last executing test programs: 13m4.556197003s ago: executing program 32 (id=815): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000bc0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000c00)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000c40)="1a", 0x34000, 0x0, &(0x7f0000000c80)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) close_range(r0, 0xffffffffffffffff, 0x0) 12m57.991016844s ago: executing program 33 (id=844): setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="2c80fce256052b06f8148e045f9b2dec", 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a008100bbbbbbbbbbbbffffffffffff86dd64f1e8a2009c11fffc000000000000000000000000000001ff0200000000000000000000000000014e234e23"], 0xd6) 10m45.126395226s ago: executing program 6 (id=1223): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="226925d2e5eda0713e8408ca22b4d875241a0830b08ebbb8e77d7c54192bb0f61f602ce01199fad051cc2e4f9392d59c1805c8a7dfbb9e398fdb9fdc74f10a4d59fefc489f0cfe13b2f7387d9e4cf5b9299fb69acf5f36a6a8a2b7317eee03b77b25e0d39971a07cc7e080f44f6b5cc9e83c50ab2502b4749f83753cec1f4d3c376523505ab5f62056d1792254de8496c44881f7060f4ad4c5beb7453a7a0dca09c020ef6cd988bab5537a304b3c685371b0e0ae0101781948d60e135571055eab088373e8ab6d2925e8fbc0fa243c7aca1b419135b39217fd73a460ac175d7aa51bba9164fc81a37218876f039d0b3635d19304", 0xf4}, {&(0x7f0000000a00)="c280ad8207337d978011cb9d4324896e021e0d616a8c500de49c48b1f9c961cbe61b0c969b2fd50870c4b885cb1c1c3890b286f379a23588fbb9c9a19f8db1c6f8805c9f215259663f894cd75d30b7016a102a1af6f746dd6bf5c6af1cbb4236adfe8447c60ce1c8900beef14415dd9c855ece850ec97eb4f806abf863a16161d80309bc90a3caa899d156564b97078772117f2e86af59fd7f78c48a3d98d2bcd21ffacc6e4e5c653f46340f1f68747b4fc8de91d54a51b9252f711ac1d44c258d98e0c797b5fbe8322e32ab98436a39e7811156af85b0bb245bb54fd113da7054894f62269e89183b227c7975e84cdd4dd6", 0xf2}], 0x2, 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='3', 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000900)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000940)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r2, &(0x7f0000000980), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000009c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m41.697101176s ago: executing program 6 (id=1231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000100), 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@loopback, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x8001, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x82) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x16) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540), 0xc) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES64], 0x418080) syz_emit_ethernet(0xadf, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4186dd6535eacc0aa93200fe8000000000000000000000000000bb00000000000000000000ff"], 0x0) 10m41.059220454s ago: executing program 6 (id=1234): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r3, 0x0, 0x0, 0x80800) 10m39.447390744s ago: executing program 6 (id=1235): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000180)=@in={0x2, 0x2082, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x2082, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "4edb89d252adedea", "a8ed2b5a90a0e18d1f304a44486a5c4987b953c6a4fbf95e3ad7276fa53ed61c", "4163a76e", "0b8a6fe514efad45"}, 0x38) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "2cde2f240dc9bd08", "b750aa7a64c5e67051a52d830c4e2285f3c305f3cf73699f0480c45739846a05", "f3c55e41", "9ac5c045077b96b9"}, 0x38) sendto(r1, &(0x7f00000003c0)="15030300020200", 0x7, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/100, 0x64}], 0x1}, 0x0) 10m38.834435364s ago: executing program 6 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000004a40)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 10m36.736854034s ago: executing program 6 (id=1240): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001e80)={0x2c, r4, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 10m27.799035271s ago: executing program 7 (id=1250): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x20402, 0x0) r5 = open(&(0x7f0000000340)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x4}}, './file1\x00'}) 10m21.101738484s ago: executing program 34 (id=1240): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001e80)={0x2c, r4, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 10m17.269537302s ago: executing program 7 (id=1273): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000002500)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x6, 0xbab, 0x2}) 10m11.918869066s ago: executing program 7 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r4, 0x0) 10m10.706876058s ago: executing program 7 (id=1268): io_setup(0x6, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000640)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f00000007c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m7.71684627s ago: executing program 7 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000019b40), 0xffffffffffffffff) 10m5.976980871s ago: executing program 7 (id=1280): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = getuid() setresuid(r1, 0x0, r1) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 9m50.704461537s ago: executing program 35 (id=1280): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = getuid() setresuid(r1, 0x0, r1) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 9m29.312812807s ago: executing program 4 (id=1325): unshare(0x22020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102376, 0x18fe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e415400000000080002000000000234000300"/205], 0x108}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='enable_event:sched:sched_process_fork', 0x25) 9m27.494248744s ago: executing program 4 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000bc0)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m14.514809118s ago: executing program 4 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000009c0)="1976f8b2b384a2e343ea2825f76628bc0f607dc7b8521576b85a997ff394a86c2199f0311f0d088d657aa592abd1035bbedf98f64b2a7c3c779ff24c0fadceadf460e455c37ae7fc28e7", 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001cc0)='270', 0x3) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000900)={0x10}, 0x10, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x1000) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB="000000000000000000357ec0fb455cf66a73da7e221215000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1000, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '0'}, 0x20, '1', 0x20, 'R', ' 1 sectors_per_bit:8'}}]}) 9m12.850237833s ago: executing program 4 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x202001, 0x0) mkdir(&(0x7f0000000bc0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 9m11.802309839s ago: executing program 4 (id=1344): socket(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000009c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000a00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0) read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000019b00), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000019b40)=0x1000) 9m10.060271355s ago: executing program 4 (id=1346): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x401, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@id={0x2, 0x0, @a}}) 8m54.47347129s ago: executing program 36 (id=1346): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x401, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@id={0x2, 0x0, @a}}) 8m35.981483846s ago: executing program 5 (id=1376): r0 = socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="b7f2c1ee3aaea2bc0000def1260a0000000000870000000000000000000000e9cc623e4e76d354b0405479c3ab492d7dec3804b36d191392996c3d7942493da7ed4eb24469a98571c0009befe97a646bdb7e60201a5da5f89d7b6f6497cd1b7b85e7a9ec73d4aa8ef0cf93e2d111d4e637be2fb777e28006f975f6831313940f177dbba9bd6cb9", 0x30) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x7, 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 8m33.907560143s ago: executing program 5 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000700)) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x4) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00') 8m31.818722252s ago: executing program 5 (id=1380): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000016c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000018c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001940)='./proc\x00', &(0x7f0000001980)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001a00)=""/103, 0x67, 0x800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) epoll_create(0x7) unshare(0x2040600) fsmount(0xffffffffffffffff, 0x0, 0x91) 8m30.75132405s ago: executing program 5 (id=1381): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000006c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000e40)='./mysys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) 8m25.765246452s ago: executing program 5 (id=1385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x1014810, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64=r0, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000000580)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480), &(0x7f00000014c0), 0xa7c, r2}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./mnt\x00', 0x1ff) mount(&(0x7f0000001540)=@filename='mtd0\x00', &(0x7f0000001580)='./mnt\x00', &(0x7f00000015c0)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./mnt/fillfile\x00', 0x42, 0x9f) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001740)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001780)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000017c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001800)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001840), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001880), 0x2, 0x141102) writev(r4, &(0x7f00000018c0)=[{&(0x7f0000001900)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = creat(&(0x7f0000001940)='./file0\x00', 0x0) writev(r5, &(0x7f0000001980)=[{&(0x7f00000019c0)="81bc", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x2, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000001b80)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 8m24.431983916s ago: executing program 5 (id=1388): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000940)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000009c0)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c80)=0x7e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000cc0)={0x1, &(0x7f0000000d00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) pipe(&(0x7f0000000180)) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000600)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016800800"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000840)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x4, 0x100010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000940), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000980)=0x2) recvmmsg(r3, &(0x7f00000009c0), 0x10106, 0x2, 0x0) 8m23.188449176s ago: executing program 37 (id=1388): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000940)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000009c0)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c80)=0x7e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000cc0)={0x1, &(0x7f0000000d00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) pipe(&(0x7f0000000180)) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000600)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016800800"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000840)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x4, 0x100010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000940), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000980)=0x2) recvmmsg(r3, &(0x7f00000009c0), 0x10106, 0x2, 0x0) 44.512117351s ago: executing program 3 (id=2487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000850000000500000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 38.368834178s ago: executing program 2 (id=2495): socket$inet_tcp(0x2, 0x1, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x8000804) sendto$inet(r1, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 36.661883927s ago: executing program 9 (id=2500): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xd2, 0x0, 0x7fff0026}]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000580)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.02442609s ago: executing program 9 (id=2502): bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000d80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000dc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000e00), 0x0, 0x0) read$msr(r3, &(0x7f0000000e40)=""/102400, 0x19000) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) 34.188193708s ago: executing program 9 (id=2503): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', r0, &(0x7f0000000380)='./config/usb_gadget/g1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)="770900000000f8ffffff2e30", 0xc) write(r2, &(0x7f0000000480)='\n', 0x1) 33.938086734s ago: executing program 3 (id=2505): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000003b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000880)={{0x5, 0x0, 0x0, 0xffffffff, 'syz1\x00'}, 0x0, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x1d4c06aa, 0x0, 0x3ff, 0x0, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x400000000000, 0xfffffffffffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xe198, 0x0, 0x0, 0xfffffffffffffffd, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x400000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000003, 0x0, 0x0, 0xf035, 0x3, 0x80000000000, 0x6, 0x100000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400000, 0xae, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x1940000000000000, 0x0, 0x80000000000000, 0x0, 0x1004, 0x0, 0x4, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x10000000000, 0xfffffffffffffff8]}) 33.712268156s ago: executing program 8 (id=2506): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r2, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000203c0)=0x4000007) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000800)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000840)={0x300a, r3}, 0x0) 33.46763366s ago: executing program 2 (id=2507): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nobarrier}, {@dioread_lock}, {@noacl}, {@resuid}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x589, &(0x7f0000000940)="$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") ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000f80)="c7", 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x6}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001040)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, &(0x7f0000001080)='\t', 0x1, 0x100400c1, &(0x7f00000010c0)={0x11, 0x8100, r4, 0x1, 0x87, 0x6, @random="ca339e8922a4"}, 0x14) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x2, 0x4, 0x570, 0xffffffff, 0x3d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0xffffff00], 'macsec0\x00', 'veth0_macvtap\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x14, 0x0, [{0x8, 0x0, 0x9f, 0x8000}, {0x2, 0x81, 0x6, 0x7}, {0x3, 0x5, 0x2, 0x68}, {0x6, 0x4e}, {0x5, 0x9, 0x9, 0x1d}, {0x2, 0x0, 0x4, 0x1}, {0x0, 0x8e, 0x2, 0x9}, {0x641, 0x3, 0x7, 0xc}, {0x40, 0x6, 0x9, 0x7b99}, {0x3, 0x8, 0x95, 0xc}, {0x3, 0x2, 0x8, 0x10}, {0x2, 0x3, 0xd, 0xc9}, {0x3, 0x0, 0x9, 0x1}, {0x1, 0x9, 0x8, 0x511}, {0x5, 0x58, 0x60, 0x3}, {0x6, 0x3, 0x2, 0x4}, {0x9, 0x6, 0x6, 0xdf}, {0x9, 0x2, 0x2, 0x9}, {0x1, 0xa2, 0x0, 0x936}, {0x7fff, 0x0, 0xb, 0x5}, {0x4, 0x2, 0x5, 0x1}, {0x9606, 0x0, 0x81, 0x8}, {0x9b, 0x6, 0x9, 0x7}, {0x1, 0x3, 0xf1, 0x8}, {0x0, 0x4, 0x3, 0x8}, {0x3ff, 0x6, 0xa, 0x6}, {0x6e08, 0x9, 0x1, 0x2}, {0xc, 0x2}, {0x9, 0xe, 0xfa, 0xb1}, {0x3, 0x3, 0xd, 0x9}, {0x3, 0x6, 0x2, 0x3}, {0x1, 0x6, 0x3, 0x8}, {0x8, 0x9, 0xd8, 0x6}, {0x7, 0x4, 0xff}, {0x5, 0x4f, 0x6, 0x3399}, {0xff, 0x2f, 0x2, 0x2}, {0x117, 0x4, 0x9, 0xd825}, {0xff, 0x40, 0x8, 0xfffffffd}, {0x8, 0x3, 0x27, 0x3}, {0xb, 0x9, 0x2, 0x8}, {0x200, 0x7, 0x1d, 0x9}, {0xde83, 0xff, 0x1}, {0xfff, 0x8, 0x10, 0x2}, {0x3ff, 0x5, 0x2, 0xfffffff9}, {0x4, 0xe, 0x37, 0x4d}, {0xc7, 0x5, 0x6, 0x7}, {0x0, 0x0, 0xf5}, {0x2, 0x3, 0x28, 0x6}, {0x9, 0x70, 0x0, 0x7}, {0x7f, 0x2, 0x4, 0x2}, {0xfffa, 0x11, 0x7}, {0x2, 0x6, 0x7, 0x81}, {0x8, 0x9, 0x0, 0x2}, {0x800, 0x3, 0xe, 0x401}, {0x0, 0xfb, 0x4b, 0x5}, {0x1, 0x10, 0xa0, 0x265d}, {0xfffa, 0x4, 0x8, 0xffffd301}, {0x9, 0x5, 0x2, 0x5}, {0x2, 0x79, 0x2, 0x3}, {0x3, 0xf, 0x9, 0x1b}, {0xb, 0x80, 0x9, 0x8001}, {0x3, 0x5, 0x4, 0xffffb1e3}, {0x1, 0x4, 0x7, 0x200}, {0x6, 0x6, 0x9}], {0x4}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0xff000000, 0xffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0xff, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x73, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 33.048188474s ago: executing program 3 (id=2508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 31.471898382s ago: executing program 8 (id=2509): socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000380)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="18ba76151dccfcd6ee9850c7bb051d5b287e0ee481259ec25231f6fabbd6303ae25c20ec93f073a8a713eac9b72c8e2b715fd28ac0b41915dd23d671a6e484a0f0ce3458790c", 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="abc9d5f5f4737e6f08165d7eff806658e2ebd6fdb549be4af900e93738b57eaf5d6403", 0x23}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 29.652125496s ago: executing program 3 (id=2511): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 28.883767671s ago: executing program 0 (id=2513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080), 0x4000095, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r3, 0x0, 0x0, 0x80800) 27.238016414s ago: executing program 1 (id=2514): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x1ca6, &(0x7f0000000140)={0x0, 0xcfab, 0xab73f6bc085e106a, 0x0, 0x118}, &(0x7f00000003c0), &(0x7f00000002c0), &(0x7f0000000440)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ee0, 0x2, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2000, 0x4, 0x1ff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x2000, 0x4003bfff, 0x2b4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4ce, 0x10000, 0x3, 0x268}}], 0x1, 0x0, 0x0) 25.514253529s ago: executing program 0 (id=2515): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1451c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410eb) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) fcntl$getown(r0, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(0x0) mkdir(0x0, 0x0) 23.142268252s ago: executing program 2 (id=2516): r0 = io_uring_setup(0x24f1, &(0x7f0000001100)={0x0, 0x4178, 0x80, 0x8001002, 0x112}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001180)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001280)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000001380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000013c0)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001640)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 