last executing test programs: 17m23.598431465s ago: executing program 32 (id=1965): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@zero_size_dir}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x41, 0x1528, &(0x7f00000037c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x800, 0x3a, '\xaa\xaa\xaa\xaa\xaa', 0x3a, '&', 0x3a, './file1', 0x3a, [0x46, 0x46, 0x50, 0x50, 0x50]}, 0x32) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0xffffffffffffffc3}, 0xfffffdef) 9m46.185775579s ago: executing program 33 (id=5837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, 0x200000000000000}, 0x38) 5m59.549886256s ago: executing program 34 (id=7691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003240)=[{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000680)="435748d47b234945ba8b3ca3c62c2a", 0xf}, {&(0x7f00000006c0)="99753614166ef30e8c73aac9ecdccc", 0xf}], 0x3, 0x0, 0x0, 0x4000804}], 0x1, 0x1) 5m24.553023432s ago: executing program 5 (id=7927): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='E', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 5m23.681627692s ago: executing program 5 (id=7931): r0 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000006000/0x4000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000716000/0x4000)=nil, 0x4000}) 5m23.489698807s ago: executing program 5 (id=7932): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x40c8a1, 0xc000, 0x8008, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m23.058446147s ago: executing program 5 (id=7936): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m22.895961831s ago: executing program 5 (id=7938): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) getdents(0xffffffffffffffff, 0x0, 0x0) 5m20.488458666s ago: executing program 5 (id=7951): socket$netlink(0x10, 0x3, 0xb) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5m19.751840688s ago: executing program 35 (id=7951): socket$netlink(0x10, 0x3, 0xb) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 4m51.669865857s ago: executing program 8 (id=8191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m51.394524978s ago: executing program 8 (id=8195): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000480)='2\x00', 0x8da6) 4m50.485040287s ago: executing program 8 (id=8203): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) statfs(&(0x7f0000000040)='./file0\x00', 0x0) 4m49.302846973s ago: executing program 8 (id=8214): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x60b, &(0x7f0000000380)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) chroot(&(0x7f0000001140)='./file0\x00') chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0/file0\x00') 4m48.673308355s ago: executing program 8 (id=8221): r0 = gettid() socket$inet_sctp(0x2, 0x4, 0x84) timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001080)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) timer_gettime(r1, 0x0) 4m46.96226575s ago: executing program 8 (id=8239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e20, 0x6ba5, @empty, 0x43}}, 0x5, 0x3}, 0x90) 4m46.464165682s ago: executing program 36 (id=8239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e20, 0x6ba5, @empty, 0x43}}, 0x5, 0x3}, 0x90) 3m37.203386368s ago: executing program 6 (id=8690): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 3m35.747626265s ago: executing program 6 (id=8700): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000e107000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m35.072584393s ago: executing program 6 (id=8704): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb019"}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) 3m33.008533055s ago: executing program 6 (id=8719): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 3m32.206908121s ago: executing program 6 (id=8724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@syn={0x1e, 0xc, 0xe, 0x1, 0x3, 0x7, 0x7}]}}}}}}}}, 0x0) 3m30.950400176s ago: executing program 6 (id=8728): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m30.2626551s ago: executing program 37 (id=8728): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m11.866231717s ago: executing program 7 (id=8836): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0x12) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x101, 0x2, 0x2, 0x0, 0xc}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.31972376s ago: executing program 7 (id=8839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 3m10.565409544s ago: executing program 7 (id=8844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) setreuid(0xee01, 0xffffffffffffffff) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 3m10.119247765s ago: executing program 7 (id=8848): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x8010) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m8.315030276s ago: executing program 7 (id=8855): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002900)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m6.298777772s ago: executing program 7 (id=8872): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3m5.463093504s ago: executing program 38 (id=8872): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 8.917101944s ago: executing program 9 (id=10048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "696335283bf79057", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", "00008aa4", "b6405ad112e098b1"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c) 8.420723389s ago: executing program 9 (id=10052): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x80, 0x105c2, &(0x7f0000020b80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x4, 0xffffffffffffffff, 0x3ffffc, 0x1, 0x0, 0x0, 0x2401}) 6.586299357s ago: executing program 9 (id=10061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) 6.585971705s ago: executing program 3 (id=10062): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.98645105s ago: executing program 3 (id=10075): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000000)={'some', 0x20, 0x2}, 0x2f) 4.845208602s ago: executing program 4 (id=10078): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 4.479472375s ago: executing program 4 (id=10080): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 4.478903926s ago: executing program 3 (id=10081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x440, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) 3.526413982s ago: executing program 3 (id=10086): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@grpjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$eJzs3MtvG1UXAPAzdpy+v+Qr5dHSQqAgKh5Jkz7ogk0RSCxAQoJFEauQplWo26AkSLSKIGURlqgSe8QSib+ADWWDgBUSW9gjpICyobAyGnsmdRPbeTlxqX8/aZJ7fce693jm2sd3bAfQtQbSP0nE3oj4JSL6atU7dxio/bu1ODv29+LsWBKVyht/JtX9/lqcHct3ze+3p1apVFr0O/92xGi5PD6V1YdmLr83NH312nMTl0cvjl8cvzJy5szJE0d6T4+cakuc+9KxHvpw8vDBV9668drYuRvv/PBVOt69WXt9HO0yUHt0G3qy3Z112L66ctLTwYGwLsWISA9XqTr/+6IYu5ba+uLljzs6OGBLVSqFyo7mzXMV4B6WJupAN8pf6NP3v/m2TanHXWHhbCytY9zKtlpLTxSyfUrZe6StMBAR5+b++TzdYovWIQAA6t08GxHPNsr/CvFA3X7/y64N9UfE/yNif0TcFxEHIuL+iOq+D0bEQ2vsN19lXn6FZGX+U+nbcHBrkOZ/L2TXtu7M//LsL/qLWW1fNf5ScmGiPH48e0yORWlHWh9u0ce3L/38abO2+vwv3dL+81wwG8fvPcsW6M6PzoxuJuZ6C9cjDvU0ij9ZynnT/PhgRBzaYB8TT395uFnb6vG30IakvPJFxFO14z8Xy+LPJU2vTw4/f3rk1NDOKI8fH8rPipV+/Gn+9ay3ZHnbpuJvg4Wbldjd8PxfGmp/sjNi+uq1S9XrtdPr72P+10+avqfZ6Pnfm7xZLfdmt30wOjMzNRzRm7y68vaR2/fN6/n+6fl/7Gjj+b8/bj8SD0dEehIfiYhHIuLRbOyPRcTjEXG0Rfzfv/jEu+uPv8WqfBul8f9RWuX4R/3xX3+heOm7r9cffy49/ierpWPZLWt5/ms1rutTmzmbAQAA4L+nUP0MfFIYXCoXCoODtc/wH4jdhfLk9MwzFybfv3K+9ln5/igV8pWuvrr10OFsbTivjyyrn8jWjT8r7qrWB8cmy+c7HTx0uT1N5n/qt2KnRwdsOd/Xgu5l/kP3Mv+he5n/0L3Mf+hejeb/Rx0YB7D9Vnn937Vd4wC2n/wfupf5D93L/Ieu1PRL8oVNfeVfoUOFb3o391sNay9E4S4J+Z4plKJhU0/LH7NoQ2FHw6ZOPzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//0k+5Mg=") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 3.228877745s ago: executing program 0 (id=10087): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 2.655901146s ago: executing program 2 (id=10090): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044015}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000010}, 0x20044000) 2.5701525s ago: executing program 4 (id=10091): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 2.422416427s ago: executing program 9 (id=10092): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0xd5a2) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.323634976s ago: executing program 3 (id=10093): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 2.311749562s ago: executing program 2 (id=10094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40002}], 0x1, 0x44840) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/5, 0x5}], 0x1}, 0x0) 2.196152501s ago: executing program 9 (id=10095): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x200, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1.975297231s ago: executing program 2 (id=10097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.900615955s ago: executing program 4 (id=10098): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 1.899177434s ago: executing program 9 (id=10099): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="366f6c756d653d30303030303030303030aead9caf303030303030303331332c6e6f7374726963742c75696401000000010000006c617374626c6f6382ddc2fc0b3a3dfedee69fc1626b3d30306b540074e72c303030303030303030302c3030303030303030303030303030303030333232372c6d6f64653d30303030303030301030303030303000"/150, @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000000003,dmode=00000000000000000000016,measure,euid<', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',mask=MAY_EXEC,dont_measure,smackfsdef=\\,appraise_type=imasig,euid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.873993047s ago: executing program 0 (id=10100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/89, 0x59}], 0x1}, 0x40010042) 1.767231444s ago: executing program 2 (id=10101): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.575715926s ago: executing program 0 (id=10102): io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) 1.518543097s ago: executing program 2 (id=10103): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b97966be023d208b8964152778594a1c"}}) lstat(&(0x7f0000000700)='./file2\x00', 0x0) mount$binder(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x800020, 0x0) 1.458468112s ago: executing program 3 (id=10104): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x20000000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.349062548s ago: executing program 0 (id=10105): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}, 0x2}], 0x1, 0x40012141, 0x0) 1.247350536s ago: executing program 1 (id=10106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1.090028764s ago: executing program 1 (id=10107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 993.470177ms ago: executing program 0 (id=10108): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x84, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x101c) 969.834213ms ago: executing program 2 (id=10109): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1010002, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@uni_xlate}, {@fat=@dmask}, {@fat=@check_strict}, {@uni_xlateno}, {@numtail}]}, 0x1, 0x37f, &(0x7f00000007c0)="$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") timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xbc4040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 786.214368ms ago: executing program 1 (id=10110): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/53, 0x9c}, {0x0}], 0x2, 0x1, 0x7e, 0x10) 587.532748ms ago: executing program 1 (id=10111): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 553.865258ms ago: executing program 0 (id=10112): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 234.94085ms ago: executing program 4 (id=10113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) 216.028527ms ago: executing program 1 (id=10114): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.29641ms ago: executing program 1 (id=10115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x10) 0s ago: executing program 4 (id=10116): unshare(0x28000600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) fchdir(r0) kernel console output (not intermixed with test programs): stopped [ 1199.979401][T30772] hpfs: You really don't want any checks? You are crazy... [ 1199.992457][T30772] hpfs: hpfs_map_sector(): read error [ 1200.018319][T30772] hpfs: code page support is disabled [ 1200.090138][T30772] hpfs: hpfs_map_4sectors(): unaligned read [ 1200.096889][T30772] hpfs: hpfs_map_4sectors(): unaligned read [ 1200.108101][T30772] hpfs: filesystem error: unable to find root dir [ 1200.499953][ T1127] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1200.509063][ T1127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.517096][ T1127] usb 5-1: Product: syz [ 1200.528378][ T1127] usb 5-1: Manufacturer: syz [ 1200.552121][ T1127] usb 5-1: SerialNumber: syz [ 1200.614182][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1200.622040][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1200.634543][ T1127] usb 5-1: can't set config #1, error -32 [ 1200.687542][T26391] usb 5-1: USB disconnect, device number 37 [ 1200.703353][T30794] overlayfs: failed to clone lowerpath [ 1200.823075][T30799] loop2: detected capacity change from 0 to 64 [ 1201.406960][T24034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.638621][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1201.879474][ T5757] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1201.999047][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1202.009337][T30828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.016909][T30828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.037169][T30828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.051009][T30828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.140586][T24024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.148726][T24024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.157015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.165415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.182335][T30830] ip6tnl1: entered promiscuous mode [ 1202.527141][T30842] loop0: detected capacity change from 0 to 512 [ 1202.554557][T30842] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1202.682120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.688481][ T5757] usb 3-1: Using ep0 maxpacket: 16 [ 1202.705014][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1202.787343][T30842] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1202.873703][T30842] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9213: bg 0: block 248: padding at end of block bitmap is not set [ 1202.897391][T30842] loop0: lost filesystem error report for type 5 error -117 [ 1202.946543][T30842] Quota error (device loop0): write_blk: dquota write failed [ 1202.966278][T30842] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1202.978144][T30842] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.9213: Failed to acquire dquot type 1 [ 1202.989383][T30842] loop0: lost filesystem error report for type 5 error -28 [ 1203.007775][T30851] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9216'. [ 1203.024909][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 1203.024941][ C1] EXT4-fs (loop0): last error at time 1781146895: ext4_acquire_dquot:7034 [ 1203.048175][T30842] EXT4-fs (loop0): 1 truncate cleaned up [ 1203.055838][T30842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1203.103536][T30853] loop9: detected capacity change from 0 to 2048 [ 1203.178304][T30855] fuse: fd is not a fuse device [ 1203.206324][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1203.210607][T30853] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.301511][T30853] EXT4-fs (loop9): shut down requested (0) [ 1203.360537][T30859] syz_tun: entered allmulticast mode [ 1203.368527][T30858] syz_tun: left allmulticast mode [ 1203.372003][T30860] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1203.435282][ T31] audit: type=1800 audit(1781146895.734:868): pid=30853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9217" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=18 res=0 errno=0 [ 1203.968809][T26791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.597438][T30889] netlink: 'syz.0.9232': attribute type 1 has an invalid length. [ 1204.758497][ C0] net_ratelimit: 3 callbacks suppressed [ 1204.758523][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1204.862830][T30889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1204.870434][ T5757] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1204.879576][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.887662][ T5757] usb 3-1: Product: syz [ 1204.891823][ T5757] usb 3-1: Manufacturer: syz [ 1204.910895][T30893] bond1: (slave geneve2): making interface the new active one [ 1204.920277][T30893] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1204.933392][T30892] loop2: detected capacity change from 0 to 32768 [ 1204.982959][T29215] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1204.995523][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1205.010765][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1205.047086][ T5757] usb 3-1: config 0 descriptor?? [ 1205.050327][T29224] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1205.123873][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1205.138560][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1205.153345][T30892] JBD2: Ignoring recovery information on journal [ 1205.171718][T29212] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1205.246229][ T5757] usb 3-1: can't set config #0, error -71 [ 1205.254166][ T5757] usb 3-1: USB disconnect, device number 29 [ 1205.264637][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1205.265740][T29212] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1205.281878][T30892] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1205.312560][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1205.371201][T30879] loop3: detected capacity change from 0 to 32768 [ 1205.380944][T30895] loop9: detected capacity change from 0 to 4096 [ 1205.430474][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1205.578500][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1205.578556][T30870] syz.4.9223 (30870): drop_caches: 2 [ 1205.616730][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 1205.636904][T30892] (syz.2.9233,30892,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 1205.653488][T30892] (syz.2.9233,30892,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1205.667264][T30892] (syz.2.9233,30892,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1205.675224][T30892] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 1205.685681][T30892] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1205.696142][T30892] (syz.2.9233,30892,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 1205.708652][T30892] (syz.2.9233,30892,0):ocfs2_mknod:318 ERROR: status = -5 [ 1205.715818][T30892] (syz.2.9233,30892,0):ocfs2_mknod:506 ERROR: status = -5 [ 1205.723095][T30892] (syz.2.9233,30892,0):ocfs2_create:679 ERROR: status = -5 [ 1205.771811][T30879] JBD2: Ignoring recovery information on journal [ 1205.798098][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1205.835628][T30895] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.965306][T30879] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1206.035161][T30895] EXT4-fs (loop9): shut down requested (1) [ 1206.178760][T26791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.205789][T29031] ocfs2: Unmounting device (7,2) on (node local) [ 1206.601583][T30927] 9pnet: p9_errstr2errno: server reported unknown error b0 [ 1206.838363][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1206.876851][T30935] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9245'. [ 1206.940006][ T31] audit: type=1800 audit(1781146899.334:869): pid=30879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9228" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1206.990955][ T31] audit: type=1800 audit(1781146899.374:870): pid=30920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9228" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1207.342612][T27542] ocfs2: Unmounting device (7,3) on (node local) [ 1207.349368][T30948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1207.458779][T30948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.466494][T30948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.570102][T30952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1207.659219][T30951] loop0: detected capacity change from 0 to 1024 [ 1207.818755][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.827113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.853582][T30951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.866237][T29222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.874639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.883282][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1208.469856][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.918380][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1208.998213][ T31] audit: type=1800 audit(1781146901.374:871): pid=30985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9266" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1209.036458][T30987] loop3: detected capacity change from 0 to 512 [ 1209.064500][T30987] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1209.102404][T24024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.109460][T30987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1209.255545][T30987] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.9267: bad orphan inode 131083 [ 1209.268842][T30987] loop3: lost filesystem error report for type 5 error -117 [ 1209.273028][T30987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.379146][T30992] loop0: detected capacity change from 0 to 4096 [ 1209.738556][T27542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.958116][ C0] net_ratelimit: 1 callbacks suppressed [ 1209.958139][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1210.124745][T30976] loop2: detected capacity change from 0 to 40427 [ 1210.132364][T30976] f2fs: Unknown parameter 'whint_mode' [ 1210.286708][T24024] ntfs3(loop0): ino=5, mi_enum_attr [ 1210.915343][ T31] audit: type=1800 audit(1781146903.214:872): pid=31008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9275" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1210.998383][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1211.019966][T30999] loop3: detected capacity change from 0 to 131072 [ 1211.073621][T30999] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1211.082054][T30999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1211.091439][T30999] F2FS-fs (loop3): invalid crc value [ 1211.559085][T30999] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1211.675423][T31021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.683258][T30999] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1211.693693][T30999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1212.038150][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1212.432125][T31040] loop4: detected capacity change from 0 to 1024 [ 1212.439906][T31040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1212.653533][T31040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.708379][T26391] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1213.078424][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1213.180628][T26391] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1213.199903][T26391] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.205688][T11307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.211231][T26391] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1213.250869][T26391] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1213.265900][T26391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.275222][T26391] usb 10-1: Product: syz [ 1213.280166][T26391] usb 10-1: Manufacturer: syz [ 1213.285109][T26391] usb 10-1: SerialNumber: syz [ 1213.459997][T26391] usb 10-1: selecting invalid altsetting 1 [ 1213.554952][T26391] usb 10-1: unit 6 not found! [ 1213.578418][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.586800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.749285][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.757767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.901250][T31080] netlink: 'syz.1.9298': attribute type 10 has an invalid length. [ 1213.932704][T31081] loop0: detected capacity change from 0 to 128 [ 1213.993645][T31081] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1214.026366][T31081] hpfs: filesystem error: improperly stopped [ 1214.048694][T31081] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1214.059277][T31084] loop4: detected capacity change from 0 to 512 [ 1214.082377][T31080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.090217][T31084] EXT4-fs: Ignoring removed bh option [ 1214.105511][T31081] hpfs: You really don't want any checks? You are crazy... [ 1214.118117][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1214.143227][T31081] hpfs: hpfs_map_sector(): read error [ 1214.173877][T31081] hpfs: code page support is disabled [ 1214.213238][T31081] hpfs: hpfs_map_4sectors(): unaligned read [ 1214.259377][T31081] hpfs: hpfs_map_4sectors(): unaligned read [ 1214.295074][T31081] hpfs: filesystem error: unable to find root dir [ 1214.393865][T31081] hpfs: hpfs_map_4sectors(): unaligned read [ 1214.453744][T31081] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1214.488936][T26391] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1214.572317][T31084] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1214.598779][T31084] EXT4-fs (loop4): 1 truncate cleaned up [ 1214.620535][T31084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1214.640353][T31080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.647608][T31080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.841450][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.977200][T11307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.988871][T31097] loop0: detected capacity change from 0 to 8 [ 1215.046494][T26391] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1215.083526][T31080] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1215.102174][T26391] usb 10-1: USB disconnect, device number 10 [ 1215.158580][ C0] net_ratelimit: 1 callbacks suppressed [ 1215.158603][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1215.236005][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 1215.385142][T12917] udevd[12917]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1215.486130][T24034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.650627][T31109] loop9: detected capacity change from 0 to 1024 [ 1215.703024][T31109] EXT4-fs: Ignoring removed bh option [ 1215.918793][T31109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.933601][T31117] loop2: detected capacity change from 0 to 4096 [ 1215.993506][ T31] audit: type=1800 audit(1781146908.424:873): pid=31109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9308" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1216.063862][T31123] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1216.198094][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1216.553285][T26791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.004595][T31149] netlink: 'syz.1.9320': attribute type 1 has an invalid length. [ 1217.090978][T31149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1217.170722][T31144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.194528][T31144] bridge_slave_0: left allmulticast mode [ 1217.215245][T31144] bridge_slave_0: left promiscuous mode [ 1217.221115][T31144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.238448][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1217.302789][T31152] bond2: entered promiscuous mode [ 1217.316766][T31152] bond2: entered allmulticast mode [ 1217.381609][T31165] netlink: 876 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1217.691782][T31178] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9326'. [ 1218.278226][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1218.455690][T31197] bridge0: entered allmulticast mode [ 1219.149131][T31224] overlayfs: statfs failed on './file0' [ 1219.318696][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1219.327435][T24034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.336155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.346097][T24034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.355148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.577243][T31231] loop3: detected capacity change from 0 to 8 [ 1220.100588][T31235] loop2: detected capacity change from 0 to 32768 [ 1220.108240][T31235] btrfs: Deprecated parameter 'usebackuproot' [ 1220.114344][T31235] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1220.152125][T31235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9345 (31235) [ 1220.179896][T31243] netlink: 'syz.4.9346': attribute type 3 has an invalid length. [ 1220.289979][T31235] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1220.300124][T31235] BTRFS info (device loop2): using crc32c checksum algorithm [ 1220.358130][ C0] net_ratelimit: 2 callbacks suppressed [ 1220.358154][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1220.876682][T31272] ip6erspan1: entered allmulticast mode [ 1220.983134][T31264] loop0: detected capacity change from 0 to 32768 [ 1220.990661][T31264] btrfs: Deprecated parameter 'usebackuproot' [ 1220.996842][T31264] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1221.038086][T31264] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 1fc89623-178b-45f5-9195-d91f7ca7c465 [ 1221.048180][T31264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9351 (31264) [ 1221.068971][T24034] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1221.129696][T31264] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1221.169624][T31264] BTRFS info (device loop0): using crc32c checksum algorithm [ 1221.179238][T31235] BTRFS error (device loop2): failed to load root extent [ 1221.186430][T31235] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1221.195862][T24034] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 1221.308430][T31235] BTRFS warning (device loop2): couldn't read tree root [ 1221.315522][T31235] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1221.326753][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.337961][ T5845] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1221.398433][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1221.406779][T31235] BTRFS warning (device loop2): couldn't read tree root [ 1221.413983][T31235] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1221.493008][T31235] BTRFS info (device loop2): rebuilding free space tree [ 1221.550112][T31235] BTRFS info (device loop2): checking UUID tree [ 1221.559045][T31235] BTRFS info (device loop2): enabling ssd optimizations [ 1221.566400][T31235] BTRFS info (device loop2): turning on async discard [ 1221.573399][T31235] BTRFS info (device loop2): enabling free space tree [ 1221.580258][T31235] BTRFS info (device loop2): force clearing of disk cache [ 1221.587395][T31235] BTRFS info (device loop2): enabling auto defrag [ 1221.593988][T31235] BTRFS info (device loop2): trying to use backup root at mount time [ 1221.602177][T31235] BTRFS info (device loop2): use zstd compression, level 3 [ 1222.113913][T29222] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1222.170249][T31264] BTRFS error (device loop0): failed to load root extent [ 1222.178143][T31264] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1222.220079][T29224] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1222.239666][T29031] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1222.295548][T31264] BTRFS warning (device loop0): couldn't read tree root [ 1222.302557][T31264] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1222.310604][T29224] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1222.314769][T31322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.361982][T31264] BTRFS warning (device loop0): couldn't read tree root [ 1222.368977][T31264] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1222.438151][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1222.466676][T31264] BTRFS info (device loop0): rebuilding free space tree [ 1222.491899][T31264] BTRFS info (device loop0): checking UUID tree [ 1222.498579][T31264] BTRFS info (device loop0): enabling ssd optimizations [ 1222.505536][T31264] BTRFS info (device loop0): turning on sync discard [ 1222.512218][T31264] BTRFS info (device loop0): enabling free space tree [ 1222.518986][T31264] BTRFS info (device loop0): force clearing of disk cache [ 1222.557238][T31264] BTRFS info (device loop0): enabling auto defrag [ 1222.563705][T31264] BTRFS info (device loop0): trying to use backup root at mount time [ 1223.252375][T29574] BTRFS info (device loop0): last unmount of filesystem 1fc89623-178b-45f5-9195-d91f7ca7c465 [ 1223.492103][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1223.647209][T31354] loop2: detected capacity change from 0 to 1024 [ 1223.750953][T31354] EXT4-fs: Ignoring removed bh option [ 1224.115132][T31354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.126917][T31372] loop9: detected capacity change from 0 to 512 [ 1224.256584][T31372] FAT-fs (loop9): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 1224.279572][ T31] audit: type=1800 audit(1781146916.674:874): pid=31354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9364" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1224.411724][T31376] loop0: detected capacity change from 0 to 128 [ 1224.518213][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1224.887202][T31381] loop3: detected capacity change from 0 to 2048 [ 1224.993686][T31381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.073720][T31381] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.093310][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.101694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.110527][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.119044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.285048][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.473891][T27542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.558393][ C0] net_ratelimit: 2 callbacks suppressed [ 1225.558415][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1226.598308][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1227.029285][T10164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.470719][T26391] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1227.546009][T31417] loop0: detected capacity change from 0 to 4096 [ 1227.639928][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1227.828094][T26391] usb 4-1: Using ep0 maxpacket: 8 [ 