup(0x77b, &(0x7f00000017c0)=<r8=>0x0)
io_destroy(r8)
io_setup(0x2278, &(0x7f0000000180))
io_cancel(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x28f3b026f783dd18, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0)
write$UHID_INPUT(r7, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@sysvgroups}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r9, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r9, 0x0)
fdatasync(r9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.719866104s ago: executing program 2 (id=2434):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe)
ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, &(0x7f0000000cc0)})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
keyctl$instantiate(0xc, r3, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/ptmx\x00', 0x20, 0x1}, 0x34, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.880005444s ago: executing program 5 (id=2436):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0)
sendfile(r4, r2, 0x0, 0x100000000)

1.716033178s ago: executing program 5 (id=2437):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2804c044}, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xb33, "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"}, &(0x7f0000001740)=0xb3b)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50)

1.599464591s ago: executing program 1 (id=2438):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1.508757673s ago: executing program 2 (id=2439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000440)="85", &(0x7f0000000080)=@udp6=r1, 0x1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)

1.321233248s ago: executing program 2 (id=2440):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ec", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="e73bc4d48202baeab155a2ae016656a5700b28e14b271fac", 0x18}, {&(0x7f0000001140)="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", 0x12d}, {&(0x7f00000001c0)="d4399c4e3ac489d96161f00690e23ee63faa85158217a485889823dfbb5492db0e272fefc80a54852eb3c90af5", 0x2d}], 0x3}}], 0x3, 0x60cd094)

1.301590668s ago: executing program 5 (id=2441):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840)
sendmsg$kcm(r0, 0x0, 0x0)

1.107361643s ago: executing program 2 (id=2442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

1.106984403s ago: executing program 5 (id=2443):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000001000)='rd_pages=8', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='1', 0x1)
close(r2)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r3, &(0x7f0000001700)='1', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r4, &(0x7f0000001900)='1', 0x1)
close(r4)

1.098968503s ago: executing program 0 (id=2444):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe)
ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, &(0x7f0000000cc0)})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
keyctl$instantiate(0xc, r3, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/ptmx\x00', 0x20, 0x1}, 0x34, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

949.316747ms ago: executing program 5 (id=2445):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

136.120057ms ago: executing program 1 (id=2446):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="640f0177f6802c05f30f1a5feb6626650f236c660f38811c6736673685e167d736660f3825a20000f30f1eef0f01df", 0x2f}], 0x1, 0x57, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x13, 0xcb, 0x6, 0x0, 0xe, 0x6, 0xf4}, {0x2, 0x50000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x8, 0x0, 0x3}, {0x41000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x9000, 0x9, 0x10, 0x80, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9, 0x1}, {0x26000, 0xffff1000, 0xd, 0x7, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x74, 0x8, 0x0, 0x2, 0x1c, 0xe, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x7, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa5, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

116.476067ms ago: executing program 0 (id=2447):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r0)
socket$unix(0x1, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000680)='dummy_udc.0\n', 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x2400c880)

115.964287ms ago: executing program 2 (id=2448):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0)
sendfile(r4, r2, 0x0, 0x100000000)

0s ago: executing program 5 (id=2449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3a0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x20004881)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x40)
recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000040)=""/199, 0xc7}], 0x2}, 0x400000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x400800}], 0x3, 0x20000, 0x0)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4107}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008080)

kernel console output (not intermixed with test programs):

4.662135][ T4378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.692508][ T8810] EXT4-fs (loop2): Remounting filesystem read-only
[  294.699690][ T5491] EXT4-fs (loop2): Remounting filesystem read-only
[  294.715797][ T8810] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  294.726114][ T5491] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  294.736517][ T5491] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0
[  294.775730][ T8812] bond0 speed is unknown, defaulting to 1000
[  294.797321][ T4378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.808171][ T8810] EXT4-fs (loop2): Remounting filesystem read-only
[  294.825262][ T8810] EXT4-fs (loop2): 1 orphan inode deleted
[  294.825501][ T5491] EXT4-fs (loop2): Remounting filesystem read-only
[  294.853766][ T8810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  294.978356][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  295.055432][ T4324] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  295.245641][ T4324] usb 4-1: Using ep0 maxpacket: 16
[  295.253335][ T4324] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  295.270994][ T4324] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  295.314198][ T4324] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  295.349211][ T4324] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  295.382789][ T4324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  295.414390][ T4324] usb 4-1: config 0 has no interface number 0
[  295.438711][ T4324] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  295.475430][ T4324] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  295.508187][ T4324] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  295.556237][ T4324] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  295.569869][ T4324] usb 4-1: config 0 interface 125 has no altsetting 0
[  295.577247][ T4324] usb 4-1: config 0 interface 125 has no altsetting 2
[  295.587440][ T4324] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  295.605807][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.613972][ T4324] usb 4-1: Product: syz
[  295.618797][ T4324] usb 4-1: Manufacturer: syz
[  295.623480][ T4324] usb 4-1: SerialNumber: syz
[  295.655658][ T4324] usb 4-1: config 0 descriptor??
[  295.706535][ T4324] usb 4-1: selecting invalid altsetting 2
[  296.080495][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.139609][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.805743][ T4324] get_1284_register timeout
[  296.810724][    C1] usb 4-1: async_complete: urb error -104
[  296.816539][    C1] usb 4-1: async_complete: urb error -104
[  296.822315][    C1] usb 4-1: async_complete: urb error -104
[  296.971420][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.983290][ T4324] net_ratelimit: 8 callbacks suppressed
[  296.983303][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.008585][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.082802][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.695864][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.704089][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.005667][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.089227][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.160545][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.176574][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.185279][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.193527][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.203561][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.211133][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.344576][ T4378] device hsr_slave_0 left promiscuous mode
[  298.355116][ T4378] device hsr_slave_1 left promiscuous mode
[  298.428829][ T4378] device veth1_macvtap left promiscuous mode
[  298.455243][ T4378] device veth0_macvtap left promiscuous mode
[  298.474762][ T4378] device veth0_vlan left promiscuous mode
[  298.742444][ T6582] usb 4-1: USB disconnect, device number 18
[  299.126318][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.459735][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.503213][ T8912] loop3: detected capacity change from 0 to 256
[  299.772132][ T8920] loop2: detected capacity change from 0 to 1024
[  299.792555][ T8920] EXT4-fs: inline encryption not supported
[  299.851289][ T8920] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.1381: lblock 1 mapped to illegal pblock 1 (length 1)
[  299.875533][ T8920] EXT4-fs (loop2): Remounting filesystem read-only
[  299.883093][ T8920] Quota error (device loop2): write_blk: dquota write failed
[  299.955528][ T8920] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  300.005007][ T8920] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1381: Failed to acquire dquot type 0
[  300.078888][ T8920] EXT4-fs (loop2): Remounting filesystem read-only
[  300.109016][ T8920] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1381: Freeing blocks not in datazone - block = 0, count = 4096
[  300.167506][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.172628][ T8920] EXT4-fs (loop2): Remounting filesystem read-only
[  300.192947][ T8920] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1381: Invalid inode bitmap blk 0 in block_group 0
[  300.211534][ T5381] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  300.241951][ T5381] EXT4-fs (loop2): Remounting filesystem read-only
[  300.242524][ T8920] EXT4-fs (loop2): Remounting filesystem read-only
[  300.252812][ T5381] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  300.265722][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  300.286351][ T8920] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  300.294913][ T5381] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0
[  300.296382][ T8920] EXT4-fs (loop2): Remounting filesystem read-only
[  300.326171][ T5381] EXT4-fs (loop2): Remounting filesystem read-only
[  300.334468][ T8920] EXT4-fs (loop2): 1 orphan inode deleted
[  300.340308][ T8920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  300.422051][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  300.499291][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.168860][ T4378] bond0 (unregistering): Released all slaves
[  301.283336][ T8891] bond0 speed is unknown, defaulting to 1000
[  302.247790][ T4320] net_ratelimit: 5 callbacks suppressed
[  302.247809][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.268329][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.335744][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[  302.439063][ T8891] chnl_net:caif_netlink_parms(): no params data found
[  302.573108][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.710120][ T8968] binder: 8963:8968 ioctl c0306201 0 returned -14
[  303.415509][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.492989][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.538435][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.591831][ T8891] device bridge_slave_0 entered promiscuous mode
[  303.618824][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.629502][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.681182][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.713760][ T8891] device bridge_slave_1 entered promiscuous mode
[  303.765691][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.773904][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.830247][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.882990][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.003753][ T8891] team0: Port device team_slave_0 added
[  304.041237][ T8891] team0: Port device team_slave_1 added
[  304.139079][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.162215][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.236200][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.416866][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  304.768933][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.777868][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.917917][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.003510][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.018742][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.114824][ T8891] device hsr_slave_0 entered promiscuous mode
[  305.149843][ T8891] device hsr_slave_1 entered promiscuous mode
[  305.201697][ T9017] loop2: detected capacity change from 0 to 256
[  305.258341][ T4371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  305.415441][ T9021] binder: 9014:9021 ioctl c0306201 0 returned -14
[  306.089680][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.485519][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[  306.549619][ T8891] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  306.578783][ T8891] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  306.619340][ T8891] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  306.639734][ T8891] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  306.916117][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.951247][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  306.968586][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.011508][ T8891] 8021q: adding VLAN 0 to HW filter on device team0
[  307.044844][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.138909][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.179517][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.187990][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.284073][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  307.293035][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.320911][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.345888][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.353044][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.378814][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  307.397602][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.419136][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.434786][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.474170][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  307.501842][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.530878][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.551566][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  307.564932][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  307.600468][ T8891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  307.639882][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  307.651708][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  307.664973][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  307.895494][ T9067] binder: 9058:9067 ioctl c0306201 0 returned -14
[  308.303767][ T6582] net_ratelimit: 5 callbacks suppressed
[  308.303784][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.631171][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.133133][ T9093] loop3: detected capacity change from 0 to 512
[  309.276983][ T9093] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1424: iget: bad i_size value: 38620345925642
[  309.392642][ T9093] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1424: couldn't read orphan inode 15 (err -117)
[  309.653175][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  309.688968][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.753127][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  309.846220][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.046005][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.056217][ T9093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  310.085790][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.094083][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.216098][ T9093] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz.3.1424: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  310.345877][ T9093] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  310.726454][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.163408][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.216108][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.256095][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  311.765841][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.331723][ T9159] binder: 9152:9159 ioctl c0306201 0 returned -14
[  313.365937][ T6876] net_ratelimit: 5 callbacks suppressed
[  313.365953][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.636425][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  313.677459][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  313.880649][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  314.009110][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.094852][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.139700][ T8891] device veth0_vlan entered promiscuous mode
[  314.157446][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.407709][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.446817][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.543910][ T8891] device veth1_vlan entered promiscuous mode
[  314.618479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  314.666449][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  314.706120][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.756774][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.800650][ T8891] device veth0_macvtap entered promiscuous mode
[  314.831247][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  314.859642][ T8891] device veth1_macvtap entered promiscuous mode
[  314.937376][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.946343][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  314.955025][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.042263][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.055989][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.085991][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.133293][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.145205][ T8891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.185371][ T8891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.241419][ T8891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.295975][ T8891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.478615][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.196951][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.206258][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.257822][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.315394][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.334996][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.358990][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  316.439932][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.459282][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.479394][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  316.487591][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.743905][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'.