20.600288299s ago: executing program 9 (id=2517): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000340)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 19.802488047s ago: executing program 9 (id=2518): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/fs\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001100)=""/1024, 0x400) 19.721866197s ago: executing program 8 (id=2519): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendto$unix(r0, &(0x7f0000000b80)="0085", 0x2, 0x24048085, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) 18.948060192s ago: executing program 2 (id=2520): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000440)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002940)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r2, &(0x7f00000029c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000004a00)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000004a40)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e19a1ebd5a0a1149d48afa688507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea192c9fb34c471f65ec7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8f03d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d28", 0x2000, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x3c}, &(0x7f0000006b40)}) syz_fuse_handle_req(r2, &(0x7f0000006c80)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008d40)={0x20, 0x0, 0x9, {0x2, 0x0, 0x7, 0x1000009}}, 0x0}) ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000008d80)={0x0, 0xdaff}) 18.569896804s ago: executing program 3 (id=2521): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrlimit(0xd, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "001000", "510500000095000000e200000000000000005d00", "d8a024e5", "ee940000000000d7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$EVIOCGKEY(r4, 0x8040453f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 18.551014546s ago: executing program 9 (id=2522): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x401, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@id={0x2, 0x0, @a}}) 18.412219554s ago: executing program 0 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x5, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000800)=0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x8015) 17.272017896s ago: executing program 8 (id=2524): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x400001, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1b000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f000001ae80)={0x28, 0x0, 0x2710, @my=0x0, 0x1}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001dc0)=0x4, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001e00)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001e40)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14) 16.707429601s ago: executing program 3 (id=2525): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000b40)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000c40)='veth0_macvtap\x00', 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) write(r3, &(0x7f0000000c80)="5689b3", 0x3) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000a00)={0x1f, @none, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000a40)={0x0, 0x7}, 0x8) 16.075691804s ago: executing program 1 (id=2526): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3f) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x80442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001a80)={0x2, 0x4e20, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="05010906a101050719e029e7150025017501950881029501750881019505750105", 0x21) 12.346746394s ago: executing program 0 (id=2527): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 12.180115318s ago: executing program 8 (id=2528): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000340)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./config\x00', &(0x7f0000000ec0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000fc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000001140)='dummy_udc.0', 0xb) 11.720560294s ago: executing program 2 (id=2529): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0xd0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='9p\x00', 0x800000, 0x0) 11.582110166s ago: executing program 0 (id=2530): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/file0\x00', 0x20) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019c40)=0x40003) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffff0300ffffffff00000000002000000000000000000000abcd0000000000002f00000000000000050000000000000002000000000000080100000000000000010000000000000044000500000100000000000000080000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) socket$inet6(0xa, 0x400000000001, 0x0) 11.456019492s ago: executing program 1 (id=2531): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x4, 0x0, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2048c5, &(0x7f0000000280)={[{@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@gid}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@debug}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000340)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xfff3, 0x17}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c810) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x439, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) 9.810061397s ago: executing program 0 (id=2532): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r1, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/144, 0x90, 0x0, &(0x7f0000000880)=""/4, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/synthetic_events\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './tracing/synthetic_events'}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x48283, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f00000002c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000300)={0x0, 0x80, 0x0, 'queue0\x00', 0x80000}) close_range(r4, 0xffffffffffffffff, 0x0) 7.858499185s ago: executing program 2 (id=2533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000009c0)="1976f8b2b384a2e343ea2825f76628bc0f607dc7b8521576b85a997ff394a86c2199f0311f0d088d657aa592abd1035bbedf98f64b2a7c3c779ff24c0fadceadf460e455c37ae7fc28e7", 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001cc0)='270', 0x3) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000900)={0x10}, 0x10, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x1000) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB="000000000000000000357ec0fb455cf66a73da7e221215000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1000, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '0'}, 0x20, '1', 0x20, 'R', ' 1 sectors_per_bit:8'}}]}) 6.550629132s ago: executing program 1 (id=2534): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x2010480, &(0x7f0000000480), 0x5, 0x76a, &(0x7f00000004c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./file7/file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r0 = syz_clone3(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000800) fallocate(0xffffffffffffffff, 0x0, 0x87, 0x2000402) syz_open_procfs(0x0, 0x0) epoll_create1(0x80000) setpgid(r0, r0) chroot(&(0x7f0000000200)='./file0\x00') 5.362127393s ago: executing program 1 (id=2535): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000000e700)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000027700), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000027740), 0x2) memfd_create(&(0x7f0000027780)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x9) 3.211479451s ago: executing program 38 (id=2522): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x401, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@id={0x2, 0x0, @a}}) 3.108004393s ago: executing program 1 (id=2537): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x80202, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000540)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x339, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x80000, 0x0, 0x341}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 94.968814ms ago: executing program 39 (id=2525): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000b40)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000c40)='veth0_macvtap\x00', 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) write(r3, &(0x7f0000000c80)="5689b3", 0x3) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000a00)={0x1f, @none, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000a40)={0x0, 0x7}, 0x8) 0s ago: executing program 8 (id=2539): iopl(0x3) socket(0x1e, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) fsopen(&(0x7f0000000300)='ubifs\x00', 0x1) kernel console output (not intermixed with test programs): x10 [ 953.217775][T14418] ? tomoyo_path_number_perm+0x188/0x580 [ 953.217829][T14418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.217864][T14418] ? lock_acquire+0x1d1/0x380 [ 953.217901][T14418] ? __might_fault+0xc5/0x140 [ 953.217948][T14418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.217983][T14418] ? find_held_lock+0x2b/0x80 [ 953.218012][T14418] ? __might_fault+0xc5/0x140 [ 953.218075][T14418] iommufd_fops_ioctl+0x358/0x520 [ 953.218119][T14418] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 953.218159][T14418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.218214][T14418] ? bpf_lsm_file_ioctl+0x4/0x10 [ 953.218252][T14418] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 953.218297][T14418] __x64_sys_ioctl+0x18e/0x210 [ 953.218342][T14418] do_syscall_64+0x123/0x790 [ 953.218389][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.218420][T14418] RIP: 0033:0x7f120f79fb19 [ 953.218444][T14418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.218473][T14418] RSP: 002b:00007f1210754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 953.218501][T14418] RAX: ffffffffffffffda RBX: 00007f120fa25fa0 RCX: 00007f120f79fb19 [ 953.218520][T14418] RDX: 0000200000000680 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 953.218540][T14418] RBP: 00007f120f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 953.218559][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.218577][T14418] R13: 00007f120fa26038 R14: 00007f120fa25fa0 R15: 00007ffd83bc9948 [ 953.218621][T14418] [ 953.771620][T14439] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 953.899921][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.936457][T12520] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 955.179574][T14448] loop3: detected capacity change from 0 to 512 [ 955.714776][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.714883][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.078210][T14448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.078326][T14448] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.306712][ T31] audit: type=1804 audit(1794044527.607:720): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2202" name="bus" dev="ramfs" ino=42315 res=1 errno=0 [ 956.349717][ T31] audit: type=1804 audit(1794044527.647:721): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2202" name="bus" dev="ramfs" ino=42315 res=1 errno=0 [ 956.673656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.779685][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.832287][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.968460][T14467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 957.031945][T14467] netlink: 'syz.1.2207': attribute type 16 has an invalid length. [ 957.031971][T14467] netlink: 'syz.1.2207': attribute type 17 has an invalid length. [ 957.278915][T14474] loop3: detected capacity change from 0 to 128 [ 957.830358][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.904346][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.904646][T14467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.040617][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.040723][T14467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.753242][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.822249][T14487] loop8: detected capacity change from 0 to 256 [ 958.871016][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.174479][T14473] event trace: Could not enable event p [ 959.611057][T14479] loop0: detected capacity change from 0 to 32768 [ 959.666684][T14479] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 959.800163][T14479] XFS (loop0): Ending clean mount [ 959.916832][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.986957][T14501] netlink: 'syz.1.2216': attribute type 10 has an invalid length. [ 960.201145][T14484] loop3: detected capacity change from 0 to 32768 [ 960.227268][T14484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2213 (14484) [ 960.294027][T14484] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 960.294067][T14484] BTRFS info (device loop3): using sha256 checksum algorithm [ 960.353695][T12472] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 960.447370][T14505] loop9: detected capacity change from 0 to 16 [ 960.471073][T14505] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 960.532347][T14484] BTRFS info (device loop3): enabling ssd optimizations [ 960.532379][T14484] BTRFS info (device loop3): turning on async discard [ 960.532403][T14484] BTRFS info (device loop3): enabling free space tree [ 960.595155][T12472] usb 1-1: unable to get BOS descriptor or descriptor too short [ 960.595989][T12472] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 960.596031][T12472] usb 1-1: no configurations [ 960.596048][T12472] usb 1-1: can't read configurations, error -22 [ 960.926131][ T5640] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 960.994200][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.104252][T12401] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 961.145126][ T5644] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 961.162688][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.262983][T12401] usb 3-1: Using ep0 maxpacket: 16 [ 961.281889][T12401] usb 3-1: unable to get BOS descriptor or descriptor too short [ 961.281966][T12401] usb 3-1: New USB device found: idVendor=0582, idProduct=0042, bcdDevice=0.40 [ 961.315068][ T5644] usb 10-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 961.317860][ T5644] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 961.317890][ T5644] usb 10-1: config 0 has no interface number 0 [ 961.320110][T12401] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 961.320158][T12401] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 961.356551][T12401] usb 3-1: language id specifier not provided by device, defaulting to English [ 961.416284][ T5644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.416344][ T5644] usb 10-1: Product: syz [ 961.416365][ T5644] usb 10-1: Manufacturer: syz [ 961.416385][ T5644] usb 10-1: SerialNumber: syz [ 961.419988][T12401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.420018][T12401] usb 3-1: Product: syz [ 961.420039][T12401] usb 3-1: Manufacturer: 㟰á´î¥‡æ¸œâª‰é•åƒ¡å‘§â—®î¨«æ­¶Ý—譃桖ä¥ë¿°á…¸ë£¹ä½¨ë®°í”£ä³ í•†å¯ï®²é«šî¶žï˜±æ§æœ˜é³‰ì©´äƒ®ï«°åµ´î™ªã¹‡ì‘±æ‘¤ë¦©ã¨³ï¾°à¥¸ä¸…఼黴๺狼⾄녱᫪票䢆èŒå˜žæ‰ìŸ¾æ¹•å¿’ꖒ꺄忻ퟟ냤 [ 961.420078][T12401] usb 3-1: SerialNumber: syz [ 961.519965][ T5644] usb 10-1: config 0 descriptor?? [ 961.697951][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2222'. [ 961.766607][ T5638] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 961.820018][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.079305][ T5644] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 962.079347][ T5644] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 962.079596][ T5644] asix 10-1:0.251: probe with driver asix failed with error -71 [ 962.155368][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.175353][ T5644] usb 10-1: USB disconnect, device number 10 [ 962.285736][T12401] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.307222][T12401] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 962.402971][T12401] usb 3-1: USB disconnect, device number 18 [ 963.239684][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.979907][T14558] vlan0: entered promiscuous mode [ 964.402943][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.833006][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.985649][T14570] loop2: detected capacity change from 0 to 256 [ 965.180065][T14544] loop3: detected capacity change from 0 to 32768 [ 965.243516][T14544] [ 965.243516][T14544] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 965.243516][T14544] [ 965.523630][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.695841][T14546] loop8: detected capacity change from 0 to 40427 [ 965.737260][ T5640] [ 965.737260][ T5640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 965.737260][ T5640] [ 965.737452][ T5640] [ 965.737452][ T5640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 965.737452][ T5640] [ 965.773943][T14546] F2FS-fs (loop8): invalid crc value [ 966.358687][T14559] loop0: detected capacity change from 0 to 32768 [ 966.477878][T14559] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 966.553965][T14546] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 966.648782][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.683604][T14559] XFS (loop0): Ending clean mount [ 966.764073][T14546] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 967.102892][ T5638] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 967.758569][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.850380][T14591] loop2: detected capacity change from 0 to 256 [ 967.873219][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.867783][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.500500][T14607] loop8: detected capacity change from 0 to 64 [ 969.535606][ T1165] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.535666][ T1165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.704993][T14141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.705038][T14141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.898309][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.953049][T14141] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.953094][T14141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.314987][T14613] loop8: detected capacity change from 0 to 8 [ 970.419618][T14613] SQUASHFS error: Failed to read block 0x4de: -5 [ 970.419824][T14613] SQUASHFS error: Failed to read block 0x4de: -5 [ 970.447044][ T31] audit: type=1800 audit(1794044541.717:722): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2243" name="file1" dev="loop8" ino=5 res=0 errno=-5 [ 970.768967][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.864382][T14619] loop3: detected capacity change from 0 to 64 [ 970.959468][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.959567][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.416347][T14600] loop9: detected capacity change from 0 to 40427 [ 971.453874][T14600] F2FS-fs (loop9): build fault injection rate: 