1227.881638][T26391] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.952391][T26391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1228.032067][T26391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.133632][T26391] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.236052][T26391] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.290642][T26391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.568835][T26391] usb 4-1: GET_CAPABILITIES returned 0 [ 1228.616988][T26391] usbtmc 4-1:16.0: can't read capabilities [ 1228.678415][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1228.922150][T26391] usb 4-1: USB disconnect, device number 10 [ 1229.306496][T31452] loop9: detected capacity change from 0 to 32768 [ 1229.324020][T31452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9402 (31452) [ 1229.718381][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1229.828304][T31452] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1229.922557][T31452] BTRFS info (device loop9): using sha256 checksum algorithm [ 1230.202306][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.210873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.219682][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.228355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.764431][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1230.842176][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.850467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.885062][T31497] random: crng reseeded on system resumption [ 1231.059095][T31452] BTRFS info (device loop9): enabling ssd optimizations [ 1231.066249][T31452] BTRFS info (device loop9): turning on async discard [ 1231.073189][T31452] BTRFS info (device loop9): enabling free space tree [ 1231.569746][T31452] BTRFS critical (device loop9 state E): emergency shutdown [ 1231.798461][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1231.881722][T31466] loop3: detected capacity change from 0 to 32768 [ 1231.916864][T31466] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9406 (31466) [ 1232.016734][T31466] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1232.110402][T31466] BTRFS info (device loop3): using blake2b checksum algorithm [ 1232.314826][T26791] BTRFS info (device loop9 state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1232.406006][T31466] BTRFS info (device loop3): enabling ssd optimizations [ 1232.413122][T31466] BTRFS info (device loop3): turning on async discard [ 1232.420543][T31466] BTRFS info (device loop3): enabling free space tree [ 1232.427688][T31466] BTRFS info (device loop3): use zstd compression, level 3 [ 1232.498763][T31524] loop5: detected capacity change from 0 to 7 [ 1232.584149][T31524] Dev loop5: unable to read RDB block 7 [ 1232.630379][T31524] loop5: unable to read partition table [ 1232.667446][T31524] loop5: partition table beyond EOD, truncated [ 1232.738923][T31524] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1232.759816][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.768698][T27542] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1232.838198][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1233.123654][T31536] netlink: 'syz.4.9425': attribute type 3 has an invalid length. [ 1233.878494][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1234.198782][T31568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.918108][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1235.959657][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1235.969341][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.977734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.986766][T10164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.995267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.180103][T26391] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1236.350620][T26391] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1236.365351][T26391] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.446386][T26391] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1236.486263][T26391] usb 4-1: string descriptor 0 read error: -22 [ 1236.493162][T26391] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1236.502696][T26391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.618877][T26391] usb 4-1: selecting invalid altsetting 1 [ 1236.626522][T26391] usb 4-1: unit 6 not found! [ 1236.681124][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.690065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.758453][ T5785] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1236.978108][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 1237.010780][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1237.052406][ T5785] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1237.063829][ T5785] usb 3-1: config 0 has no interface number 0 [ 1237.074987][ T5785] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1237.087109][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.096907][ T5785] usb 3-1: Product: syz [ 1237.101437][ T5785] usb 3-1: Manufacturer: syz [ 1237.106141][ T5785] usb 3-1: SerialNumber: syz [ 1237.117271][ T5785] usb 3-1: config 0 descriptor?? [ 1237.133640][ T5785] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1237.357103][ T5785] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1237.366431][T31645] loop5: detected capacity change from 0 to 4095 [ 1237.526364][T26391] usb 4-1: 2:0: sticky mixer values (0/238/1 => 0), disabling [ 1237.568592][ T5785] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1237.808605][ T5757] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1237.843931][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1237.858448][ T5785] usb 3-1: USB disconnect, device number 30 [ 1237.884577][T31656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1237.979792][ T5785] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1238.038374][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1238.061422][ T5785] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1238.099383][T26391] usb 4-1: USB disconnect, device number 11 [ 1238.107482][ T5785] quatech2 3-1:0.51: device disconnected [ 1238.218041][ T5784] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1238.388094][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 1238.406658][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.463738][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.495944][ T5784] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1238.557703][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.571713][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.578755][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1238.633780][ T5784] usb 5-1: config 0 descriptor?? [ 1239.111340][ T5784] savu 0003:1E7D:2D5A.0026: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1239.328175][ T5757] usb 10-1: config 0 has no interfaces? [ 1239.333823][ T5757] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.342959][ T5757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.369503][ T5757] usb 10-1: config 0 descriptor?? [ 1239.410152][ T5784] usb 5-1: USB disconnect, device number 38 [ 1239.466237][T31690] loop2: detected capacity change from 0 to 512 [ 1239.484791][T31690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1239.580183][T31690] EXT4-fs (loop2): 1 truncate cleaned up [ 1239.588347][T31690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.625692][T31697] netlink: 'syz.0.9489': attribute type 1 has an invalid length. [ 1239.634073][T31697] netlink: 'syz.0.9489': attribute type 22 has an invalid length. [ 1239.642878][T31697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.650426][T31697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.977804][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.249785][ T5784] usb 10-1: USB disconnect, device number 11 [ 1241.158110][ C0] net_ratelimit: 4 callbacks suppressed [ 1241.158133][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1241.740680][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.749055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.758663][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.766977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.798777][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.807365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.198500][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1243.238182][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1243.305704][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1243.318437][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1243.500245][T31811] loop9: detected capacity change from 0 to 256 [ 1243.537550][T31813] loop3: detected capacity change from 0 to 512 [ 1243.581515][T31813] FAT-fs (loop3): Directory bread(block 199916) failed [ 1243.675114][T31813] FAT-fs (loop3): Directory bread(block 199917) failed [ 1243.683691][T31813] FAT-fs (loop3): Directory bread(block 199918) failed [ 1243.691976][T31813] FAT-fs (loop3): Directory bread(block 199919) failed [ 1243.699507][T31813] FAT-fs (loop3): Directory bread(block 199920) failed [ 1243.707483][T31813] FAT-fs (loop3): Directory bread(block 199921) failed [ 1243.754400][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.782980][T31813] FAT-fs (loop3): Directory bread(block 199922) failed [ 1243.790548][T31813] FAT-fs (loop3): Directory bread(block 199923) failed [ 1244.671222][T31834] netlink: 'syz.3.9534': attribute type 1 has an invalid length. [ 1244.904201][T31834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1244.924733][T31839] bond3: (slave geneve2): making interface the new active one [ 1244.946963][T31837] loop2: detected capacity change from 0 to 4096 [ 1245.018467][T31839] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1245.054004][ T149] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1245.063834][ T31] audit: type=1326 audit(1781146937.494:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31838 comm="syz.1.9535" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f696859ce59 code=0x0 [ 1245.112957][ T149] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1245.154716][ T149] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1245.268958][ T149] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1245.685663][T31852] loop4: detected capacity change from 0 to 64 [ 1245.697099][T31852] minix: block size(59136) > page size(4096) not supported by filesystem [ 1245.894760][T31064] Bluetooth: hci5: command 0x0406 tx timeout [ 1246.118141][T17414] Bluetooth: hci6: command 0x1003 tx timeout [ 1246.171038][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1246.358327][ C0] net_ratelimit: 2 callbacks suppressed [ 1246.358349][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1246.801631][T31875] netlink: 'syz.9.9550': attribute type 1 has an invalid length. [ 1246.982369][T26391] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1247.002732][T31875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1247.138026][T26391] usb 3-1: Using ep0 maxpacket: 8 [ 1247.165470][T26391] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1247.193167][T26391] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1247.242187][T26391] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1247.293386][T26391] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.328147][T26391] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1247.358490][T26391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.370162][T31882] bond1: (slave geneve2): making interface the new active one [ 1247.387429][T31882] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1247.398155][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1247.443154][T29214] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1247.456405][T29214] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1247.479612][T29218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.488605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.497439][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.505846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.543871][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.552302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.577359][T29212] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1247.587697][T31892] Set syz1 is full, maxelem 14 reached [ 1247.656880][T29212] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1247.801441][T26391] usb 3-1: GET_CAPABILITIES returned 0 [ 1247.827693][T26391] usbtmc 3-1:16.0: can't read capabilities [ 1248.047311][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1248.059525][T26391] usb 3-1: USB disconnect, device number 31 [ 1248.438540][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1249.620441][T31926] loop9: detected capacity change from 0 to 32768 [ 1249.743344][T31926] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1249.785737][T31926] JBD2: Ignoring recovery information on journal [ 1249.996971][T31926] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1250.005622][ T1127] libceph: connect (1)[c::]:6789 error -101 [ 1250.033293][ T1127] libceph: mon0 (1)[c::]:6789 connect error [ 1250.075134][T31928] loop3: detected capacity change from 0 to 512 [ 1250.110262][T31932] ceph: No mds server is up or the cluster is laggy [ 1250.131282][ T31] audit: type=1800 audit(1781146942.464:876): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9568" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1250.172752][T31928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.195540][T31928] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.479912][ T1127] libceph: connect (1)[c::]:6789 error -101 [ 1250.486029][ T1127] libceph: mon0 (1)[c::]:6789 connect error [ 1250.649363][T31943] loop4: detected capacity change from 0 to 32768 [ 1250.656968][T31943] btrfs: Deprecated parameter 'usebackuproot' [ 1250.663311][T31943] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1250.704835][T31943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9573 (31943) [ 1250.741856][T31943] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1250.753054][T31943] BTRFS info (device loop4): using crc32c checksum algorithm [ 1251.073462][T31955] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1251.191593][T26791] ocfs2: Unmounting device (7,9) on (node local) [ 1251.366915][T27542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.549788][T29212] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1251.564341][ C0] net_ratelimit: 3 callbacks suppressed [ 1251.564366][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1251.635844][T31943] BTRFS error (device loop4): failed to load root extent [ 1251.643193][T31943] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1251.651793][T29224] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 1251.666750][T31943] BTRFS warning (device loop4): couldn't read tree root [ 1251.674146][T31943] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1251.762364][T29212] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1251.885908][T31943] BTRFS warning (device loop4): couldn't read tree root [ 1251.893205][T31943] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1251.942754][T31943] BTRFS info (device loop4): rebuilding free space tree [ 1252.075753][T31943] BTRFS info (device loop4): checking UUID tree [ 1252.116343][T31943] BTRFS info (device loop4): enabling ssd optimizations [ 1252.126218][T31943] BTRFS info (device loop4): turning on async discard [ 1252.133603][T31943] BTRFS info (device loop4): enabling free space tree [ 1252.140586][T31943] BTRFS info (device loop4): force clearing of disk cache [ 1252.147739][T31943] BTRFS info (device loop4): enabling auto defrag [ 1252.154294][T31943] BTRFS info (device loop4): trying to use backup root at mount time [ 1252.162502][T31943] BTRFS info (device loop4): use zstd compression, level 3 [ 1252.458442][T11307] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1252.471246][T31985] loop0: detected capacity change from 0 to 256 [ 1252.572393][T31985] FAT-fs (loop0): Directory bread(block 64) failed [ 1252.580087][T31985] FAT-fs (loop0): Directory bread(block 65) failed [ 1252.589498][T31985] FAT-fs (loop0): Directory bread(block 66) failed [ 1252.596116][T31985] FAT-fs (loop0): Directory bread(block 67) failed [ 1252.603272][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1252.613511][T31985] FAT-fs (loop0): Directory bread(block 68) failed [ 1252.622521][T31985] FAT-fs (loop0): Directory bread(block 69) failed [ 1252.631561][T31985] FAT-fs (loop0): Directory bread(block 70) failed [ 1252.644585][T31985] FAT-fs (loop0): Directory bread(block 71) failed [ 1252.651845][T31985] FAT-fs (loop0): Directory bread(block 72) failed [ 1252.658876][T31985] FAT-fs (loop0): Directory bread(block 73) failed [ 1253.099209][ T5784] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1253.239955][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.248534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.270447][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.278984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.288068][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.296494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.318958][ T5784] usb 10-1: Using ep0 maxpacket: 8 [ 1253.327665][ T5784] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1253.352353][ T5784] usb 10-1: string descriptor 0 read error: -22 [ 1253.361001][ T5784] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.40 [ 1253.406070][ T5784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.638156][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1254.037816][ T5784] saitek 0003:06A3:0CCD.0027: unexpected long global