[  316.801073][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'.
[  316.906532][ T9234] db_root: cannot be changed because it's in use
[  316.954873][ T9234] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  316.968277][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  316.974661][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  317.367388][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.438284][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  318.425522][ T6870] net_ratelimit: 1 callbacks suppressed
[  318.425541][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.610031][ T9268] db_root: cannot be changed because it's in use
[  318.642516][ T9268] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  318.653059][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.216999][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.413698][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.473108][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.685707][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.948569][ T9298] fuse: Bad value for 'fd'
[  320.080673][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'.
[  320.113566][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'.
[  320.162671][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'.
[  320.175948][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.497913][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.262585][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.447658][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.521558][ T9337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  323.057492][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'.
[  323.146838][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'.
[  323.395969][ T9377] device syzkaller0 entered promiscuous mode
[  324.165610][ T6870] net_ratelimit: 7 callbacks suppressed
[  324.165625][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.407331][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.210005][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.298109][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.446337][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.072248][ T9412] bond0 speed is unknown, defaulting to 1000
[  326.165884][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.245985][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.747508][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.195828][ T4846] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  327.208183][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.217390][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.342506][ T9457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1517'.
[  327.389904][ T9457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1517'.
[  327.415578][ T4846] usb 6-1: Using ep0 maxpacket: 16
[  327.426862][ T4846] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  327.455395][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  327.463671][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  327.477917][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  327.495115][ T4846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  327.504367][ T4846] usb 6-1: config 0 has no interface number 0
[  327.537941][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  327.563367][ T9465] dummy_hcd dummy_hcd.0: remove, state 4
[  327.576327][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  327.592415][ T9465] usb usb1: USB disconnect, device number 1
[  327.600806][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  327.642953][ T4846] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  327.687975][ T9465] dummy_hcd dummy_hcd.0: stopped
[  327.694966][ T4846] usb 6-1: config 0 interface 125 has no altsetting 0
[  327.707140][ T9465] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  327.719267][ T4846] usb 6-1: config 0 interface 125 has no altsetting 2
[  327.745020][ T4846] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  327.767412][ T4846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.785563][ T4846] usb 6-1: Product: syz
[  327.789794][ T4846] usb 6-1: Manufacturer: syz
[  327.809143][ T4846] usb 6-1: SerialNumber: syz
[  327.833002][ T4846] usb 6-1: config 0 descriptor??
[  327.867440][ T4846] usb 6-1: selecting invalid altsetting 2
[  328.278770][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.295705][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.393310][ T6876] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  328.537914][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.555757][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.575602][ T6876] usb 3-1: Using ep0 maxpacket: 16
[  328.583477][ T6876] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10
[  328.624200][ T6876] usb 3-1: config 0 interface 0 has no altsetting 0
[  328.648257][ T6876] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  328.673670][ T6876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.703516][ T6876] usb 3-1: config 0 descriptor??
[  328.817055][    C0] usb 6-1: async_complete: urb error -71
[  328.822854][    C0] usb 6-1: async_complete: urb error -71
[  328.830693][ T4846] get_1284_register: usb error -71
[  328.841160][ T4846] usb 6-1: USB disconnect, device number 2
[  328.932457][ T6876] usbhid 3-1:0.0: can't add hid device: -71
[  328.949448][ T6876] usbhid: probe of 3-1:0.0 failed with error -71
[  328.984914][ T6876] usb 3-1: USB disconnect, device number 14
[  329.208693][ T4846] net_ratelimit: 5 callbacks suppressed
[  329.208710][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.365883][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.450675][ T9527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1535'.
[  329.501313][ T9527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1535'.
[  329.926061][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.405696][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.786436][ T9579] netlink: 'syz.1.1552': attribute type 10 has an invalid length.
[  330.904169][ T9579] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  331.377112][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.669875][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.678447][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.019301][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1559'.
[  332.071119][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1559'.
[  332.245560][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.328618][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.422551][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.890855][ T9613] mmap: syz.3.1560 (9613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  333.022620][ T9637] netlink: 'syz.2.1565': attribute type 10 has an invalid length.
[  333.051219][ T9637] device syz_tun entered promiscuous mode
[  333.117769][ T9637] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  333.862168][ T9659] loop5: detected capacity change from 0 to 1024
[  333.933029][ T9659] EXT4-fs: inline encryption not supported
[  333.948220][ T9667] binder: 9660:9667 ioctl c0306201 0 returned -14
[  333.960745][ T9665] netlink: 'syz.0.1576': attribute type 10 has an invalid length.
[  334.008891][ T9659] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #3: block 1: comm syz.5.1574: lblock 1 mapped to illegal pblock 1 (length 1)
[  334.048819][ T9659] EXT4-fs (loop5): Remounting filesystem read-only
[  334.055536][ T9659] Quota error (device loop5): write_blk: dquota write failed
[  334.063150][ T9659] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  334.073717][ T9659] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1574: Failed to acquire dquot type 0
[  334.087702][ T9659] EXT4-fs (loop5): Remounting filesystem read-only
[  334.098902][ T9659] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.1574: Freeing blocks not in datazone - block = 0, count = 4096
[  334.127135][ T9659] EXT4-fs (loop5): Remounting filesystem read-only
[  334.141694][ T9659] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1574: Invalid inode bitmap blk 0 in block_group 0
[  334.158402][ T9659] EXT4-fs (loop5): Remounting filesystem read-only
[  334.163064][ T6184] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  334.165098][ T9659] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  334.188992][ T9659] EXT4-fs (loop5): Remounting filesystem read-only
[  334.196060][ T9659] EXT4-fs (loop5): 1 orphan inode deleted
[  334.222011][ T9659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  334.238181][ T6184] EXT4-fs (loop5): Remounting filesystem read-only
[  334.259517][ T6184] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  334.296945][ T6184] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0
[  334.348249][ T6184] EXT4-fs (loop5): Remounting filesystem read-only
[  334.420995][ T8891] EXT4-fs (loop5): unmounting filesystem.
[  334.565937][ T6876] net_ratelimit: 3 callbacks suppressed
[  334.565953][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.741291][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.888203][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.375899][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.605626][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.664132][ T9725] binder: 9723:9725 ioctl c0306201 0 returned -14
[  335.928128][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.234505][ T9745] Config c/1 of g_uac2 needs at least one function.
[  336.262737][ T9745] udc usbip-vudc.0: failed to start g_uac2: -22
[  336.285853][ T9745] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  336.309410][ T9745] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  336.526284][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.544219][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.573369][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.602385][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.624900][ T9758] loop2: detected capacity change from 0 to 1024
[  336.692018][ T9758] EXT4-fs: inline encryption not supported
[  336.737226][ T9758] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.1602: lblock 1 mapped to illegal pblock 1 (length 1)
[  336.778801][ T9758] EXT4-fs (loop2): Remounting filesystem read-only
[  336.785508][ T9758] Quota error (device loop2): write_blk: dquota write failed
[  336.792947][ T9758] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  336.803015][ T9758] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1602: Failed to acquire dquot type 0
[  336.830049][ T9758] EXT4-fs (loop2): Remounting filesystem read-only
[  336.838054][ T9758] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1602: Freeing blocks not in datazone - block = 0, count = 4096
[  336.880456][ T9758] EXT4-fs (loop2): Remounting filesystem read-only
[  336.887666][ T9758] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1602: Invalid inode bitmap blk 0 in block_group 0
[  336.900671][ T9758] EXT4-fs (loop2): Remounting filesystem read-only
[  336.909059][ T6184] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  336.923318][ T9758] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  336.932089][ T6184] EXT4-fs (loop2): Remounting filesystem read-only
[  336.940420][ T6184] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  336.949215][ T9758] EXT4-fs (loop2): Remounting filesystem read-only
[  336.956408][ T6184] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0
[  336.977244][ T9758] EXT4-fs (loop2): 1 orphan inode deleted
[  336.983068][ T9758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  337.028946][ T6184] EXT4-fs (loop2): Remounting filesystem read-only
[  337.078357][ T9778] netlink: 'syz.1.1607': attribute type 10 has an invalid length.