771 [ 971.499233][T14600] F2FS-fs (loop9): invalid crc value [ 973.166666][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.035164][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.706836][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.811377][T14600] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 974.970045][T14639] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 975.415245][T14643] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 975.437284][T14644] openvswitch: netlink: Actions may not be safe on all matching packets [ 975.744712][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.369576][T14637] loop8: detected capacity change from 0 to 32768 [ 976.396508][T14637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2251 (14637) [ 976.472129][T14637] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 976.472171][T14637] BTRFS info (device loop8): using crc32c checksum algorithm [ 976.646617][T14637] BTRFS info (device loop8): enabling ssd optimizations [ 976.646649][T14637] BTRFS info (device loop8): turning on flush-on-commit [ 976.646673][T14637] BTRFS info (device loop8): enabling free space tree [ 976.646696][T14637] BTRFS info (device loop8): enabling auto defrag [ 976.646718][T14637] BTRFS info (device loop8): use lzo compression, level 1 [ 976.646746][T14637] BTRFS info (device loop8): max_inline set to 4096 [ 976.774262][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.807922][T14671] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2258'. [ 976.807953][T14671] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 977.051319][T12520] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 977.073341][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.364467][T14676] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 977.625130][T14647] loop0: detected capacity change from 0 to 32768 [ 977.651160][T14647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2256 (14647) [ 978.058603][T14647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 978.058655][T14647] BTRFS info (device loop0): using crc32c checksum algorithm [ 978.798831][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.904963][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 978.905334][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 980.238365][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.239464][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.241030][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 980.241325][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 980.241601][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 980.241870][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 980.242422][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 980.320203][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 980.320555][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 980.320840][T14647] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 980.378219][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.412990][T14647] BTRFS error (device loop0): open_ctree failed: -ENOMEM [ 981.193147][T14701] openvswitch: netlink: Actions may not be safe on all matching packets [ 981.345152][T14704] loop9: detected capacity change from 0 to 128 [ 981.360330][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.673930][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2269'. [ 982.148875][T14716] netlink: 'syz.8.2270': attribute type 10 has an invalid length. [ 982.149117][T14716] veth1_virt_wifi: entered promiscuous mode [ 982.472201][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.914411][ T5796] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 983.066485][ T5796] usb 9-1: New USB device found: idVendor=046d, idProduct=c298, bcdDevice=0.00 [ 983.082425][ T5796] usb 9-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 983.082472][ T5796] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 983.095758][ T5796] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 983.095798][ T5796] usb 9-1: config 0 interface 0 has no altsetting 0 [ 983.095844][ T5796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.155670][ T5796] usb 9-1: config 0 descriptor?? [ 983.156377][T14722] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 983.313324][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.513589][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.653270][ T5796] logitech 0003:046D:C298.0022: unknown main item tag 0x2 [ 983.653305][ T5796] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 983.653332][ T5796] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 983.711473][ T5796] input: HID 046d:c298 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:046D:C298.0022/input/input38 [ 983.712039][ T5796] logitech 0003:046D:C298.0022: offset (39) exceeds report_count (19) [ 983.712070][ T5796] logitech 0003:046D:C298.0022: offset (76) exceeds report_count (19) [ 983.712191][ T5796] logitech 0003:046D:C298.0022: offset (75) exceeds report_count (19) [ 983.712218][ T5796] logitech 0003:046D:C298.0022: offset (25) exceeds report_count (19) [ 983.712247][ T5796] logitech 0003:046D:C298.0022: offset (77) exceeds report_count (19) [ 984.119790][ T5796] logitech 0003:046D:C298.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.8-1/input0 [ 984.119970][ T5796] logitech 0003:046D:C298.0022: implement() called with too large value 245 (n: 0)! (kworker/0:6) [ 984.234521][ T5796] logitech 0003:046D:C298.0022: implement() called with too large value 248 (n: 0)! (kworker/0:6) [ 984.234561][ T5796] logitech 0003:046D:C298.0022: implement() called with too large value 3 (n: 0)! (kworker/0:6) [ 984.234690][ T5796] logitech 0003:046D:C298.0022: implement() called with too large value 129 (n: 0)! (kworker/0:6) [ 984.234721][ T5796] logitech 0003:046D:C298.0022: implement() called with too large value 11 (n: 0)! (kworker/0:6) [ 984.234778][ T5796] logitech 0003:046D:C298.0022: Force feedback support for Logitech Gaming Wheels [ 985.199942][ T5796] usb 9-1: USB disconnect, device number 9 [ 986.542011][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.602544][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.689217][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.778182][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.964970][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.452110][T14740] fido_id[14740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 988.035919][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.305608][T14761] loop2: detected capacity change from 0 to 1024 [ 988.561730][T14765] veth1_to_bond: entered allmulticast mode [ 988.579997][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2292'. [ 988.636737][T14765] veth1_to_bond (unregistering): left allmulticast mode [ 988.729697][T14765] bond0: (slave bond_slave_1): Releasing backup interface [ 988.882947][ T5644] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 989.036319][ T5644] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 989.040658][ T5644] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 989.040689][ T5644] usb 10-1: config 1 has no interface number 0 [ 989.074956][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.095596][ T5644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.095628][ T5644] usb 10-1: Product: syz [ 989.095648][ T5644] usb 10-1: Manufacturer: syz [ 989.095669][ T5644] usb 10-1: SerialNumber: syz [ 989.169998][ T5644] usb 10-1: 3:0 : does not exist [ 989.170027][ T5644] usb 10-1: 3:0 : does not exist [ 989.382136][T14753] loop0: detected capacity change from 0 to 32768 [ 989.410362][T14753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2289 (14753) [ 989.479748][T14753] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 989.479789][T14753] BTRFS info (device loop0): using crc32c checksum algorithm [ 989.537493][ T5644] usb 10-1: USB disconnect, device number 11 [ 989.574319][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.739386][T14753] BTRFS info (device loop0): enabling ssd optimizations [ 989.739418][T14753] BTRFS info (device loop0): turning on flush-on-commit [ 989.739441][T14753] BTRFS info (device loop0): enabling free space tree [ 989.739464][T14753] BTRFS info (device loop0): enabling auto defrag [ 989.739486][T14753] BTRFS info (device loop0): use lzo compression, level 1 [ 989.739514][T14753] BTRFS info (device loop0): max_inline set to 4096 [ 989.853929][T14533] udevd[14533]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.957854][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.112824][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.146726][ T5638] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 990.433687][T14760] loop1: detected capacity change from 0 to 32768 [ 990.471548][T14760] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2288 (14760) [ 990.517846][T14760] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 990.517891][T14760] BTRFS info (device loop1): using sha256 checksum algorithm [ 990.764435][T14760] BTRFS info (device loop1): turning off barriers [ 990.764466][T14760] BTRFS info (device loop1): enabling free space tree [ 991.199127][T11073] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 992.236004][ T6594] net_ratelimit: 1 callbacks suppressed [ 992.236029][ T6594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.518574][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.518634][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.836807][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.838454][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.838546][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.840578][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.316974][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.428869][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.705241][T14829] loop8: detected capacity change from 0 to 128 [ 995.800735][ T31] audit: type=1800 audit(1794044567.097:723): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2308" name="file1" dev="loop8" ino=117 res=0 errno=-22 [ 995.880704][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.455930][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.492755][T12094] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 996.618448][T14818] loop9: detected capacity change from 0 to 32768 [ 996.638919][T14818] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2303 (14818) [ 996.655399][ T5644] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 996.655510][T12094] usb 4-1: Using ep0 maxpacket: 8 [ 996.656600][T12094] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2dbe, bcdDevice=0.00 [ 996.670530][T12094] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.670584][T12094] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 996.670621][T12094] usb 4-1: config 0 interface 0 has no altsetting 0 [ 996.670658][T12094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.754212][T12094] usb 4-1: config 0 descriptor?? [ 996.819556][T14818] BTRFS info (device loop9): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 996.819596][T14818] BTRFS info (device loop9): using sha256 checksum algorithm [ 996.847235][ T5644] usb 9-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 996.860834][ T5644] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.860881][ T5644] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.915515][ T5644] pn533_usb 9-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 997.031263][T14818] BTRFS info (device loop9): turning off barriers [ 997.031294][T14818] BTRFS info (device loop9): turning on flush-on-commit [ 997.031318][T14818] BTRFS info (device loop9): turning on sync discard [ 997.031341][T14818] BTRFS info (device loop9): enabling free space tree [ 997.184853][ T5644] usb 9-1: USB disconnect, device number 10 [ 997.249281][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249314][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249340][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249367][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249392][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249418][T12094] konepure 0003:1E7D:2DBE.0023: unknown main item tag 0x0 [ 997.249478][T12094] konepure 0003:1E7D:2DBE.0023: unbalanced collection at end of report description [ 997.330296][T12094] konepure 0003:1E7D:2DBE.0023: parse failed [ 997.330368][T12094] konepure 0003:1E7D:2DBE.0023: probe with driver konepure failed with error -22 [ 997.422857][T12139] BTRFS info (device loop9): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 997.457512][T12094] usb 4-1: USB disconnect, device number 35 [ 997.570279][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.092592][T12094] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 998.487547][T12094] usb 10-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 998.794187][T12094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 998.794227][T12094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 7 [ 998.794263][T12094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9272, setting to 1024 [ 999.464284][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.505871][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.554900][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.784574][T12094] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.784609][T12094] usb 10-1: Product: syz [ 999.784630][T12094] usb 10-1: Manufacturer: syz [ 999.784651][T12094] usb 10-1: SerialNumber: syz [ 1000.257997][T12094] usb 10-1: config 0 descriptor?? [ 1000.721665][T12094] usb 10-1: 0:0 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 1001.106789][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.833401][T12094] usb 10-1: USB disconnect, device number 12 [ 1001.989893][T14756] udevd[14756]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.144951][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.513683][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.987825][T14896] loop3: detected capacity change from 0 to 512 [ 1003.099344][T14896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.099449][T14896] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.200690][ T31] audit: type=1800 audit(1794044574.497:724): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2331" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 1003.233450][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.836809][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.823148][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.097025][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.874760][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.394210][T14922] loop8: detected capacity change from 0 to 1 [ 1007.421704][T14922] Dev loop8: unable to read RDB block 1 [ 1007.421738][T14922] loop8: unable to read partition table [ 1007.421935][T14922] loop8: partition table beyond EOD, truncated [ 1007.421972][T14922] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1007.985207][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.037928][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2345'. [ 1008.092695][T14933] bond0: entered promiscuous mode [ 1008.092722][T14933] bond_slave_0: entered promiscuous mode [ 1008.162068][T14933] gretap0: entered promiscuous mode [ 1008.173899][T14933] debugfs: 'hsr1' already exists in 'hsr' [ 1008.177797][T14933] Cannot create hsr debugfs directory [ 1008.215567][T14933] hsr1: entered promiscuous mode [ 1008.527542][T14918] loop3: detected capacity change from 0 to 32768 [ 1008.543946][T14918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2337 (14918) [ 1008.581956][T14918] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1008.581995][T14918] BTRFS info (device loop3): using crc32c checksum algorithm [ 1008.758068][T14918] BTRFS info (device loop3): setting nodatasum [ 1008.758098][T14918] BTRFS info (device loop3): setting nodatacow [ 1008.758122][T14918] BTRFS info (device loop3): disabling tree log [ 1008.758145][T14918] BTRFS info (device loop3): turning on async discard [ 1008.758167][T14918] BTRFS info (device loop3): enabling free space tree [ 1008.758191][T14918] BTRFS info (device loop3): max_inline set to 0 [ 1008.982793][ T5644] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1008.993582][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.067273][ T5640] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.144335][ T5644] usb 3-1: Using ep0 maxpacket: 16 [ 1009.164918][ T5644] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1009.165304][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.165520][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.215670][ T5644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.215709][ T5644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.215754][ T5644] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.215803][ T5644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.222470][ T5644] usb 3-1: config 0 descriptor?? [ 1009.874787][T12094] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1009.959476][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959510][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959537][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959563][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959590][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959616][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959642][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959668][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959700][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.959727][ T5644] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1009.993266][T12472] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1010.037275][T12094] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 1010.059325][T12094] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1010.059357][T12094] usb 4-1: config 0 has no interface number 0 [ 1010.059397][T12094] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1010.059432][T12094] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1010.059467][T12094] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1010.146163][T12472] usb 9-1: Using ep0 maxpacket: 16 [ 1010.163858][T12472] usb 9-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 1010.165586][T12472] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.165627][T12472] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.165658][T12472] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1010.165720][T12472] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1010.165758][T12472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.241644][T12094] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1010.241679][T12094] usb 4-1: Product: syz [ 1010.241700][T12094] usb 4-1: SerialNumber: syz [ 1010.314007][T12094] usb 4-1: config 0 descriptor?? [ 1010.315153][T12472] usb 9-1: config 0 descriptor?? [ 1010.362392][T12094] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1010.387373][T12094] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input40 [ 1010.561999][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.819930][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.821522][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.821781][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.822003][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.822239][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.822332][ T5796] usb 4-1: USB disconnect, device number 36 [ 1010.822447][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1010.822472][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1010.933103][ T5796] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1010.983972][ T5644] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0024/input/input39 [ 1011.250644][ T5644] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1011.302382][T12094] usb 9-1: USB disconnect, device number 11 [ 1011.321485][ T5644] usb 3-1: USB disconnect, device number 19 [ 1011.644066][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.858924][T14960] loop0: detected capacity change from 0 to 32768 [ 1011.962161][T14960] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1011.990217][T14975] fido_id[14975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1012.014012][T14960] JBD2: Ignoring recovery information on journal [ 1012.193126][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.320454][T14960] JBD2: journal reset failed [ 1012.320470][T14960] (syz.0.2351,14960,0):ocfs2_journal_load:1174 ERROR: Failed to load journal! [ 1012.320502][T14960] (syz.0.2351,14960,0):ocfs2_check_volume:2398 ERROR: ocfs2 journal load failed! -4 [ 1012.355085][ T5644] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1012.450286][T14983] loop9: detected capacity change from 0 to 1024 [ 1012.534958][T14986] jffs2: notice: (14986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1012.546089][ T5644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.546135][ T5644] usb 4-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 1012.602353][ T5644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.602386][ T5644] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1012.602433][ T5644] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1012.602475][ T5644] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1012.602624][ T5644] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1012.602661][ T5644] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1012.682390][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.712112][ T5644] usb 4-1: string descriptor 0 read error: -22 [ 1012.712230][ T5644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.260629][T14992] loop0: detected capacity change from 0 to 512 [ 1013.301225][T14992] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1013.508964][ T5644] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 1013.555877][T14995] loop8: detected capacity change from 0 to 1024 [ 1013.773027][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.924345][ T5644] usb 4-1: USB disconnect, device number 37 [ 1014.505980][T14978] loop1: detected capacity change from 0 to 32768 [ 1014.556377][T14978] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1014.654179][T14978] XFS (loop1): Ending clean mount [ 1014.833446][ T5644] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1014.833935][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.874153][T11073] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1014.996861][ T5644] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1c0b, bcdDevice=0.00 [ 1015.005959][ T5644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1015.006001][ T5644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1544, setting to 1024 [ 1015.006049][ T5644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.007339][T12094] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1015.085687][ T5644] usb 1-1: config 0 descriptor?? [ 1015.087845][T15011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1015.165844][T12094] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1015.168035][T12094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.214475][T12094] usb 9-1: config 0 descriptor?? [ 1015.242045][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.326362][T15021] loop3: detected capacity change from 0 to 764 [ 1015.471943][T15026] loop1: detected capacity change from 0 to 256 [ 1015.498504][T15021] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 1015.500865][T12094] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1015.558268][T15025] input: syz0 as /devices/virtual/input/input41 [ 1015.576738][T15026] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 1015.738271][ T5644] hid_parser_main: 3 callbacks suppressed [ 1015.738299][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738328][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738355][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738381][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738407][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738433][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738460][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738486][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738512][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.738538][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unknown main item tag 0x0 [ 1015.876358][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.877443][ T5644] corsair-psu 0003:1B1C:1C0B.0026: hidraw0: USB HID v7f.fd Device [HID 1b1c:1c0b] on usb-dummy_hcd.0-1/input0 [ 1015.903789][ T5644] corsair-psu 0003:1B1C:1C0B.0026: unable to initialize device (-71) [ 1015.986781][ T5644] corsair-psu 0003:1B1C:1C0B.0026: probe with driver corsair-psu failed with error -71 [ 1016.016738][ T31] audit: type=1800 audit(1794044587.287:725): pid=15026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2374" name="file1" dev="loop1" ino=118 res=0 errno=-22 [ 1016.078622][ T5644] usb 1-1: USB disconnect, device number 33 [ 1016.551133][T12094] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 1016.551196][T12094] [drm] Initialized udl on minor 1 [ 1016.588614][T15029] fido_id[15029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1016.892824][T12094] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1016.920040][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.021767][T12094] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1017.070006][T12094] usb 9-1: USB disconnect, device number 12 [ 1017.442662][T12401] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1017.594127][T12401] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1017.595347][T12401] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.595377][T12401] usb 10-1: config 0 has no interface number 0 [ 1017.595442][T12401] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1017.595554][T12401] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1017.595633][T12401] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.687589][T12401] usb 10-1: config 0 descriptor?? [ 1017.688311][T15042] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1017.734324][T12401] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1017.953649][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.004039][T12401] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1018.051058][T12472] usb 10-1: USB disconnect, device number 13 [ 1018.154523][T12401] usb 9-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 1018.156457][T12401] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.156504][T12401] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.156539][T12401] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.156570][T12401] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.156618][T12401] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.284984][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.529660][T15061] loop3: detected capacity change from 0 to 128 [ 1018.592407][T15063] FAULT_INJECTION: forcing a failure. [ 1018.592407][T15063] name failslab, interval 1, probability 5, space 0, times 9953 [ 1018.592446][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.0.2391 Not tainted syzkaller #0 PREEMPT(full) [ 1018.592484][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1018.592502][T15063] Call Trace: [ 1018.592513][T15063] [ 1018.592525][T15063] dump_stack_lvl+0x100/0x190 [ 1018.592577][T15063] should_fail_ex.cold+0x5/0xa [ 1018.592621][T15063] should_failslab+0xc2/0x120 [ 1018.592668][T15063] __kmalloc_noprof+0xfc/0x840 [ 1018.592707][T15063] ? tomoyo_encode2+0xfb/0x3c0 [ 1018.592762][T15063] tomoyo_encode2+0xfb/0x3c0 [ 1018.592816][T15063] tomoyo_encode+0x29/0x50 [ 1018.592842][T15063] tomoyo_realpath_from_path+0x18c/0x690 [ 1018.592881][T15063] tomoyo_path_number_perm+0x23c/0x580 [ 1018.592923][T15063] ? tomoyo_path_number_perm+0x22e/0x580 [ 1018.592974][T15063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1018.593029][T15063] ? find_held_lock+0x2b/0x80 [ 1018.593058][T15063] ? d_splice_alias_ops+0x2e8/0x1350 [ 1018.593122][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.593158][T15063] ? current_check_access_path+0x25c/0x420 [ 1018.593210][T15063] ? __pfx_current_check_access_path+0x10/0x10 [ 1018.593259][T15063] ? do_raw_spin_unlock+0x145/0x1e0 [ 1018.593308][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.593343][T15063] ? simple_lookup+0xfc/0x1d0 [ 1018.593373][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.593409][T15063] ? lookup_one_qstr_excl+0xaf/0x250 [ 1018.593451][T15063] tomoyo_path_mkdir+0x9b/0xe0 [ 1018.593485][T15063] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1018.593521][T15063] ? lock_acquire+0x1d1/0x380 [ 1018.593565][T15063] security_path_mkdir+0x154/0x2e0 [ 1018.593616][T15063] filename_mkdirat+0x168/0x630 [ 1018.593652][T15063] ? __pfx_filename_mkdirat+0x10/0x10 [ 1018.593683][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.593719][T15063] ? strncpy_from_user+0x19d/0x2d0 [ 1018.593756][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.593792][T15063] ? do_getname+0x191/0x390 [ 1018.593831][T15063] __x64_sys_mkdirat+0x89/0xc0 [ 1018.593864][T15063] do_syscall_64+0x123/0x790 [ 1018.593912][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.593948][T15063] RIP: 0033:0x7fe7ef59fb19 [ 1018.593972][T15063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.594001][T15063] RSP: 002b:00007fe7f0502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1018.594029][T15063] RAX: ffffffffffffffda RBX: 00007fe7ef825fa0 RCX: 00007fe7ef59fb19 [ 1018.594050][T15063] RDX: 00000000000001c2 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 1018.594069][T15063] RBP: 00007fe7ef637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1018.594088][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.594107][T15063] R13: 00007fe7ef826038 R14: 00007fe7ef825fa0 R15: 00007ffc53ccf858 [ 1018.594148][T15063] [ 1018.764980][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.783359][T15063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1019.004214][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.082723][T15061] veth1_to_bond: entered allmulticast mode [ 1019.099914][T15061] FAULT_INJECTION: forcing a failure. [ 1019.099914][T15061] name failslab, interval 1, probability 5, space 0, times 9952 [ 1019.099970][T15061] CPU: 0 UID: 0 PID: 15061 Comm: syz.3.2389 Not tainted syzkaller #0 PREEMPT(full) [ 1019.100004][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1019.100023][T15061] Call Trace: [ 1019.100033][T15061] [ 1019.100045][T15061] dump_stack_lvl+0x100/0x190 [ 1019.100096][T15061] should_fail_ex.cold+0x5/0xa [ 1019.100139][T15061] should_failslab+0xc2/0x120 [ 1019.100185][T15061] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1019.100227][T15061] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1019.100283][T15061] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1019.100327][T15061] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1019.100373][T15061] alloc_inode+0x68/0x250 [ 1019.100415][T15061] new_inode+0x22/0x1c0 [ 1019.100452][T15061] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.100493][T15061] hugetlbfs_get_inode+0x339/0x740 [ 1019.100545][T15061] hugetlb_file_setup+0x15b/0x5b0 [ 1019.100597][T15061] ksys_mmap_pgoff+0x242/0x610 [ 1019.100640][T15061] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1019.100677][T15061] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.100712][T15061] ? xfd_validate_state+0x129/0x190 [ 1019.100755][T15061] __x64_sys_mmap+0x125/0x190 [ 1019.100796][T15061] do_syscall_64+0x123/0x790 [ 1019.100844][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.100875][T15061] RIP: 0033:0x7f2b8ed9fb19 [ 1019.100899][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.100928][T15061] RSP: 002b:00007f2b8fd48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1019.100962][T15061] RAX: ffffffffffffffda RBX: 00007f2b8f025fa0 RCX: 00007f2b8ed9fb19 [ 1019.100982][T15061] RDX: 000000000100000f RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1019.101001][T15061] RBP: 00007f2b8ee37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 1019.101021][T15061] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 1019.101040][T15061] R13: 00007f2b8f026038 R14: 00007f2b8f025fa0 R15: 00007fffb1c8f078 [ 1019.101080][T15061] [ 1019.451717][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 1019.496073][T13984] Bluetooth: hci5: link tx timeout [ 1019.496094][T13984] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1019.554513][T15061] veth1_to_bond (unregistering): left allmulticast mode [ 1019.558478][T12401] lg-g15 0003:046D:C222.0027: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 1019.607849][T12401] usb 9-1: USB disconnect, device number 13 [ 1019.752414][T15061] bond0: (slave bond_slave_1): Releasing backup interface [ 1020.000652][T15069] fido_id[15069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1020.211655][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.284180][T12472] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1020.435835][T12472] usb 3-1: Using ep0 maxpacket: 16 [ 1020.450196][T12472] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 1020.482365][T12472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.482420][T12472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.482456][T12472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1020.482632][T12472] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1020.482666][T12472] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.569006][T12472] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1020.569039][T12472] usb 3-1: Manufacturer: syz [ 1020.628737][T12472] usb 3-1: config 0 descriptor?? [ 1021.032827][T12094] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1021.032992][T12401] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1021.113307][T12472] rc_core: IR keymap rc-hauppauge not found [ 1021.113328][T12472] Registered IR keymap rc-empty [ 1021.113440][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.139925][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.158392][T12472] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1021.180634][T12472] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 1021.199546][T12401] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1021.201094][T12094] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1021.202367][T12401] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.202418][T12401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.241959][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.276223][T12094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.281087][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.305615][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.327895][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.330710][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.330819][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.343244][T12094] usb 9-1: config 0 descriptor?? [ 1021.343791][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.369184][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.393282][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.418760][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.432884][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.439755][T12401] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1021.439966][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1021.440052][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1021.461412][T12472] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.505587][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1021.505694][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1021.557314][ T5641] Bluetooth: hci5: command 0x0405 tx timeout [ 1021.697387][T12472] mceusb 3-1:0.0: Registered 42 with mce emulator interface version 1 [ 1021.697418][T12472] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.700133][T12401] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1021.810725][T12094] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1021.838178][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1021.838285][T12401] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1021.937453][T12401] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1022.059908][T12401] usb 3-1: USB disconnect, device number 20 [ 1022.220846][T12094] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 1022.220877][T12094] [drm] Initialized udl on minor 1 [ 1022.353737][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.396033][T12472] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1022.546710][T12472] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1022.547323][T12472] usb 10-1: not running at top speed; connect to a high speed hub [ 1022.547382][T12472] usb 10-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1022.549054][T12472] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.549083][T12472] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.632804][T12472] usb 10-1: string descriptor 0 read error: -22 [ 1022.632947][T12472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.665875][T12401] usb 1-1: USB disconnect, device number 34 [ 1022.717413][T12401] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1022.765753][T12401] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1022.790615][T12472] usb 10-1: 0:2 : does not exist [ 1022.791339][T12401] keyspan 1-1:1.0: device disconnected [ 1023.394264][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.604761][T12472] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1023.608384][T15112] FAULT_INJECTION: forcing a failure. [ 1023.608384][T15112] name failslab, interval 1, probability 5, space 0, times 9948 [ 1023.608442][T15112] CPU: 0 UID: 0 PID: 15112 Comm: syz.0.2404 Not tainted syzkaller #0 PREEMPT(full) [ 1023.608480][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1023.608499][T15112] Call Trace: [ 1023.608510][T15112] [ 1023.608522][T15112] dump_stack_lvl+0x100/0x190 [ 1023.608572][T15112] should_fail_ex.cold+0x5/0xa [ 1023.608615][T15112] should_failslab+0xc2/0x120 [ 1023.608664][T15112] __kmalloc_cache_noprof+0x91/0x6d0 [ 1023.608697][T15112] ? ucma_open+0x4a/0x1f0 [ 1023.608737][T15112] ucma_open+0x4a/0x1f0 [ 1023.608768][T15112] ? __pfx_ucma_open+0x10/0x10 [ 1023.608799][T15112] misc_open+0x26d/0x450 [ 1023.608834][T15112] ? __pfx_misc_open+0x10/0x10 [ 1023.608866][T15112] chrdev_open+0x234/0x6a0 [ 1023.608895][T15112] ? __pfx_apparmor_file_open+0x10/0x10 [ 1023.608936][T15112] ? __pfx_chrdev_open+0x10/0x10 [ 1023.608971][T15112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.609007][T15112] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1023.609055][T15112] do_dentry_open+0x674/0x1470 [ 1023.609099][T15112] ? __pfx_chrdev_open+0x10/0x10 [ 1023.609128][T15112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.609169][T15112] vfs_open_consume+0xcc/0x460 [ 1023.609200][T15112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.609242][T15112] path_openat+0x1547/0x23f0 [ 1023.609278][T15112] ? __pfx_path_openat+0x10/0x10 [ 1023.609318][T15112] do_file_open+0x20e/0x430 [ 1023.609351][T15112] ? __pfx_do_file_open+0x10/0x10 [ 1023.609407][T15112] ? _raw_spin_unlock+0x28/0x50 [ 1023.609444][T15112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.609479][T15112] ? alloc_fd+0x471/0x7a0 [ 1023.609521][T15112] do_sys_openat2+0x163/0x1d0 [ 1023.609554][T15112] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.609589][T15112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1023.609647][T15112] __x64_sys_openat+0x12d/0x210 [ 1023.609681][T15112] ? __pfx___x64_sys_openat+0x10/0x10 [ 1023.609723][T15112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.609765][T15112] do_syscall_64+0x123/0x790 [ 1023.609812][T15112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.609843][T15112] RIP: 0033:0x7fe7ef59fb19 [ 1023.609867][T15112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.609897][T15112] RSP: 002b:00007fe7f0502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1023.609926][T15112] RAX: ffffffffffffffda RBX: 00007fe7ef825fa0 RCX: 00007fe7ef59fb19 [ 1023.609946][T15112] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1023.609970][T15112] RBP: 00007fe7ef637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1023.609989][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.610008][T15112] R13: 00007fe7ef826038 R14: 00007fe7ef825fa0 R15: 00007ffc53ccf858 [ 1023.610048][T15112] [ 1023.974430][T12472] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1024.081646][T12472] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 1024.260152][T12472] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1024.395647][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.441153][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.510411][T12472] usb 10-1: USB disconnect, device number 14 [ 1024.537639][T15114] loop1: detected capacity change from 0 to 4096 [ 1024.538713][T15114] EXT4-fs: Ignoring removed nobh option [ 1024.538804][T15114] EXT4-fs: Ignoring removed bh option [ 1024.581061][T15114] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1024.664168][T15114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.885638][ T31] audit: type=1800 audit(1794044596.167:726): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2406" name="file1" dev="loop1" ino=19 res=0 errno=-22 [ 1025.098913][T15124] FAULT_INJECTION: forcing a failure. [ 1025.098913][T15124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1025.098952][T15124] CPU: 0 UID: 0 PID: 15124 Comm: syz.3.2408 Not tainted syzkaller #0 PREEMPT(full) [ 1025.098987][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1025.099009][T15124] Call Trace: [ 1025.099019][T15124] [ 1025.099031][T15124] dump_stack_lvl+0x100/0x190 [ 1025.099082][T15124] should_fail_ex.cold+0x5/0xa [ 1025.099126][T15124] should_fail_alloc_page+0xeb/0x140 [ 1025.099176][T15124] prepare_alloc_pages+0x1f0/0x5b0 [ 1025.099227][T15124] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 1025.099265][T15124] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1025.099302][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099339][T15124] ? rcu_is_watching+0x13/0xc0 [ 1025.099368][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099404][T15124] ? trace_mm_page_alloc+0x164/0x1c0 [ 1025.099449][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099490][T15124] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 1025.099532][T15124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1025.099567][T15124] ? lock_acquire+0x1d1/0x380 [ 1025.099605][T15124] ? is_bpf_text_address+0x25/0x1a0 [ 1025.099635][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099671][T15124] ? find_held_lock+0x2b/0x80 [ 1025.099699][T15124] ? is_bpf_text_address+0x8a/0x1a0 [ 1025.099728][T15124] ? is_bpf_text_address+0x8a/0x1a0 [ 1025.099755][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099791][T15124] ? bpf_ksym_find+0x124/0x1c0 [ 1025.099833][T15124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1025.099867][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099906][T15124] ? kernel_text_address+0x8d/0x100 [ 1025.099936][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.099999][T15124] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 1025.100037][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.100078][T15124] ? policy_nodemask+0xed/0x5e0 [ 1025.100130][T15124] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1025.100170][T15124] ? __x64_sys_setsockopt+0xbd/0x160 [ 1025.100231][T15124] __kasan_populate_vmalloc+0xf0/0x210 [ 1025.100279][T15124] alloc_vmap_area+0x963/0x2bc0 [ 1025.100330][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.100365][T15124] ? kasan_save_track+0x14/0x30 [ 1025.100407][T15124] ? __kasan_kmalloc+0xaa/0xb0 [ 1025.100448][T15124] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1025.100491][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.100529][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.100566][T15124] ? __get_vm_area_node+0x124/0x350 [ 1025.100613][T15124] __get_vm_area_node+0x1ed/0x350 [ 1025.100662][T15124] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 1025.100708][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.100748][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.100784][T15124] ? find_check_entry.isra.0+0x576/0xa00 [ 1025.100836][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.100885][T15124] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1025.100933][T15124] ? kasan_quarantine_put+0x104/0x240 [ 1025.100971][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.101017][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.101055][T15124] __vmalloc_node_noprof+0xad/0xf0 [ 1025.101100][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.101144][T15124] xt_counters_alloc+0x4c/0x70 [ 1025.101183][T15124] __do_replace+0x97/0x990 [ 1025.101233][T15124] ? __pfx___do_replace+0x10/0x10 [ 1025.101284][T15124] do_ip6t_set_ctl+0xa5f/0xd00 [ 1025.101325][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.101362][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.101402][T15124] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1025.101443][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.101483][T15124] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1025.101535][T15124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1025.101595][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.101630][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.101671][T15124] nf_setsockopt+0x8d/0xf0 [ 1025.101709][T15124] ipv6_setsockopt+0x135/0x170 [ 1025.101756][T15124] rawv6_setsockopt+0xee/0x5a0 [ 1025.101793][T15124] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1025.101830][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.101865][T15124] ? aa_sock_opt_perm+0x114/0x1e0 [ 1025.101899][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.101935][T15124] ? sock_common_setsockopt+0x2e/0xf0 [ 1025.101967][T15124] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1025.102003][T15124] do_sock_setsockopt+0xf3/0x1d0 [ 1025.102038][T15124] __sys_setsockopt+0x195/0x220 [ 1025.102089][T15124] __x64_sys_setsockopt+0xbd/0x160 [ 1025.102131][T15124] ? do_syscall_64+0xae/0x790 [ 1025.102173][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.102209][T15124] ? lockdep_hardirqs_on+0x7d/0x110 [ 1025.102251][T15124] do_syscall_64+0x123/0x790 [ 1025.102298][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.102329][T15124] RIP: 0033:0x7f2b8ed9fb19 [ 1025.102353][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.102382][T15124] RSP: 002b:00007f2b8fd48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1025.102411][T15124] RAX: ffffffffffffffda RBX: 00007f2b8f025fa0 RCX: 00007f2b8ed9fb19 [ 1025.102432][T15124] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1025.102450][T15124] RBP: 00007f2b8ee37b70 R08: 00000000000003a0 R09: 0000000000000000 [ 1025.102474][T15124] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 1025.102493][T15124] R13: 00007f2b8f026038 R14: 00007f2b8f025fa0 R15: 00007fffb1c8f078 [ 1025.102532][T15124] [ 1025.933620][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.937745][T11073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.967437][T15124] syz.3.2408: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1025.967548][T15124] CPU: 0 UID: 0 PID: 15124 Comm: syz.3.2408 Not tainted syzkaller #0 PREEMPT(full) [ 1025.967582][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1025.967600][T15124] Call Trace: [ 1025.967610][T15124] [ 1025.967621][T15124] dump_stack_lvl+0x100/0x190 [ 1025.967673][T15124] warn_alloc.cold+0x9e/0xb2 [ 1025.967708][T15124] ? __pfx_warn_alloc+0x10/0x10 [ 1025.967740][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.967776][T15124] ? lockdep_hardirqs_on+0x7d/0x110 [ 1025.967824][T15124] ? __get_vm_area_node+0x2f0/0x350 [ 1025.967874][T15124] ? __get_vm_area_node+0x22b/0x350 [ 1025.967924][T15124] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 1025.967976][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.968012][T15124] ? find_check_entry.isra.0+0x576/0xa00 [ 1025.968064][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.968114][T15124] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1025.968161][T15124] ? kasan_quarantine_put+0x104/0x240 [ 1025.968201][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.968246][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.968285][T15124] __vmalloc_node_noprof+0xad/0xf0 [ 1025.968330][T15124] ? xt_counters_alloc+0x4c/0x70 [ 1025.968373][T15124] xt_counters_alloc+0x4c/0x70 [ 1025.968413][T15124] __do_replace+0x97/0x990 [ 1025.968462][T15124] ? __pfx___do_replace+0x10/0x10 [ 1025.968514][T15124] do_ip6t_set_ctl+0xa5f/0xd00 [ 1025.968555][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.968591][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.968632][T15124] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1025.968676][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.968712][T15124] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1025.968763][T15124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1025.968823][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.968858][T15124] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1025.968899][T15124] nf_setsockopt+0x8d/0xf0 [ 1025.968937][T15124] ipv6_setsockopt+0x135/0x170 [ 1025.968988][T15124] rawv6_setsockopt+0xee/0x5a0 [ 1025.969026][T15124] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1025.969062][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.969098][T15124] ? aa_sock_opt_perm+0x114/0x1e0 [ 1025.969131][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.969167][T15124] ? sock_common_setsockopt+0x2e/0xf0 [ 1025.969200][T15124] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1025.969236][T15124] do_sock_setsockopt+0xf3/0x1d0 [ 1025.969271][T15124] __sys_setsockopt+0x195/0x220 [ 1025.969322][T15124] __x64_sys_setsockopt+0xbd/0x160 [ 1025.969364][T15124] ? do_syscall_64+0xae/0x790 [ 1025.969406][T15124] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1025.969441][T15124] ? lockdep_hardirqs_on+0x7d/0x110 [ 1025.969484][T15124] do_syscall_64+0x123/0x790 [ 1025.969532][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.969562][T15124] RIP: 0033:0x7f2b8ed9fb19 [ 1025.969586][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.969616][T15124] RSP: 002b:00007f2b8fd48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1025.969644][T15124] RAX: ffffffffffffffda RBX: 00007f2b8f025fa0 RCX: 00007f2b8ed9fb19 [ 1025.969664][T15124] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1025.969683][T15124] RBP: 00007f2b8ee37b70 R08: 00000000000003a0 R09: 0000000000000000 [ 1025.969703][T15124] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 1025.969722][T15124] R13: 00007f2b8f026038 R14: 00007f2b8f025fa0 R15: 00007fffb1c8f078 [ 1025.969762][T15124] [ 1026.538869][T15124] Mem-Info: [ 1026.538885][T15124] active_anon:7980 inactive_anon:6 isolated_anon:0 [ 1026.538885][T15124] active_file:144 inactive_file:62362 isolated_file:0 [ 1026.538885][T15124] unevictable:0 dirty:269 writeback:0 [ 1026.538885][T15124] slab_reclaimable:12482 slab_unreclaimable:113612 [ 1026.538885][T15124] mapped:35964 shmem:958 pagetables:1729 [ 1026.538885][T15124] sec_pagetables:0 bounce:0 [ 1026.538885][T15124] kernel_misc_reclaimable:0 [ 1026.538885][T15124] free:1258995 free_pcp:8334 free_cma:0 [ 1026.538963][T15124] Node 0 active_anon:31920kB inactive_anon:24kB active_file:576kB inactive_file:249248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143856kB dirty:1076kB writeback:0kB shmem:3832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:6764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1026.539068][T15124] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1026.539142][T15124] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.539247][T15124] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 1026.539300][T15124] Node 0 DMA32 free:1075800kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31920kB inactive_anon:24kB active_file:576kB inactive_file:249248kB unevictable:0kB writepending:1076kB zspages:0kB present:3129332kB managed:2506292kB mlocked:0kB bounce:0kB free_pcp:33332kB local_pcp:33332kB free_cma:0kB [ 1026.539409][T15124] lowmem_reserve[]: 0 0 1 1 1 [ 1026.539459][T15124] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1756kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1026.539563][T15124] lowmem_reserve[]: 0 0 0 0 0 [ 1026.539613][T15124] Node 1 Normal free:3944820kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.539719][T15124] lowmem_reserve[]: 0 0 0 0 0 [ 1026.539769][T15124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1026.539965][T15124] Node 0 DMA32: 4950*4kB (UME) 2932*8kB (UME) 2076*16kB (UME) 909*32kB (UME) 574*64kB (ME) 373*128kB (M) 150*256kB (UME) 35*512kB (M) 4*1024kB (M) 5*2048kB (UME) 199*4096kB (UM) = 1075800kB [ 1026.540342][T15124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1026.746304][T15124] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 7*16kB (UM) 7*32kB (UM) 6*64kB (UM) 5*128kB (UM) 6*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944820kB [ 1026.746583][T15124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1026.746607][T15124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1026.746630][T15124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1026.746654][T15124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1026.746700][T15124] 63193 total pagecache pages [ 1026.746711][T15124] 0 pages in swap cache [ 1026.746721][T15124] Free swap = 124996kB [ 1026.746732][T15124] Total swap = 124996kB [ 1026.746744][T15124] 2097051 pages RAM [ 1026.746755][T15124] 0 pages HighMem/MovableOnly [ 1026.746765][T15124] 438423 pages reserved [ 1026.746775][T15124] 0 pages cma reserved [ 1027.106178][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.314156][T12094] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1027.314484][T12094] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1027.403356][T12094] usb 9-1: USB disconnect, device number 14 [ 1027.455748][T12472] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1027.579959][T12472] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1027.580681][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.717591][T15130] FAULT_INJECTION: forcing a failure. [ 1027.717591][T15130] name failslab, interval 1, probability 5, space 0, times 9947 [ 1027.717629][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.1.2410 Not tainted syzkaller #0 PREEMPT(full) [ 1027.717663][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1027.717682][T15130] Call Trace: [ 1027.717701][T15130] [ 1027.717713][T15130] dump_stack_lvl+0x100/0x190 [ 1027.717763][T15130] should_fail_ex.cold+0x5/0xa [ 1027.717807][T15130] should_failslab+0xc2/0x120 [ 1027.717853][T15130] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1027.717896][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.717933][T15130] ? kvrealloc_node_align_noprof+0x43/0x120 [ 1027.717986][T15130] krealloc_node_align_noprof+0x321/0x3e0 [ 1027.718025][T15130] ? __asan_memset+0x23/0x50 [ 1027.718065][T15130] kvrealloc_node_align_noprof+0x43/0x120 [ 1027.718110][T15130] bpf_split_cur_state+0xb4b/0xed0 [ 1027.718165][T15130] bpf_is_state_visited+0x2407/0x3330 [ 1027.718231][T15130] do_check_common+0x3e08/0xbd70 [ 1027.718302][T15130] ? __pfx_do_check_common+0x10/0x10 [ 1027.718369][T15130] ? bpf_free_subprog_jts+0x51/0x120 [ 1027.718404][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718457][T15130] bpf_check+0x8602/0xa0f0 [ 1027.718523][T15130] ? __pfx_bpf_check+0x10/0x10 [ 1027.718562][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718600][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718636][T15130] ? find_held_lock+0x2b/0x80 [ 1027.718668][T15130] ? bpf_prog_load+0x1af0/0x2b20 [ 1027.718716][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718755][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718790][T15130] ? __asan_memset+0x23/0x50 [ 1027.718826][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718867][T15130] ? bpf_prog_load+0x1baf/0x2b20 [ 1027.718903][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.718938][T15130] bpf_prog_load+0x1baf/0x2b20 [ 1027.718991][T15130] ? __pfx_bpf_prog_load+0x10/0x10 [ 1027.719027][T15130] ? lock_acquire+0x1d1/0x380 [ 1027.719069][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719130][T15130] __sys_bpf+0x146f/0x4b60 [ 1027.719178][T15130] ? __pfx___sys_bpf+0x10/0x10 [ 1027.719221][T15130] ? find_held_lock+0x2b/0x80 [ 1027.719248][T15130] ? futex_wake+0x4ea/0x5e0 [ 1027.719287][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719325][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719382][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719418][T15130] ? rcu_read_lock_any_held+0x6a/0x90 [ 1027.719449][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719485][T15130] ? find_held_lock+0x2b/0x80 [ 1027.719513][T15130] ? ksys_write+0x190/0x250 [ 