item [ 1254.097318][ T5784] saitek 0003:06A3:0CCD.0027: parse failed [ 1254.132201][ T5784] saitek 0003:06A3:0CCD.0027: probe with driver saitek failed with error -22 [ 1254.199215][ T5784] usb 10-1: USB disconnect, device number 12 [ 1254.247144][T32015] loop3: detected capacity change from 0 to 4096 [ 1254.463165][T32019] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1254.678590][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1255.229718][T32020] bond1: (slave lo): Releasing backup interface [ 1255.270726][T32020] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1255.294657][T32020] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1255.391760][T32020] bond2: (slave lo): Enslaving as an active interface with an up link [ 1255.683135][T32039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9606'. [ 1255.715303][T32039] vxlan0: entered promiscuous mode [ 1255.728680][T29224] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.737412][T29224] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.750749][T29224] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.759526][T29224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.949850][T32041] loop9: detected capacity change from 0 to 256 [ 1255.980050][T32041] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1256.238636][T32038] loop3: detected capacity change from 0 to 32768 [ 1256.387250][T32038] read_mapping_page failed! [ 1256.397842][T32038] ERROR: (device loop3): txCommit: [ 1256.397842][T32038] [ 1256.446009][T32038] ERROR: (device loop3): remounting filesystem as read-only [ 1256.611826][T32049] loop9: detected capacity change from 0 to 4096 [ 1256.619879][T32049] EXT4-fs: Ignoring removed orlov option [ 1256.638796][T32049] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1256.705476][T32049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.767301][ C0] net_ratelimit: 3 callbacks suppressed [ 1256.767325][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1256.825873][T32049] EXT4-fs (loop9): shut down requested (0) [ 1257.230158][T26791] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.391909][T32064] loop3: detected capacity change from 0 to 2048 [ 1257.422327][T32064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1257.798084][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1257.821389][T32072] fuse: fd is not a fuse device [ 1258.838485][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1259.151673][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.160361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.169429][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.177771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.264751][T32084] loop0: detected capacity change from 0 to 131072 [ 1259.279322][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.287678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.341124][T32084] F2FS-fs (loop0): invalid crc value [ 1259.427813][T32084] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1259.484624][T32084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1259.553426][T32084] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 1259.878161][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1260.475935][T32098] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1260.499493][T32098] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1260.538421][T32098] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1260.725794][T32098] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1261.125378][T32112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1261.163450][ T149] smbdirect: ib_dev[syz2] removed [ 1261.958096][ C0] net_ratelimit: 2 callbacks suppressed [ 1261.958118][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1262.251190][T32119] overlayfs: statfs failed on './file0' [ 1262.619299][T32140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.794875][T32142] loop2: detected capacity change from 0 to 1024 [ 1262.854189][T32142] EXT4-fs: Ignoring removed orlov option [ 1262.856545][ T5784] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1262.998571][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1263.063079][T32142] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 1263.084775][ T5784] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1263.124513][T32142] System zones: 0-1, 3-12 [ 1263.180219][T32142] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.458676][T32162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1263.679624][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9655'. [ 1263.923896][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1264.038096][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1264.298379][ T5785] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1264.402873][ T5785] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1264.519120][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.527550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.779680][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.788111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.800627][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.809373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.891640][T32187] netlink: 'syz.0.9660': attribute type 10 has an invalid length. [ 1265.079907][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1265.441144][T32187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.504928][T32191] loop4: detected capacity change from 0 to 32768 [ 1265.516693][T32187] team0: Port device netdevsim1 added [ 1265.715667][T32197] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.9666'. [ 1266.012770][T32191] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1266.421333][T32191] XFS (loop4): Ending clean mount [ 1266.429199][T32191] XFS (loop4): Quotacheck needed: Please wait. [ 1266.636499][T32191] XFS (loop4): Quotacheck: Done. [ 1266.713209][T32217] loop9: detected capacity change from 0 to 2048 [ 1266.881191][T32219] loop2: detected capacity change from 0 to 4096 [ 1266.889175][T32217] hpfs: hpfs_map_sector(): read error [ 1267.036149][T32219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.086349][T11307] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1267.158555][ C0] net_ratelimit: 2 callbacks suppressed [ 1267.158580][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1267.212602][ T31] audit: type=1800 audit(1781146959.514:877): pid=32219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9672" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1267.530273][ T31] audit: type=1800 audit(1781146959.964:878): pid=32219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9672" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1267.646413][T32231] netlink: 'syz.0.9676': attribute type 1 has an invalid length. [ 1267.673656][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.821402][T32235] input: syz1 as /devices/virtual/input/input39 [ 1267.928190][T26391] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1268.198099][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1268.208176][T26391] usb 10-1: Using ep0 maxpacket: 16 [ 1268.217755][T26391] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.266816][T26391] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.295307][T26391] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1268.331218][T26391] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1268.376739][T26391] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.439563][T32231] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1268.561313][T26391] usb 10-1: config 0 descriptor?? [ 1269.044759][T26391] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1269.103497][T26391] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 1269.128488][T26391] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1269.156228][T26391] microsoft 0003:045E:07DA.002A: no inputs found [ 1269.169642][T26391] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 1269.241408][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1269.291429][T26391] usb 10-1: USB disconnect, device number 13 [ 1269.567747][T32267] fido_id[32267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1269.901115][T29222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.909695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.050257][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.058649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.067343][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.075853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.278146][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1270.391691][T32293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9697'. [ 1270.938012][T26391] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1271.049911][T32287] loop2: detected capacity change from 0 to 32768 [ 1271.083512][T32319] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1271.126458][T26391] usb 5-1: Using ep0 maxpacket: 32 [ 1271.133664][T26391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.146310][T26391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.190625][T32287] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1271.272425][T26391] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1271.282472][T32287] XFS (loop2): Ending clean mount [ 1271.386857][T26391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.436006][T26391] usb 5-1: config 0 descriptor?? [ 1271.446396][T26391] hub 5-1:0.0: USB hub found [ 1271.511496][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 1271.652107][T26391] hub 5-1:0.0: 1 port detected [ 1271.726926][T29031] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1271.769687][T32340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.851437][T32340] bridge_slave_0 (unregistering): left allmulticast mode [ 1271.898184][T32340] bridge_slave_0 (unregistering): left promiscuous mode [ 1271.974557][T32340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.168596][T32333] loop3: detected capacity change from 0 to 32768 [ 1272.230348][T32333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9713 (32333) [ 1272.287122][T26391] hub 5-1:0.0: activate --> -90 [ 1272.364088][ C0] net_ratelimit: 2 callbacks suppressed [ 1272.364115][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1272.450591][T32333] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1272.460855][T32333] BTRFS info (device loop3): using crc32c checksum algorithm [ 1272.818452][ T1127] usb 5-1: USB disconnect, device number 39 [ 1273.021120][ T803] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1273.066404][T32362] blk_print_req_error: 136 callbacks suppressed [ 1273.066427][T32362] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.081736][T32362] buffer_io_error: 138 callbacks suppressed [ 1273.081757][T32362] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1273.086349][T29214] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1273.087829][T32362] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.087858][T32362] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1273.087982][T32362] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088008][T32362] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1273.088135][T32362] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088162][T32362] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1273.088305][T32362] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088333][T32362] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1273.088460][T32362] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088486][T32362] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1273.088704][T32362] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088734][T32362] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1273.088873][T32362] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.088902][T32362] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1273.089049][T32362] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.227017][T32333] BTRFS error (device loop3): failed to load root extent [ 1273.320161][ T803] usb 10-1: Using ep0 maxpacket: 32 [ 1273.369826][T32362] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1273.385632][ T803] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1273.398453][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1273.423015][ T803] usb 10-1: config 0 has no interface number 0 [ 1273.459168][ T803] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1273.471908][ T803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.489833][T32333] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1273.498122][T32362] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1273.499380][T29222] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1273.507340][T32362] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1273.510717][T32362] ldm_validate_partition_table(): Disk read failed. [ 1273.543902][ T803] usb 10-1: Product: syz [ 1273.543931][ T803] usb 10-1: Manufacturer: syz [ 1273.543950][ T803] usb 10-1: SerialNumber: syz [ 1273.565993][ T803] usb 10-1: config 0 descriptor?? [ 1273.622550][T32333] BTRFS warning (device loop3): couldn't read tree root [ 1273.629641][T32333] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1273.676543][T29222] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1273.707362][T32362] Dev nbd0: unable to read RDB block 0 [ 1273.715963][T32362] nbd0: unable to read partition table [ 1273.828226][T32333] BTRFS warning (device loop3): couldn't read tree root [ 1273.835278][T32333] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1273.943591][T32333] BTRFS info (device loop3): checking UUID tree [ 1273.961978][T32333] BTRFS info (device loop3): setting nodatasum [ 1273.968333][T32333] BTRFS info (device loop3): setting nodatacow [ 1273.974506][T32333] BTRFS info (device loop3): enabling ssd optimizations [ 1273.981501][T32333] BTRFS info (device loop3): turning on flush-on-commit [ 1273.988463][T32333] BTRFS info (device loop3): turning on async discard [ 1273.995254][T32333] BTRFS info (device loop3): enabling free space tree [ 1274.002038][T32333] BTRFS info (device loop3): trying to use backup root at mount time [ 1274.010150][T32333] BTRFS info (device loop3): max_inline set to 0 [ 1274.101455][ T803] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1274.204790][ T803] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1274.251016][T32333] BTRFS info (device loop3 state M): max_inline set to 0 [ 1274.339038][T32389] loop2: detected capacity change from 0 to 512 [ 1274.438271][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1274.512108][T27542] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1274.558667][T32389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.597036][T32389] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.862429][ T803] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1274.874534][ T803] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1274.933383][ T803] usb 10-1: USB disconnect, device number 14 [ 1274.982967][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.478869][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1275.669529][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.709427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.729560][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.737993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.230706][T32401] loop0: detected capacity change from 0 to 131072 [ 1276.278738][T32401] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1276.290055][T32401] F2FS-fs (loop0): invalid crc value [ 1276.433766][T32401] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1276.518106][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1276.554832][T32401] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1277.560509][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1277.570177][T29212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.905527][T32430] block nbd3: shutting down sockets [ 1277.914751][T32432] block nbd3: NBD_DISCONNECT [ 1277.947793][T32432] block nbd3: Send disconnect failed -32 [ 1278.199465][T29214] bond0: (slave bridge0): link status definitely down, disabling slave [ 1278.350097][T29214] bond0: now running without any active interface! [ 1278.598119][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1279.071542][T32474] loop2: detected capacity change from 0 to 512 [ 1279.117769][T32474] EXT4-fs: Ignoring removed bh option [ 1279.191110][T32474] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1279.397451][T32474] EXT4-fs (loop2): 1 truncate cleaned up [ 1279.455964][T32474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.638724][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1279.643432][T32474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9761: bg 0: block 465: padding at end of block bitmap is not set [ 1279.663126][T32474] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1279.699415][T32474] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1279.699415][T32474] [ 1279.709128][T32474] EXT4-fs (loop2): Total free blocks count 0 [ 1279.715126][T32474] EXT4-fs (loop2): Free/Dirty block details [ 1279.721176][T32474] EXT4-fs (loop2): free_blocks=0 [ 1279.726132][T32474] EXT4-fs (loop2): dirty_blocks=2 [ 1279.731182][T32474] EXT4-fs (loop2): Block reservation details [ 1279.816085][T32474] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 1279.936885][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1279.954607][T29031] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1280.326597][T32466] loop3: detected capacity change from 0 to 32768 [ 1280.369694][T32466] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1280.414259][T32497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.421618][T32497] bridge0: port 2(bridge_slave_1) entered listening state [ 1280.429153][T32497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.436422][T32497] bridge0: port 1(bridge_slave_0) entered listening state [ 1280.503688][T32487] loop4: detected capacity change from 0 to 32768 [ 1280.504702][T32466] XFS (loop3): Ending clean mount [ 1280.588884][T32487] [ 1280.588884][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.588884][T32487] [ 1280.589609][T32497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.646971][T32497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1280.678147][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1280.721890][T32501] tap0: tun_chr_ioctl cmd 1074025677 [ 1280.727385][T32501] tap0: Linktype set failed because interface is up [ 1280.768446][ T5785] tap0: tun_net_xmit 90 [ 1280.774920][ T31] audit: type=1800 audit(1781146973.204:879): pid=32487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9764" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1281.106137][T32487] [ 1281.106137][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.106137][T32487] [ 1281.178860][T32487] [ 1281.178860][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.178860][T32487] [ 1281.255064][T32487] [ 1281.255064][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.255064][T32487] [ 1281.279979][T32487] [ 1281.279979][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.279979][T32487] [ 1281.312731][ T118] ERROR: (device loop4): dbFree: error in block map [ 1281.312731][ T118] [ 1281.431480][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.440349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.450489][T29222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.459075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.552530][T32487] [ 1281.552530][T32487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.552530][T32487] [ 1281.641865][T27542] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1281.720577][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1281.754666][T11307] [ 1281.754666][T11307] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.754666][T11307] [ 1281.838210][T11307] [ 1281.838210][T11307] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.838210][T11307] [ 1282.758112][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1283.189891][ T5784] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1283.323093][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.379852][ T5784] usb 3-1: Using ep0 maxpacket: 32 [ 1283.410813][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.423406][T32547] loop0: detected capacity change from 0 to 32768 [ 1283.444774][T32547] btrfs: Deprecated parameter 'usebackuproot' [ 1283.450922][T32547] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1283.485359][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.485419][ T5784] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1283.485447][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.490647][ T5784] usb 3-1: config 0 descriptor?? [ 1283.595271][ T5784] hub 3-1:0.0: USB hub found [ 1283.653287][T32547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9786 (32547) [ 1283.699639][T32547] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1283.709786][T32547] BTRFS info (device loop0): using crc32c checksum algorithm [ 1283.796549][ T5784] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1283.805423][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1283.819180][T32571] loop9: detected capacity change from 0 to 736 [ 1283.841417][T32571] iso9660: Unknown parameter '¡Ì/*' [ 1284.042325][T29222] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1284.081017][T32547] BTRFS error (device loop0): failed to load root extent [ 1284.157729][T32547] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1284.192686][ T149] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1284.205058][T32590] loop9: detected capacity change from 0 to 1024 [ 1284.231077][ T5784] hid-generic 0003:046D:C31C.002B: unknown main item tag 0x0 [ 1284.303311][T32547] BTRFS warning (device loop0): couldn't read tree root [ 1284.325936][T32547] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1284.391258][ T5784] hid-generic 0003:046D:C31C.002B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1284.430724][ T90] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1284.474174][T32547] BTRFS warning (device loop0): couldn't read tree root [ 1284.489711][T32547] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1284.599701][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1284.668263][T32547] BTRFS info (device loop0): rebuilding free space tree [ 1284.745706][ T5784] usb 3-1: USB disconnect, device number 32 [ 1284.838120][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1284.942015][T32547] BTRFS info (device loop0): checking UUID tree [ 1284.959044][T32547] BTRFS info (device loop0): enabling ssd optimizations [ 1284.983350][T32547] BTRFS info (device loop0): turning on async discard [ 1285.006421][T32547] BTRFS info (device loop0): enabling free space tree [ 1285.045070][T32547] BTRFS info (device loop0): force clearing of disk cache [ 1285.081964][T32547] BTRFS info (device loop0): enabling auto defrag [ 1285.082076][T32607] netlink: 'syz.9.9799': attribute type 1 has an invalid length. [ 1285.103003][T32547] BTRFS info (device loop0): trying to use backup root at mount time [ 1285.140218][T32547] BTRFS info (device loop0): use zstd compression, level 3 [ 1285.161445][T32607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1285.216770][T32609] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 1285.621965][T29574] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1285.878594][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1286.266782][T32628] loop4: detected capacity change from 0 to 128 [ 1286.295915][T32628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1286.328967][T32628] hpfs: filesystem error: improperly stopped [ 1286.397554][T32628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1286.430668][T32628] hpfs: You really don't want any checks? You are crazy... [ 1286.456781][T32628] hpfs: Code page index out of array [ 1286.546546][T32628] hpfs: code page support is disabled [ 1286.572590][T32628] hpfs: hpfs_map_4sectors(): unaligned read [ 1286.606391][T32628] hpfs: hpfs_map_4sectors(): unaligned read [ 1286.639978][T32628] hpfs: filesystem error: unable to find root dir [ 1286.815858][T32636] loop0: detected capacity change from 0 to 4096 [ 1286.910118][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9812'. [ 1286.919454][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1286.990988][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9812'. [ 1287.035621][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9812'. [ 1287.054769][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9812'. [ 1287.169713][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.178239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.187305][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.519707][ T31] audit: type=1800 audit(1781146979.904:880): pid=32636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9802" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 1287.884806][T32639] loop4: detected capacity change from 0 to 32768 [ 1287.958368][ C0] net_ratelimit: 1 callbacks suppressed [ 1287.958391][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1288.221419][T32639] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1288.443461][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.557424][T32639] XFS (loop4): Ending clean mount [ 1288.650442][ T31] audit: type=1800 audit(1781146981.084:881): pid=32639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9813" name="file1" dev="loop4" ino=4426 res=0 errno=0 [ 1288.658042][ T5784] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1288.851021][ T5784] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1288.864116][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.880277][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.882362][T11307] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1288.890990][ T5784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1288.912640][ T5784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.922082][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.944035][ T5784] usb 3-1: config 0 descriptor?? [ 1289.003684][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1289.172825][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.181231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.364910][ T5784] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 1289.457031][T32692] loop9: detected capacity change from 0 to 256 [ 1289.463502][ T5784] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1289.539194][T32692] FAT-fs (loop9): Directory bread(block 64) failed [ 1289.545763][T32692] FAT-fs (loop9): Directory bread(block 65) failed [ 1289.553005][T32692] FAT-fs (loop9): Directory bread(block 66) failed [ 1289.561674][T32692] FAT-fs (loop9): Directory bread(block 67) failed [ 1289.568317][T32692] FAT-fs (loop9): Directory bread(block 68) failed [ 1289.574836][T32692] FAT-fs (loop9): Directory bread(block 69) failed [ 1289.581456][T32692] FAT-fs (loop9): Directory bread(block 70) failed [ 1289.587979][T32692] FAT-fs (loop9): Directory bread(block 71) failed [ 1289.594580][T32692] FAT-fs (loop9): Directory bread(block 72) failed [ 1289.601101][T32692] FAT-fs (loop9): Directory bread(block 73) failed [ 1289.665420][ T5784] usb 3-1: USB disconnect, device number 33 [ 1289.801197][T32699] fido_id[32699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1290.038375][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1290.691903][T32717] netlink: 'syz.1.9838': attribute type 15 has an invalid length. [ 1290.713762][T32717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1290.831321][ T90] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1290.846615][T32717] netlink: 'syz.1.9838': attribute type 15 has an invalid length. [ 1290.906935][T29222] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1290.915708][T29222] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1290.924883][T29222] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1290.925521][T32717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1290.975495][T32710] loop9: detected capacity change from 0 to 40427 [ 1291.071016][T32710] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1291.077411][T32710] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1291.078090][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1291.107616][T32710] F2FS-fs (loop9): invalid crc value [ 1291.164930][T32725] loop3: detected capacity change from 0 to 2048 [ 1291.206367][T32725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1291.450055][T32737] loop4: detected capacity change from 0 to 64 [ 1291.482424][T32710] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1291.562574][ T31] audit: type=1800 audit(1781146983.994:882): pid=32737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9847" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 1292.054237][T32744] loop0: detected capacity change from 0 to 32768 [ 1292.063668][T32710] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 1292.087208][T32744] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1292.118438][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1292.127464][T32710] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1292.158735][T32744] JBD2: Ignoring recovery information on journal [ 1292.189985][T32752] loop2: detected capacity change from 0 to 128 [ 1292.226077][T32744] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1292.325533][ T31] audit: type=1800 audit(1781146984.754:883): pid=32744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9849" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1292.370623][ T31] audit: type=1800 audit(1781146984.784:884): pid=32710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9834" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1292.441564][T32752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.572307][T32752] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.877904][T29574] ocfs2: Unmounting device (7,0) on (node local) [ 1292.920102][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.928891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.026438][T32710] syz.9.9834: attempt to access beyond end of device [ 1293.026438][T32710] loop9: rw=34817, sector=53248, nr_sectors = 56 limit=40427 [ 1293.081113][T29031] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1293.158103][ C0] net_ratelimit: 2 callbacks suppressed [ 1293.158128][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1293.322152][T32710] syz.9.9834: attempt to access beyond end of device [ 1293.322152][T32710] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1293.416066][T18558] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1293.434163][T32710] CPU: 1 UID: 0 PID: 32710 Comm: syz.9.9834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.434203][T32710] Tainted: [L]=SOFTLOCKUP [ 1293.434213][T32710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1293.434229][T32710] Call Trace: [ 1293.434240][T32710] [ 1293.434251][T32710] dump_stack_lvl+0xe8/0x150 [ 1293.434288][T32710] f2fs_stop_checkpoint+0x3c7/0x590 [ 1293.434334][T32710] f2fs_write_end_io+0x1274/0x1740 [ 1293.434407][T32710] __submit_merged_bio+0x256/0x6a0 [ 1293.434453][T32710] __submit_merged_write_cond+0x3c9/0x4e0 [ 1293.434501][T32710] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1293.434558][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.434604][T32710] f2fs_write_data_pages+0x287e/0x34f0 [ 1293.434642][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.434735][T32710] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1293.434775][T32710] ? is_bpf_text_address+0x26/0x2b0 [ 1293.434822][T32710] ? arch_stack_walk+0xfb/0x150 [ 1293.434900][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.434932][T32710] ? add_lock_to_list+0xc7/0x100 [ 1293.434971][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435002][T32710] ? __lock_acquire+0x146e/0x2cf0 [ 1293.435072][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435103][T32710] ? do_raw_spin_lock+0x12b/0x2f0 [ 1293.435150][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435187][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435219][T32710] ? do_raw_spin_unlock+0xf5/0x210 [ 1293.435260][T32710] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1293.435301][T32710] do_writepages+0x32e/0x550 [ 1293.435334][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435369][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435407][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435437][T32710] ? do_raw_spin_unlock+0xf5/0x210 [ 1293.435483][T32710] filemap_fdatawrite+0x1e9/0x2f0 [ 1293.435515][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435545][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435579][T32710] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1293.435670][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435708][T32710] ? preempt_schedule_common+0x82/0xd0 [ 1293.435737][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.435768][T32710] ? preempt_schedule_thunk+0x16/0x30 [ 1293.435820][T32710] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1293.435884][T32710] f2fs_write_checkpoint+0x9df/0x26a0 [ 1293.435975][T32710] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1293.436101][T32710] f2fs_gc+0x1dd9/0x2480 [ 1293.436172][T32710] ? __pfx_f2fs_gc+0x10/0x10 [ 1293.436221][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436287][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436326][T32710] f2fs_balance_fs+0x657/0x840 [ 1293.436368][T32710] ? f2fs_map_blocks+0x29da/0x4690 [ 1293.436421][T32710] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 1293.436457][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436488][T32710] ? __up_read+0x291/0x6b0 [ 1293.436540][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436571][T32710] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 1293.436604][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436634][T32710] ? restore_priority+0x1af/0x450 [ 1293.436681][T32710] f2fs_map_blocks+0x29da/0x4690 [ 1293.436722][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436759][T32710] ? f2fs_map_blocks+0x19a1/0x4690 [ 1293.436846][T32710] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 1293.436905][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.436955][T32710] ? mempool_free+0xec/0x130 [ 1293.436980][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437010][T32710] ? kmem_cache_free+0x462/0x650 [ 1293.437048][T32710] ? __pfx_mempool_free_slab+0x10/0x10 [ 1293.437074][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437119][T32710] f2fs_iomap_begin+0x3bd/0x8f0 [ 1293.437169][T32710] ? __pfx_f2fs_iomap_begin+0x10/0x10 [ 1293.437210][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437240][T32710] ? __iomap_dio_bio_end_io+0x20f/0x7b0 [ 1293.437322][T32710] ? __pfx_f2fs_iomap_begin+0x10/0x10 [ 1293.437361][T32710] iomap_iter+0x600/0xf90 [ 1293.437420][T32710] __iomap_dio_rw+0x1360/0x1e40 [ 