[  337.252637][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  337.469355][ T9791] netlink: 'syz.2.1610': attribute type 10 has an invalid length.
[  337.788446][ T9797] Config c/1 of g_uac2 needs at least one function.
[  337.865886][ T9797] udc usbip-vudc.0: failed to start g_uac2: -22
[  337.872595][ T9797] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  337.915863][ T9797] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  337.950871][ T9804] db_root: cannot be changed because it's in use
[  337.964526][ T9804] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  338.578846][ T9825] loop5: detected capacity change from 0 to 1024
[  338.611940][ T9825] EXT4-fs: inline encryption not supported
[  338.682744][ T9825] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #3: block 1: comm syz.5.1620: lblock 1 mapped to illegal pblock 1 (length 1)
[  338.754512][ T9825] EXT4-fs (loop5): Remounting filesystem read-only
[  338.813871][ T9825] Quota error (device loop5): write_blk: dquota write failed
[  338.826813][ T9825] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  338.875585][ T9825] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1620: Failed to acquire dquot type 0
[  338.921334][ T9825] EXT4-fs (loop5): Remounting filesystem read-only
[  338.978056][ T9825] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.1620: Freeing blocks not in datazone - block = 0, count = 4096
[  339.037837][ T9825] EXT4-fs (loop5): Remounting filesystem read-only
[  339.086510][ T9825] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1620: Invalid inode bitmap blk 0 in block_group 0
[  339.141866][   T47] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  339.163322][ T9825] EXT4-fs (loop5): Remounting filesystem read-only
[  339.176731][ T9825] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  339.190465][ T9838] netlink: 'syz.2.1623': attribute type 10 has an invalid length.
[  339.203156][   T47] EXT4-fs (loop5): Remounting filesystem read-only
[  339.214164][ T9825] EXT4-fs (loop5): Remounting filesystem read-only
[  339.235401][   T47] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  339.237117][ T9825] EXT4-fs (loop5): 1 orphan inode deleted
[  339.263830][   T47] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0
[  339.299338][ T9825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  339.314548][   T47] EXT4-fs (loop5): Remounting filesystem read-only
[  339.495024][ T9843] Config c/1 of g_uac2 needs at least one function.
[  339.523868][ T8891] EXT4-fs (loop5): unmounting filesystem.
[  339.542562][ T9843] udc usbip-vudc.0: failed to start g_uac2: -22
[  339.562867][ T9843] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  339.627603][ T9843] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  340.156652][ T6876] net_ratelimit: 12 callbacks suppressed
[  340.156671][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.171384][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.180234][ T9854] binder: 9849:9854 ioctl c0306201 0 returned -14
[  340.732469][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'.
[  340.895579][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.961812][ T9889] Config c/1 of g_uac2 needs at least one function.
[  341.004739][ T9889] udc usbip-vudc.0: failed to start g_uac2: -22
[  341.037226][ T9889] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  341.053295][ T9893] db_root: cannot be changed because it's in use
[  341.065833][ T9889] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  341.221643][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.240264][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.451932][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.010688][ T4846] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  342.221216][ T4846] usb 4-1: unable to get BOS descriptor or descriptor too short
[  342.239479][ T4846] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  342.265548][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.275258][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.282977][ T4846] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[  342.309934][ T4846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.345716][ T4846] usb 4-1: Product: syz
[  342.358203][ T4846] usb 4-1: Manufacturer: syz
[  342.368623][ T4846] usb 4-1: SerialNumber: syz
[  342.568059][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.582351][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.639055][ T9938] Config c/1 of g_uac2 needs at least one function.
[  342.648062][ T9938] udc usbip-vudc.0: failed to start g_uac2: -22
[  342.655414][ T9938] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  342.672095][ T9938] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  342.883930][ T9952] overlayfs: failed to clone upperpath
[  342.955396][ T4846] usb 4-1: reset high-speed USB device number 19 using dummy_hcd
[  343.064855][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'.
[  343.388944][ T9970] Config c/1 of g_uac2 needs at least one function.
[  343.399329][ T9970] udc usbip-vudc.0: failed to start g_uac2: -22
[  343.408351][ T9970] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  343.422130][ T9970] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  343.692083][ T4846] usb 4-1: device descriptor read/64, error -71
[  343.816641][ T9987] bond0 speed is unknown, defaulting to 1000
[  344.006227][ T4846] usb 4-1: reset high-speed USB device number 19 using dummy_hcd
[  344.257791][ T4846] usb 4-1: device firmware changed
[  344.281743][ T4846] snd-usb-audio: probe of 4-1:1.0 failed with error -11
[  344.332713][ T4846] usb 4-1: USB disconnect, device number 19
[  344.560232][ T4846] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  345.168228][ T6582] net_ratelimit: 11 callbacks suppressed
[  345.168247][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.182181][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.273483][ T4846] usb 4-1: device descriptor read/all, error -71
[  345.501908][T10012] Config c/1 of g_uac2 needs at least one function.
[  345.525651][T10012] udc usbip-vudc.0: failed to start g_uac2: -22
[  345.546365][T10012] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  345.562412][T10012] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  345.605845][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.685824][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.947209][T10030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1689'.
[  345.976006][T10030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1689'.
[  346.297414][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.306600][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.428934][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.067181][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.178891][T10061] Config c/1 of g_uac2 needs at least one function.
[  347.218467][T10061] udc usbip-vudc.0: failed to start g_uac2: -22
[  347.239663][T10061] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  347.303540][T10061] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  347.368267][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.377627][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.556378][T10078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1702'.
[  347.590197][T10078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1702'.
[  347.765466][ T4289] Bluetooth: hci1: command 0x0411 tx timeout
[  348.771126][T10109] device syzkaller0 entered promiscuous mode
[  348.797452][T10116] Config c/1 of g_uac2 needs at least one function.
[  348.804225][T10116] udc usbip-vudc.0: failed to start g_uac2: -22
[  348.847302][T10116] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  348.883141][T10116] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  349.350480][T10101] overlayfs: statfs failed on './file0'
[  350.580590][ T6582] net_ratelimit: 6 callbacks suppressed
[  350.580607][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.603572][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.614612][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.623525][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.690924][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.770314][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.368818][T10162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1723'.
[  352.380759][T10164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1723'.
[  352.528016][T10186] Config c/1 of g_uac2 needs at least one function.
[  352.534826][T10186] udc usbip-vudc.0: failed to start g_uac2: -22
[  352.555402][T10186] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  352.599320][T10186] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  352.653156][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.664894][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.835374][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.095623][ T6582] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  353.294195][ T6582] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  353.303736][ T6582] usb 6-1: config 0 has no interface number 0
[  353.311532][ T6582] usb 6-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  353.324220][ T6582] usb 6-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.335588][ T6582] usb 6-1: config 0 interface 1 has no altsetting 0
[  353.342407][ T6582] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  353.354681][ T6582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.386500][ T6582] usb 6-1: config 0 descriptor??
[  353.430687][T10203] netlink: 'syz.3.1734': attribute type 10 has an invalid length.
[  353.440313][T10203] device syz_tun entered promiscuous mode
[  353.484361][T10203] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  353.703845][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.742958][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1738'.
[  353.793963][T10211] device syzkaller0 entered promiscuous mode
[  353.802198][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1738'.
[  354.025886][ T6582] uclogic 0003:2179:0053.0001: failed retrieving string descriptor #100: -71
[  354.034880][ T6582] uclogic 0003:2179:0053.0001: failed retrieving pen parameters: -71
[  354.043445][ T6582] uclogic 0003:2179:0053.0001: pen probing failed: -71
[  354.060188][ T6582] uclogic 0003:2179:0053.0001: failed probing parameters: -71
[  354.068345][ T6582] uclogic: probe of 0003:2179:0053.0001 failed with error -71
[  354.093200][ T6582] usb 6-1: USB disconnect, device number 3
[  354.901528][T10236] overlayfs: failed to clone lowerpath
[  354.926853][T10236] overlayfs: failed to clone lowerpath
[  355.802202][ T6873] net_ratelimit: 4 callbacks suppressed
[  355.802219][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.816526][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.929322][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.009535][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.641442][T10216] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1740'.
[  356.651211][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.812855][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.887535][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.915922][T10254] netlink: 'syz.1.1750': attribute type 10 has an invalid length.
[  357.013961][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1753'.
[  357.056728][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1753'.