1027.719554][T15130] ? ksys_write+0x190/0x250 [ 1027.719598][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719651][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719686][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719729][T15130] ? __x64_sys_futex+0x358/0x4d0 [ 1027.719762][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719799][T15130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.719835][T15130] ? xfd_validate_state+0x129/0x190 [ 1027.719876][T15130] ? __x64_sys_bpf+0xce/0x140 [ 1027.719914][T15130] __x64_sys_bpf+0xce/0x140 [ 1027.719959][T15130] ? do_syscall_64+0xae/0x790 [ 1027.720005][T15130] do_syscall_64+0x123/0x790 [ 1027.720052][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.720083][T15130] RIP: 0033:0x7f120f79fb19 [ 1027.720107][T15130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.720136][T15130] RSP: 002b:00007f1210754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.720165][T15130] RAX: ffffffffffffffda RBX: 00007f120fa25fa0 RCX: 00007f120f79fb19 [ 1027.720186][T15130] RDX: 0000000000000048 RSI: 0000200000000480 RDI: 0000000000000005 [ 1027.720205][T15130] RBP: 00007f120f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1027.720224][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.720243][T15130] R13: 00007f120fa26038 R14: 00007f120fa25fa0 R15: 00007ffd83bc9948 [ 1027.720283][T15130] [ 1028.345430][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.359959][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.237712][T15148] FAULT_INJECTION: forcing a failure. [ 1029.237712][T15148] name failslab, interval 1, probability 5, space 0, times 9946 [ 1029.237750][T15148] CPU: 0 UID: 0 PID: 15148 Comm: syz.9.2417 Not tainted syzkaller #0 PREEMPT(full) [ 1029.237787][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1029.237806][T15148] Call Trace: [ 1029.237816][T15148] [ 1029.237828][T15148] dump_stack_lvl+0x100/0x190 [ 1029.237883][T15148] should_fail_ex.cold+0x5/0xa [ 1029.237927][T15148] should_failslab+0xc2/0x120 [ 1029.237979][T15148] __kmalloc_cache_noprof+0x91/0x6d0 [ 1029.238012][T15148] ? ip6_setup_cork+0xaac/0x15b0 [ 1029.238059][T15148] ip6_setup_cork+0xaac/0x15b0 [ 1029.238108][T15148] ip6_make_skb+0x23c/0x3b0 [ 1029.238153][T15148] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1029.238197][T15148] ? __pfx_ip6_make_skb+0x10/0x10 [ 1029.238239][T15148] ? ip6_dst_lookup_flow+0xcb/0x240 [ 1029.238290][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238337][T15148] ? udpv6_sendmsg+0x2231/0x2c20 [ 1029.238368][T15148] udpv6_sendmsg+0x2231/0x2c20 [ 1029.238415][T15148] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1029.238447][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238492][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238562][T15148] ? inet_autobind+0x145/0x1a0 [ 1029.238602][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238643][T15148] ? __local_bh_enable_ip+0xa5/0x120 [ 1029.238675][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238710][T15148] ? lockdep_hardirqs_on+0x7d/0x110 [ 1029.238752][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238787][T15148] ? __local_bh_enable_ip+0xa5/0x120 [ 1029.238819][T15148] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1029.238854][T15148] ? inet6_sendmsg+0x105/0x140 [ 1029.238886][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.238921][T15148] inet6_sendmsg+0x105/0x140 [ 1029.238958][T15148] __sys_sendto+0x36d/0x4e0 [ 1029.239001][T15148] ? __pfx___sys_sendto+0x10/0x10 [ 1029.239053][T15148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1029.239112][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.239147][T15148] ? xfd_validate_state+0x129/0x190 [ 1029.239190][T15148] __x64_sys_sendto+0xe0/0x1c0 [ 1029.239230][T15148] ? do_syscall_64+0xae/0x790 [ 1029.239271][T15148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.239306][T15148] ? lockdep_hardirqs_on+0x7d/0x110 [ 1029.239348][T15148] do_syscall_64+0x123/0x790 [ 1029.239394][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.239425][T15148] RIP: 0033:0x7f1b39f9fb19 [ 1029.239448][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.239477][T15148] RSP: 002b:00007f1b3ae9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1029.239505][T15148] RAX: ffffffffffffffda RBX: 00007f1b3a225fa0 RCX: 00007f1b39f9fb19 [ 1029.239525][T15148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1029.239543][T15148] RBP: 00007f1b3a037b70 R08: 0000200000000800 R09: 000000000000001c [ 1029.239562][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.239581][T15148] R13: 00007f1b3a226038 R14: 00007f1b3a225fa0 R15: 00007ffe79114268 [ 1029.239620][T15148] [ 1029.387359][T12094] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1029.703540][T12094] usb 4-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 1029.722562][T12094] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 1029.722592][T12094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.722637][T12094] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1029.722669][T12094] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.726865][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.742813][T12094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.742842][T12094] usb 4-1: Product: syz [ 1029.742863][T12094] usb 4-1: Manufacturer: syz [ 1029.742883][T12094] usb 4-1: SerialNumber: syz [ 1029.841330][T15145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.869450][T12094] usb_debug 4-1:1.0: debug converter detected [ 1029.897823][T12094] usb 4-1: debug converter now attached to ttyUSB0 [ 1029.995941][T15155] netlink: 'syz.0.2420': attribute type 9 has an invalid length. [ 1029.995966][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1030.161724][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 1030.303303][ T5644] usb 4-1: USB disconnect, device number 38 [ 1030.336938][ T5644] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 1030.337483][ T5644] usb_debug 4-1:1.0: device disconnected [ 1030.596193][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.644868][T15173] loop0: detected capacity change from 0 to 512 [ 1030.755194][T15173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.755309][T15173] ext4 filesystem being mounted at /524/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.811548][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.148211][T15184] loop1: detected capacity change from 0 to 256 [ 1031.167096][T15184] exfat: Deprecated parameter 'namecase' [ 1031.167159][T15184] exfat: Deprecated parameter 'utf8' [ 1031.208346][T15184] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000010) [ 1031.208375][T15184] exFAT-fs (loop1): failed to count the number of clusters in root [ 1031.208389][T15184] exFAT-fs (loop1): failed to recognize exfat type [ 1031.282595][T12472] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1031.378678][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.453298][T12472] usb 9-1: Using ep0 maxpacket: 32 [ 1031.464977][T12472] usb 9-1: New USB device found: idVendor=044e, idProduct=120b, bcdDevice=0.00 [ 1031.484496][T12472] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1031.484537][T12472] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1031.484573][T12472] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1031.484610][T12472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.559240][T12472] usb 9-1: config 0 descriptor?? [ 1031.911848][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.345219][T15194] FAULT_INJECTION: forcing a failure. [ 1032.345219][T15194] name failslab, interval 1, probability 5, space 0, times 9945 [ 1032.345285][T15194] CPU: 0 UID: 0 PID: 15194 Comm: syz.9.2431 Not tainted syzkaller #0 PREEMPT(full) [ 1032.345320][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1032.345338][T15194] Call Trace: [ 1032.345349][T15194] [ 1032.345361][T15194] dump_stack_lvl+0x100/0x190 [ 1032.345415][T15194] should_fail_ex.cold+0x5/0xa [ 1032.345458][T15194] should_failslab+0xc2/0x120 [ 1032.345505][T15194] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1032.345547][T15194] ? alloc_inode+0x68/0x250 [ 1032.345588][T15194] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1032.345622][T15194] alloc_inode+0x68/0x250 [ 1032.345662][T15194] new_inode+0x22/0x1c0 [ 1032.345705][T15194] rpc_new_dir+0x96/0x420 [ 1032.345733][T15194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.345774][T15194] rpc_populate.constprop.0+0x125/0x1c0 [ 1032.345809][T15194] ? d_instantiate+0x8f/0xb0 [ 1032.345845][T15194] ? __pfx_rpc_fill_super+0x10/0x10 [ 1032.345879][T15194] rpc_fill_super+0x2bd/0x4f0 [ 1032.345915][T15194] ? __pfx_rpc_fill_super+0x10/0x10 [ 1032.345948][T15194] get_tree_keyed+0x114/0x1d0 [ 1032.345997][T15194] vfs_get_tree+0x92/0x320 [ 1032.346031][T15194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.346068][T15194] vfs_cmd_create+0xd7/0x2a0 [ 1032.346113][T15194] __do_sys_fsconfig+0x55a/0xcb0 [ 1032.346158][T15194] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1032.346202][T15194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.346247][T15194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.346289][T15194] do_syscall_64+0x123/0x790 [ 1032.346337][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.346367][T15194] RIP: 0033:0x7f1b39f9fb19 [ 1032.346392][T15194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.346421][T15194] RSP: 002b:00007f1b3ae9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1032.346449][T15194] RAX: ffffffffffffffda RBX: 00007f1b3a225fa0 RCX: 00007f1b39f9fb19 [ 1032.346470][T15194] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1032.346488][T15194] RBP: 00007f1b3a037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1032.346507][T15194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.346525][T15194] R13: 00007f1b3a226038 R14: 00007f1b3a225fa0 R15: 00007ffe79114268 [ 1032.346565][T15194] [ 1032.891018][T15194] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1032.955043][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.268418][T12472] hid-alps 0003:044E:120B.0028: failed to read command (-71) [ 1033.268474][T12472] hid-alps 0003:044E:120B.0028: failed U1_NUM_SENS_X (-71) [ 1033.299745][T12472] hid-alps 0003:044E:120B.0028: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.8-1/input0 [ 1033.336280][T12472] usb 9-1: USB disconnect, device number 15 [ 1033.633312][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.767242][T15210] fido_id[15210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1034.057725][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.369606][T15224] loop8: detected capacity change from 0 to 128 [ 1034.370550][T15224] EXT4-fs: Ignoring removed i_version option [ 1034.427896][T15224] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1034.455548][T15224] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.867548][T12520] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1035.113807][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.257333][T15248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.257488][T15248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.257676][T15248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.260293][T15248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.260503][T15248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.283840][T15264] loop0: detected capacity change from 0 to 2048 [ 1036.349631][T15264] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.363894][ T5644] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1036.408155][ T31] audit: type=1800 audit(1794044607.707:727): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2453" name="file1" dev="loop0" ino=1346 res=0 errno=-22 [ 1036.534401][ T5644] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1036.541684][ T5644] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1036.541716][ T5644] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1036.541743][ T5644] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1036.541791][ T5644] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1036.541826][ T5644] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1036.642004][ T5644] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1036.642036][ T5644] usb 10-1: Product: syz [ 1036.642057][ T5644] usb 10-1: Manufacturer: syz [ 1036.694749][ T5644] cdc_wdm 10-1:1.0: skipping garbage [ 1036.694774][ T5644] cdc_wdm 10-1:1.0: skipping garbage [ 1036.738186][ T5644] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1036.738212][ T5644] cdc_wdm 10-1:1.0: Unknown control protocol [ 1036.871293][T15272] FAULT_INJECTION: forcing a failure. [ 1036.871293][T15272] name failslab, interval 1, probability 5, space 0, times 9944 [ 1036.871331][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.2.2451 Not tainted syzkaller #0 PREEMPT(full) [ 1036.871365][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1036.871384][T15272] Call Trace: [ 1036.871394][T15272] [ 1036.871406][T15272] dump_stack_lvl+0x100/0x190 [ 1036.871456][T15272] should_fail_ex.cold+0x5/0xa [ 1036.871499][T15272] should_failslab+0xc2/0x120 [ 1036.871546][T15272] __kmalloc_cache_noprof+0x91/0x6d0 [ 1036.871579][T15272] ? tipc_nametbl_insert_publ+0x6ee/0x1570 [ 1036.871618][T15272] tipc_nametbl_insert_publ+0x6ee/0x1570 [ 1036.871665][T15272] tipc_nametbl_publish+0x18b/0x300 [ 1036.871700][T15272] tipc_sk_publish+0x1d8/0x430 [ 1036.871733][T15272] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1036.871762][T15272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.871800][T15272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.871836][T15272] ? tipc_group_create+0x4c0/0x660 [ 1036.871885][T15272] tipc_setsockopt+0x7af/0xe30 [ 1036.871920][T15272] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1036.871950][T15272] ? lock_acquire+0x1d1/0x380 [ 1036.871994][T15272] ? __fget_files+0x34/0x3d0 [ 1036.872036][T15272] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1036.872071][T15272] do_sock_setsockopt+0xf3/0x1d0 [ 1036.872107][T15272] __sys_setsockopt+0x195/0x220 [ 1036.872157][T15272] __x64_sys_setsockopt+0xbd/0x160 [ 1036.872200][T15272] ? do_syscall_64+0xae/0x790 [ 1036.872241][T15272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1036.872276][T15272] ? lockdep_hardirqs_on+0x7d/0x110 [ 1036.872318][T15272] do_syscall_64+0x123/0x790 [ 1036.872365][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.872396][T15272] RIP: 0033:0x7fd65779fb19 [ 1036.872420][T15272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.872448][T15272] RSP: 002b:00007fd658733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1036.872476][T15272] RAX: ffffffffffffffda RBX: 00007fd657a25fa0 RCX: 00007fd65779fb19 [ 1036.872500][T15272] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1036.872519][T15272] RBP: 00007fd657837b70 R08: 000000000000002e R09: 0000000000000000 [ 1036.872538][T15272] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1036.872557][T15272] R13: 00007fd657a26038 R14: 00007fd657a25fa0 R15: 00007ffc6b4b9248 [ 1036.872597][T15272] [ 1036.872655][T15272] tipc: Failed to bind to 66,4294966268,4294966268 [ 1037.280248][ T5644] net_ratelimit: 20 callbacks suppressed [ 1037.280272][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.387943][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.388049][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.388532][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.388557][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.388759][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.388783][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.388990][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.389015][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.389213][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.389236][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.389434][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.389459][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.389657][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.389681][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.389889][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.389913][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.390109][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.390135][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.390332][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1037.390356][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1037.393367][ T5644] usb 10-1: USB disconnect, device number 15 [ 1037.393485][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1037.637998][T15245] loop3: detected capacity change from 0 to 32768 [ 1037.656246][T15245] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1037.681740][T15245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2446 (15245) [ 1037.729551][T15245] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1037.729591][T15245] BTRFS info (device loop3): using crc32c checksum algorithm [ 1037.954472][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.019723][T15245] BTRFS info (device loop3): rebuilding free space tree [ 1038.287793][T15245] BTRFS info (device loop3): disabling free space tree [ 1038.287856][T15245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1038.287912][T15245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1038.390742][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.473509][T15245] BTRFS info (device loop3): setting nodatasum [ 1038.473540][T15245] BTRFS info (device loop3): enabling ssd optimizations [ 1038.473564][T15245] BTRFS info (device loop3): turning off barriers [ 1038.473586][T15245] BTRFS info (device loop3): turning on flush-on-commit [ 1038.473609][T15245] BTRFS info (device loop3): force clearing of disk cache [ 1038.786920][ T5640] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1039.438955][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.720252][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.955391][T15326] loop0: detected capacity change from 0 to 256 [ 1040.050758][T15326] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10b903, utbl_chksum : 0xe619d30d) [ 1040.051210][T15326] exFAT-fs (loop0): failed to load alloc-bitmap [ 1040.051224][T15326] exFAT-fs (loop0): failed to recognize exfat type [ 1040.299091][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.299250][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.299564][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.515106][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.405883][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.755602][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.413058][T15352] xt_hashlimit: size too large, truncated to 1048576 [ 1043.472780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.473011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.473200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.473409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.473618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.557570][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.636806][T15356] loop9: detected capacity change from 0 to 512 [ 1044.809409][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.142229][T15376] loop1: detected capacity change from 0 to 128 [ 1045.164826][T15376] FAT-fs (loop1): bogus number of reserved sectors [ 1045.164850][T15376] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1045.164872][T15376] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1046.216800][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.340459][T15383] loop0: detected capacity change from 0 to 128 [ 1046.957753][T15378] loop3: detected capacity change from 0 to 128 [ 1046.974186][T15378] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1046.975850][T15383] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1047.071973][T15383] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1047.099567][T15383] ext2 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.442935][ T5645] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1047.556192][ T5644] net_ratelimit: 3 callbacks suppressed [ 1047.556215][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.616337][ T5645] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1047.635406][ T5645] usb 9-1: not running at top speed; connect to a high speed hub [ 1047.635441][ T5645] usb 9-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 1047.674239][ T5645] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1047.702641][ T5645] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.702674][ T5645] usb 9-1: Product: syz [ 1047.702695][ T5645] usb 9-1: Manufacturer: syz [ 1047.702717][ T5645] usb 9-1: SerialNumber: syz [ 1047.879318][ T5638] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1048.146079][ T5645] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1048.344270][ T5645] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1048.344305][ T5645] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1048.420294][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.340386][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.382883][ T5645] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1049.382917][ T5645] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1049.712761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.622614][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.949634][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.028154][ T5645] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1052.284864][T15409] xt_hashlimit: size too large, truncated to 1048576 [ 1052.356716][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.397690][ T5645] usb 9-1: USB disconnect, device number 16 [ 1053.020762][T15414] loop0: detected capacity change from 0 to 1024 [ 1053.036200][T15414] EXT4-fs: Ignoring removed bh option [ 1053.077747][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.149363][T15414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.165474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.341388][T14954] udevd[14954]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.957932][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.957991][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.161542][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.283255][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.672809][T15432] syz_tun: entered allmulticast mode [ 1054.681666][T15432] geneve0: entered allmulticast mode [ 1054.824306][T15431] syz_tun: left allmulticast mode [ 1055.011189][T15436] 0x000000000000-0x000000020000 : "" [ 1055.042211][T15436] ftl_cs: FTL header not found. [ 1055.120576][T15436] FAULT_INJECTION: forcing a failure. [ 1055.120576][T15436] name failslab, interval 1, probability 5, space 0, times 9942 [ 1055.120613][T15436] CPU: 0 UID: 0 PID: 15436 Comm: syz.8.2496 Not tainted syzkaller #0 PREEMPT(full) [ 1055.120648][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1055.120666][T15436] Call Trace: [ 1055.120677][T15436] [ 1055.120689][T15436] dump_stack_lvl+0x100/0x190 [ 1055.120741][T15436] should_fail_ex.cold+0x5/0xa [ 1055.120785][T15436] should_failslab+0xc2/0x120 [ 1055.120831][T15436] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1055.120872][T15436] ? __kernfs_new_node+0xd2/0xa10 [ 1055.120923][T15436] __kernfs_new_node+0xd2/0xa10 [ 1055.120973][T15436] ? __pfx___kernfs_new_node+0x10/0x10 [ 1055.121026][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121067][T15436] ? lock_acquire+0x1d1/0x380 [ 1055.121104][T15436] ? kernfs_root+0x23/0x2a0 [ 1055.121144][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121179][T15436] ? find_held_lock+0x2b/0x80 [ 1055.121207][T15436] ? kernfs_root+0xee/0x2a0 [ 1055.121245][T15436] ? kernfs_root+0xee/0x2a0 [ 1055.121282][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121329][T15436] kernfs_new_node+0x194/0x200 [ 1055.121377][T15436] ? __pfx_kernfs_new_node+0x10/0x10 [ 1055.121423][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121459][T15436] ? kernfs_add_one+0x213/0xb40 [ 1055.121511][T15436] __kernfs_create_file+0x53/0x350 [ 1055.121548][T15436] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1055.121596][T15436] internal_create_group+0x593/0xfb0 [ 1055.121644][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121682][T15436] ? __pfx_internal_create_group+0x10/0x10 [ 1055.121728][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121764][T15436] ? kernfs_create_link+0x1f1/0x280 [ 1055.121804][T15436] internal_create_groups+0x9d/0x150 [ 1055.121850][T15436] device_add+0x77a/0x1970 [ 1055.121883][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.121920][T15436] ? __pfx_device_add+0x10/0x10 [ 1055.121949][T15436] ? __pfx___might_resched+0x10/0x10 [ 1055.121984][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.122022][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.122071][T15436] __add_disk+0x592/0xf10 [ 1055.122103][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.122144][T15436] add_disk_fwnode+0x118/0x480 [ 1055.122180][T15436] add_mtd_blktrans_dev+0xd0b/0x1520 [ 1055.122235][T15436] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1055.122304][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.122339][T15436] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1055.122373][T15436] ? mtdblock_add_mtd+0x4a/0x270 [ 1055.122427][T15436] mtdblock_add_mtd+0x1cc/0x270 [ 1055.122475][T15436] blktrans_notify_add+0xa2/0xf0 [ 1055.122521][T15436] add_mtd_device+0xb6d/0x1820 [ 1055.122562][T15436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1055.122611][T15436] ? __pfx_add_mtd_device+0x10/0x10 [ 1055.122657][T15436] mtd_add_partition+0x376/0x6a0 [ 1055.122701][T15436] ? __pfx_mtd_add_partition+0x10/0x10 [ 1055.122740][T15436] ? __might_fault+0xc5/0x140 [ 1055.122787][T15436] ? __might_fault+0xc5/0x140 [ 1055.122848][T15436] mtdchar_blkpg_ioctl+0x207/0x250 [ 1055.122891][T15436] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1055.122967][T15436] mtdchar_ioctl+0x1670/0x1fd0 [ 1055.123016][T15436] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1055.123065][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.123100][T15436] ? lock_acquire+0x1d1/0x380 [ 1055.123137][T15436] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1055.123182][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.123223][T15436] ? rcu_is_watching+0x13/0xc0 [ 1055.123253][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.123288][T15436] ? trace_contention_end+0x126/0x160 [ 1055.123333][T15436] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1055.123379][T15436] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1055.123425][T15436] ? __pfx___mutex_lock+0x10/0x10 [ 1055.123471][T15436] ? __fget_files+0x34/0x3d0 [ 1055.123502][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.123538][T15436] ? hook_file_ioctl_common+0x140/0x440 [ 1055.123591][T15436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.123627][T15436] ? __fget_files+0x21f/0x3d0 [ 1055.123662][T15436] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1055.123705][T15436] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1055.123752][T15436] __x64_sys_ioctl+0x18e/0x210 [ 1055.123796][T15436] do_syscall_64+0x123/0x790 [ 1055.123843][T15436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.123875][T15436] RIP: 0033:0x7f43fcb9fb19 [ 1055.123899][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.123928][T15436] RSP: 002b:00007f43fda60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.123957][T15436] RAX: ffffffffffffffda RBX: 00007f43fce25fa0 RCX: 00007f43fcb9fb19 [ 1055.123977][T15436] RDX: 00002000000006c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 1055.123997][T15436] RBP: 00007f43fcc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1055.124016][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.124034][T15436] R13: 00007f43fce26038 R14: 00007f43fce25fa0 R15: 00007ffc0ef76068 [ 1055.124079][T15436] [ 1055.626072][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.918786][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.134167][ T5645] syzkaller0: tun_net_xmit 90 [ 1056.150743][T15445] syzkaller0: tun_net_xmit 42 [ 1056.451633][T15451] bond1: entered allmulticast mode [ 1056.451661][T15451] wireguard0: entered allmulticast mode [ 1056.513266][T15451] bond1: left allmulticast mode [ 1056.513295][T15451] wireguard0: left allmulticast mode [ 1056.577524][T15450] loop8: detected capacity change from 0 to 4096 [ 1056.578499][T15450] EXT4-fs: Ignoring removed nobh option [ 1056.578566][T15450] EXT4-fs: Ignoring removed bh option [ 1056.618458][T15450] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1056.678782][T15450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.726654][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.828851][ T31] audit: type=1800 audit(1794044628.127:728): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2499" name="file1" dev="loop8" ino=15 res=0 errno=-22 [ 1058.104847][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.104975][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.002166][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.094422][T12520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.187677][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.442137][T15473] loop3: detected capacity change from 0 to 4096 [ 1059.463066][T15473] EXT4-fs: Invalid want_extra_isize 9 [ 1060.282744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.829501][T15457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1061.329570][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.691210][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.691308][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.749756][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.876112][T15486] loop2: detected capacity change from 0 to 1024 [ 1063.877086][T15486] ext4: Unknown parameter 'noacl' [ 1065.668404][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.668526][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.300245][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.430738][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.423494][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.709235][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.928048][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.965296][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.987708][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.789983][T15515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.790272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.827695][T15515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.828153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.828482][T15515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.828680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.843180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.209592][T15535] jffs2: notice: (15535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1074.530199][T15543] loop9: detected capacity change from 0 to 128 [ 1075.535358][T15543] FAT-fs (loop9): Directory bread(block 1048) failed [ 1075.535398][T15543] FAT-fs (loop9): Directory bread(block 1049) failed [ 1075.535428][T15543] FAT-fs (loop9): Directory bread(block 1050) failed [ 1075.535457][T15543] FAT-fs (loop9): Directory bread(block 1051) failed [ 1075.535487][T15543] FAT-fs (loop9): Directory bread(block 1052) failed [ 1075.535516][T15543] FAT-fs (loop9): Directory bread(block 1053) failed [ 1075.535545][T15543] FAT-fs (loop9): Directory bread(block 1054) failed [ 1075.535575][T15543] FAT-fs (loop9): Directory bread(block 1055) failed [ 1075.983958][T12472] net_ratelimit: 11 callbacks suppressed [ 1075.983984][T12472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.166774][T10979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.167401][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.168025][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.764245][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.402717][T15554] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.2523' sets config #-1 [ 1077.723996][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.785761][T15554] ip_tables: iptables: counters copy to user failed while replacing table [ 1078.122864][T15554] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.2523' sets config #1 [ 1078.948843][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.951022][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.489664][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.478594][T14145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.480811][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.481315][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.539253][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.146087][T15570] loop1: detected capacity change from 0 to 128 [ 1083.254320][T15570] veth1_to_bond: entered allmulticast mode [ 1083.268595][T15570] FAULT_INJECTION: forcing a failure. [ 1083.268595][T15570] name failslab, interval 1, probability 5, space 0, times 9941 [ 1083.268634][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.1.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.268685][T15570] Tainted: [L]=SOFTLOCKUP [ 1083.268697][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1083.268716][T15570] Call Trace: [ 1083.268726][T15570] [ 1083.268738][T15570] dump_stack_lvl+0x100/0x190 [ 1083.268789][T15570] should_fail_ex.cold+0x5/0xa [ 1083.268833][T15570] should_failslab+0xc2/0x120 [ 1083.268879][T15570] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1083.268921][T15570] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1083.268973][T15570] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1083.269017][T15570] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1083.269069][T15570] alloc_inode+0x68/0x250 [ 1083.269111][T15570] new_inode+0x22/0x1c0 [ 1083.269148][T15570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.269190][T15570] hugetlbfs_get_inode+0x339/0x740 [ 1083.269246][T15570] hugetlb_file_setup+0x15b/0x5b0 [ 1083.269297][T15570] ksys_mmap_pgoff+0x242/0x610 [ 1083.269340][T15570] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1083.269378][T15570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1083.269414][T15570] ? xfd_validate_state+0x129/0x190 [ 1083.269456][T15570] __x64_sys_mmap+0x125/0x190 [ 1083.269498][T15570] do_syscall_64+0x123/0x790 [ 1083.269547][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.269577][T15570] RIP: 0033:0x7f120f79fb19 [ 1083.269601][T15570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.269630][T15570] RSP: 002b:00007f1210754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1083.269658][T15570] RAX: ffffffffffffffda RBX: 00007f120fa25fa0 RCX: 00007f120f79fb19 [ 1083.269678][T15570] RDX: 000000000100000f RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1083.269697][T15570] RBP: 00007f120f837b70 R08: ffffffffffffffff R09: 0000000000000000 [ 1083.269716][T15570] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 1083.269735][T15570] R13: 00007f120fa26038 R14: 00007f120fa25fa0 R15: 00007ffd83bc9948 [ 1083.269774][T15570] [ 1083.602751][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1083.624099][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.726062][T15570] veth1_to_bond (unregistering): left allmulticast mode [ 1083.844654][T15570] bond0: (slave bond_slave_1): Releasing backup interface [ 1084.270123][T15577] 9pnet_virtio: no channels available for device mtd0 [ 1085.984782][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.984901][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.985027][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.985414][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.988702][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.706509][T15583] loop1: detected capacity change from 0 to 2048 [ 1086.803465][T15583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.030746][ T5644] net_ratelimit: 1 callbacks suppressed [ 1087.030771][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.476213][T11073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.638449][T15588] FAULT_INJECTION: forcing a failure. [ 1087.638449][T15588] name failslab, interval 1, probability 5, space 0, times 9940 [ 1087.638489][T15588] CPU: 0 UID: 0 PID: 15588 Comm: syz.2.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.638530][T15588] Tainted: [L]=SOFTLOCKUP [ 1087.638541][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1087.638558][T15588] Call Trace: [ 1087.638568][T15588] [ 1087.638580][T15588] dump_stack_lvl+0x100/0x190 [ 1087.638630][T15588] should_fail_ex.cold+0x5/0xa [ 1087.638678][T15588] should_failslab+0xc2/0x120 [ 1087.638724][T15588] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1087.638769][T15588] ? kasprintf+0xc7/0x100 [ 1087.638822][T15588] kvasprintf+0xbc/0x150 [ 1087.638867][T15588] ? __pfx_kvasprintf+0x10/0x10 [ 1087.638916][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.638952][T15588] ? lock_acquire+0x1d1/0x380 [ 1087.638989][T15588] ? __is_module_percpu_address+0x2c/0x430 [ 1087.639033][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.639074][T15588] kasprintf+0xc7/0x100 [ 1087.639120][T15588] ? __pfx_kasprintf+0x10/0x10 [ 1087.639168][T15588] ? __is_module_percpu_address+0x1c2/0x430 [ 1087.639230][T15588] wq_init_lockdep+0x3f/0xe0 [ 1087.639273][T15588] alloc_workqueue_noprof+0xdc/0x130 [ 1087.639316][T15588] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1087.639369][T15588] ? __pfx_mempool_alloc_pages+0x10/0x10 [ 1087.639411][T15588] ? __pfx_mempool_free_pages+0x10/0x10 [ 1087.639463][T15588] dm_integrity_ctr+0x1503/0x64b0 [ 1087.639520][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.639557][T15588] ? __pfx_dm_integrity_ctr+0x10/0x10 [ 1087.639600][T15588] ? dm_split_args+0xc1/0x570 [ 1087.639638][T15588] ? __entry_text_end+0x102035/0x102039 [ 1087.639672][T15588] ? rcu_is_watching+0x13/0xc0 [ 1087.639701][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.639742][T15588] ? skip_spaces+0xee/0x130 [ 1087.639783][T15588] dm_table_add_target+0x58b/0xee0 [ 1087.639832][T15588] ? __pfx_dm_table_add_target+0x10/0x10 [ 1087.639875][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.639914][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.639949][T15588] ? dm_table_create+0x2d3/0x3d0 [ 1087.639995][T15588] table_load+0x3b9/0x7b0 [ 1087.640041][T15588] ? __pfx_table_load+0x10/0x10 [ 1087.640076][T15588] ? __might_fault+0xc5/0x140 [ 1087.640124][T15588] ? __might_fault+0xc5/0x140 [ 1087.640196][T15588] ctl_ioctl+0x4d2/0xcc0 [ 1087.640229][T15588] ? __pfx_table_load+0x10/0x10 [ 1087.640268][T15588] ? __pfx_ctl_ioctl+0x10/0x10 [ 1087.640345][T15588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1087.640382][T15588] ? __fget_files+0x21f/0x3d0 [ 1087.640421][T15588] dm_ctl_ioctl+0x22/0x30 [ 1087.640452][T15588] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1087.640485][T15588] __x64_sys_ioctl+0x18e/0x210 [ 1087.640533][T15588] do_syscall_64+0x123/0x790 [ 1087.640583][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.640616][T15588] RIP: 0033:0x7fd65779fb19 [ 1087.640640][T15588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.640672][T15588] RSP: 002b:00007fd658733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.640702][T15588] RAX: ffffffffffffffda RBX: 00007fd657a25fa0 RCX: 00007fd65779fb19 [ 1087.640725][T15588] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 1087.640745][T15588] RBP: 00007fd657837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1087.640767][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.640787][T15588] R13: 00007fd657a26038 R14: 00007fd657a25fa0 R15: 00007ffc6b4b9248 [ 1087.640832][T15588] [ 1088.179289][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.249313][T15588] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-offload": -EINTR [ 1089.328179][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.334910][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.478756][T15599] loop3: detected capacity change from 0 to 512 [ 1089.642080][T15599] EXT4-fs (loop3): 1 truncate cleaned up [ 1089.669751][T15588] device-mapper: table: 248:9: integrity: Cannot allocate workqueue (-ENOMEM) [ 1089.669781][T15588] device-mapper: ioctl: error adding target to table [ 1089.685226][T15599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.795844][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.068725][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.202972][T15604] loop8: detected capacity change from 0 to 512 [ 1092.229628][T15604] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1092.265101][T15604] EXT4-fs (loop8): 1 truncate cleaned up [ 1092.266591][T15604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.472807][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.491020][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.585629][T12520] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1092.615523][T12520] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1092.658729][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.784881][T12094] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1092.935670][T12094] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 1092.958569][T12094] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.958606][T12094] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1092.958650][T12094] usb 1-1: Dual-Role OTG device on HNP port [ 1092.994942][T12094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.037437][ C0] ------------[ cut here ]------------ [ 1093.037455][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 1093.037478][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: syz-executor/12139 [ 1093.064961][ C0] Modules linked in: [ 1093.069625][ C0] CPU: 0 UID: 0 PID: 12139 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.083369][ C0] Tainted: [L]=SOFTLOCKUP [ 1093.088549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1093.100605][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 1093.107067][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 46 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 be fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 b1 fb 8c [ 1093.130689][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010046 [ 1093.137953][ C0] RAX: dffffc0000000000 RBX: ffff888020b900e0 RCX: ffffffff8cfbf580 [ 1093.147496][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbbe80 RDI: ffffffff92786ec0 [ 1093.157041][ C0] RBP: 0000000000000081 R08: ffffffff8cfbb160 R09: 0000000000000000 [ 1093.166580][ C0] R10: ffffffff926ae85f R11: 0000000000000000 R12: ffffffff8cfbb160 [ 1093.176135][ C0] R13: 0000000000000000 R14: ffff888020b900e0 R15: ffff888075a32020 [ 1093.185682][ C0] FS: 0000000000000000(0000) GS:ffff888122472000(0000) knlGS:0000000000000000 [ 1093.196375][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1093.204253][ C0] CR2: 000056379e79ca58 CR3: 000000007e79e000 CR4: 0000000000350ef0 [ 1093.213800][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1093.223342][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1093.232883][ C0] Call Trace: [ 1093.236796][ C0] [ 1093.240206][ C0] hidg_set_alt+0x190/0xa10 [ 1093.245607][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1093.251846][ C0] ? rcu_is_watching+0x13/0xc0 [ 1093.257541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.264298][ C0] composite_setup+0x2ccf/0x9290 [ 1093.270208][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.276975][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1093.282910][ C0] ? __pfx_composite_setup+0x10/0x10 [ 1093.289246][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1093.295705][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1093.301733][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1093.308184][ C0] ? configfs_composite_setup+0xfb/0x130 [ 1093.314941][ C0] configfs_composite_setup+0xfb/0x130 [ 1093.321492][ C0] dummy_timer+0x20a0/0x3840 [ 1093.326998][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1093.333024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.339771][ C0] ? find_held_lock+0x2b/0x80 [ 1093.345365][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1093.352111][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1093.358862][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1093.365824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.372568][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1093.379319][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1093.386490][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1093.392509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.399273][ C0] ? rcu_is_watching+0x13/0xc0 [ 1093.404972][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1093.411936][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1093.417850][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 1093.424089][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1093.430216][ C0] handle_softirqs+0x216/0xa20 [ 1093.435937][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1093.442264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.449010][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1093.454820][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.461569][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1093.468323][ C0] __irq_exit_rcu+0x178/0x220 [ 1093.473921][ C0] irq_exit_rcu+0x9/0x30 [ 1093.478994][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1093.485761][ C0] [ 1093.489251][ C0] [ 1093.492743][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.499908][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1093.506243][ C0] Code: ff 65 0f c1 05 db e0 d1 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d 97 d1 13 0f 85 4d 01 00 00 48 83 c4 [ 1093.529755][ C0] RSP: 0018:ffffc9000312f840 EFLAGS: 00000206 [ 1093.537017][ C0] RAX: 0000000000000046 RBX: ffffffff8ffeafe0 RCX: ffffc9000312f84c [ 1093.546572][ C0] RDX: 0000000000000000 RSI: ffffffff8e600b10 RDI: ffffffff8c836180 [ 1093.556117][ C0] RBP: ffffffff829067b7 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 1093.565663][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802f971f40 [ 1093.575208][ C0] R13: 0000000000000024 R14: 0000000000000202 R15: 0000000000000001 [ 1093.584797][ C0] ? rcu_read_unlock+0x17/0x60 [ 1093.590527][ C0] rcu_read_unlock+0x1c/0x60 [ 1093.596019][ C0] lruvec_stat_mod_folio+0x247/0x2e0 [ 1093.602369][ C0] vm_area_free_pages+0x1cb/0x2a0 [ 1093.608390][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1093.614208][ C0] vfree+0xfc/0x850 [ 1093.618771][ C0] ? kcov_close+0x2b/0x60 [ 1093.623967][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.630713][ C0] ? rcu_is_watching+0x13/0xc0 [ 1093.636414][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1093.643373][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.650123][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1093.655942][ C0] kcov_close+0x34/0x60 [ 1093.660926][ C0] __fput+0x3fb/0xb50 [ 1093.665719][ C0] fput_close_sync+0x118/0x250 [ 1093.671445][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1093.677796][ C0] filp_close_sync+0x75/0xa0 [ 1093.683300][ C0] put_files_struct+0x1f7/0x390 [ 1093.689117][ C0] exit_files+0x85/0xb0 [ 1093.694087][ C0] do_exit+0x896/0x2a00 [ 1093.699072][ C0] ? __pfx_do_exit+0x10/0x10 [ 1093.704584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.711343][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1093.717371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.724134][ C0] ? find_held_lock+0x2b/0x80 [ 1093.729732][ C0] ? get_signal+0xa28/0x22e0 [ 1093.735231][ C0] do_group_exit+0xd5/0x2a0 [ 1093.740633][ C0] get_signal+0x1f58/0x22e0 [ 1093.746020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.752771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.759529][ C0] ? __pfx_get_signal+0x10/0x10 [ 1093.765335][ C0] ? __fput+0x68a/0xb50 [ 1093.770311][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1093.776967][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 1093.783196][ C0] ? __fput+0x68f/0xb50 [ 1093.788184][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1093.795588][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.802343][ C0] exit_to_user_mode_loop+0x139/0x700 [ 1093.808789][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.815550][ C0] ? rcu_is_watching+0x13/0xc0 [ 1093.821294][ C0] do_syscall_64+0x661/0x790 [ 1093.826826][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.833892][ C0] RIP: 0033:0x7f1b39f6034e [ 1093.839180][ C0] Code: Unable to access opcode bytes at 0x7f1b39f60324. [ 1093.847576][ C0] RSP: 002b:00007ffe79114568 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1093.857658][ C0] RAX: fffffffffffffe00 RBX: 000055558267b500 RCX: 00007f1b39f6034e [ 1093.867205][ C0] RDX: 0000000040000000 RSI: 00007ffe7911460c RDI: ffffffffffffffff [ 1093.876751][ C0] RBP: 00007ffe7911460c R08: 0000000000000000 R09: 0000000000000000 [ 1093.886297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000aa [ 1093.895842][ C0] R13: 000055558268ea00 R14: 0000000000106cee R15: 00007ffe79114660 [ 1093.905412][ C0] [ 1093.909013][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1093.917736][ C0] CPU: 0 UID: 0 PID: 12139 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.931074][ C0] Tainted: [L]=SOFTLOCKUP [ 1093.936243][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1093.948290][ C0] Call Trace: [ 1093.952206][ C0] [ 1093.955600][ C0] dump_stack_lvl+0x100/0x190 [ 1093.961242][ C0] vpanic+0x2dc/0x6f8 [ 1093.966024][ C0] panic+0xd1/0xe0 [ 1093.970484][ C0] ? __pfx_panic+0x10/0x10 [ 1093.975803][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1093.982266][ C0] ? usb_ep_enable+0x3e6/0x490 [ 1093.987971][ C0] __warn.cold+0x191/0x321 [ 1093.993264][ C0] __report_bug+0x30f/0x440 [ 1093.998668][ C0] ? usb_ep_enable+0x3e6/0x490 [ 1094.004391][ C0] ? __pfx___report_bug+0x10/0x10 [ 1094.010415][ C0] ? try_to_wake_up+0x158/0x1ca0 [ 1094.016375][ C0] report_bug_entry+0xe2/0x290 [ 1094.022097][ C0] ? usb_ep_enable+0x3f8/0x490 [ 1094.027800][ C0] handle_bug+0x1cd/0x2a0 [ 1094.032978][ C0] exc_invalid_op+0x17/0x50 [ 1094.038365][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1094.044184][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 1094.050630][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 46 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 be fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 b1 fb 8c [ 1094.074268][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010046 [ 1094.081534][ C0] RAX: dffffc0000000000 RBX: ffff888020b900e0 RCX: ffffffff8cfbf580 [ 1094.091081][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbbe80 RDI: ffffffff92786ec0 [ 1094.100630][ C0] RBP: 0000000000000081 R08: ffffffff8cfbb160 R09: 0000000000000000 [ 1094.110178][ C0] R10: ffffffff926ae85f R11: 0000000000000000 R12: ffffffff8cfbb160 [ 1094.119724][ C0] R13: 0000000000000000 R14: ffff888020b900e0 R15: ffff888075a32020 [ 1094.129296][ C0] hidg_set_alt+0x190/0xa10 [ 1094.134718][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1094.140985][ C0] ? rcu_is_watching+0x13/0xc0 [ 1094.146687][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.153444][ C0] composite_setup+0x2ccf/0x9290 [ 1094.159356][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.166103][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1094.172039][ C0] ? __pfx_composite_setup+0x10/0x10 [ 1094.178374][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1094.184823][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1094.190852][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1094.197305][ C0] ? configfs_composite_setup+0xfb/0x130 [ 1094.204066][ C0] configfs_composite_setup+0xfb/0x130 [ 1094.210618][ C0] dummy_timer+0x20a0/0x3840 [ 1094.216123][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1094.222158][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.228914][ C0] ? find_held_lock+0x2b/0x80 [ 1094.234521][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1094.241275][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1094.248034][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1094.255021][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.261779][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1094.268532][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1094.275717][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1094.281641][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.288393][ C0] ? rcu_is_watching+0x13/0xc0 [ 1094.294103][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1094.301079][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1094.306999][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 1094.313254][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1094.319385][ C0] handle_softirqs+0x216/0xa20 [ 1094.325111][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1094.331457][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.338214][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1094.344036][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.350790][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1094.357567][ C0] __irq_exit_rcu+0x178/0x220 [ 1094.363197][ C0] irq_exit_rcu+0x9/0x30 [ 1094.368301][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1094.375133][ C0] [ 1094.378655][ C0] [ 1094.382154][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1094.389322][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1094.395662][ C0] Code: ff 65 0f c1 05 db e0 d1 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d 97 d1 13 0f 85 4d 01 00 00 48 83 c4 [ 1094.419185][ C0] RSP: 0018:ffffc9000312f840 EFLAGS: 00000206 [ 1094.426672][ C0] RAX: 0000000000000046 RBX: ffffffff8ffeafe0 RCX: ffffc9000312f84c [ 1094.436223][ C0] RDX: 0000000000000000 RSI: ffffffff8e600b10 RDI: ffffffff8c836180 [ 1094.445774][ C0] RBP: ffffffff829067b7 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 1094.455322][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802f971f40 [ 1094.464883][ C0] R13: 0000000000000024 R14: 0000000000000202 R15: 0000000000000001 [ 1094.474438][ C0] ? rcu_read_unlock+0x17/0x60 [ 1094.480176][ C0] rcu_read_unlock+0x1c/0x60 [ 1094.485730][ C0] lruvec_stat_mod_folio+0x247/0x2e0 [ 1094.492112][ C0] vm_area_free_pages+0x1cb/0x2a0 [ 1094.498148][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1094.503997][ C0] vfree+0xfc/0x850 [ 1094.508573][ C0] ? kcov_close+0x2b/0x60 [ 1094.513772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.520530][ C0] ? rcu_is_watching+0x13/0xc0 [ 1094.526238][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1094.533206][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.540071][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1094.545896][ C0] kcov_close+0x34/0x60 [ 1094.550992][ C0] __fput+0x3fb/0xb50 [ 1094.555791][ C0] fput_close_sync+0x118/0x250 [ 1094.561505][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1094.567849][ C0] filp_close_sync+0x75/0xa0 [ 1094.573350][ C0] put_files_struct+0x1f7/0x390 [ 1094.579176][ C0] exit_files+0x85/0xb0 [ 1094.584171][ C0] do_exit+0x896/0x2a00 [ 1094.589160][ C0] ? __pfx_do_exit+0x10/0x10 [ 1094.594684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.601436][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1094.607492][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.614264][ C0] ? find_held_lock+0x2b/0x80 [ 1094.619876][ C0] ? get_signal+0xa28/0x22e0 [ 1094.625392][ C0] do_group_exit+0xd5/0x2a0 [ 1094.630798][ C0] get_signal+0x1f58/0x22e0 [ 1094.636190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.642966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.649731][ C0] ? __pfx_get_signal+0x10/0x10 [ 1094.655539][ C0] ? __fput+0x68a/0xb50 [ 1094.660520][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1094.667191][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 1094.673435][ C0] ? __fput+0x68f/0xb50 [ 1094.678432][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1094.685837][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.692593][ C0] exit_to_user_mode_loop+0x139/0x700 [ 1094.699040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.705784][ C0] ? rcu_is_watching+0x13/0xc0 [ 1094.711487][ C0] do_syscall_64+0x661/0x790 [ 1094.716994][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.724049][ C0] RIP: 0033:0x7f1b39f6034e [ 1094.729345][ C0] Code: Unable to access opcode bytes at 0x7f1b39f60324. [ 1094.737752][ C0] RSP: 002b:00007ffe79114568 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1094.747851][ C0] RAX: fffffffffffffe00 RBX: 000055558267b500 RCX: 00007f1b39f6034e [ 1094.757393][ C0] RDX: 0000000040000000 RSI: 00007ffe7911460c RDI: ffffffffffffffff [ 1094.766940][ C0] RBP: 00007ffe7911460c R08: 0000000000000000 R09: 0000000000000000 [ 1094.776504][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000aa [ 1094.786051][ C0] R13: 000055558268ea00 R14: 0000000000106cee R15: 00007ffe79114660 [ 1094.795624][ C0] [ 1094.799269][ C0] Kernel Offset: disabled [ 1094.804432][ C0] Rebooting in 86400 seconds..