1293.437476][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437515][T32710] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1293.437549][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437604][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437635][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437689][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437716][T32710] ? down_read+0x270/0x2e0 [ 1293.437749][T32710] f2fs_file_write_iter+0x1479/0x2540 [ 1293.437809][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437842][T32710] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 1293.437887][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.437935][T32710] vfs_write+0x61d/0xb90 [ 1293.437989][T32710] ? __pfx_vfs_write+0x10/0x10 [ 1293.438040][T32710] ? __fget_files+0x2a/0x420 [ 1293.438075][T32710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.438109][T32710] ksys_write+0x150/0x270 [ 1293.438148][T32710] ? __pfx_ksys_write+0x10/0x10 [ 1293.438196][T32710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.438222][T32710] do_syscall_64+0x174/0x580 [ 1293.438246][T32710] ? trace_irq_disable+0x3b/0x140 [ 1293.438293][T32710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.438317][T32710] RIP: 0033:0x7f6e5339ce59 [ 1293.438339][T32710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.438357][T32710] RSP: 002b:00007f6e541fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1293.438384][T32710] RAX: ffffffffffffffda RBX: 00007f6e53615fa0 RCX: 00007f6e5339ce59 [ 1293.438401][T32710] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 0000000000000004 [ 1293.438416][T32710] RBP: 00007f6e53432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1293.438431][T32710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.438445][T32710] R13: 00007f6e53616038 R14: 00007f6e53615fa0 R15: 00007ffd1ecf8988 [ 1293.438487][T32710] [ 1293.438806][T32710] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1293.446325][ T307] fuse: fd is not a fuse device [ 1294.054786][ T314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9859'. [ 1294.155747][ T316] loop0: detected capacity change from 0 to 512 [ 1294.184581][ T314] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1294.198415][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1294.206589][ T316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1294.265339][ T316] EXT4-fs (loop0): 1 truncate cleaned up [ 1294.302109][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.322957][ T316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.434083][ T31] audit: type=1326 audit(1781146986.864:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=315 comm="syz.0.9861" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556859ce59 code=0x0 [ 1294.930142][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.938712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.112675][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.238193][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1295.486234][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1295.502781][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1295.564916][T18558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.575835][T18558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.585601][T18558] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1295.594971][T18558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.626042][T18558] usb 4-1: config 0 descriptor?? [ 1295.817587][T18558] usb 4-1: can't set config #0, error -71 [ 1295.830909][T18558] usb 4-1: USB disconnect, device number 12 [ 1296.081308][ T338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9870'. [ 1296.278461][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1296.499144][ T352] loop9: detected capacity change from 0 to 256 [ 1296.591446][ T352] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d) [ 1296.693646][ T31] audit: type=1800 audit(1781146989.124:886): pid=352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9862" name="file1" dev="loop9" ino=1048986 res=0 errno=0 [ 1296.788943][T18558] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1296.841947][ T355] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1296.875064][ T357] loop0: detected capacity change from 0 to 512 [ 1296.969173][ T357] EXT4-fs (loop0): 1 truncate cleaned up [ 1296.976370][ T357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.114281][ T357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9877: bg 0: block 465: padding at end of block bitmap is not set [ 1297.318801][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1297.358682][ T357] EXT4-fs (loop0): Remounting filesystem read-only [ 1297.453982][ T371] loop4: detected capacity change from 0 to 128 [ 1297.575260][ T371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1297.612388][ T371] System zones: 1-3, 19-19, 35-36 [ 1297.658685][ T371] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1297.681848][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.694805][ T371] ext4 filesystem being mounted at /1201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.934047][ T371] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 4065586275 (only 1 groups) [ 1298.022584][T11307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1298.358421][ C0] net_ratelimit: 1 callbacks suppressed [ 1298.358444][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1298.452002][ T387] loop3: detected capacity change from 0 to 1024 [ 1298.573362][ T387] hfsplus: bad catalog file entry [ 1298.611171][ T1127] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1298.652767][T29214] hfsplus: bad catalog file entry [ 1298.678369][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.686762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.696575][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.704864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.117391][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b23a000: rx timeout, send abort [ 1299.174092][ T404] tap0: tun_chr_ioctl cmd 1074025677 [ 1299.179465][ T404] tap0: Linktype set failed because interface is up [ 1299.391316][ T1127] usb 5-1: Using ep0 maxpacket: 32 [ 1299.398190][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1299.403448][ T416] loop2: detected capacity change from 0 to 128 [ 1299.432562][ T416] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1299.573416][ T418] loop3: detected capacity change from 0 to 128 [ 1299.617537][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807daf7400: rx timeout, send abort [ 1299.626033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b23a000: abort rx timeout. Force session deactivation [ 1299.653964][ T418] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1299.665663][ T418] hpfs: filesystem error: improperly stopped [ 1299.671660][ T418] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1299.679394][ T418] hpfs: You really don't want any checks? You are crazy... [ 1299.686603][ T418] hpfs: Code page index out of array [ 1299.691914][ T418] hpfs: code page support is disabled [ 1299.698040][ T418] hpfs: hpfs_map_4sectors(): unaligned read [ 1299.704016][ T418] hpfs: hpfs_map_4sectors(): unaligned read [ 1299.709918][ T418] hpfs: filesystem error: unable to find root dir [ 1299.806943][ T421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9901'. [ 1300.014131][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.021158][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.032335][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1300.071788][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1300.082783][ T424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1300.125930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807daf7400: abort rx timeout. Force session deactivation [ 1300.145733][ T429] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9902'. [ 1300.272477][ T430] can0: slcan on ttyS3. [ 1300.349258][ T1127] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1300.358435][ T1127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.434492][ T426] loop9: detected capacity change from 0 to 32768 [ 1300.438711][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1300.469934][ T426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9904 (426) [ 1300.806645][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.038904][ T1127] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1301.420769][ T1127] gspca_nw80x: reg_w err -71 [ 1301.425503][ T1127] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1301.435817][ T1127] usb 5-1: USB disconnect, device number 40 [ 1301.494170][ T426] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1301.504328][ T426] BTRFS info (device loop9): using sha256 checksum algorithm [ 1301.625660][ T458] fuse: fd is not a fuse device [ 1301.705741][ T427] can0 (unregistered): slcan off ttyS3. [ 1301.750152][ T437] loop0: detected capacity change from 0 to 131072 [ 1301.761113][ T437] F2FS-fs (loop0): invalid crc value [ 1301.811307][ T466] fuse: fd is not a fuse device [ 1301.938401][ T437] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1301.968400][ T437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1302.213679][ T479] overlayfs: failed to clone lowerpath [ 1302.432940][ T1127] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1302.565009][ T426] BTRFS info (device loop9): enabling ssd optimizations [ 1302.575004][ T426] BTRFS info (device loop9): turning on async discard [ 1302.583329][ T426] BTRFS info (device loop9): enabling free space tree [ 1302.675954][ T31] audit: type=1800 audit(1781146995.104:887): pid=426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9904" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1302.863384][ T493] loop2: detected capacity change from 0 to 4096 [ 1303.219439][ T1127] usb 5-1: Using ep0 maxpacket: 8 [ 1303.226361][T26791] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1303.560216][ C0] net_ratelimit: 3 callbacks suppressed [ 1303.560240][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1304.090299][ T1127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.100443][ T1127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.109360][ T1127] usb 5-1: config 1 has no interface number 0 [ 1304.115619][ T1127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1304.118157][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1304.484213][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.493047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.540587][T29222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.549141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.598818][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1304.657518][ T523] netlink: 'syz.4.9927': attribute type 10 has an invalid length. [ 1305.089478][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.182293][ T532] input: syz1 as /devices/virtual/input/input42 [ 1305.240551][ T1127] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1305.249763][ T1127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.371013][ T1127] usb 5-1: can't set config #1, error -71 [ 1305.520086][ T1127] usb 5-1: USB disconnect, device number 41 [ 1305.638505][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1305.759563][ T544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1306.206213][ T555] netlink: 'syz.9.9936': attribute type 7 has an invalid length. [ 1306.280950][ T555] netlink: 'syz.9.9936': attribute type 7 has an invalid length. [ 1306.288183][ T149] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.302665][ T149] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.311410][ T149] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.320134][ T149] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.373228][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.381790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.973265][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9941'. [ 1307.037368][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9941'. [ 1307.516712][ T584] loop9: detected capacity change from 0 to 2048 [ 1307.525096][ T582] loop2: detected capacity change from 0 to 32768 [ 1307.534988][ T582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9947 (582) [ 1307.552831][ T582] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1307.562958][ T582] BTRFS info (device loop2): using sha256 checksum algorithm [ 1307.654537][ T584] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.008292][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1308.112206][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1308.125839][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1308.125839][ T12] [ 1308.138544][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 1308.153779][ T12] EXT4-fs (loop9): Free/Dirty block details [ 1308.176476][ T12] EXT4-fs (loop9): free_blocks=66060288 [ 1308.186649][ T12] EXT4-fs (loop9): dirty_blocks=32 [ 1308.248198][ T12] EXT4-fs (loop9): Block reservation details [ 1308.275050][ T12] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 1308.314963][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 1 with error 28 [ 1308.372637][T26791] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1308.432573][ T609] block nbd4: NBD_DISCONNECT [ 1308.437230][ T609] block nbd4: Send disconnect failed -32 [ 1308.467827][ T609] block nbd4: Disconnected due to user request. [ 1308.475345][ T609] block nbd4: shutting down sockets [ 1308.602470][ T582] BTRFS info (device loop2): enabling ssd optimizations [ 1308.640891][ T582] BTRFS info (device loop2): turning on async discard [ 1308.647728][ T582] BTRFS info (device loop2): enabling free space tree [ 1308.744509][ T31] audit: type=1800 audit(1781147001.154:888): pid=582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9947" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1308.765634][ C0] net_ratelimit: 2 callbacks suppressed [ 1308.765656][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1309.203591][T29031] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1309.609876][ T803] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1309.789478][ T632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9956'. [ 1309.798097][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1309.798525][ T632] bridge: RTM_NEWNEIGH with invalid ether address [ 1309.815565][ T632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9956'. [ 1309.824547][ T632] bridge: RTM_NEWNEIGH with invalid ether address [ 1309.960299][ T803] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1309.971242][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.015314][ T803] usb 5-1: Product: syz [ 1310.037826][ T803] usb 5-1: Manufacturer: syz [ 1310.095325][ T803] usb 5-1: SerialNumber: syz [ 1310.179406][ T803] usb 5-1: config 0 descriptor?? [ 1310.210349][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.218855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.278935][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.287354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.547088][ T803] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1310.680195][ T654] loop3: detected capacity change from 0 to 512 [ 1310.694049][ T654] ext2: Unknown parameter 'audit' [ 1310.762987][ T655] loop0: detected capacity change from 0 to 1024 [ 1310.838095][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.845588][ C0] bridge0: topology change detected, propagating [ 1310.852482][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.859873][ C0] bridge0: topology change detected, propagating [ 1310.867641][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1310.879680][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.001635][ T655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.070817][ T655] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.305508][ T651] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.458387][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.487697][ T803] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1311.515388][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.531014][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.557167][ T803] usb 5-1: USB disconnect, device number 42 [ 1311.569346][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.594192][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.636245][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.681823][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.696251][ T651] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.711882][ T655] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.9968: lblock 0 mapped to illegal pblock 0 (length 1) [ 1311.849988][ T678] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1311.881097][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1311.924889][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1312.718633][ T697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9982'. [ 1312.758206][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1313.873397][ T717] loop2: detected capacity change from 0 to 32768 [ 1313.958167][ C0] net_ratelimit: 5 callbacks suppressed [ 1313.958198][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1314.099270][T18558] libceph: connect (1)[c::]:6789 error -101 [ 1314.105380][T18558] libceph: mon0 (1)[c::]:6789 connect error [ 1314.114343][ T717] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1314.124478][T18558] libceph: connect (1)[c::]:6789 error -101 [ 1314.130660][T18558] libceph: mon0 (1)[c::]:6789 connect error [ 1314.273798][ T717] VFS: Lookup of '' in ocfs2 loop2 would have caused