[  357.242696][T10270] bond0 speed is unknown, defaulting to 1000
[  357.466637][  T126] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  357.705497][  T126] usb 3-1: Using ep0 maxpacket: 32
[  357.721424][  T126] usb 3-1: unable to get BOS descriptor or descriptor too short
[  357.888805][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.926872][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.963706][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.024054][  T126] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  358.060998][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.095406][  T126] usb 3-1: Product: syz
[  358.099645][  T126] usb 3-1: Manufacturer: syz
[  358.125355][  T126] usb 3-1: SerialNumber: syz
[  358.361436][T10293] device syzkaller0 entered promiscuous mode
[  358.573413][  T126] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  358.633176][  T126] snd-usb-audio: probe of 3-1:1.1 failed with error -22
[  358.762974][  T126] snd-usb-audio: probe of 3-1:1.2 failed with error -22
[  358.796965][  T126] usb 3-1: USB disconnect, device number 15
[  358.841032][ T5478] udevd[5478]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.015597][ T4846] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  359.215504][ T4846] usb 6-1: Using ep0 maxpacket: 16
[  359.222613][ T4846] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  359.236417][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  359.244871][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  359.253513][ T4846] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  359.262123][ T4846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  359.271406][ T4846] usb 6-1: config 0 has no interface number 0
[  359.277955][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  359.292906][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  359.305416][ T4846] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  359.315527][ T4846] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  359.336579][ T4846] usb 6-1: config 0 interface 125 has no altsetting 0
[  359.343607][ T4846] usb 6-1: config 0 interface 125 has no altsetting 2
[  359.357720][ T4846] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  359.372265][ T4846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.380583][ T4846] usb 6-1: Product: syz
[  359.384780][ T4846] usb 6-1: Manufacturer: syz
[  359.395209][ T4846] usb 6-1: SerialNumber: syz
[  359.405897][ T4846] usb 6-1: config 0 descriptor??
[  359.429869][ T4846] usb 6-1: selecting invalid altsetting 2
[  360.485758][ T4846] get_1284_register timeout
[  360.495493][    C0] usb 6-1: async_complete: urb error -104
[  360.501326][    C0] usb 6-1: async_complete: urb error -104
[  360.504120][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.507130][    C0] usb 6-1: async_complete: urb error -104
[  360.542494][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.792488][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.801651][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.967250][ T4839] net_ratelimit: 9 callbacks suppressed
[  360.967262][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.368565][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.376973][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.985151][ T6873] usb 6-1: USB disconnect, device number 4
[  362.018941][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.512617][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.521781][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.532992][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.541654][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.555737][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1783'.
[  363.644180][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1783'.
[  363.744801][T10385] db_root: cannot be changed because it's in use
[  363.772286][T10374] device syzkaller0 entered promiscuous mode
[  363.780118][T10385] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  364.005687][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.566105][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.333828][ T6582] net_ratelimit: 4 callbacks suppressed
[  366.333844][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.647081][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.045882][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.047381][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'.
[  367.068939][T10400] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.379338][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.448341][T10443] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1805'.
[  367.534347][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.731745][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.543964][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.555990][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.806482][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.841685][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1810'.
[  369.605764][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.073085][T10514] netlink: 'syz.3.1823': attribute type 10 has an invalid length.
[  370.212801][T10510] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  371.605827][  T126] net_ratelimit: 4 callbacks suppressed
[  371.605860][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.673143][T10533] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1828'.
[  371.727054][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1825'.
[  371.773688][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.925587][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.019183][T10545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.027737][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.067270][T10545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.092789][T10556] db_root: cannot be changed because it's in use
[  372.137183][T10545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.146027][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.156855][T10556] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  372.182789][T10544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.045461][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.475457][T10579] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1840'.
[  373.790570][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'.
[  374.358296][T10602] netlink: 'syz.3.1848': attribute type 10 has an invalid length.
[  374.476384][T10607] binder: 10597:10607 ioctl c0306201 0 returned -14
[  374.601896][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'.
[  375.589205][T10622] user requested TSC rate below hardware speed
[  375.799368][T10635] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1856'.
[  376.682009][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'.
[  377.085618][ T6870] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  377.126775][  T126] net_ratelimit: 18 callbacks suppressed
[  377.126791][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.283616][ T6870] usb 3-1: config 0 interface 0 has no altsetting 0
[  377.301357][ T6870] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  377.330014][ T6870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.387113][ T6870] usb 3-1: config 0 descriptor??
[  377.405794][T10652] db_root: cannot be changed because it's in use
[  377.442884][T10652] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  377.489351][T10654] netlink: 'syz.1.1862': attribute type 10 has an invalid length.
[  377.614570][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.685830][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.869214][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.879970][ T6870] hid (null): global environment stack underflow
[  377.886647][ T6870] hid (null): global environment stack underflow
[  377.893012][ T6870] hid (null): invalid report_size 13705
[  377.902131][ T6870] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review
[  377.911348][ T6870] bigben 0003:146B:0902.0002: global environment stack underflow
[  377.919255][ T6870] bigben 0003:146B:0902.0002: item 0 0 1 11 parsing failed
[  377.927223][ T6870] bigben 0003:146B:0902.0002: parse failed
[  377.933151][ T6870] bigben: probe of 0003:146B:0902.0002 failed with error -22
[  378.067495][ T4839] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  378.345696][ T4839] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  378.408005][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.408669][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.414567][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  378.446801][ T4839] usb 4-1: config 0 has no interface number 0
[  378.542167][ T4839] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.595207][ T4839] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.630644][ T4839] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  378.670605][ T4839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.715451][ T6582] usb 3-1: USB disconnect, device number 16
[  378.749880][ T4839] usb 4-1: config 0 descriptor??
[  378.757450][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.968265][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.023463][T10675] netlink: 'syz.0.1868': attribute type 10 has an invalid length.
[  379.790834][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.824491][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.834883][ T4839] prodikeys 0003:041E:2801.0003: item fetching failed at offset 5/7
[  379.843544][ T4839] prodikeys 0003:041E:2801.0003: hid parse failed
[  379.851697][ T4839] prodikeys: probe of 0003:041E:2801.0003 failed with error -22
[  379.990346][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'.
[  380.005792][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.111014][ T4839] usb 4-1: USB disconnect, device number 22
[  380.155142][T10690] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  381.381729][T10714] binder: 10708:10714 ioctl c0306201 0 returned -14
[  381.433187][T10716] netlink: 'syz.1.1881': attribute type 10 has an invalid length.
[  381.445657][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'.
[  381.537276][T10720] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.546241][T10720] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.555520][T10720] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.564271][T10720] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.703341][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'.
[  382.254646][ T6582] net_ratelimit: 11 callbacks suppressed
[  382.254663][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.269028][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.326226][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.336718][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.477511][T10741] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1886'.
[  382.895546][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.904843][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.285644][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.294057][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.337165][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.445537][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.420424][T10773] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1900'.
[  387.095476][ T6875] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  387.285514][ T6875] usb 3-1: Using ep0 maxpacket: 16
[  387.301205][ T6875] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  387.340916][ T6875] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  387.388956][ T6875] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  387.494528][ T6875] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  387.509537][ T6875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  387.519964][ T6875] usb 3-1: config 0 has no interface number 0
[  387.530572][ T6875] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  387.543238][ T6875] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  387.558568][ T6875] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  387.569944][ T6875] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  387.588297][ T6875] usb 3-1: config 0 interface 125 has no altsetting 0
[  387.595222][ T6875] usb 3-1: config 0 interface 125 has no altsetting 2
[  387.665185][ T6875] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  387.679650][ T6875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.688253][ T6875] usb 3-1: Product: syz
[  387.692468][ T6875] usb 3-1: Manufacturer: syz
[  387.701267][ T4839] net_ratelimit: 12 callbacks suppressed
[  387.701281][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.705800][ T6875] usb 3-1: SerialNumber: syz
[  387.898796][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.908240][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.925425][ T6875] usb 3-1: config 0 descriptor??
[  387.933635][ T6875] usb 3-1: selecting invalid altsetting 2
[  388.095827][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.729427][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.748612][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.964686][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.976440][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.004479][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.077707][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.085904][ T6875] get_1284_register timeout
[  389.092507][    C1] usb 3-1: async_complete: urb error -104
[  389.098340][    C1] usb 3-1: async_complete: urb error -104
[  389.106461][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.125536][T10763] netlink: 'syz.5.1895': attribute type 10 has an invalid length.
[  389.242022][T10763] device syz_tun entered promiscuous mode
[  389.568164][T10763] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  389.858276][ T6873] usb 3-1: USB disconnect, device number 17
[  390.086475][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.178798][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.515983][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.745449][ T6873] net_ratelimit: 3 callbacks suppressed
[  392.745465][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.805501][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.526916][ T4320] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  393.550486][T10878] netlink: 'syz.5.1932': attribute type 10 has an invalid length.
[  393.755704][ T4320] usb 3-1: Using ep0 maxpacket: 16
[  393.778384][ T4320] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  393.848617][ T4320] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  393.915581][ T4320] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  393.962967][ T4320] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  393.983739][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  394.013162][ T4320] usb 3-1: config 0 has no interface number 0
[  394.029449][ T4320] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  394.065053][ T4320] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  394.137968][ T4320] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  394.966452][ T4320] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  394.980978][ T4320] usb 3-1: config 0 interface 125 has no altsetting 0
[  394.988776][ T4320] usb 3-1: config 0 interface 125 has no altsetting 2
[  394.997170][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.005586][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.023121][ T4320] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  395.033616][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.036728][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.042508][ T4320] usb 3-1: Product: syz
[  395.050088][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.050256][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.082032][ T4320] usb 3-1: Manufacturer: syz
[  395.087024][ T4320] usb 3-1: SerialNumber: syz
[  395.104171][ T4320] usb 3-1: config 0 descriptor??
[  395.129062][ T4320] usb 3-1: selecting invalid altsetting 2
[  395.147420][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.529264][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.559957][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.873818][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.953438][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.100706][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.109344][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.165358][ T4320] get_1284_register timeout
[  396.170115][    C0] usb 3-1: async_complete: urb error -104
[  396.175977][    C0] usb 3-1: async_complete: urb error -104
[  397.463470][T10943] netlink: 'syz.5.1950': attribute type 10 has an invalid length.
[  397.874798][ T4320] usb 3-1: USB disconnect, device number 18
[  398.015667][ T4837] net_ratelimit: 3 callbacks suppressed
[  398.015692][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.175699][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.413406][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.205682][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.251127][T10987] netlink: 'syz.5.1964': attribute type 10 has an invalid length.
[  399.312137][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1963'.
[  399.493090][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.525791][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.608270][ T4837] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  400.840659][ T4837] usb 3-1: Using ep0 maxpacket: 16
[  400.848109][ T4837] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  400.920771][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  400.979839][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  401.033190][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  401.065095][ T4837] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  401.101618][ T4837] usb 3-1: config 0 has no interface number 0
[  401.144421][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  401.229969][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  401.281135][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  401.341614][ T4837] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  401.406406][ T4837] usb 3-1: config 0 interface 125 has no altsetting 0
[  401.413255][ T4837] usb 3-1: config 0 interface 125 has no altsetting 2
[  401.484057][ T4837] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  401.520644][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.537506][ T4837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.561358][ T4837] usb 3-1: Product: syz
[  401.580941][ T4837] usb 3-1: Manufacturer: syz
[  401.593949][ T4837] usb 3-1: SerialNumber: syz
[  401.613491][ T4837] usb 3-1: config 0 descriptor??
[  401.623920][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.633113][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.653880][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.675948][ T4837] usb 3-1: selecting invalid altsetting 2
[  401.758936][T11024] netlink: 'syz.0.1978': attribute type 10 has an invalid length.
[  401.858831][T11028] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1979'.
[  402.069149][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.108846][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.446019][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.473155][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.712307][T11049] netlink: 'syz.3.1986': attribute type 2 has an invalid length.
[  402.726119][ T4837] get_1284_register timeout
[  402.730838][    C0] usb 3-1: async_complete: urb error -104
[  402.736708][    C0] usb 3-1: async_complete: urb error -104
[  402.864539][ T6876] usb 3-1: USB disconnect, device number 19
[  403.613430][ T6876] net_ratelimit: 5 callbacks suppressed
[  403.613446][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.863683][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.254432][T11088] binder: 11078:11088 ioctl c0306201 0 returned -14
[  404.322784][T11092] netlink: 'syz.3.2002': attribute type 2 has an invalid length.
[  404.645887][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.654196][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.662363][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.730354][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.745526][ T6876] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  404.870345][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2006'.
[  404.885608][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.935357][ T6876] usb 6-1: Using ep0 maxpacket: 16
[  404.942288][ T6876] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  404.959589][ T6876] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  404.982720][ T6876] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  405.005095][ T6876] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  405.029359][ T6876] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  405.054290][ T6876] usb 6-1: config 0 has no interface number 0
[  405.067406][ T6876] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  405.095487][ T6876] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  405.124681][ T6876] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  405.155201][ T6876] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  405.175379][ T6876] usb 6-1: config 0 interface 125 has no altsetting 0
[  405.193634][ T6876] usb 6-1: config 0 interface 125 has no altsetting 2
[  405.221236][ T6876] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  405.259242][ T6876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.290736][ T6876] usb 6-1: Product: syz
[  405.317436][ T6876] usb 6-1: Manufacturer: syz
[  405.326751][ T6876] usb 6-1: SerialNumber: syz
[  405.351377][ T6876] usb 6-1: config 0 descriptor??
[  405.377655][ T6876] usb 6-1: selecting invalid altsetting 2
[  405.674729][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.693851][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.719429][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.790425][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.811068][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.114182][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.147544][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.178868][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2017'.
[  406.485382][ T6876] get_1284_register timeout
[  406.493518][    C1] usb 6-1: async_complete: urb error -104
[  406.499350][    C1] usb 6-1: async_complete: urb error -104
[  406.518723][T11142] binder: 11136:11142 ioctl c0306201 0 returned -14
[  406.766124][ T4837] usb 6-1: USB disconnect, device number 5
[  407.672237][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2030'.
[  408.438223][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  408.548694][T11206] device syzkaller0 entered promiscuous mode
[  408.675393][ T4837] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  408.707897][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'.
[  408.718427][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'.
[  408.729263][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'.
[  408.739187][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'.
[  408.877584][ T4837] usb 3-1: Using ep0 maxpacket: 16
[  408.883497][ T6873] net_ratelimit: 18 callbacks suppressed
[  408.883511][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.928224][ T4837] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  408.953400][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  408.966993][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  408.975786][ T4837] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  408.983978][ T4837] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  409.010077][ T4837] usb 3-1: config 0 has no interface number 0
[  409.029459][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  409.056439][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  409.061571][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.125976][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.137777][ T4837] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  409.157173][ T4837] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  409.190592][ T4837] usb 3-1: config 0 interface 125 has no altsetting 0
[  409.220451][ T4837] usb 3-1: config 0 interface 125 has no altsetting 2
[  409.297768][ T4837] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  409.321085][ T4837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.339736][ T4837] usb 3-1: Product: syz
[  409.349872][ T4837] usb 3-1: Manufacturer: syz
[  409.370173][ T4837] usb 3-1: SerialNumber: syz
[  409.411358][ T4837] usb 3-1: config 0 descriptor??
[  409.442161][ T4837] usb 3-1: selecting invalid altsetting 2
[  409.954879][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.140377][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.284677][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.295570][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.337305][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2054'.
[  410.575511][ T4837] get_1284_register timeout
[  410.580406][    C0] usb 3-1: async_complete: urb error -104
[  410.586254][    C0] usb 3-1: async_complete: urb error -104
[  410.592042][    C0] usb 3-1: async_complete: urb error -104
[  411.231161][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.252910][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.326277][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.376276][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.411233][T11248] db_root: cannot be changed because it's in use
[  411.426399][T11248] se_dev->se_dev_ptr already set for storage object
[  411.441610][T11248] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  412.405693][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.241234][ T4324] usb 3-1: USB disconnect, device number 20
[  414.546508][ T6582] net_ratelimit: 1 callbacks suppressed
[  414.546525][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.550375][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.568319][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.576517][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.584780][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.655331][T11286] db_root: cannot be changed because it's in use
[  414.679245][T11286] se_dev->se_dev_ptr already set for storage object
[  414.719422][T11290] netlink: 'syz.0.2071': attribute type 39 has an invalid length.
[  414.729545][T11286] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  414.749803][T11290] device macvlan0 entered promiscuous mode
[  415.006039][T11298] netlink: 'syz.2.2074': attribute type 10 has an invalid length.
[  415.023142][T11301] netlink: 'syz.0.2073': attribute type 10 has an invalid length.
[  415.039998][T11298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2074'.
[  415.072219][T11301] team0: Device batadv0 is up. Set it down before adding it as a team port
[  415.126685][T11298] netlink: 'syz.2.2074': attribute type 10 has an invalid length.
[  415.195157][T11305] binder: 11300:11305 ioctl c0306201 0 returned -14
[  415.380255][T11298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2074'.
[  415.916574][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.926115][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.934351][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.089247][T11311] netlink: 'syz.3.2076': attribute type 4 has an invalid length.
[  416.116292][T11311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2076'.
[  417.106277][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.114553][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.376466][T11334] db_root: cannot be changed because it's in use
[  417.457225][T11334] se_dev->se_dev_ptr already set for storage object
[  417.750417][T11334] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  418.605593][ T6873] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  418.825588][ T6873] usb 4-1: Using ep0 maxpacket: 16
[  418.843042][ T6873] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  419.014727][ T6873] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  419.243295][ T6873] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  419.341118][ T6873] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  419.359640][ T6873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  419.378068][ T6873] usb 4-1: config 0 has no interface number 0
[  419.384305][ T6873] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  419.400777][ T6873] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  419.425501][ T6873] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  419.451691][ T6873] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.475355][ T6873] usb 4-1: config 0 interface 125 has no altsetting 0
[  419.482178][ T6873] usb 4-1: config 0 interface 125 has no altsetting 2
[  419.537137][ T6873] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  419.555415][ T6873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.567203][ T6873] usb 4-1: Product: syz
[  419.571408][ T6873] usb 4-1: Manufacturer: syz
[  419.621538][ T6873] usb 4-1: SerialNumber: syz
[  419.644393][ T6873] usb 4-1: config 0 descriptor??
[  419.850789][ T6873] usb 4-1: selecting invalid altsetting 2
[  420.442415][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.495687][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.621477][ T6875] net_ratelimit: 9 callbacks suppressed
[  420.621492][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.635435][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.655901][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.664452][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.833414][T11389] db_root: cannot be changed because it's in use
[  420.872955][T11389] se_dev->se_dev_ptr already set for storage object
[  420.885537][ T6873] get_1284_register timeout
[  420.894699][    C1] usb 4-1: async_complete: urb error -104
[  420.900630][    C1] usb 4-1: async_complete: urb error -104
[  420.962448][T11389] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  421.219501][T11397] binder: 11394:11397 ioctl c0306201 0 returned -14
[  421.821280][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.829913][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.104476][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.112892][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.280274][ T4846] usb 4-1: USB disconnect, device number 23
[  423.505954][T11428] db_root: cannot be changed because it's in use
[  423.548287][T11428] se_dev->se_dev_ptr already set for storage object
[  423.584844][T11428] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  423.695905][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.711808][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.355360][ T3599] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  424.575421][ T3599] usb 4-1: Using ep0 maxpacket: 16
[  424.582551][ T3599] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  424.621587][ T3599] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  424.648657][ T3599] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  424.677290][ T3599] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  424.705401][ T3599] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  424.743088][ T3599] usb 4-1: config 0 has no interface number 0
[  424.769670][ T3599] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  424.801124][ T3599] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  424.853933][ T3599] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  424.888839][ T3599] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  424.942651][ T3599] usb 4-1: config 0 interface 125 has no altsetting 0
[  424.968882][ T3599] usb 4-1: config 0 interface 125 has no altsetting 2
[  425.004739][ T3599] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  425.044586][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.064882][ T3599] usb 4-1: Product: syz
[  425.085136][ T3599] usb 4-1: Manufacturer: syz
[  425.095240][ T3599] usb 4-1: SerialNumber: syz
[  425.103244][ T3599] usb 4-1: config 0 descriptor??
[  425.122522][ T3599] usb 4-1: selecting invalid altsetting 2
[  425.224434][T11456] loop5: detected capacity change from 0 to 40427
[  425.261686][T11456] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  425.288776][T11456] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  425.383797][T11456] F2FS-fs (loop5): Found nat_bits in checkpoint
[  425.420638][T11479] db_root: cannot be changed because it's in use
[  425.479457][T11479] se_dev->se_dev_ptr already set for storage object
[  425.504498][T11479] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  425.530935][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.555599][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.613998][T11456] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  425.631525][T11456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  425.851087][ T8891] syz-executor: attempt to access beyond end of device
[  425.851087][ T8891] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  426.171633][ T3599] get_1284_register timeout
[  426.176594][    C0] usb 4-1: async_complete: urb error -104
[  426.182458][    C0] usb 4-1: async_complete: urb error -104
[  426.245618][ T6582] net_ratelimit: 6 callbacks suppressed
[  426.245633][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.259515][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.611199][ T3599] usb 4-1: USB disconnect, device number 24
[  426.702701][T11503] loop5: detected capacity change from 0 to 256
[  426.732036][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.741244][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.760537][T11503] exfat: Deprecated parameter 'utf8'
[  426.781833][T11503] exfat: Deprecated parameter 'utf8'
[  426.787771][T11503] exfat: Deprecated parameter 'namecase'
[  426.824998][T11503] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  427.624303][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.673669][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.650894][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.725856][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.092380][T11535] netlink: 'syz.3.2147': attribute type 10 has an invalid length.
[  429.120781][T11535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2147'.
[  429.215791][T11535] netlink: 'syz.3.2147': attribute type 10 has an invalid length.
[  429.244829][T11535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2147'.
[  429.807226][T11541] loop5: detected capacity change from 0 to 128
[  429.956866][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.965563][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.003941][T11541] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  430.097868][T11541] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  430.214336][T11541] xt_hashlimit: size too large, truncated to 1048576
[  430.314809][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2153'.
[  430.643069][T11560] overlayfs: failed to clone upperpath
[  432.013094][ T6876] net_ratelimit: 4 callbacks suppressed
[  432.013110][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.085612][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.064064][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.173693][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.181868][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.202261][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.471907][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.000999][T11637] loop3: detected capacity change from 0 to 2048
[  434.054883][T11637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  434.094618][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.224486][T11636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  434.246502][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.292734][T11636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  434.385865][T11636] EXT4-fs (loop3): This should not happen!! Data will be lost
[  434.385865][T11636] 
[  434.444019][T11636] EXT4-fs (loop3): Total free blocks count 0
[  434.473643][T11651] fuse: Bad value for 'fd'
[  434.478214][T11636] EXT4-fs (loop3): Free/Dirty block details
[  434.485794][T11649] db_root: cannot be changed because it's in use
[  434.548059][T11649] se_dev->se_dev_ptr already set for storage object
[  434.555131][T11636] EXT4-fs (loop3): free_blocks=4096
[  434.568092][T11636] EXT4-fs (loop3): dirty_blocks=32
[  434.573258][T11636] EXT4-fs (loop3): Block reservation details
[  434.587897][T11649] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  434.628968][T11636] EXT4-fs (loop3): i_reserved_data_blocks=2
[  434.755563][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.826883][T11658] loop2: detected capacity change from 0 to 128
[  434.853113][T11658] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  434.917415][T11658] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  435.168718][ T4378] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28
[  435.208031][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'.
[  435.263272][T11664] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.272203][T11664] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.280963][T11664] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.289915][T11664] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.347081][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'.
[  435.652004][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  435.664398][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  435.695325][T11673] device syz_tun left promiscuous mode
[  435.711786][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  435.720103][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  436.536350][T11680] Config c/1 of g_uac2 needs at least one function.
[  436.545798][T11680] udc usbip-vudc.0: failed to start g_uac2: -22
[  436.572476][T11680] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  436.603256][T11680] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  437.000658][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  437.031532][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  437.107121][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  437.320712][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  437.380361][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  437.395404][ T4356] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  437.469618][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  437.480835][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  437.940530][ T6872] net_ratelimit: 8 callbacks suppressed
[  437.940548][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.954645][ T4356] usb 3-1: Using ep0 maxpacket: 16
[  437.960835][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.970502][ T4356] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  437.980639][ T4356] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  437.989660][ T4356] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  437.998809][ T4356] usb 3-1: config 0 has no interface number 0
[  438.004924][ T4356] usb 3-1: config 0 interface 104 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  438.015882][ T4356] usb 3-1: config 0 interface 104 has no altsetting 1
[  438.036024][ T4356] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  438.045099][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.065327][ T4356] usb 3-1: Product: syz
[  438.069524][ T4356] usb 3-1: Manufacturer: syz
[  438.074143][ T4356] usb 3-1: SerialNumber: syz
[  438.105756][ T4356] usb 3-1: config 0 descriptor??
[  438.120261][ T4356] asix: probe of 3-1:0.104 failed with error -22
[  438.362098][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2214'.
[  438.408410][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2214'.
[  438.485976][T11715] loop5: detected capacity change from 0 to 2048
[  438.534998][T11715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  438.577792][T11715] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.895472][ T4356] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  438.965868][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.974400][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.983651][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.992915][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.002150][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.100736][ T4356] usb 6-1: Using ep0 maxpacket: 32
[  439.108907][ T4356] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  439.139502][ T4356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.165348][ T4356] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  439.200365][ T4356] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  439.220747][ T4356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.241284][ T4356] usb 6-1: config 0 descriptor??
[  439.285580][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.385241][T11720] Config c/1 of g_uac2 needs at least one function.
[  439.395877][T11689] loop3: detected capacity change from 0 to 131072
[  439.415410][T11720] udc usbip-vudc.0: failed to start g_uac2: -22
[  439.423943][T11720] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  439.432275][T11689] F2FS-fs (loop3): invalid crc value
[  439.441752][T11720] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  439.457160][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.478328][T11689] F2FS-fs (loop3): Found nat_bits in checkpoint
[  439.620541][T11689] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  439.634188][ T2123] usb 3-1: USB disconnect, device number 21
[  439.689119][ T4356] pyra 0003:1E7D:2C24.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0
[  439.705363][T11689] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  439.776167][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.848519][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  439.854917][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  439.865068][   T27] audit: type=1804 audit(1785241719.636:40): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2216" name="/newroot/126/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  441.571738][ T2123] usb 6-1: USB disconnect, device number 6
[  442.071977][ T8891] EXT4-fs (loop5): unmounting filesystem.
[  442.637294][T11748] db_root: cannot be changed because it's in use
[  442.713467][T11748] se_dev->se_dev_ptr already set for storage object
[  442.735484][   T27] audit: type=1804 audit(1785241722.506:41): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2227" name="/newroot/461/bus/bus" dev="overlay" ino=2455 res=1 errno=0
[  442.787363][T11748] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  442.822223][T11756] binder: 11744:11756 ioctl c0306201 0 returned -14
[  442.910518][T11759] loop3: detected capacity change from 0 to 256
[  443.046950][ T6875] net_ratelimit: 8 callbacks suppressed
[  443.046964][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.060717][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.069469][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.085706][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.094143][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.107681][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.119581][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.359985][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.375984][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.472659][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.603233][T11787] loop2: detected capacity change from 0 to 128
[  444.676572][T11787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  444.701826][T11787] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.838794][T11787] EXT4-fs (loop2): resizing filesystem from 64 to 2 blocks
[  444.875365][T11787] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  444.920764][T11793] db_root: cannot be changed because it's in use
[  444.962940][T11794] Config c/1 of g_uac2 needs at least one function.
[  444.973535][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  445.001866][T11794] udc usbip-vudc.0: failed to start g_uac2: -22
[  445.020402][T11793] se_dev->se_dev_ptr already set for storage object
[  445.052243][T11794] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  445.071405][T11793] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  445.087365][T11794] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  445.191819][T11799] loop2: detected capacity change from 0 to 16
[  445.230687][T11799] erofs: (device loop2): mounted with root inode @ nid 36.
[  445.284963][T11799] syz.2.2243: attempt to access beyond end of device
[  445.284963][T11799] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16
[  445.342038][T11799] syz.2.2243: attempt to access beyond end of device
[  445.342038][T11799] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16
[  445.368271][T11800] syz.2.2243: attempt to access beyond end of device
[  445.368271][T11800] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  445.453730][T11799] capability: warning: `syz.2.2243' uses deprecated v2 capabilities in a way that may be insecure
[  448.625372][ T3599] net_ratelimit: 7 callbacks suppressed
[  448.625390][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.640108][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.648728][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.657033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.665295][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.834832][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.939731][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.293597][T11835] binder: 11828:11835 ioctl c0306201 0 returned -14
[  449.333539][T11837] Config c/1 of g_uac2 needs at least one function.
[  449.373938][T11837] udc usbip-vudc.0: failed to start g_uac2: -22
[  449.410981][T11842] db_root: cannot be changed because it's in use
[  449.424483][T11837] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  449.475561][T11842] se_dev->se_dev_ptr already set for storage object
[  449.483421][T11837] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  449.537071][T11842] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  449.864481][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.006990][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.077476][T11872] Config c/1 of g_uac2 needs at least one function.
[  451.116242][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.441361][T11874] device syz_tun left promiscuous mode
[  451.457677][T11874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  451.465683][T11874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  451.536842][T11872] udc usbip-vudc.0: failed to start g_uac2: -22
[  451.894800][T11872] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  451.976337][T11872] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  452.351002][T11895] binder: 11887:11895 ioctl c0306201 0 returned -14
[  452.875586][ T4323] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  453.086960][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0
[  453.160890][ T4323] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  453.301966][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.655029][ T4323] usb 4-1: config 0 descriptor??
[  453.671777][ T2123] net_ratelimit: 17 callbacks suppressed
[  453.671792][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.686224][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.786762][T11915] loop5: detected capacity change from 0 to 512
[  453.819778][T11912] Config c/1 of g_uac2 needs at least one function.
[  453.836380][T11912] udc usbip-vudc.0: failed to start g_uac2: -22
[  453.852930][T11912] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  453.861263][T11915] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2287: iget: bad i_size value: 38620345925642
[  453.872865][T11912] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  453.885760][T11915] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2287: couldn't read orphan inode 15 (err -117)
[  453.922216][T11915] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  453.935545][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.069098][T11923] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2287: bg 0: block 5: invalid block bitmap
[  454.100130][ T4323] hid (null): global environment stack underflow
[  454.102490][T11923] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 364 with error 28
[  454.125647][ T4323] hid (null): global environment stack underflow
[  454.132050][ T4323] hid (null): invalid report_size 13705
[  454.144424][T11923] EXT4-fs (loop5): This should not happen!! Data will be lost
[  454.144424][T11923] 
[  454.157533][ T4323] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review
[  454.175560][T11923] EXT4-fs (loop5): Total free blocks count 0
[  454.186137][ T4323] bigben 0003:146B:0902.0005: global environment stack underflow
[  454.204101][T11923] EXT4-fs (loop5): Free/Dirty block details
[  454.214091][ T4323] bigben 0003:146B:0902.0005: item 0 0 1 11 parsing failed
[  454.223022][T11923] EXT4-fs (loop5): free_blocks=0
[  454.233132][ T4323] bigben 0003:146B:0902.0005: parse failed
[  454.239919][T11923] EXT4-fs (loop5): dirty_blocks=368
[  454.245907][ T4323] bigben: probe of 0003:146B:0902.0005 failed with error -22
[  454.253653][T11923] EXT4-fs (loop5): Block reservation details
[  454.261909][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'.
[  454.276515][T11923] EXT4-fs (loop5): i_reserved_data_blocks=368
[  454.309679][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'.
[  454.336400][ T4323] usb 4-1: USB disconnect, device number 25
[  454.431230][   T27] audit: type=1326 audit(1785241734.206:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.479707][   T27] audit: type=1326 audit(1785241734.206:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.482808][ T8891] EXT4-fs (loop5): unmounting filesystem.
[  454.523583][   T27] audit: type=1326 audit(1785241734.246:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.552676][   T27] audit: type=1326 audit(1785241734.246:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.585535][   T27] audit: type=1326 audit(1785241734.246:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.679429][   T27] audit: type=1326 audit(1785241734.246:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.710529][   T27] audit: type=1326 audit(1785241734.246:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.737018][   T27] audit: type=1326 audit(1785241734.246:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.0.2293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  454.768842][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.777696][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.906510][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.914983][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.264334][T11951] Config c/1 of g_uac2 needs at least one function.
[  455.317588][T11951] udc usbip-vudc.0: failed to start g_uac2: -22
[  455.337696][T11951] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  455.355765][T11951] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  455.760431][T11963] loop2: detected capacity change from 0 to 512
[  455.808233][T11963] EXT4-fs: Ignoring removed i_version option
[  455.823893][T11963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  455.836431][ T2123] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  455.872019][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.895461][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.908319][T11963] EXT4-fs (loop2): 1 truncate cleaned up
[  455.914103][T11963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  456.084762][ T2123] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  456.095369][ T2123] usb 6-1: config 0 has no interface number 0
[  456.102055][ T2123] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.130406][ T2123] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.156549][T11969] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  456.166622][ T2123] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  456.195975][ T2123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.243062][ T2123] usb 6-1: config 0 descriptor??
[  456.243468][T11969] EXT4-fs (loop2): Remounting filesystem read-only
[  456.280763][T11969] EXT4-fs error (device loop2): ext4_setattr:5634: inode #15: comm syz.2.2306: mark_inode_dirty error
[  456.308745][T11969] EXT4-fs (loop2): Remounting filesystem read-only
[  456.321573][T11969] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem
[  456.358491][T11969] EXT4-fs (loop2): Remounting filesystem read-only
[  456.381586][T11962] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.2306: Invalid block bitmap block 3 in block_group 0
[  456.426326][T11962] EXT4-fs (loop2): Remounting filesystem read-only
[  456.446352][T11962] EXT4-fs error (device loop2): ext4_discard_preallocations:5132: comm syz.2.2306: Error -117 reading block bitmap for 0
[  456.485000][T11962] EXT4-fs (loop2): Remounting filesystem read-only
[  456.572572][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  456.652717][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'.
[  456.666064][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'.
[  456.683451][ T2123] prodikeys 0003:041E:2801.0006: item fetching failed at offset 5/7
[  456.694886][ T2123] prodikeys 0003:041E:2801.0006: hid parse failed
[  456.702087][ T2123] prodikeys: probe of 0003:041E:2801.0006 failed with error -22
[  456.898344][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.912812][ T6875] usb 6-1: USB disconnect, device number 7
[  457.294245][T11949] loop3: detected capacity change from 0 to 131072
[  457.318780][T11949] F2FS-fs (loop3): invalid crc value
[  457.460828][T11949] F2FS-fs (loop3): Found nat_bits in checkpoint
[  457.685207][T11949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  459.096049][ T3599] net_ratelimit: 4 callbacks suppressed
[  459.096068][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.111481][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.116057][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.451930][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.806134][T12015] bond0: (slave syz_tun): Releasing backup interface
[  459.833574][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  459.893757][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  459.947391][T12025] Config c/1 of g_uac2 needs at least one function.
[  459.972180][T12025] udc usbip-vudc.0: failed to start g_uac2: -22
[  459.974632][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  460.014249][T12025] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  460.058846][T12025] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  460.171392][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.190269][ T4323] bond0 speed is unknown, defaulting to 1000
[  460.199070][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.489406][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.576125][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.639329][   T27] audit: type=1326 audit(1785241740.386:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  461.457778][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.520354][   T27] audit: type=1326 audit(1785241740.386:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  461.545339][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.628720][   T27] audit: type=1326 audit(1785241740.386:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  461.653415][   T27] audit: type=1326 audit(1785241740.386:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  461.953864][   T27] audit: type=1326 audit(1785241740.386:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  462.757660][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2329'.
[  462.825686][T12039] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  462.834495][T12039] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  462.843339][T12039] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  462.852159][T12039] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.902657][   T27] audit: type=1326 audit(1785241740.396:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  462.963283][   T27] audit: type=1326 audit(1785241740.396:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  462.997393][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2329'.
[  463.052960][   T27] audit: type=1326 audit(1785241740.396:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  463.146514][   T27] audit: type=1326 audit(1785241740.396:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  463.179836][   T27] audit: type=1326 audit(1785241740.396:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6619de99 code=0x7ffc0000
[  463.533772][T12050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  463.610904][T12050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  464.290269][T12058] Config c/1 of g_uac2 needs at least one function.
[  464.485806][T12064] net_ratelimit: 11 callbacks suppressed
[  464.485820][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.502446][T12058] udc usbip-vudc.0: failed to start g_uac2: -22
[  464.551011][T12058] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  464.558377][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.568168][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.694559][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.703665][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.713213][T12064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.718697][T12070] binder: 12063:12070 ioctl c0306201 0 returned -14
[  464.731749][T12061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.755609][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.769032][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.447494][T12058] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  465.856820][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.425340][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'.
[  466.447827][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'.
[  466.822920][T12110] Config c/1 of g_uac2 needs at least one function.
[  466.974700][T12110] udc usbip-vudc.0: failed to start g_uac2: -22
[  467.095780][T12110] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  467.292854][T12110] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  467.434298][T12109] binder: 12101:12109 ioctl c0306201 0 returned -14
[  468.074894][T12138] loop3: detected capacity change from 0 to 1024
[  468.191057][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[  468.226117][T12138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  468.274505][T12144] Config c/1 of g_uac2 needs at least one function.
[  468.308037][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[  468.345660][T12144] udc usbip-vudc.0: failed to start g_uac2: -22
[  468.372409][T12144] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  468.419671][T12144] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  468.453533][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  469.632060][ T6872] net_ratelimit: 9 callbacks suppressed
[  469.632075][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.646702][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.658392][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.668587][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.650656][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.046896][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.702197][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.876722][T12170] binder: 12162:12170 ioctl c0306201 0 returned -14
[  472.086204][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.211935][T12181] Config c/1 of g_uac2 needs at least one function.
[  472.243180][T12181] udc usbip-vudc.0: failed to start g_uac2: -22
[  472.282403][T12181] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  472.342113][T12181] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  472.645366][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  472.716206][T12192] loop2: detected capacity change from 0 to 256
[  472.852616][T12192] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  472.996690][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.045476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.669068][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'.
[  473.702263][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'.
[  474.555660][T12216] netlink: 'syz.0.2394': attribute type 3 has an invalid length.
[  475.113235][ T4323] net_ratelimit: 10 callbacks suppressed
[  475.113252][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.206149][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.593888][T12235] bond0 speed is unknown, defaulting to 1000
[  475.822290][T12245] Config c/1 of g_uac2 needs at least one function.
[  475.839295][T12245] udc usbip-vudc.0: failed to start g_uac2: -22
[  475.849358][T12245] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  475.867122][T12245] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  476.100525][T12251] db_root: cannot be changed because it's in use
[  476.150030][T12251] se_dev->se_dev_ptr already set for storage object
[  476.207707][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.222494][T12251] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  476.245820][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.492405][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.501090][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.630232][T12275] xt_hashlimit: size too large, truncated to 1048576
[  477.022173][T12283] Config c/1 of g_uac2 needs at least one function.
[  477.038809][T12283] udc usbip-vudc.0: failed to start g_uac2: -22
[  477.062445][T12283] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  477.089176][T12283] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  477.162800][T12285] loop2: detected capacity change from 0 to 2048
[  477.274404][T12285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  477.293028][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.302368][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.369857][T12290] xt_hashlimit: size too large, truncated to 1048576
[  477.415550][T12291] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  477.491308][T12291] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  477.529190][T12294] db_root: cannot be changed because it's in use
[  477.546061][T12294] se_dev->se_dev_ptr already set for storage object
[  477.564022][T12291] EXT4-fs (loop2): This should not happen!! Data will be lost
[  477.564022][T12291] 
[  477.578795][T12294] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  477.621686][T12291] EXT4-fs (loop2): Total free blocks count 0
[  477.659803][T12291] EXT4-fs (loop2): Free/Dirty block details
[  477.735039][T12291] EXT4-fs (loop2): free_blocks=4096
[  477.755096][T12291] EXT4-fs (loop2): dirty_blocks=32
[  477.794568][T12291] EXT4-fs (loop2): Block reservation details
[  477.843676][T12291] EXT4-fs (loop2): i_reserved_data_blocks=2
[  478.005470][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.013778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.135432][ T5381] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 272 with error 28
[  480.357644][T12333] binder: 12328:12333 ioctl c0306201 0 returned -14
[  480.651620][ T6872] net_ratelimit: 76 callbacks suppressed
[  480.651636][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.666745][ T6870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.308542][T12352] db_root: cannot be changed because it's in use
[  481.321639][T12352] se_dev->se_dev_ptr already set for storage object
[  481.332456][T12352] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[  481.396286][T12354] Config c/1 of g_uac2 needs at least one function.
[  481.402989][T12354] udc usbip-vudc.0: failed to start g_uac2: -22
[  481.419749][T12354] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22
[  481.439803][T12354] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  481.800360][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.819069][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.440071][T12365] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  482.451853][T12365] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  482.460291][T12365] CPU: 1 PID: 12365 Comm: syz.0.2447 Not tainted syzkaller #0
[  482.467786][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  482.477879][T12365] RIP: 0010:dummy_set_selfpowered+0xb7/0x150
[  482.483923][T12365] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 33 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 1a b2 53 fb 41 be 30 12 00 00 4d
[  482.503559][T12365] RSP: 0018:ffffc9000cc477e0 EFLAGS: 00010246
[  482.509660][T12365] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  482.517650][T12365] RDX: ffff888019acda00 RSI: 0000000000000003 RDI: 0000000000000005
[  482.525648][T12365] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b
[  482.533635][T12365] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000
[  482.541621][T12365] R13: ffff8880589134a8 R14: ffff888028379238 R15: 0000000000000000
[  482.549609][T12365] FS:  00007fbe670c96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  482.558579][T12365] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  482.565183][T12365] CR2: 0000000000000000 CR3: 0000000073b51000 CR4: 00000000003506e0
[  482.573167][T12365] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  482.581150][T12365] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  482.589142][T12365] Call Trace:
[  482.592429][T12365]  <TASK>
[  482.595372][T12365]  ? dummy_wakeup+0x260/0x260
[  482.600077][T12365]  usb_gadget_set_selfpowered+0x6a/0x2b0
[  482.605730][T12365]  composite_dev_prepare+0x2f3/0x310
[  482.611029][T12365]  configfs_composite_bind+0xa1/0xf60
[  482.616414][T12365]  ? kernfs_put+0x442/0x480
[  482.620931][T12365]  ? os_desc_qw_sign_store+0x100/0x100
[  482.626401][T12365]  gadget_bind_driver+0x2af/0x760
[  482.631457][T12365]  ? gadget_match_driver+0x130/0x130
[  482.636759][T12365]  really_probe+0x24a/0xb40
[  482.641283][T12365]  ? pm_runtime_barrier+0x147/0x1c0
[  482.646508][T12365]  __driver_probe_device+0x1f5/0x390
[  482.651831][T12365]  driver_probe_device+0x4f/0x420
[  482.656874][T12365]  __driver_attach+0x43d/0x6c0
[  482.661643][T12365]  ? driver_attach+0x40/0x40
[  482.666250][T12365]  bus_for_each_dev+0x182/0x1f0
[  482.671110][T12365]  ? __lock_acquire+0x7c40/0x7c40
[  482.676168][T12365]  ? bus_remove_file+0xd0/0xd0
[  482.680963][T12365]  ? do_raw_spin_unlock+0x11d/0x230
[  482.686204][T12365]  bus_add_driver+0x324/0x5d0
[  482.690903][T12365]  driver_register+0x32d/0x430
[  482.695691][T12365]  usb_gadget_register_driver_owner+0xf5/0x260
[  482.701883][T12365]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  482.707542][T12365]  configfs_write_iter+0x30b/0x400
[  482.712680][T12365]  ? gadget_dev_desc_UDC_show+0x80/0x80
[  482.718241][T12365]  vfs_write+0x482/0x9a0
[  482.722509][T12365]  ? file_end_write+0x250/0x250
[  482.727392][T12365]  ? __fget_files+0x3fc/0x460
[  482.732100][T12365]  ? __fdget_pos+0x2ae/0x360
[  482.736710][T12365]  ? ksys_write+0x70/0x260
[  482.741139][T12365]  ksys_write+0x14d/0x260
[  482.745486][T12365]  ? __ia32_sys_read+0x80/0x80
[  482.750294][T12365]  ? lockdep_hardirqs_on+0x94/0x140
[  482.755504][T12365]  do_syscall_64+0x4c/0xa0
[  482.759946][T12365]  ? clear_bhb_loop+0x60/0xb0
[  482.764663][T12365]  ? clear_bhb_loop+0x60/0xb0
[  482.769369][T12365]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.775296][T12365] RIP: 0033:0x7fbe6619de99
[  482.779722][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.799352][T12365] RSP: 002b:00007fbe670c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  482.807790][T12365] RAX: ffffffffffffffda RBX: 00007fbe66425fa0 RCX: 00007fbe6619de99
[  482.815780][T12365] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000005
[  482.823757][T12365] RBP: 00007fbe66233eaf R08: 0000000000000000 R09: 0000000000000000
[  482.831732][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.839743][T12365] R13: 00007fbe66426038 R14: 00007fbe66425fa0 R15: 00007ffd2b229f48
[  482.847740][T12365]  </TASK>
[  482.850784][T12365] Modules linked in:
[  482.859074][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.867204][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.875510][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.883787][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.891906][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.904213][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'.
[  482.915055][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'.
[  482.993603][T12365] ---[ end trace 0000000000000000 ]---
[  482.999259][T12365] RIP: 0010:dummy_set_selfpowered+0xb7/0x150
[  483.007993][T12365] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 33 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 1a b2 53 fb 41 be 30 12 00 00 4d
[  483.027882][T12365] RSP: 0018:ffffc9000cc477e0 EFLAGS: 00010246
[  483.040365][T12365] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  483.048888][T12365] RDX: ffff888019acda00 RSI: 0000000000000003 RDI: 0000000000000005
[  483.056974][T12365] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b
[  483.064977][T12365] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000
[  483.073258][T12365] R13: ffff8880589134a8 R14: ffff888028379238 R15: 0000000000000000
[  483.081302][T12365] FS:  00007fbe670c96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  483.090287][T12365] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  483.096976][T12365] CR2: 00007f744b7eb580 CR3: 0000000073b51000 CR4: 00000000003506e0
[  483.104977][T12365] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  483.114704][T12365] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  483.122770][T12365] Kernel panic - not syncing: Fatal exception
[  483.129424][T12365] Kernel Offset: disabled
[  483.133754][T12365] Rebooting in 86400 seconds..