loop [ 1314.496375][T18558] libceph: connect (1)[c::]:6789 error -101 [ 1314.502627][T18558] libceph: mon0 (1)[c::]:6789 connect error [ 1314.552304][T18558] libceph: connect (1)[c::]:6789 error -101 [ 1314.558437][T18558] libceph: mon0 (1)[c::]:6789 connect error [ 1314.585396][ T730] ceph: No mds server is up or the cluster is laggy [ 1314.594237][ T734] ceph: No mds server is up or the cluster is laggy [ 1314.978004][T29031] ocfs2: Unmounting device (7,2) on (node local) [ 1314.999677][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1315.902903][ T771] loop4: detected capacity change from 0 to 40427 [ 1316.008068][ T771] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1316.012109][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.015961][ T771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1316.024216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.025174][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.038128][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1316.040634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.058385][ T771] F2FS-fs (loop4): invalid crc value [ 1316.299113][ T771] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1316.361345][ T771] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1316.368770][ T771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1316.599401][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.069907][ T798] input: syz1 as /devices/virtual/input/input43 [ 1317.078587][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1317.320019][ T5757] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1317.441411][ T779] loop0: detected capacity change from 0 to 32768 [ 1317.462851][ T779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10016 (779) [ 1317.519508][ T779] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1317.529645][ T779] BTRFS info (device loop0): using sha256 checksum algorithm [ 1317.897825][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.920527][ T779] BTRFS info (device loop0): enabling ssd optimizations [ 1317.951628][ T779] BTRFS info (device loop0): turning on async discard [ 1317.958451][ T779] BTRFS info (device loop0): enabling free space tree [ 1318.001219][ T31] audit: type=1800 audit(1781147010.434:889): pid=779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10016" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1318.101397][ T5757] usb 10-1: Using ep0 maxpacket: 32 [ 1318.122083][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 1318.792059][T29574] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1318.820814][ T5757] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1318.829064][ T5757] usb 10-1: config 0 has no interface number 0 [ 1318.887421][ T836] loop3: detected capacity change from 0 to 256 [ 1318.973665][ T836] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1319.101300][ T31] audit: type=1326 audit(1781147011.524:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=835 comm="syz.3.10031" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bc3f9ce59 code=0x0 [ 1319.158621][ C0] net_ratelimit: 2 callbacks suppressed [ 1319.158642][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1319.802910][ T851] input: syz0 as /devices/virtual/input/input44 [ 1319.979793][ T5757] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1319.989002][ T5757] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.997099][ T5757] usb 10-1: Product: syz [ 1320.001385][ T5757] usb 10-1: Manufacturer: syz [ 1320.026821][ T5757] usb 10-1: config 0 descriptor?? [ 1320.158184][ T5757] usb 10-1: can't set config #0, error -71 [ 1320.198136][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1320.202970][ T5757] usb 10-1: USB disconnect, device number 15 [ 1320.332729][ T861] loop4: detected capacity change from 0 to 128 [ 1320.389026][ T861] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1320.511864][ T861] hpfs: filesystem error: improperly stopped [ 1320.547491][ T861] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1320.601880][ T861] hpfs: You really don't want any checks? You are crazy... [ 1320.650513][ T861] hpfs: Code page index out of array [ 1320.655854][ T861] hpfs: code page support is disabled [ 1320.661360][ T861] hpfs: hpfs_map_4sectors(): unaligned read [ 1320.667385][ T861] hpfs: hpfs_map_4sectors(): unaligned read [ 1320.673616][ T861] hpfs: filesystem error: unable to find root dir [ 1321.012017][ T871] loop0: detected capacity change from 0 to 128 [ 1321.020540][ T871] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1321.034110][ T871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1321.238418][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1321.728201][T29222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.780051][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.788212][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.796533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.805012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.064942][ T888] loop0: detected capacity change from 0 to 256 [ 1322.107811][ T868] loop3: detected capacity change from 0 to 32768 [ 1322.278198][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1322.328377][ T888] FAT-fs (loop0): Directory bread(block 64) failed [ 1322.334958][ T888] FAT-fs (loop0): Directory bread(block 65) failed [ 1322.341650][ T888] FAT-fs (loop0): Directory bread(block 66) failed [ 1322.348176][ T888] FAT-fs (loop0): Directory bread(block 67) failed [ 1322.354832][ T888] FAT-fs (loop0): Directory bread(block 68) failed [ 1322.361368][ T888] FAT-fs (loop0): Directory bread(block 69) failed [ 1322.469094][ T888] FAT-fs (loop0): Directory bread(block 70) failed [ 1322.480562][ T868] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1322.546135][ T888] FAT-fs (loop0): Directory bread(block 71) failed [ 1322.583053][ T888] FAT-fs (loop0): Directory bread(block 72) failed [ 1322.636168][ T888] FAT-fs (loop0): Directory bread(block 73) failed [ 1322.706346][ T868] XFS (loop3): Ending clean mount [ 1322.783518][ T868] XFS (loop3): Quotacheck needed: Please wait. [ 1323.318451][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1323.630903][ T868] XFS (loop3): Quotacheck: Done. [ 1323.686836][ T898] loop9: detected capacity change from 0 to 131072 [ 1323.836616][ T898] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1323.915803][ T898] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1324.112785][T27542] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1324.247757][ T929] loop2: detected capacity change from 0 to 64 [ 1324.358277][ C0] net_ratelimit: 2 callbacks suppressed [ 1324.358304][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1324.837570][ T950] tls_set_device_offload: netdev not found [ 1325.398436][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1325.458510][ T965] loop0: detected capacity change from 0 to 256 [ 1325.477862][ T965] exfat: Deprecated parameter 'namecase' [ 1325.530594][ T965] exfat: Deprecated parameter 'utf8' [ 1325.616130][ T965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 1325.760931][ T971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10076'. [ 1326.438076][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1326.710887][ T990] loop2: detected capacity change from 0 to 164 [ 1326.831361][ T990] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1326.867331][ T990] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1327.099167][ T980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1327.146980][ T980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1327.210280][ T980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1327.216291][ T980] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1327.233434][ T980] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1327.239505][ T980] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1327.262223][ T980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1327.271129][ T980] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1327.291996][ T997] loop3: detected capacity change from 0 to 512 [ 1327.478575][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1327.484087][ T999] netlink: 'syz.2.10088': attribute type 83 has an invalid length. [ 1327.487217][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.502894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.574102][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.582525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.716988][ T997] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1327.911971][ T997] EXT4-fs (loop3): 1 truncate cleaned up [ 1327.998311][ T997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.284694][ T1015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1328.418419][T27542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.518137][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1328.758168][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1328.850819][ T1032] loop9: detected capacity change from 0 to 2048 [ 1328.868365][ T1032] udf: Unknown parameter '6olume' [ 1328.947509][T17414] Bluetooth: hci3: command 0x0406 tx timeout [ 1329.145017][ T1041] loop2: detected capacity change from 0 to 512 [ 1329.152399][ T1041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1329.170436][ T1041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1329.223692][T17414] block nbd4: Receive control failed (result -107) [ 1329.251055][T26391] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1329.262720][ T1041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1329.333469][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 1329.340058][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 1329.346330][T17414] Bluetooth: hci5: command 0x0406 tx timeout [ 1329.377412][ T1041] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1329.384881][ T1041] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1329.394270][ T1041] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1329.408792][ T1041] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1329.416864][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.425212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.469833][T26391] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1329.495938][T26391] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.511917][ T1041] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10103: bg 0: block 40: padding at end of block bitmap is not set [ 1329.526439][ T1041] loop2: lost filesystem error report for type 5 error -117 [ 1329.526774][ T1041] EXT4-fs (loop2): Remounting filesystem read-only [ 1329.540779][ T1041] EXT4-fs (loop2): 1 truncate cleaned up [ 1329.553911][ T1041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1329.558377][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1329.586333][T26391] usb 10-1: config 0 descriptor?? [ 1329.621741][ T1041] EXT4-fs (loop2): shut down requested (2) [ 1329.642857][T26391] cp210x 10-1:0.0: cp210x converter detected [ 1329.669245][T29031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.870113][ T1063] loop0: detected capacity change from 0 to 512 [ 1329.918144][ T1063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.102313][ T1045] nbd4: detected capacity change from 0 to 8589934592 [ 1330.110457][ T1068] loop2: detected capacity change from 0 to 256 [ 1330.125685][ T1045] block nbd4: shutting down sockets [ 1330.149276][T26391] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1330.180130][ T1068] FAT-fs (loop2): Directory bread(block 64) failed [ 1330.214792][T29574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.241774][ T1068] FAT-fs (loop2): Directory bread(block 65) failed [ 1330.277111][ T1068] FAT-fs (loop2): Directory bread(block 66) failed [ 1330.283710][ T1068] FAT-fs (loop2): Directory bread(block 67) failed [ 1330.290327][ T1068] FAT-fs (loop2): Directory bread(block 68) failed [ 1330.293867][T26391] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1330.296850][ T1068] FAT-fs (loop2): Directory bread(block 69) failed [ 1330.296976][ T1068] FAT-fs (loop2): Directory bread(block 70) failed [ 1330.316567][ T1068] FAT-fs (loop2): Directory bread(block 71) failed [ 1330.323174][ T1068] FAT-fs (loop2): Directory bread(block 72) failed [ 1330.416468][T26391] usb 10-1: USB disconnect, device number 16 [ 1330.443314][T26391] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1330.463152][T26391] cp210x 10-1:0.0: device disconnected [ 1330.483365][ T1068] FAT-fs (loop2): Directory bread(block 73) failed [ 1330.598082][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1330.949956][ T1087] [ 1330.952339][ T1087] ====================================================== [ 1330.959358][ T1087] WARNING: possible circular locking dependency detected [ 1330.966564][ T1087] syzkaller #0 Tainted: G L [ 1330.972543][ T1087] ------------------------------------------------------ [ 1330.979562][ T1087] syz.2.10109/1087 is trying to acquire lock: [ 1330.985632][ T1087] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1330.994817][ T1087] [ 1330.994817][ T1087] but task is already holding lock: [ 1331.002176][ T1087] ffff88802dcd0338 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 1331.011432][ T1087] [ 1331.011432][ T1087] which lock already depends on the new lock. [ 1331.011432][ T1087] [ 1331.021925][ T1087] [ 1331.021925][ T1087] the existing dependency chain (in reverse order) is: [ 1331.030938][ T1087] [ 1331.030938][ T1087] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1331.038637][ T1087] __might_fault+0xcb/0x130 [ 1331.043669][ T1087] _copy_from_iter+0x100/0x1670 [ 1331.049044][ T1087] tcp_sendmsg_locked+0x2121/0x5360 [ 1331.054779][ T1087] tcp_sendmsg+0x2f/0x50 [ 1331.059543][ T1087] sock_write_iter+0x406/0x4f0 [ 1331.064831][ T1087] vfs_write+0x61d/0xb90 [ 1331.069598][ T1087] ksys_write+0x150/0x270 [ 1331.074452][ T1087] do_syscall_64+0x174/0x580 [ 1331.079560][ T1087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.085979][ T1087] [ 1331.085979][ T1087] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1331.093633][ T1087] lock_sock_nested+0x41/0x100 [ 1331.098923][ T1087] inet_shutdown+0x6a/0x390 [ 1331.103948][ T1087] nbd_mark_nsock_dead+0x2e9/0x560 [ 1331.109568][ T1087] recv_work+0x1c2e/0x1d40 [ 1331.114497][ T1087] process_scheduled_works+0xb5d/0x1860 [ 1331.120555][ T1087] worker_thread+0xa53/0xfc0 [ 1331.125677][ T1087] kthread+0x389/0x470 [ 1331.130278][ T1087] ret_from_fork+0x514/0xb70 [ 1331.135390][ T1087] ret_from_fork_asm+0x1a/0x30 [ 1331.140680][ T1087] [ 1331.140680][ T1087] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1331.148334][ T1087] __mutex_lock+0x1a3/0x1550 [ 1331.153450][ T1087] nbd_queue_rq+0x37b/0x1100 [ 1331.158567][ T1087] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1331.164638][ T1087] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1331.171492][ T1087] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1331.177992][ T1087] blk_mq_run_hw_queue+0x348/0x4f0 [ 1331.183617][ T1087] blk_mq_dispatch_list+0xd16/0xe10 [ 1331.189338][ T1087] blk_mq_flush_plug_list+0x48d/0x570 [ 1331.195243][ T1087] __blk_flush_plug+0x3ed/0x4d0 [ 1331.200617][ T1087] __submit_bio+0x28d/0x580 [ 1331.205645][ T1087] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1331.211802][ T1087] block_read_full_folio+0x599/0x830 [ 1331.217604][ T1087] filemap_read_folio+0x137/0x3b0 [ 1331.223160][ T1087] do_read_cache_folio+0x358/0x590 [ 1331.228808][ T1087] read_part_sector+0xb6/0x2b0 [ 1331.234101][ T1087] adfspart_check_ICS+0xb1/0x960 [ 1331.239563][ T1087] bdev_disk_changed+0x817/0x1770 [ 1331.245117][ T1087] blkdev_get_whole+0x380/0x510 [ 1331.250486][ T1087] bdev_open+0x31e/0xd30 [ 1331.255252][ T1087] blkdev_open+0x470/0x610 [ 1331.260194][ T1087] do_dentry_open+0x822/0x13a0 [ 1331.265490][ T1087] vfs_open+0x3b/0x340 [ 1331.270092][ T1087] path_openat+0x2e08/0x3860 [ 1331.275211][ T1087] do_file_open+0x23e/0x4a0 [ 1331.280328][ T1087] do_sys_openat2+0x113/0x200 [ 1331.285521][ T1087] __x64_sys_openat+0x138/0x170 [ 1331.290886][ T1087] do_syscall_64+0x174/0x580 [ 1331.295993][ T1087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.302404][ T1087] [ 1331.302404][ T1087] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1331.309626][ T1087] __mutex_lock+0x1a3/0x1550 [ 1331.314738][ T1087] nbd_queue_rq+0xc6/0x1100 [ 1331.319764][ T1087] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1331.325833][ T1087] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1331.332738][ T1087] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1331.339243][ T1087] blk_mq_run_hw_queue+0x348/0x4f0 [ 1331.345219][ T1087] blk_mq_dispatch_list+0xd16/0xe10 [ 1331.350938][ T1087] blk_mq_flush_plug_list+0x48d/0x570 [ 1331.356840][ T1087] __blk_flush_plug+0x3ed/0x4d0 [ 1331.362216][ T1087] __submit_bio+0x28d/0x580 [ 1331.367239][ T1087] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1331.373389][ T1087] block_read_full_folio+0x599/0x830 [ 1331.379277][ T1087] filemap_read_folio+0x137/0x3b0 [ 1331.384824][ T1087] do_read_cache_folio+0x358/0x590 [ 1331.390457][ T1087] read_part_sector+0xb6/0x2b0 [ 1331.395744][ T1087] adfspart_check_ICS+0xb1/0x960 [ 1331.401203][ T1087] bdev_disk_changed+0x817/0x1770 [ 1331.406751][ T1087] blkdev_get_whole+0x380/0x510 [ 1331.412125][ T1087] bdev_open+0x31e/0xd30 [ 1331.416884][ T1087] blkdev_open+0x470/0x610 [ 1331.421818][ T1087] do_dentry_open+0x822/0x13a0 [ 1331.427100][ T1087] vfs_open+0x3b/0x340 [ 1331.431687][ T1087] path_openat+0x2e08/0x3860 [ 1331.436816][ T1087] do_file_open+0x23e/0x4a0 [ 1331.441848][ T1087] do_sys_openat2+0x113/0x200 [ 1331.447053][ T1087] __x64_sys_openat+0x138/0x170 [ 1331.452430][ T1087] do_syscall_64+0x174/0x580 [ 1331.457844][ T1087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.464256][ T1087] [ 1331.464256][ T1087] -> #3 (set->srcu){.+.+}-{0:0}: [ 1331.471386][ T1087] __synchronize_srcu+0xca/0x300 [ 1331.476838][ T1087] elevator_switch+0x1e8/0x7a0 [ 1331.482118][ T1087] elevator_change+0x2cc/0x450 [ 1331.487402][ T1087] elevator_set_default+0x36c/0x430 [ 1331.493203][ T1087] blk_register_queue+0x3e9/0x4e0 [ 1331.498754][ T1087] __add_disk+0x677/0xd50 [ 1331.503607][ T1087] add_disk_fwnode+0xfb/0x480 [ 1331.508805][ T1087] nbd_dev_add+0x72c/0xb50 [ 1331.513749][ T1087] nbd_init+0x168/0x1f0 [ 1331.518431][ T1087] do_one_initcall+0x250/0x870 [ 1331.523714][ T1087] do_initcall_level+0x104/0x190 [ 1331.529169][ T1087] do_initcalls+0x59/0xa0 [ 1331.534015][ T1087] kernel_init_freeable+0x2a6/0x3e0 [ 1331.539750][ T1087] kernel_init+0x1d/0x1d0 [ 1331.544617][ T1087] ret_from_fork+0x514/0xb70 [ 1331.549777][ T1087] ret_from_fork_asm+0x1a/0x30 [ 1331.555064][ T1087] [ 1331.555064][ T1087] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1331.562888][ T1087] __mutex_lock+0x1a3/0x1550 [ 1331.568081][ T1087] elevator_change+0x1b3/0x450 [ 1331.573449][ T1087] elevator_set_none+0xb5/0x140 [ 1331.578819][ T1087] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1331.585154][ T1087] nbd_start_device+0x17f/0xb10 [ 1331.590530][ T1087] nbd_genl_connect+0x165b/0x1cf0 [ 1331.596078][ T1087] genl_family_rcv_msg_doit+0x22a/0x330 [ 1331.602142][ T1087] genl_rcv_msg+0x61c/0x7a0 [ 1331.607161][ T1087] netlink_rcv_skb+0x232/0x4b0 [ 1331.612447][ T1087] genl_rcv+0x28/0x40 [ 1331.616942][ T1087] netlink_unicast+0x75c/0x8e0 [ 1331.622223][ T1087] netlink_sendmsg+0x813/0xb40 [ 1331.627493][ T1087] ____sys_sendmsg+0x972/0x9f0 [ 1331.632767][ T1087] ___sys_sendmsg+0x2a5/0x360 [ 1331.637958][ T1087] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1331.638288][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1331.643413][ T1087] do_syscall_64+0x174/0x580 [ 1331.655935][ T1087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.662459][ T1087] [ 1331.662459][ T1087] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1331.671086][ T1087] blk_alloc_queue+0x546/0x680 [ 1331.676369][ T1087] __blk_mq_alloc_disk+0x197/0x390 [ 1331.682001][ T1087] nbd_dev_add+0x499/0xb50 [ 1331.686944][ T1087] nbd_init+0x168/0x1f0 [ 1331.691629][ T1087] do_one_initcall+0x250/0x870 [ 1331.696906][ T1087] do_initcall_level+0x104/0x190 [ 1331.702365][ T1087] do_initcalls+0x59/0xa0 [ 1331.707214][ T1087] kernel_init_freeable+0x2a6/0x3e0 [ 1331.712928][ T1087] kernel_init+0x1d/0x1d0 [ 1331.717780][ T1087] ret_from_fork+0x514/0xb70 [ 1331.722892][ T1087] ret_from_fork_asm+0x1a/0x30 [ 1331.728174][ T1087] [ 1331.728174][ T1087] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1331.735385][ T1087] __lock_acquire+0x15a5/0x2cf0 [ 1331.740753][ T1087] lock_acquire+0x106/0x350 [ 1331.745776][ T1087] fs_reclaim_acquire+0x71/0x100 [ 1331.751243][ T1087] prepare_alloc_pages+0x152/0x650 [ 1331.756880][ T1087] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1331.763251][ T1087] alloc_pages_mpol+0x235/0x490 [ 1331.768618][ T1087] alloc_pages_noprof+0xac/0x2a0 [ 1331.774070][ T1087] __pud_alloc+0x3a/0x460 [ 1331.778913][ T1087] handle_mm_fault+0x2b2c/0x3170 [ 1331.784376][ T1087] __get_user_pages+0x167f/0x2730 [ 1331.789916][ T1087] get_dump_page+0x1b5/0x410 [ 1331.795021][ T1087] dump_user_range+0x20a/0x12c0 [ 1331.800385][ T1087] elf_core_dump+0x34c2/0x3ad0 [ 1331.805666][ T1087] coredump_write+0x12b0/0x19d0 [ 1331.811038][ T1087] vfs_coredump+0x3807/0x4530 [ 1331.816273][ T1087] get_signal+0x1107/0x1330 [ 1331.821288][ T1087] arch_do_signal_or_restart+0xbc/0x840 [ 1331.827364][ T1087] irqentry_exit+0x2aa/0x8b0 [ 1331.832471][ T1087] asm_exc_page_fault+0x26/0x30 [ 1331.837837][ T1087] [ 1331.837837][ T1087] other info that might help us debug this: [ 1331.837837][ T1087] [ 1331.848150][ T1087] Chain exists of: [ 1331.848150][ T1087] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 1331.848150][ T1087] [ 1331.860687][ T1087] Possible unsafe locking scenario: [ 1331.860687][ T1087] [ 1331.868129][ T1087] CPU0 CPU1 [ 1331.873477][ T1087] ---- ---- [ 1331.878824][ T1087] rlock(&mm->mmap_lock); [ 1331.883235][ T1087] lock(sk_lock-AF_INET); [ 1331.890172][ T1087] lock(&mm->mmap_lock); [ 1331.897012][ T1087] lock(fs_reclaim); [ 1331.900984][ T1087] [ 1331.900984][ T1087] *** DEADLOCK *** [ 1331.900984][ T1087] [ 1331.909108][ T1087] 2 locks held by syz.2.10109/1087: [ 1331.914285][ T1087] #0: ffff88805329c410 (sb_writers#27){.+.+}-{0:0}, at: vfs_coredump+0x3807/0x4530 [ 1331.923709][ T1087] #1: ffff88802dcd0338 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 1331.933385][ T1087] [ 1331.933385][ T1087] stack backtrace: [ 1331.939271][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: syz.2.10109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.939302][ T1087] Tainted: [L]=SOFTLOCKUP [ 1331.939311][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1331.939325][ T1087] Call Trace: [ 1331.939336][ T1087] [ 1331.939347][ T1087] dump_stack_lvl+0xe8/0x150 [ 1331.939376][ T1087] print_circular_bug+0x2e1/0x300 [ 1331.939409][ T1087] check_noncircular+0x12e/0x150 [ 1331.939443][ T1087] __lock_acquire+0x15a5/0x2cf0 [ 1331.939469][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.939498][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.939528][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.939558][ T1087] ? prepare_alloc_pages+0x152/0x650 [ 1331.939594][ T1087] lock_acquire+0x106/0x350 [ 1331.939617][ T1087] ? prepare_alloc_pages+0x152/0x650 [ 1331.939653][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.939679][ T1087] ? kernel_text_address+0xa5/0xe0 [ 1331.939721][ T1087] fs_reclaim_acquire+0x71/0x100 [ 1331.939754][ T1087] ? prepare_alloc_pages+0x152/0x650 [ 1331.939788][ T1087] prepare_alloc_pages+0x152/0x650 [ 1331.939826][ T1087] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1331.939866][ T1087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1331.939904][ T1087] ? __pfx_policy_nodemask+0x10/0x10 [ 1331.939930][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.939959][ T1087] alloc_pages_mpol+0x235/0x490 [ 1331.939983][ T1087] alloc_pages_noprof+0xac/0x2a0 [ 1331.940007][ T1087] __pud_alloc+0x3a/0x460 [ 1331.940040][ T1087] handle_mm_fault+0x2b2c/0x3170 [ 1331.940068][ T1087] ? mt_find+0x186/0x630 [ 1331.940095][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940121][ T1087] ? __page_table_check_zero+0x6a/0x3e0 [ 1331.940156][ T1087] ? handle_mm_fault+0xf1/0x3170 [ 1331.940183][ T1087] ? __pfx_mt_find+0x10/0x10 [ 1331.940211][ T1087] ? __pfx_handle_mm_fault+0x10/0x10 [ 1331.940248][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940278][ T1087] __get_user_pages+0x167f/0x2730 [ 1331.940322][ T1087] get_dump_page+0x1b5/0x410 [ 1331.940347][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940374][ T1087] ? __pfx_get_dump_page+0x10/0x10 [ 1331.940400][ T1087] ? dump_user_range+0x1c5/0x12c0 [ 1331.940422][ T1087] ? down_read_killable+0x1bb/0x340 [ 1331.940450][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940479][ T1087] dump_user_range+0x20a/0x12c0 [ 1331.940509][ T1087] ? __pfx_dump_user_range+0x10/0x10 [ 1331.940532][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940558][ T1087] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 1331.940582][ T1087] ? dump_align+0xee/0x110 [ 1331.940606][ T1087] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1331.940631][ T1087] ? __pfx_writenote+0x10/0x10 [ 1331.940660][ T1087] elf_core_dump+0x34c2/0x3ad0 [ 1331.940693][ T1087] ? __pfx_elf_core_dump+0x10/0x10 [ 1331.940721][ T1087] ? __kasan_kmalloc+0x93/0xb0 [ 1331.940754][ T1087] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 1331.940787][ T1087] ? coredump_write+0x374/0x19d0 [ 1331.940808][ T1087] ? vfs_coredump+0x3807/0x4530 [ 1331.940827][ T1087] ? get_signal+0x1107/0x1330 [ 1331.940847][ T1087] ? arch_do_signal_or_restart+0xbc/0x840 [ 1331.940880][ T1087] ? irqentry_exit+0x2aa/0x8b0 [ 1331.940902][ T1087] ? asm_exc_page_fault+0x26/0x30 [ 1331.940926][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.940952][ T1087] ? mas_ascend+0x304/0x890 [ 1331.940996][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941023][ T1087] ? 0xffffffffff600000 [ 1331.941045][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941075][ T1087] coredump_write+0x12b0/0x19d0 [ 1331.941110][ T1087] ? __pfx_coredump_write+0x10/0x10 [ 1331.941141][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941167][ T1087] ? unshare_files+0xa8/0x140 [ 1331.941195][ T1087] vfs_coredump+0x3807/0x4530 [ 1331.941229][ T1087] ? __pfx_vfs_coredump+0x10/0x10 [ 1331.941249][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941275][ T1087] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.941299][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941325][ T1087] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.941353][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941378][ T1087] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.941405][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941430][ T1087] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.941453][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941479][ T1087] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.941507][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941532][ T1087] ? lock_acquire+0x106/0x350 [ 1331.941558][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941586][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941611][ T1087] ? lock_acquire+0x106/0x350 [ 1331.941635][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941662][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941689][ T1087] ? is_bpf_text_address+0x26/0x2b0 [ 1331.941720][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941745][ T1087] ? is_bpf_text_address+0x292/0x2b0 [ 1331.941767][ T1087] ? is_bpf_text_address+0x26/0x2b0 [ 1331.941791][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941816][ T1087] ? kernel_text_address+0xa5/0xe0 [ 1331.941848][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941873][ T1087] ? __kernel_text_address+0xd/0x30 [ 1331.941903][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.941929][ T1087] ? unwind_get_return_address+0x4d/0x90 [ 1331.941957][ T1087] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1331.941991][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.942017][ T1087] ? arch_stack_walk+0xfb/0x150 [ 1331.942049][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.942075][ T1087] ? stack_trace_save+0xa9/0x100 [ 1331.942107][ T1087] ? __pfx_stack_trace_save+0x10/0x10 [ 1331.942141][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.942167][ T1087] ? stack_depot_save_flags+0x33/0x810 [ 1331.942195][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1331.942221][ T1087] ? kasan_save_track+0x4f/0x80 [ 1331.942250][ T1087] ? kasan_save_track+0x3e/0x80 [ 1331.942280][ T1087] ? kasan_save_free_info+0x46/0x50 [ 1331.942305][ T1087] ? __kasan_slab_free+0x5c/0x80 [ 1331.942336][ T1087] ? kmem_cache_free+0x182/0x650 [ 1331.942367][ T1087] ? get_signal+0xa4a/0x1330 [ 1331.942386][ T1087] ? arch_do_signal_or_restart+0xbc/0x840 [ 1331.942419][ T1087] ? irqentry_exit+0x2aa/0x8b0 [ 1331.942440][ T1087] ? asm_exc_page_fault+0x26/0x30 [ 1331.942493][ T1087] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.942529][ T1087] get_signal+0x1107/0x1330 [ 1331.942561][ T1087] arch_do_signal_or_restart+0xbc/0x840 [ 1331.942596][ T1087] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1331.942643][ T1087] irqentry_exit+0x2aa/0x8b0 [ 1331.942665][ T1087] ? trace_irq_disable+0x3b/0x140 [ 1331.942706][ T1087] asm_exc_page_fault+0x26/0x30 [ 1331.942728][ T1087] RIP: 0033:0x7f17c2852b27 [ 1331.942747][ T1087] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 be f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1331.942766][ T1087] RSP: 002b:00007f17c0bcf120 EFLAGS: 00010202 [ 1331.942786][ T1087] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f17c299ce59 [ 1331.942801][ T1087] RDX: 00007f17c0bcf140 RSI: 00007f17c0bcf270 RDI: 000000000000000b [ 1331.942816][ T1087] RBP: 00007f17c2a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1331.942831][ T1087] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1331.942844][ T1087] R13: 00007f17c2c16038 R14: 00007f17c2c15fa0 R15: 00007ffeb848bc88 [ 1331.942871][ T1087] [ 1331.956162][T31064] Bluetooth: hci3: command 0x0406 tx timeout [ 1332.248423][T17414] Bluetooth: hci5: command 0x0406 tx timeout [ 1332.259687][T31064] Bluetooth: hci1: command 0x0406 tx timeout [ 1332.263452][T17414] Bluetooth: hci0: command 0x0406 tx timeout [ 1332.593573][T29031] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1332.678070][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1332.810381][T29031] FAT-fs (loop2): Filesystem has been set read-only [ 1333.219739][ T1087] syz.2.10109: attempt to access beyond end of device [ 1333.219739][ T1087] loop2: rw=2049, sector=1256, nr_sectors = 224 limit=256 [ 1333.239687][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.248069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.259649][T29222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.270068][T29222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.282376][ T1087] syz.2.10109: attempt to access beyond end of device [ 1333.282376][ T1087] loop2: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 1333.303839][ T1087] syz.2.10109: attempt to access beyond end of device [ 1333.303839][ T1087] loop2: rw=2049, sector=1864, nr_sectors = 4104 limit=256 [ 1333.339500][T29224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.347805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.363339][ T1087] syz.2.10109: attempt to access beyond end of device [ 1333.363339][ T1087] loop2: rw=2049, sector=5968, nr_sectors = 4080 limit=256 [ 1333.386960][T29222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.402653][ T1087] syz.2.10109: attempt to access beyond end of device [ 1333.402653][ T1087] loop2: rw=2049, sector=10048, nr_sectors = 2096 limit=256 [ 1333.416910][T29222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.505119][T29222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.515708][T29222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.595402][T29222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.606265][T29222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.832474][T29222] bridge_slave_1: left allmulticast mode [ 1333.845995][T29222] bridge_slave_1: left promiscuous mode [ 1333.853470][T29222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.900236][T29222] bridge_slave_0: left allmulticast mode [ 1333.908913][T29222] bridge_slave_0: left promiscuous mode [ 1333.927922][T29222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.468376][T29222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.506912][T29222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.517265][T29222] bond0 (unregistering): Released all slaves [ 1334.529262][T29222] bond1 (unregistering): Released all slaves [ 1334.572111][T29222] bond2 (unregistering): (slave lo): Releasing backup interface [ 1334.580177][T29222] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1334.592416][T29222] bond2 (unregistering): Released all slaves [ 1334.607258][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1334.758038][ C0] net_ratelimit: 1 callbacks suppressed [ 1334.758061][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1335.075573][T29222] hsr_slave_0: left promiscuous mode [ 1335.081709][T29222] hsr_slave_1: left promiscuous mode [ 1335.087836][T29222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.095223][T29222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.103110][T29222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.110540][T29222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.132713][T29222] veth1_vlan: left allmulticast mode [ 1335.138206][T29222] veth1_macvtap: left promiscuous mode [ 1335.143683][T29222] veth0_macvtap: left promiscuous mode [ 1335.179848][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.188302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.196769][T29222] veth1_vlan: left promiscuous mode [ 1335.203163][T29222] veth0_vlan: left promiscuous mode [ 1335.472699][T29222] team0 (unregistering): Port device team_slave_1 removed [ 1335.486040][T29222] team0 (unregistering): Port device team_slave_0 removed [ 1335.610722][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1335.799316][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1335.817753][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.218252][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1336.677074][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1336.838348][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1337.878227][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1338.359991][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.368401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.441929][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.968202][ C0] net_ratelimit: 2 callbacks suppressed [ 1339.968223][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1340.300933][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.309509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.912332][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog