last executing test programs: 2m51.225457862s ago: executing program 4 (id=4283): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 2m50.370210911s ago: executing program 4 (id=4290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r2, &(0x7f0000001ec0), &(0x7f0000001f00)=""/208}, 0x20) 2m50.152377188s ago: executing program 4 (id=4294): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x63ad, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x443, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x4, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x41fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m49.071606439s ago: executing program 4 (id=4305): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000003100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 2m49.007583982s ago: executing program 4 (id=4307): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 2m44.767136231s ago: executing program 2 (id=4352): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150001003c09ab945e292b5f080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcc563951f215ce3bb9ad809d5e1cace81c99d7a75e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x5}, 0x0) 2m44.552550344s ago: executing program 2 (id=4356): syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000000240)='./file7\x00', 0x8, &(0x7f0000000440)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@namecase}, {@gid}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@namecase}], [{@euid_gt}, {@fowner_lt}, {@hash}]}, 0x1, 0x1538, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040f00304004000010203010902240001010590040904009b02070103020905010200040e019b34251ac4c8f2c108cd"], 0x0) 2m42.653909411s ago: executing program 2 (id=4374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 2m42.301370816s ago: executing program 2 (id=4378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x1) 2m41.791796696s ago: executing program 2 (id=4383): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x627b, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 2m39.29306244s ago: executing program 2 (id=4399): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x3, 0x4, 0x2, 0x1}}, 0x80, 0x0}, 0x20000000) 2m36.564798863s ago: executing program 4 (id=4443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, r3, 0x5eae78d9c54e9d3f, 0xffffffff, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 2m36.374817989s ago: executing program 32 (id=4443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, r3, 0x5eae78d9c54e9d3f, 0xffffffff, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 2m24.134299527s ago: executing program 33 (id=4399): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x3, 0x4, 0x2, 0x1}}, 0x80, 0x0}, 0x20000000) 11.162331622s ago: executing program 5 (id=5935): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20) 10.802175337s ago: executing program 0 (id=5939): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="83650000", 0x4) 10.560785343s ago: executing program 0 (id=5940): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000755000/0x400000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 9.602335705s ago: executing program 0 (id=5954): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 8.497565247s ago: executing program 0 (id=5963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xa05014, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8.348791765s ago: executing program 0 (id=5965): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000c70000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @loopback}}}}}, 0x0) 6.435466398s ago: executing program 0 (id=5976): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0xd, 0x2, 0x3, 0x5, r2}, 0x10) 6.297377889s ago: executing program 5 (id=5978): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.837364972s ago: executing program 34 (id=5976): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0xd, 0x2, 0x3, 0x5, r2}, 0x10) 5.827928665s ago: executing program 5 (id=5982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}, 0x1, 0x700}, 0x0) 5.532296255s ago: executing program 6 (id=5984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.449412151s ago: executing program 5 (id=5986): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x113, 0x0, 0xffffffffffffffff, 0x50, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 5.237202358s ago: executing program 6 (id=5988): r0 = epoll_create(0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001280)={0x30000010}) 4.909848206s ago: executing program 5 (id=5991): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.74433481s ago: executing program 6 (id=5992): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0x0, 0x7a0, 0x1, 0x1, 0x2, 0x0, [{0x2, 0xb8c, 0x20000000000008, '\x00', 0xa00}, {0x800, 0x9, 0x2, '\x00', 0x2600}]}) 4.216449828s ago: executing program 3 (id=5996): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000280)=0x400082, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10262, 0x0) 4.190316219s ago: executing program 6 (id=5998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) 4.023059998s ago: executing program 3 (id=6000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 3.004421757s ago: executing program 3 (id=6011): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xea, 0x6, 0x1, 0x9, "00f27a00000000000000b5199c3e7934e26300", 0x2, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 2.690625847s ago: executing program 3 (id=6015): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f000000ba00)='./file0\x00', 0x22084, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESOCT], 0x1, 0xdc8, &(0x7f0000002080)="$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") r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 2.12082638s ago: executing program 5 (id=6019): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001ac0)=0xc2f, 0x4) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10120, 0x0) 1.712728194s ago: executing program 3 (id=6022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) close(0x3) 1.141608481s ago: executing program 1 (id=6032): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0x1, 0x4}, &(0x7f0000000080)=0x8) 966.655131ms ago: executing program 3 (id=6033): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143142, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000320ea508dc0501000100000000010902120001000000000904000062a506"], 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0xd86a6000) 885.076968ms ago: executing program 6 (id=6034): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r0, r0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xa2) 839.460261ms ago: executing program 1 (id=6035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc, 0x0, 0xff6b}}}}}}}, 0x0) 532.415483ms ago: executing program 1 (id=6036): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 358.947176ms ago: executing program 6 (id=6037): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06011f00", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 185.599372ms ago: executing program 1 (id=6038): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r3, r2, 0x4, r2}, 0x10) 128.960144ms ago: executing program 1 (id=6039): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 0s ago: executing program 1 (id=6040): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f00000001c0)="6734334ddd58b6", 0x7) kernel console output (not intermixed with test programs): ttributes in process `syz.4.3968'. [ 509.726383][T15581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3968'. [ 509.827391][T15583] Invalid argument reading file caps for ./file0 [ 509.911632][ T5822] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 510.076818][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 510.078546][ T5822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 510.080978][ T5822] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 510.081005][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 510.081025][ T5822] usb 1-1: Product: syz [ 510.081039][ T5822] usb 1-1: Manufacturer: syz [ 510.081048][ T5822] usb 1-1: SerialNumber: syz [ 510.100914][ T5822] usb 1-1: config 0 descriptor?? [ 510.138366][T15578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 510.140709][ T5822] hub 1-1:0.0: bad descriptor, ignoring hub [ 510.140744][ T5822] hub 1-1:0.0: probe with driver hub failed with error -5 [ 510.511902][ T5822] net_ratelimit: 7 callbacks suppressed [ 510.579201][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.591976][ T819] usb 1-1: USB disconnect, device number 23 [ 511.267433][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.268147][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.269063][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.286668][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.331504][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.491774][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.882207][T15645] netlink: 'syz.2.3997': attribute type 34 has an invalid length. [ 512.079752][T15649] Invalid argument reading file caps for ./file0 [ 512.544764][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.281470][ T820] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 513.441391][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 513.443883][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.443934][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 513.443978][ T820] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.444002][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.449916][ T820] usb 4-1: config 0 descriptor?? [ 513.523489][ T820] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 513.571713][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.712594][ T819] usb 4-1: USB disconnect, device number 16 [ 514.001363][ T820] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 514.172230][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 514.174055][ T820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.174086][ T820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.174108][ T820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 514.174135][ T820] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 514.174147][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.188096][ T820] usb 3-1: config 0 descriptor?? [ 514.337660][T15716] loop4: detected capacity change from 0 to 256 [ 514.405917][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.448240][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 514.448257][ T38] audit: type=1800 audit(1776185554.875:60): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4028" name="file2" dev="loop4" ino=1048652 res=0 errno=0 [ 514.797377][ T820] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0013/input/input31 [ 514.867169][T15716] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 514.867200][T15716] FAT-fs (loop4): Filesystem has been set read-only [ 514.867648][T15716] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 514.867679][T15716] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 515.226260][T15715] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 515.226358][T15715] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 515.226380][T15715] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 515.651825][ T5822] net_ratelimit: 1 callbacks suppressed [ 515.651843][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.760496][ T820] appleir 0003:05AC:8241.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 516.145269][T15745] tipc: Enabling of bearer rejected, already enabled [ 516.187446][T15749] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 516.416136][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 516.691869][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.767955][T15755] loop4: detected capacity change from 0 to 32768 [ 516.865556][ T820] usb 3-1: USB disconnect, device number 22 [ 516.960842][T15755] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 516.966531][T15755] JBD2: Ignoring recovery information on journal [ 517.333426][T15755] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 517.479620][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.590353][T15796] loop5: detected capacity change from 0 to 7 [ 517.743278][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.822926][T15796] Dev loop5: unable to read RDB block 7 [ 517.822968][T15796] loop5: AHDI p1 p2 [ 517.822995][T15796] loop5: partition table partially beyond EOD, truncated [ 517.886411][T15778] loop2: detected capacity change from 0 to 32768 [ 517.919830][T15796] loop5: p1 size 150995456 extends beyond EOD, truncated [ 518.245696][T15778] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 518.454473][T15778] XFS (loop2): Ending clean mount [ 518.676067][ T9311] udevd[9311]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 518.779989][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.324285][T15755] overlayfs: upper fs does not support tmpfile. [ 519.343975][ T5822] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 519.515336][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 519.517385][ T5822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.517442][ T5822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.517462][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.517494][ T5822] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 519.517523][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.641037][ T5822] usb 4-1: config 0 descriptor?? [ 519.660869][T15755] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 519.660923][T15755] overlayfs: failed to set xattr on upper [ 519.660933][T15755] overlayfs: ...falling back to redirect_dir=nofollow. [ 519.660941][T15755] overlayfs: ...falling back to index=off. [ 519.660948][T15755] overlayfs: ...falling back to uuid=null. [ 519.660956][T15755] overlayfs: upper fs missing required features. [ 519.813677][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.154577][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.183180][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.257569][ T5822] hid (null): unknown global tag 0xc [ 520.267988][ T5822] hid (null): bogus close delimiter [ 520.268009][ T5822] hid (null): global environment stack underflow [ 520.441978][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 520.531552][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.532393][ T5822] usb 4-1: USB disconnect, device number 17 [ 520.856561][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.921494][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.656456][ T5834] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 521.912255][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.931916][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.380583][T15933] loop2: detected capacity change from 0 to 512 [ 523.578773][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.613065][T15907] loop4: detected capacity change from 0 to 32768 [ 523.697917][T15907] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 523.743419][T15907] XFS (loop4): Ending clean mount [ 523.972840][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.071404][T15933] EXT4-fs (loop2): 1 orphan inode deleted [ 524.076253][T15933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.076659][T15933] ext4 filesystem being mounted at /650/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.104336][T15907] XFS (loop4): Quotacheck needed: Please wait. [ 524.148409][ T67] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 524.148512][ T67] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 524.461398][ T6052] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 524.641380][ T6052] usb 3-1: Using ep0 maxpacket: 8 [ 524.643842][ T6052] usb 3-1: unable to get BOS descriptor or descriptor too short [ 524.645235][ T6052] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 29440, setting to 1024 [ 524.645267][ T6052] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 524.645291][ T6052] usb 3-1: config 8 interface 0 has no altsetting 0 [ 524.699782][ T6052] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 524.699813][ T6052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.699833][ T6052] usb 3-1: Product: syz [ 524.699848][ T6052] usb 3-1: Manufacturer: syz [ 524.699862][ T6052] usb 3-1: SerialNumber: syz [ 524.761040][T15933] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.993078][T15953] loop3: detected capacity change from 0 to 32768 [ 525.082296][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.107783][ T6052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.107841][ T6052] usb 3-1: selecting invalid altsetting 0 [ 525.124320][T15953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4128 (15953) [ 525.238711][T15953] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 525.238744][T15953] BTRFS info (device loop3): using crc32c checksum algorithm [ 525.608575][T15907] XFS (loop4): Quotacheck: Done. [ 526.079825][ T5840] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 526.134723][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.901325][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.362184][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.375648][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.873594][ T6052] usb 3-1: USB disconnect, device number 23 [ 528.183995][T16045] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4163'. [ 528.295706][T15953] BTRFS error (device loop3): open_ctree failed: -4 [ 528.469595][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.494818][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.979027][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.037916][T16052] loop2: detected capacity change from 0 to 32768 [ 530.055694][T16081] loop4: detected capacity change from 0 to 1024 [ 530.415051][T16081] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 530.465232][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.483592][T16052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4166 (16052) [ 530.491499][T16052] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 530.491532][T16052] BTRFS info (device loop2): using crc32c checksum algorithm [ 530.532706][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.868885][T16081] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.4180: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.868927][T16081] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 530.983705][ C0] EXT4-fs (loop4): initial error at time 1776185571: ext4_map_blocks:791: inode 3: block 2 [ 530.983748][ C0] EXT4-fs (loop4): last error at time 1776185571: ext4_map_blocks:791: inode 3: block 2 [ 531.065194][T16081] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 531.065254][T16081] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.4180: lblock 0 mapped to illegal pblock 48 (length 1) [ 531.065286][T16081] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 531.065770][T16081] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 531.153202][T16081] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.4180: Failed to acquire dquot type 0 [ 531.153235][T16081] loop4: lost filesystem error report for type 5 error -117 [ 531.156327][T16081] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 531.156354][T16081] loop4: lost filesystem error report for type 5 error -117 [ 531.324280][T16052] BTRFS info (device loop2): enabling ssd optimizations [ 531.324310][T16052] BTRFS info (device loop2): turning on flush-on-commit [ 531.324327][T16052] BTRFS info (device loop2): enabling free space tree [ 531.324343][T16052] BTRFS info (device loop2): enabling auto defrag [ 531.324359][T16052] BTRFS info (device loop2): use lzo compression, level 1 [ 531.324379][T16052] BTRFS info (device loop2): max_inline set to 4096 [ 531.576140][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.588490][T16081] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.4180: mark_inode_dirty error [ 531.588526][T16081] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 531.589194][T16081] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 531.589315][T16081] EXT4-fs (loop4): 1 orphan inode deleted [ 531.694429][ T67] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.694464][ T67] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 531.722142][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.754318][T16081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.091389][ T67] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 532.107443][ T67] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 532.145301][ T5834] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.231034][T16124] EXT4-fs (loop4): shut down requested (2) [ 532.419191][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.566469][ T67] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 532.612645][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.013061][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.685167][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.279135][T16173] loop3: detected capacity change from 0 to 131072 [ 535.280037][T16173] xfs: Deprecated parameter 'ikeep' [ 535.280062][T16173] XFS: ikeep mount option is deprecated. [ 535.286296][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.366867][T16173] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 535.485423][T16173] XFS (loop3): Starting recovery (logdev: internal) [ 535.539092][T16173] XFS (loop3): Ending recovery (logdev: internal) [ 535.689466][ T5839] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 536.051612][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.292467][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.472260][T16244] loop2: detected capacity change from 0 to 4096 [ 536.624130][T16250] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4244'. [ 536.891359][T16258] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.084101][T16244] NILFS (loop2): error -2 reading inode: ino=51539607560 [ 537.333647][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.921395][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.131731][T16288] loop3: detected capacity change from 0 to 131072 [ 539.147790][T16288] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 539.147814][T16288] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 539.177187][T16288] F2FS-fs (loop3): invalid crc value [ 539.217310][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.310049][T16288] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 539.351966][T16288] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 539.351997][T16288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 540.030418][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.114705][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.933328][T16363] input: syz0 as /devices/virtual/input/input34 [ 541.099513][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.698505][T16382] netlink: 'syz.2.4301': attribute type 1 has an invalid length. [ 541.866878][T16382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.190520][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.317173][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.283088][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.918862][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 544.291931][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.390228][T16428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.806054][T16428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.331607][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.334012][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.154938][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 546.363272][T16508] netlink: 'syz.2.4352': attribute type 3 has an invalid length. [ 546.363294][T16508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4352'. [ 546.374311][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.555134][T16517] loop2: detected capacity change from 0 to 256 [ 546.556286][T16517] exfat: Deprecated parameter 'namecase' [ 546.594762][T16517] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 547.151361][ T6052] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 547.343713][ T6052] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 547.343766][ T6052] usb 3-1: config 1 interface 0 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 1024 [ 547.343793][ T6052] usb 3-1: config 1 interface 0 altsetting 155 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.343820][ T6052] usb 3-1: config 1 interface 0 has no altsetting 0 [ 547.399163][ T6052] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 547.399195][ T6052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.399214][ T6052] usb 3-1: Product: syz [ 547.399229][ T6052] usb 3-1: Manufacturer: syz [ 547.399244][ T6052] usb 3-1: SerialNumber: syz [ 547.412051][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.460842][T16524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.574148][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 547.578077][ T5822] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 547.578096][ T5822] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 547.680024][ T6052] usb 3-1: USB disconnect, device number 24 [ 548.373968][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.451887][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.561546][ T6052] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 548.733499][ T6052] usb 1-1: Using ep0 maxpacket: 32 [ 548.736020][ T6052] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 548.736047][ T6052] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 548.736068][ T6052] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 548.736112][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.736133][ T6052] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 548.736156][ T6052] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 548.736196][ T6052] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 548.736219][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.827539][ T6052] usb 1-1: config 0 descriptor?? [ 548.922151][T16584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.989542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.070052][ T6052] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 549.512944][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.659731][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.918755][ T5927] usb 1-1: USB disconnect, device number 24 [ 550.005473][ T5927] usblp0: removed [ 550.425898][T16600] loop2: detected capacity change from 0 to 32768 [ 550.532160][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.726582][T16600] [ 550.726582][T16600] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 550.726582][T16600] [ 551.000475][ T38] audit: type=1800 audit(1776185591.435:61): pid=16600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4383" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 551.308609][T16600] [ 551.308609][T16600] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.308609][T16600] [ 551.308689][T16600] [ 551.308689][T16600] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.308689][T16600] [ 551.499608][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.580455][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.804195][ T127] [ 551.804195][ T127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.804195][ T127] [ 552.613290][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.948652][T16699] macvlan0: entered promiscuous mode [ 553.651902][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.035855][T16737] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 554.036025][T16737] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 554.541509][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.692022][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.921384][ T37] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 555.073705][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 555.180087][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.180143][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 555.180167][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.250118][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.361664][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.368893][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.388424][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.389211][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.432917][ T37] usb 4-1: config 0 descriptor?? [ 555.472802][ T37] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 555.735290][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.477650][ T37] gspca_vc032x: reg_r err -71 [ 556.477733][ T37] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 556.486320][ T37] usb 4-1: USB disconnect, device number 18 [ 556.775671][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.950387][T15210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.571615][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.734078][ T5847] Bluetooth: hci2: command tx timeout [ 557.812000][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.891434][ T5822] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 557.906698][ T5822] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 558.395518][T15210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.730907][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 558.855460][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.255853][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.366862][T15210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.518858][T16917] tmpfs: Bad value for 'mpol' [ 559.892491][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.033995][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 560.167588][T15210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.191351][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 560.202362][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 560.202393][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.202414][ T10] usb 4-1: Product: syz [ 560.202426][ T10] usb 4-1: Manufacturer: syz [ 560.202440][ T10] usb 4-1: SerialNumber: syz [ 560.208667][ T10] usb 4-1: config 0 descriptor?? [ 560.231686][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 560.287196][ T10] usb 4-1: Detected FT-X [ 560.448441][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 560.621696][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.720706][T16777] chnl_net:caif_netlink_parms(): no params data found [ 560.830137][T16955] bond_slave_0: entered promiscuous mode [ 560.830193][T16955] bond_slave_1: entered promiscuous mode [ 560.830458][T16955] macvlan3: entered promiscuous mode [ 560.830473][T16955] bond0: entered promiscuous mode [ 560.843072][T16955] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 560.931922][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.984350][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 561.069623][ T5822] usb 4-1: USB disconnect, device number 19 [ 561.134960][T16955] macvlan4: entered promiscuous mode [ 561.359217][ T5822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 561.376947][ T5822] ftdi_sio 4-1:0.0: device disconnected [ 561.975275][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.677800][T17008] loop3: detected capacity change from 0 to 1024 [ 562.727433][T17008] hfsplus: failed to load extents file [ 562.729693][T16777] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.729849][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.730058][T16777] bridge_slave_0: entered allmulticast mode [ 562.762013][T16777] bridge_slave_0: entered promiscuous mode [ 562.801974][T16777] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.802095][T16777] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.802313][T16777] bridge_slave_1: entered allmulticast mode [ 562.837506][T16777] bridge_slave_1: entered promiscuous mode [ 563.012068][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.108549][ T1346] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108793][ T1346] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.191882][T16777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.200059][T16777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.354789][T16777] team0: Port device team_slave_0 added [ 563.360283][T16777] team0: Port device team_slave_1 added [ 563.544650][T17018] syz.3.4562 (17018) used greatest stack depth: 15904 bytes left [ 563.651560][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.712671][T16777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.712688][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.712712][T16777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.715315][T15210] bridge_slave_1: left allmulticast mode [ 563.715412][T15210] bridge_slave_1: left promiscuous mode [ 563.786404][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.959517][T15210] bridge_slave_0: left allmulticast mode [ 563.959544][T15210] bridge_slave_0: left promiscuous mode [ 563.959784][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.978785][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4575'. [ 564.053653][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.092063][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.132455][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.192194][T15210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.342239][T15210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.385531][T15210] bond0 (unregistering): Released all slaves [ 566.427388][T16777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.427405][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.427428][T16777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.702388][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.866748][T15210] tipc: Disabling bearer [ 566.867241][T15210] tipc: Left network mode [ 567.182760][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.734464][T16777] hsr_slave_0: entered promiscuous mode [ 567.735694][T16777] hsr_slave_1: entered promiscuous mode [ 567.738873][T16777] debugfs: 'hsr0' already exists in 'hsr' [ 567.738897][T16777] Cannot create hsr debugfs directory [ 567.780737][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 567.880828][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 567.917879][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 567.921603][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 567.924405][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 568.214535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.273013][T17166] loop3: detected capacity change from 0 to 32768 [ 568.273208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.861721][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.253675][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.542483][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.550414][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.586879][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.660996][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.748984][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.291713][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.331286][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.343505][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.146198][ T60] Bluetooth: hci5: command tx timeout [ 572.149356][ T5499] 8021q: adding VLAN 0 to HW filter on device eth1 [ 572.381739][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.041021][T17277] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 573.260562][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'. [ 573.411870][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.212043][ T60] Bluetooth: hci5: command tx timeout [ 574.377990][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.456950][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.749256][T17337] loop3: detected capacity change from 0 to 256 [ 574.750236][T17337] exfat: Deprecated parameter 'utf8' [ 574.750270][T17337] exfat: Deprecated parameter 'utf8' [ 574.750331][T17337] exfat: Deprecated parameter 'utf8' [ 574.775185][T17337] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 574.872746][ T38] audit: type=1800 audit(1776185615.315:62): pid=17337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4706" name="ro,nobh,usrjquota=.." dev="loop3" ino=1048657 res=0 errno=0 [ 575.336634][T17354] loop3: detected capacity change from 0 to 512 [ 575.349817][T17354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 575.477740][T17354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.477842][T17354] ext4 filesystem being mounted at /632/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.491671][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.785780][ T38] audit: type=1800 audit(1776185616.225:63): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4711" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 576.294625][ T60] Bluetooth: hci5: command tx timeout [ 576.307874][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.535814][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.757130][T15210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.853463][T15210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.008775][T15210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.008805][T15210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.042749][T15210] batman_adv: batadv0: Interface deactivated: dummy0 [ 577.042782][T15210] batman_adv: batadv0: Removing interface: dummy0 [ 577.406784][T15210] hsr0: left allmulticast mode [ 577.407226][T15210] veth1_macvtap: left promiscuous mode [ 577.407542][T15210] veth0_macvtap: left promiscuous mode [ 577.420287][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.422898][T15210] veth1_vlan: left promiscuous mode [ 577.431891][T15210] veth0_vlan: left promiscuous mode [ 577.461791][ T5822] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 577.571812][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.615182][ T5822] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 577.615212][ T5822] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 577.615232][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 577.615287][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 577.615313][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 577.617373][ T5822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 577.617402][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 577.617422][ T5822] usb 1-1: Product: syz [ 577.617437][ T5822] usb 1-1: Manufacturer: syz [ 577.641005][ T5822] cdc_wdm 1-1:1.0: skipping garbage [ 577.641024][ T5822] cdc_wdm 1-1:1.0: skipping garbage [ 577.648714][ T5822] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 577.648736][ T5822] cdc_wdm 1-1:1.0: Unknown control protocol [ 578.399255][ T60] Bluetooth: hci5: command tx timeout [ 578.454449][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.455122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.500077][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.614322][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.688419][ T37] usb 1-1: USB disconnect, device number 25 [ 579.432169][T15210] team0 (unregistering): Port device team_slave_1 removed [ 579.545150][T15210] team0 (unregistering): Port device team_slave_0 removed [ 579.656825][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.860160][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.535284][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.587127][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4807'. [ 581.587158][T17567] block nbd0: Unsupported socket: should be TCP or UNIX. [ 581.891837][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.989890][T16777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 582.167229][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.173365][ T5499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 582.285975][T16777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 582.354249][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 582.476136][T16777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 582.552854][T17596] loop3: detected capacity change from 0 to 4096 [ 582.644376][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 582.717009][T16777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 582.904272][T17596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.927085][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 582.927992][T17177] chnl_net:caif_netlink_parms(): no params data found [ 582.932828][T17596] EXT4-fs (loop3): shut down requested (0) [ 582.936360][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.776479][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.885507][T17177] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.885608][T17177] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.885831][T17177] bridge_slave_0: entered allmulticast mode [ 583.888158][T17177] bridge_slave_0: entered promiscuous mode [ 583.954517][T17177] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.954668][T17177] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.954880][T17177] bridge_slave_1: entered allmulticast mode [ 583.969002][T17177] bridge_slave_1: entered promiscuous mode [ 583.973975][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.565814][T17177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.603086][T17177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.707931][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.970263][T17177] team0: Port device team_slave_0 added [ 584.998957][T17177] team0: Port device team_slave_1 added [ 585.011669][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.704969][T17177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.704986][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.705012][T17177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.709454][T17177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.709469][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.709491][T17177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.751410][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 585.918393][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.918427][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.918465][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 585.918497][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.930888][ T10] usb 1-1: config 0 descriptor?? [ 586.043022][ T5499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 586.056406][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.116740][T17672] loop3: detected capacity change from 0 to 40427 [ 586.117681][T17672] F2FS-fs: heap/no_heap options were deprecated [ 586.123711][T17672] F2FS-fs (loop3): build fault injection rate: 19 [ 586.123792][T17672] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 586.174898][T17672] F2FS-fs (loop3): invalid crc value [ 586.253978][T17672] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 586.395748][ T10] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 586.395867][ T10] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 586.421964][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0015/input/input35 [ 586.458836][T16777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.560069][T17672] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 586.643629][T17177] hsr_slave_0: entered promiscuous mode [ 586.645033][T17177] hsr_slave_1: entered promiscuous mode [ 586.645919][T17177] debugfs: 'hsr0' already exists in 'hsr' [ 586.645941][T17177] Cannot create hsr debugfs directory [ 586.907714][T17672] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 587.126327][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.238503][T15210] IPVS: stop unused estimator thread 0... [ 587.540954][T17672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 587.595698][T17717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4859'. [ 587.595721][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4859'. [ 587.612263][ T10] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 587.743202][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.776624][T16777] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.926782][ T10] usb 1-1: USB disconnect, device number 26 [ 587.947527][T17672] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 587.986626][T17720] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80 [ 588.106962][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.143666][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.162001][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.211624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.552611][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.552749][T15210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.613466][ T5839] syz-executor: attempt to access beyond end of device [ 588.613466][ T5839] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 588.613500][ T5839] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x6a0 [ 588.741740][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.744025][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 588.744057][ T5839] Tainted: [L]=SOFTLOCKUP [ 588.744064][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 588.744075][ T5839] Call Trace: [ 588.744083][ T5839] [ 588.744092][ T5839] dump_stack_lvl+0xe8/0x150 [ 588.744121][ T5839] f2fs_stop_checkpoint+0x383/0x540 [ 588.744156][ T5839] f2fs_write_end_io+0x1274/0x1740 [ 588.744198][ T5839] __submit_merged_bio+0x256/0x6a0 [ 588.744233][ T5839] __submit_merged_write_cond+0x3c9/0x4e0 [ 588.744268][ T5839] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 588.744318][ T5839] f2fs_write_data_pages+0x287e/0x34f0 [ 588.744375][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.744443][ T5839] ? do_raw_spin_lock+0x12b/0x2f0 [ 588.744478][ T5839] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 588.744508][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 588.744534][ T5839] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 588.744561][ T5839] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 588.744582][ T5839] ? reacquire_held_locks+0x104/0x190 [ 588.744608][ T5839] ? rt_spin_lock+0x1e0/0x400 [ 588.744635][ T5839] ? rt_spin_unlock+0x14f/0x200 [ 588.744660][ T5839] ? rt_spin_unlock+0x160/0x200 [ 588.744680][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.744701][ T5839] do_writepages+0x32e/0x550 [ 588.744726][ T5839] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 588.744750][ T5839] ? rt_spin_unlock+0x14f/0x200 [ 588.744783][ T5839] filemap_fdatawrite+0x1ec/0x2f0 [ 588.744813][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 588.744836][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 588.744900][ T5839] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 588.744930][ T5839] ? rt_spin_unlock+0x160/0x200 [ 588.744955][ T5839] f2fs_sync_dirty_inodes+0x30e/0x830 [ 588.744988][ T5839] f2fs_write_checkpoint+0x9df/0x26a0 [ 588.745008][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 588.745058][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 588.745129][ T5839] kill_f2fs_super+0x314/0x730 [ 588.745156][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 588.745189][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 588.745228][ T5839] deactivate_locked_super+0xbc/0x130 [ 588.745254][ T5839] cleanup_mnt+0x437/0x4d0 [ 588.745280][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.745309][ T5839] task_work_run+0x1d9/0x270 [ 588.745339][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 588.745373][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.745394][ T5839] exit_to_user_mode_loop+0xed/0x480 [ 588.745416][ T5839] ? rcu_is_watching+0x15/0xb0 [ 588.745443][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.745462][ T5839] do_syscall_64+0x33e/0xf80 [ 588.745487][ T5839] ? trace_irq_disable+0x3b/0x140 [ 588.745508][ T5839] ? clear_bhb_loop+0x40/0x90 [ 588.745530][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.745547][ T5839] RIP: 0033:0x7f008210da57 [ 588.745565][ T5839] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 588.745580][ T5839] RSP: 002b:00007ffcd3199528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 588.745600][ T5839] RAX: 0000000000000000 RBX: 00007f00821a2048 RCX: 00007f008210da57 [ 588.745613][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd31995e0 [ 588.745624][ T5839] RBP: 00007ffcd31995e0 R08: 00007ffcd319a5e0 R09: 00000000ffffffff [ 588.745637][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd319a670 [ 588.745648][ T5839] R13: 00007f00821a2048 R14: 000000000008f8b2 R15: 00007ffcd319a6b0 [ 588.745678][ T5839] [ 588.745686][ T5839] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 588.940875][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 589.113280][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 589.113311][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.177867][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.571721][ T10] usb 1-1: config 0 descriptor?? [ 589.580037][ T10] cp210x 1-1:0.0: cp210x converter detected [ 590.044548][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 590.056337][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 590.216274][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.349979][ T5499] 8021q: adding VLAN 0 to HW filter on device eth4 [ 590.387253][ T820] usb 1-1: USB disconnect, device number 27 [ 590.539315][ T820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 590.666278][ T820] cp210x 1-1:0.0: device disconnected [ 590.782291][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.350718][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.414061][ T5910] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 591.566259][ T5910] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 591.566286][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.597325][ T5910] usb 1-1: config 0 descriptor?? [ 591.618435][ T5910] cp210x 1-1:0.0: cp210x converter detected [ 592.016950][ T5910] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 592.075903][ T5910] usb 1-1: cp210x converter now attached to ttyUSB0 [ 592.260929][ T37] usb 1-1: USB disconnect, device number 28 [ 592.291853][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.311060][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 592.435599][T16777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.442312][ T37] cp210x 1-1:0.0: device disconnected [ 592.552685][T17177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 592.584190][T17831] loop3: detected capacity change from 0 to 256 [ 592.587327][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.588176][T17177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.643951][T17831] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 592.674747][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.675646][T17177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.717299][ T38] audit: type=1800 audit(1776185633.155:64): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4902" name="ro,nobh,usrjquota=.." dev="loop3" ino=1048658 res=0 errno=0 [ 592.753624][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.756092][T17177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.869898][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.332894][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.522561][T17864] input: syz1 as /devices/virtual/input/input36 [ 593.873508][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.889930][T16777] veth0_vlan: entered promiscuous mode [ 593.892723][T17871] loop3: detected capacity change from 0 to 128 [ 594.032958][T17871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 594.033063][T17871] System zones: 1-3, 19-19, 35-36 [ 594.089211][T16777] veth1_vlan: entered promiscuous mode [ 594.227723][T17871] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 594.230751][T17871] ext4 filesystem being mounted at /647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.281561][T17871] EXT4-fs warning (device loop3): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 594.299511][T17177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.372967][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.571750][T17177] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.574516][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.686022][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.686097][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.736332][T16777] veth0_macvtap: entered promiscuous mode [ 594.832660][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.832764][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.924475][T16777] veth1_macvtap: entered promiscuous mode [ 595.181832][T16777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.282602][T16777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.293511][T17898] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4926'. [ 595.376157][ T164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.411785][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.570143][ T164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.573392][ T164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.656363][T17907] netlink: 'syz.3.4929': attribute type 4 has an invalid length. [ 595.665802][ T164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.456292][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.053824][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.111719][T17177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.545455][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.914157][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 598.091360][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 598.093825][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.093856][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.093876][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 598.093941][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 598.093961][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.173238][ T10] usb 4-1: config 0 descriptor?? [ 598.292753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.612844][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.831115][ T10] usb 4-1: USB disconnect, device number 20 [ 598.861379][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.861399][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.381423][T15204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.381443][T15204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.598084][T17177] veth0_vlan: entered promiscuous mode [ 599.661538][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.737360][T17177] veth1_vlan: entered promiscuous mode [ 600.057300][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.166919][T17177] veth0_macvtap: entered promiscuous mode [ 600.402088][T17177] veth1_macvtap: entered promiscuous mode [ 600.561390][T17177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.688075][T17177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.710248][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.782282][T15210] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.785225][T15210] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.806584][T15210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.828267][T15210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.835796][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.713701][T18054] loop3: detected capacity change from 0 to 2048 [ 603.746313][T18054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.938083][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.765194][T18056] 9pnet: p9_errstr2errno: server reported unknown error [ 604.930687][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.021109][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.779823][T18072] team_slave_0: left allmulticast mode [ 605.967741][T18072] team0 (unregistering): Port device team_slave_0 removed [ 605.968361][T18072] team_slave_1: left allmulticast mode [ 606.056237][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.086278][T18072] team0 (unregistering): Port device team_slave_1 removed [ 606.235349][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.235367][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.813741][T15213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.813763][T15213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.096616][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.895059][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.984563][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.133225][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.571753][T18181] loop3: detected capacity change from 0 to 512 [ 609.202005][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.577362][T18185] loop5: detected capacity change from 0 to 131072 [ 609.768660][T18185] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 609.995588][T18210] vxcan1: tx address claim with different name [ 610.211561][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.307455][T18185] XFS (loop5): Starting recovery (logdev: internal) [ 610.384517][T18185] XFS (loop5): Ending recovery (logdev: internal) [ 611.014506][T18185] XFS (loop5): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 611.330072][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.606915][T18226] loop6: detected capacity change from 0 to 131072 [ 611.611826][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.632192][T16777] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 611.659157][T18226] F2FS-fs (loop6): invalid crc value [ 611.758471][T18226] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 611.808733][T18226] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 612.241830][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5052'. [ 612.374740][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.180349][T18284] vcan0: tx drop: invalid da for name 0x0000000020000001 [ 613.422032][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.298587][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.466687][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.695115][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.741951][T18315] bond1: option xmit_hash_policy: invalid value (46) [ 614.833994][T18315] bond1 (unregistering): Released all slaves [ 615.492108][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.989701][T18337] loop5: detected capacity change from 0 to 65536 [ 616.173261][T18337] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 616.258215][T18337] XFS (loop5): Ending clean mount [ 616.272911][T18337] XFS (loop5): Quotacheck needed: Please wait. [ 617.239607][ T5910] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 617.239877][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 617.263199][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.431692][ T5910] usb 1-1: device descriptor read/64, error -32 [ 617.731662][ T5910] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 617.781462][T18343] loop3: detected capacity change from 0 to 262144 [ 617.791452][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.809557][T18343] F2FS-fs (loop3): invalid crc value [ 618.116182][T18343] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 618.141505][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 618.142534][ T5910] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 618.142570][ T5910] usb 1-1: can't read configurations, error -71 [ 618.150128][ T5910] usb usb1-port1: attempt power cycle [ 618.237212][T18337] XFS (loop5): Quotacheck: Done. [ 618.293008][T18343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 618.324070][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.758997][T16777] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 619.339853][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.341414][ T1230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.842407][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.855645][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.851819][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.944027][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.133087][T18426] loop6: detected capacity change from 0 to 256 [ 621.134129][T18426] exfat: Deprecated parameter 'utf8' [ 621.134174][T18426] exfat: Deprecated parameter 'namecase' [ 621.134259][T18426] exfat: Deprecated parameter 'namecase' [ 621.134280][T18426] exfat: Deprecated parameter 'utf8' [ 621.315750][T18426] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 621.316091][T18426] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 621.840332][T18437] loop5: detected capacity change from 0 to 1024 [ 621.971801][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.236609][T18437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 622.236749][T18437] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.329260][T18437] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.5122: lblock 0 mapped to illegal pblock 0 (length 6) [ 622.348044][T18445] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5122: bg 0: block 112: padding at end of block bitmap is not set [ 622.397345][T18437] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 622.397380][T18437] EXT4-fs (loop5): This should not happen!! Data will be lost [ 622.397380][T18437] [ 622.924454][T15203] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 622.946721][T15203] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 622.946751][T15203] EXT4-fs (loop5): This should not happen!! Data will be lost [ 622.946751][T15203] [ 623.027227][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.058871][T18457] overlayfs: failed to resolve './file1': -2 [ 623.166596][T18462] netlink: 'syz.6.5132': attribute type 29 has an invalid length. [ 623.168056][T18462] netlink: 'syz.6.5132': attribute type 29 has an invalid length. [ 623.168926][T18462] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5132'. [ 623.262572][T15210] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 16 with error 28 [ 623.262622][T15210] EXT4-fs (loop5): This should not happen!! Data will be lost [ 623.262622][T15210] [ 623.262636][T15210] EXT4-fs (loop5): Total free blocks count 0 [ 623.262647][T15210] EXT4-fs (loop5): Free/Dirty block details [ 623.262668][T15210] EXT4-fs (loop5): free_blocks=0 [ 623.330269][T16777] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 623.495228][T18467] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5134'. [ 623.904634][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.905024][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.141034][T18484] netlink: 'syz.5.5128': attribute type 4 has an invalid length. [ 624.232880][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.252456][T18467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.476890][T18467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.514651][T18467] bond0 (unregistering): Released all slaves [ 624.542522][ T1346] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.542605][ T1346] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.092734][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.678739][T18501] loop5: detected capacity change from 0 to 32768 [ 625.980766][T18522] loop6: detected capacity change from 0 to 256 [ 626.008452][T18501] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 626.136108][T18522] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 626.213012][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.345867][T18501] XFS (loop5): Starting recovery (logdev: internal) [ 626.350884][T18538] overlayfs: failed to clone lowerpath [ 626.544613][T18501] XFS (loop5): Ending recovery (logdev: internal) [ 626.771768][T18551] XFS (loop5): User initiated shutdown received. [ 626.945939][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.084524][T15210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.122124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.125667][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.177661][T18551] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 627.177712][T18551] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 627.223450][T18560] loop6: detected capacity change from 0 to 512 [ 627.232859][T18560] EXT4-fs: Ignoring removed bh option [ 627.322986][T18560] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 627.349579][T18560] EXT4-fs (loop6): 1 truncate cleaned up [ 627.361949][T18560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.411707][T18560] EXT4-fs (loop6): shut down requested (2) [ 627.428310][T18566] loop3: detected capacity change from 0 to 512 [ 627.448226][T18566] EXT4-fs (loop3): Test dummy encryption mode enabled [ 627.448248][T18566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 627.498295][T18566] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.5172: bad orphan inode 131083 [ 627.498324][T18566] loop3: lost filesystem error report for type 5 error -117 [ 627.511232][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 627.511253][ C0] EXT4-fs (loop3): initial error at time 1776185667: ext4_orphan_get:1423 [ 627.511272][ C0] EXT4-fs (loop3): last error at time 1776185667: ext4_orphan_get:1423 [ 627.553992][T18566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.678520][T17177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.832198][T16777] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 628.059809][T18566] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 628.295555][ T5822] net_ratelimit: 1 callbacks suppressed [ 628.295575][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.418964][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.334821][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.134378][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.184421][T18603] loop6: detected capacity change from 0 to 32768 [ 630.235920][T18603] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 630.371765][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.443600][T18603] XFS (loop6): Starting recovery (logdev: internal) [ 630.451457][T18046] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 630.622316][T18046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 630.622365][T18046] usb 6-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 630.622388][T18046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.669547][T18046] usb 6-1: config 0 descriptor?? [ 630.670429][T18634] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.715950][T18603] XFS (loop6): Ending recovery (logdev: internal) [ 630.901583][T18634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.903130][T18634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.903402][T18654] XFS (loop6): User initiated shutdown received. [ 630.903539][T18654] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462). Shutting down filesystem. [ 630.903579][T18654] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 631.216491][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216527][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216549][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216570][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216592][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216614][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216635][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216658][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216681][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.216702][T18046] wacom 0003:056A:5000.0017: unknown main item tag 0x0 [ 631.218598][T18046] wacom 0003:056A:5000.0017: item 0 0 0 8 parsing failed [ 631.219958][T18046] wacom 0003:056A:5000.0017: parse failed [ 631.220050][T18046] wacom 0003:056A:5000.0017: probe with driver wacom failed with error -22 [ 631.222382][T17177] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 631.421529][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.470562][T15463] usb 6-1: USB disconnect, device number 2 [ 632.114378][T18046] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 632.317551][T18046] usb 4-1: Using ep0 maxpacket: 16 [ 632.333791][T18677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5216'. [ 632.341623][T18046] usb 4-1: config index 0 descriptor too short (expected 37266, got 202) [ 632.341650][T18046] usb 4-1: config 202 has too many interfaces: 130, using maximum allowed: 32 [ 632.341670][T18046] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 632.341687][T18046] usb 4-1: config 202 has 0 interfaces, different from the descriptor's value: 130 [ 632.444366][T18046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.444397][T18046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.444415][T18046] usb 4-1: Product: syz [ 632.444429][T18046] usb 4-1: Manufacturer: syz [ 632.444442][T18046] usb 4-1: SerialNumber: syz [ 632.453091][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.719438][T18665] tipc: Started in network mode [ 632.719455][T18665] tipc: Node identity , cluster identity 4711 [ 632.719467][T18665] tipc: Failed to set node id, please configure manually [ 632.719503][T18665] tipc: Enabling of bearer rejected, failed to enable media [ 632.721961][ T5910] usb 4-1: USB disconnect, device number 21 [ 633.171707][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.491538][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.491908][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.492824][T15210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.493564][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.494152][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.550561][T18701] tipc: Started in network mode [ 633.550586][T18701] tipc: Node identity bbbbbb01, cluster identity 4711 [ 633.593186][T18703] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 633.621078][T18701] tipc: Enabled bearer , priority 10 [ 634.085499][T18720] netlink: 340 bytes leftover after parsing attributes in process `syz.6.5235'. [ 634.265279][T18722] loop5: detected capacity change from 0 to 256 [ 634.424441][T18722] FAT-fs (loop5): Directory bread(block 64) failed [ 634.424477][T18722] FAT-fs (loop5): Directory bread(block 65) failed [ 634.424579][T18722] FAT-fs (loop5): Directory bread(block 66) failed [ 634.424611][T18722] FAT-fs (loop5): Directory bread(block 67) failed [ 634.424706][T18722] FAT-fs (loop5): Directory bread(block 68) failed [ 634.424728][T18722] FAT-fs (loop5): Directory bread(block 69) failed [ 634.424821][T18722] FAT-fs (loop5): Directory bread(block 70) failed [ 634.424842][T18722] FAT-fs (loop5): Directory bread(block 71) failed [ 634.424949][T18722] FAT-fs (loop5): Directory bread(block 72) failed [ 634.424970][T18722] FAT-fs (loop5): Directory bread(block 73) failed [ 634.538595][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.731376][ T820] tipc: Node number set to 3149642497 [ 635.083830][T18746] input: syz0 as /devices/virtual/input/input37 [ 635.571575][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.816591][T18766] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 635.977194][T18778] loop6: detected capacity change from 0 to 64 [ 636.221638][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.614192][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.090955][T18801] loop3: detected capacity change from 0 to 32768 [ 637.098182][T18801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5272 (18801) [ 637.121630][T18801] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 637.121667][T18801] BTRFS info (device loop3): using sha256 checksum algorithm [ 637.490070][T18801] BTRFS info (device loop3): setting nodatasum [ 637.490097][T18801] BTRFS info (device loop3): enabling ssd optimizations [ 637.490115][T18801] BTRFS info (device loop3): turning on async discard [ 637.490130][T18801] BTRFS info (device loop3): enabling free space tree [ 637.555945][ T38] audit: type=1800 audit(1776185677.995:65): pid=18801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5272" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 638.036857][T18820] syzkaller1: entered promiscuous mode [ 638.036885][T18820] syzkaller1: entered allmulticast mode [ 638.662356][T15463] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 638.704883][ T5822] net_ratelimit: 1 callbacks suppressed [ 638.704902][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.839641][T15463] usb 1-1: Using ep0 maxpacket: 32 [ 638.844777][T15463] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 638.844803][T15463] usb 1-1: config 0 has no interface number 0 [ 638.844844][T15463] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.844864][T15463] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 638.844889][T15463] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 1024 [ 638.844965][T15463] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 638.844989][T15463] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.871830][T15463] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 638.871860][T15463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.871893][T15463] usb 1-1: Product: syz [ 638.871907][T15463] usb 1-1: Manufacturer: syz [ 638.871920][T15463] usb 1-1: SerialNumber: syz [ 638.910341][T15463] usb 1-1: config 0 descriptor?? [ 638.911509][T18839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 639.271596][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.302517][T15463] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input38 [ 639.314763][ T5189] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 639.743610][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.834779][ C0] bcm5974 1-1:0.119: trackpad urb failed: -1 [ 639.857846][T15463] usb 1-1: USB disconnect, device number 32 [ 640.703741][T18877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5298'. [ 640.703769][T18877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5298'. [ 640.776787][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.124918][T18892] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.5305'. [ 641.341683][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 641.801799][T18897] loop5: detected capacity change from 0 to 32768 [ 641.827174][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.272205][T18894] loop6: detected capacity change from 0 to 131072 [ 642.275652][T18894] F2FS-fs (loop6): invalid crc value [ 642.348590][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.461982][T18897] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 642.680978][T18894] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 642.710869][T18897] XFS (loop5): Ending clean mount [ 642.756053][T18894] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 642.756533][T18897] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 642.756577][T18897] XFS (loop5): Unmount and run xfs_repair [ 642.756590][T18897] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 642.756607][T18897] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 642.756621][T18897] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 642.756636][T18897] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 642.756650][T18897] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 642.756664][T18897] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 ................ [ 642.756678][T18897] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 642.756692][T18897] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 642.756707][T18897] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 642.757090][T18897] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74 [ 642.851720][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.867344][T18894] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 643.099707][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.235552][T18897] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 643.235615][T18897] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 643.602750][T16777] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 643.893297][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.449655][ T820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 644.781296][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 644.856795][ T820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 644.869865][ T820] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 644.869902][ T820] usb 4-1: can't read configurations, error -71 [ 644.941106][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.422005][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.561323][ T5910] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 645.785013][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 645.792457][ T5910] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 645.792487][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.792506][ T5910] usb 1-1: Product: syz [ 645.792521][ T5910] usb 1-1: Manufacturer: syz [ 645.792534][ T5910] usb 1-1: SerialNumber: syz [ 645.816851][ T5910] usb 1-1: config 0 descriptor?? [ 645.974470][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.378071][ T5910] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 646.479824][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 646.492826][ T5910] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 646.492887][ T5910] usb 1-1: media controller created [ 646.703103][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.019243][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.237171][ T5910] zl10353_read_register: readreg error (reg=127, ret==0) [ 647.237229][ T5910] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 647.237335][ T5910] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 647.368878][ T5910] usb 1-1: USB disconnect, device number 33 [ 647.701026][ T5910] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 648.052692][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.108882][T19010] loop6: detected capacity change from 0 to 4096 [ 648.462462][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.896582][T19007] loop5: detected capacity change from 0 to 32768 [ 649.094416][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.097852][T19043] netlink: 'syz.3.5369': attribute type 2 has an invalid length. [ 649.097884][T19043] netlink: 'syz.3.5369': attribute type 2 has an invalid length. [ 649.513907][T19054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5373'. [ 649.667623][T19059] netlink: 'syz.6.5375': attribute type 1 has an invalid length. [ 649.667644][T19059] netlink: 'syz.6.5375': attribute type 6 has an invalid length. [ 649.668286][T19054] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.669048][T19060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5373'. [ 649.709789][T19059] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5375'. [ 649.722060][T19054] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.951379][ T820] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 650.144490][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.179474][ T820] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 650.179501][ T820] usb 1-1: config 1 has no interface number 0 [ 650.179545][ T820] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 650.179572][ T820] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 650.179597][ T820] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.211218][ T820] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 650.211245][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.211264][ T820] usb 1-1: Product: syz [ 650.211278][ T820] usb 1-1: Manufacturer: syz [ 650.211292][ T820] usb 1-1: SerialNumber: syz [ 650.281311][T19058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 650.489464][T19058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 650.740356][T19082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 650.895467][ T820] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 651.278079][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.396861][T19089] loop3: detected capacity change from 0 to 32768 [ 651.448450][T19089] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 651.448471][T19089] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 651.608788][T15463] usb 1-1: USB disconnect, device number 34 [ 651.648912][T19089] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 651.664703][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 651.664742][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 651.708555][T15463] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 651.725897][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.909741][T19100] loop6: detected capacity change from 0 to 1024 [ 651.942327][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 277ms [ 651.942525][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 651.942627][T19089] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 652.291746][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.293356][T19089] gfs2: fsid=syz:syz.0: found 1 quota changes [ 652.294646][T19100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.700052][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.919175][T19100] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 653.353095][ T10] sierra_net 1-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 653.366043][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.477549][T19103] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 653.477573][T19103] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 653.477590][T19103] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:19103 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 653.477611][T19103] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 653.477631][T19103] CPU: 0 UID: 0 PID: 19103 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.477646][T19103] Tainted: [L]=SOFTLOCKUP [ 653.477650][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 653.477656][T19103] Call Trace: [ 653.477661][T19103] [ 653.477666][T19103] dump_stack_lvl+0xe8/0x150 [ 653.477680][T19103] gfs2_withdraw+0xc3/0x1b0 [ 653.477694][T19103] inode_go_instantiate+0xe69/0x12a0 [ 653.477715][T19103] ? __pfx_inode_go_instantiate+0x10/0x10 [ 653.477726][T19103] ? rt_spin_unlock+0x160/0x200 [ 653.477745][T19103] gfs2_instantiate+0x168/0x220 [ 653.477761][T19103] gfs2_glock_wait+0x1d7/0x2a0 [ 653.477777][T19103] do_sync+0x49a/0xcb0 [ 653.477788][T19103] ? gfs2_quota_sync+0x370/0x470 [ 653.477803][T19103] ? __pfx_do_sync+0x10/0x10 [ 653.477812][T19103] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 653.477829][T19103] ? gfs2_quota_sync+0x370/0x470 [ 653.477839][T19103] ? __rcu_read_unlock+0x83/0xe0 [ 653.477853][T19103] ? rt_spin_unlock+0x160/0x200 [ 653.477866][T19103] gfs2_quota_sync+0x370/0x470 [ 653.477882][T19103] gfs2_quotad+0x2b9/0x6e0 [ 653.477899][T19103] ? __pfx_gfs2_quotad+0x10/0x10 [ 653.477911][T19103] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.477927][T19103] ? __kthread_parkme+0x7a/0x1f0 [ 653.477944][T19103] kthread+0x388/0x470 [ 653.477964][T19103] ? __pfx_gfs2_quotad+0x10/0x10 [ 653.477974][T19103] ? __pfx_kthread+0x10/0x10 [ 653.477987][T19103] ret_from_fork+0x514/0xb70 [ 653.478001][T19103] ? __pfx_ret_from_fork+0x10/0x10 [ 653.478012][T19103] ? __switch_to+0xc79/0x1410 [ 653.478030][T19103] ? __pfx_kthread+0x10/0x10 [ 653.478044][T19103] ret_from_fork_asm+0x1a/0x30 [ 653.478073][T19103] [ 653.478080][T19103] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 653.563198][ T5839] gfs2: fsid=syz:syz.0: Error -5 writing to journal, jid=0 [ 653.680882][T17177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.829388][ T10] sierra_net 1-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 654.083905][T15463] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 654.372039][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.691779][ T5822] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 654.732952][ T37] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 654.781615][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.853715][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.853747][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.853781][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 654.853803][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.904523][ T5822] usb 6-1: config 0 descriptor?? [ 654.905569][ T37] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 654.905597][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.905616][ T37] usb 1-1: Product: syz [ 654.905629][ T37] usb 1-1: Manufacturer: syz [ 654.905642][ T37] usb 1-1: SerialNumber: syz [ 654.949720][ T5822] hub 6-1:0.0: USB hub found [ 654.961946][ T37] usb 1-1: config 0 descriptor?? [ 654.979202][ T37] hub 1-1:0.0: bad descriptor, ignoring hub [ 654.979253][ T37] hub 1-1:0.0: probe with driver hub failed with error -5 [ 655.029077][ T37] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 655.110567][ T5822] hub 6-1:0.0: 1 port detected [ 655.331739][T15463] usb 1-1: USB disconnect, device number 35 [ 655.333236][T15463] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 655.424292][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.578031][ T5822] usb 6-1: USB disconnect, device number 3 [ 656.452831][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.560269][T19219] loop6: detected capacity change from 0 to 16 [ 656.661633][T19219] erofs (device loop6): mounted with root inode @ nid 36. [ 656.734492][T19219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 657.205153][T19236] loop5: detected capacity change from 0 to 128 [ 657.295173][T19236] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 657.295224][T19236] hpfs: filesystem error: improperly stopped [ 657.295238][T19236] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 657.295252][T19236] hpfs: You really don't want any checks? You are crazy... [ 657.295678][T19236] hpfs: hpfs_map_sector(): read error [ 657.295689][T19236] hpfs: code page support is disabled [ 657.295798][T19236] hpfs: hpfs_map_4sectors(): unaligned read [ 657.425928][T19236] hpfs: hpfs_map_4sectors(): unaligned read [ 657.425946][T19236] hpfs: filesystem error: unable to find root dir [ 657.495152][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.811960][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.104593][ T5822] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 658.291850][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 658.307015][ T5822] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.307050][ T5822] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.307074][ T5822] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 658.307101][ T5822] usb 7-1: config 0 interface 0 has no altsetting 0 [ 658.307135][ T5822] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 658.307159][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.467352][ T5822] usb 7-1: config 0 descriptor?? [ 658.531954][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.915339][ T5822] hid (null): unknown global tag 0xd [ 658.915375][ T5822] hid (null): nested delimiters [ 658.915388][ T5822] hid (null): unknown global tag 0xc [ 658.916859][ T5822] hid (null): unknown global tag 0xd [ 658.916877][ T5822] hid (null): unknown global tag 0xe [ 658.916892][ T5822] hid (null): unknown global tag 0xc [ 659.120878][ T5822] usb 7-1: USB disconnect, device number 2 [ 659.345850][ T820] gfs2: fsid=syz:syz.0: file system withdrawn [ 660.410369][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.446649][T19294] loop5: detected capacity change from 0 to 131072 [ 660.467010][T19294] F2FS-fs (loop5): Test dummy encryption mode enabled [ 660.468794][T19294] F2FS-fs (loop5): invalid crc value [ 660.607343][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5401'. [ 660.607380][T19304] netlink: 'syz.3.5401': attribute type 30 has an invalid length. [ 660.723041][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5401'. [ 660.723074][T19311] netlink: 'syz.3.5401': attribute type 30 has an invalid length. [ 660.810146][T19294] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 660.828992][T19294] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 660.876052][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.290104][T15204] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.296204][T15204] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.417498][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.442846][T15204] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.442895][T15204] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.859558][T19309] loop6: detected capacity change from 0 to 32768 [ 662.292979][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.452591][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.931788][ T820] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 663.110237][T19365] loop6: detected capacity change from 0 to 1764 [ 663.229452][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.229484][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.229505][ T820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.229545][ T820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.229565][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.253698][ T820] usb 1-1: config 0 descriptor?? [ 663.492006][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.782958][ T820] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 663.899004][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.955548][T19379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.537113][ T5910] usb 1-1: USB disconnect, device number 36 [ 664.542867][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.103264][T19374] loop3: detected capacity change from 0 to 32768 [ 665.188356][T19374] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 665.269442][T19374] XFS (loop3): Ending clean mount [ 665.573697][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.146457][ T5839] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 666.635587][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.074442][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.710368][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.991410][ T820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 668.151312][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 668.153737][ T820] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.153762][ T820] usb 6-1: config 0 has no interface number 0 [ 668.156030][ T820] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 668.156055][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.156074][ T820] usb 6-1: Product: syz [ 668.156087][ T820] usb 6-1: Manufacturer: syz [ 668.156100][ T820] usb 6-1: SerialNumber: syz [ 668.279291][ T820] usb 6-1: config 0 descriptor?? [ 668.306039][ T820] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 668.306131][ T820] usb 6-1: selecting invalid altsetting 1 [ 668.306147][ T820] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 668.386811][ T820] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 668.387387][ T820] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 668.387437][ T820] usb 6-1: media controller created [ 668.409252][ T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.445754][T19434] loop3: detected capacity change from 0 to 512 [ 668.771567][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.975753][T19464] loop6: detected capacity change from 0 to 64 [ 669.020806][T19450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 669.161641][ T37] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 669.334510][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.334542][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.334578][ T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 669.334600][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.389016][ T37] usb 4-1: config 0 descriptor?? [ 669.503330][T19470] hfs: request for non-existent node 131072 in B*Tree [ 669.503349][T19470] hfs: request for non-existent node 131072 in B*Tree [ 669.610822][ T820] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 669.617210][T19441] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 669.631878][ T820] zl10353_read_register: readreg error (reg=127, ret==-110) [ 669.648916][ T820] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 669.818561][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.881682][ T820] usb 6-1: USB disconnect, device number 4 [ 670.112496][ T37] hid_parser_main: 61 callbacks suppressed [ 670.112521][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112551][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112572][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112594][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112618][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112641][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.112664][ T37] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x0 [ 670.158922][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.162358][ T37] arvo 0003:1E7D:30D4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 670.749715][ T37] usb 4-1: USB disconnect, device number 24 [ 670.851547][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.938912][ T5910] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 671.092359][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 671.105798][ T5910] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 671.105826][ T5910] usb 7-1: config 0 has no interface number 0 [ 671.108151][ T5910] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 671.108182][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.108203][ T5910] usb 7-1: Product: syz [ 671.108226][ T5910] usb 7-1: Manufacturer: syz [ 671.108241][ T5910] usb 7-1: SerialNumber: syz [ 671.329876][ T5910] usb 7-1: config 0 descriptor?? [ 671.391090][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5576'. [ 671.892362][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.927231][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.454871][ T5910] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 672.454911][ T5910] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 672.455527][ T5910] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 672.455820][ T5910] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 672.511077][ T5910] usb 7-1: USB disconnect, device number 3 [ 672.931586][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.089582][T19578] binder: 19575:19578 ioctl c018620b 200000000000 returned -14 [ 673.183957][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.352902][ T5910] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 673.518104][ T5910] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 673.518132][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.518150][ T5910] usb 6-1: Product: syz [ 673.518164][ T5910] usb 6-1: Manufacturer: syz [ 673.518178][ T5910] usb 6-1: SerialNumber: syz [ 673.544550][ T5910] usb 6-1: config 0 descriptor?? [ 673.553053][ T5910] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 673.980034][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.151657][T15463] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 674.301320][T15463] usb 7-1: Using ep0 maxpacket: 32 [ 674.309887][T15463] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 674.309917][T15463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.333575][T15463] usb 7-1: config 0 descriptor?? [ 674.576200][T15463] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 674.615943][ T5910] gspca_sunplus: reg_w_riv err -71 [ 674.616023][ T5910] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 674.645643][ T5910] usb 6-1: USB disconnect, device number 5 [ 674.660929][T15463] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.672028][T15463] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 674.672093][T15463] usb 7-1: media controller created [ 674.706120][T15463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.779765][T15463] az6027: usb out operation failed. (-71) [ 674.780180][T15463] az6027: usb out operation failed. (-71) [ 674.780194][T15463] stb0899_attach: Driver disabled by Kconfig [ 674.780204][T15463] az6027: no front-end attached [ 674.780204][T15463] [ 674.781023][T15463] az6027: usb out operation failed. (-71) [ 674.781038][T15463] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 674.826048][T15463] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 674.856305][T15463] dvb-usb: schedule remote query interval to 400 msecs. [ 674.856328][T15463] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 674.898176][T15463] usb 7-1: USB disconnect, device number 4 [ 675.020588][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.289693][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5631'. [ 675.330108][T15463] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 676.051609][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.286487][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.303227][T19666] loop6: detected capacity change from 0 to 128 [ 676.386539][T19666] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 676.422809][T19666] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 676.482121][T19670] netlink: 'syz.3.5648': attribute type 1 has an invalid length. [ 676.860488][T19655] loop5: detected capacity change from 0 to 32768 [ 676.954329][T19655] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 676.999060][T19655] XFS (loop5): Ending clean mount [ 677.069546][T19655] XFS (loop5): User initiated shutdown received. [ 677.069675][T19655] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 677.069716][T19655] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 677.094158][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.291753][T16777] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 677.884443][T15202] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 677.994861][ T5910] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 678.149233][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.163763][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.163790][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 678.163835][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 678.163876][ T5910] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 678.163898][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.169495][T19712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 678.177873][ T5910] hub 4-1:1.0: bad descriptor, ignoring hub [ 678.177910][ T5910] hub 4-1:1.0: probe with driver hub failed with error -5 [ 678.188994][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 678.189017][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 678.435153][T19736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.460556][ T5910] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 678.460654][ T5910] cdc_wdm 4-1:1.0: Unknown control protocol [ 678.460969][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.463297][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.608692][ T5910] usb 4-1: USB disconnect, device number 25 [ 679.201403][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.333858][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.173862][T19789] netlink: 'syz.3.5697': attribute type 10 has an invalid length. [ 680.231294][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.316513][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5699'. [ 681.138518][T19795] loop5: detected capacity change from 0 to 32768 [ 681.150705][T19795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5698 (19795) [ 681.261761][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.451236][T19795] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 681.451271][T19795] BTRFS info (device loop5): using sha256 checksum algorithm [ 681.550638][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.294456][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.371567][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.478714][T19873] netlink: 35 bytes leftover after parsing attributes in process `syz.6.5727'. [ 682.478736][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5727'. [ 682.543839][T19795] BTRFS info (device loop5): enabling ssd optimizations [ 682.543868][T19795] BTRFS info (device loop5): turning on async discard [ 682.543885][T19795] BTRFS info (device loop5): enabling free space tree [ 682.980529][T16777] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 683.344736][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.148499][T19914] loop3: detected capacity change from 0 to 1024 [ 684.154634][T19914] hfsplus: failed to load extents file [ 684.373879][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.425182][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.448460][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.819564][T19906] syz.6.5737 (19906) used obsolete PPPIOCDETACH ioctl [ 685.975727][ T1346] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.975778][ T1346] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.455294][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.491653][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.517893][T20017] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5792'. [ 688.332063][T20007] loop5: detected capacity change from 0 to 32768 [ 688.618398][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.661375][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.660861][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.691785][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.104227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.105330][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.356481][T20128] vcan0: tx drop: invalid sa for name 0x0000010000000000 [ 691.541484][T20103] loop5: detected capacity change from 0 to 32768 [ 691.562872][T20103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5830 (20103) [ 691.732214][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.733750][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.948046][T20143] netlink: 1160 bytes leftover after parsing attributes in process `syz.0.5847'. [ 692.009571][T20103] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 692.009595][T20103] BTRFS info (device loop5): using crc32c checksum algorithm [ 692.166038][T20151] loop3: detected capacity change from 0 to 512 [ 692.174974][T20151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 692.209906][T20151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 692.210236][T20151] EXT4-fs (loop3): orphan cleanup on readonly fs [ 692.235682][T20151] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 692.252509][T20151] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 692.256906][T20151] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.5852: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 692.256950][T20151] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 692.259360][T20151] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5852: couldn't read orphan inode 13 (err -117) [ 692.259393][T20151] loop3: lost filesystem error report for type 5 error -117 [ 692.261258][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 692.261278][ C1] EXT4-fs (loop3): last error at time 1776185732: ext4_orphan_get:1402 [ 692.330131][T20151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.539745][T20103] BTRFS info (device loop5): enabling ssd optimizations [ 692.539771][T20103] BTRFS info (device loop5): turning on flush-on-commit [ 692.539788][T20103] BTRFS info (device loop5): enabling free space tree [ 692.539804][T20103] BTRFS info (device loop5): enabling auto defrag [ 692.539822][T20103] BTRFS info (device loop5): use lzo compression, level 1 [ 692.539842][T20103] BTRFS info (device loop5): max_inline set to 4096 [ 692.624302][T20151] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.5852: deleted inode referenced: 12 [ 692.676431][T20172] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.5852: deleted inode referenced: 12 [ 692.782546][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.998067][ T38] audit: type=1800 audit(1776185733.435:66): pid=20103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5830" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 693.017132][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.520021][T16777] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.811791][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.812190][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.853379][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.370838][T20242] NILFS (loop13): device size too small [ 695.899407][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.932200][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.598042][T20315] sctp: [Deprecated]: syz.6.5903 (pid 20315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.598042][T20315] Use struct sctp_sack_info instead [ 697.867631][ T38] audit: type=1326 audit(1776185738.295:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.5.5899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999d1fc819 code=0x7fc00000 [ 697.901730][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.971603][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.996702][T20364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.174472][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.354695][T20339] loop5: detected capacity change from 0 to 131072 [ 699.359174][T20339] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 699.359202][T20339] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 699.419979][T20339] F2FS-fs (loop5): invalid crc value [ 699.537312][T20339] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 699.585021][T20339] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 699.585049][T20339] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 700.212031][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.692629][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.750452][T20385] loop6: detected capacity change from 0 to 32768 [ 700.867440][T20385] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 700.876661][T20385] JBD2: Ignoring recovery information on journal [ 700.931746][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.251820][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.318866][T20385] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 702.294590][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.030983][T20464] loop3: detected capacity change from 0 to 512 [ 703.087116][T20464] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5968: iget: bad i_size value: 38620345925642 [ 703.087152][T20464] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 703.087701][T20464] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5968: couldn't read orphan inode 15 (err -117) [ 703.087731][T20464] loop3: lost filesystem error report for type 5 error -117 [ 703.134359][T20464] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.282803][T20464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5968: bg 0: block 5: invalid block bitmap [ 703.331775][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.359313][T20464] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 7 with max blocks 1 with error 28 [ 703.359346][T20464] EXT4-fs (loop3): This should not happen!! Data will be lost [ 703.359346][T20464] [ 703.359360][T20464] EXT4-fs (loop3): Total free blocks count 0 [ 703.359373][T20464] EXT4-fs (loop3): Free/Dirty block details [ 703.359387][T20464] EXT4-fs (loop3): free_blocks=0 [ 703.359442][T20464] EXT4-fs (loop3): dirty_blocks=2 [ 703.359456][T20464] EXT4-fs (loop3): Block reservation details [ 703.359469][T20464] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 703.678203][T15219] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 703.991966][T18057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.994656][T20475] loop5: detected capacity change from 0 to 512 [ 704.004941][ T5839] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 704.173585][T20475] EXT4-fs (loop5): Test dummy encryption mode enabled [ 704.173610][T20475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 704.241704][T20475] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5935: bad orphan inode 131083 [ 704.241736][T20475] loop5: lost filesystem error report for type 5 error -117 [ 704.284729][T20475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.440579][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.599422][T17177] ocfs2: Unmounting device (7,6) on (node local) [ 704.828344][T16777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.287119][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5982'. [ 705.494719][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.919878][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.011839][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.055560][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.096704][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.141863][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.334043][T20519] loop6: detected capacity change from 0 to 512 [ 706.334983][T20519] EXT4-fs: Ignoring removed nobh option [ 706.352084][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5990'. [ 706.352794][T20519] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 706.445255][T20519] EXT4-fs (loop6): 1 truncate cleaned up [ 706.500786][T20519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.531891][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.011431][ T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.115493][T17177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.454023][T20516] loop5: detected capacity change from 0 to 32768 [ 707.474816][T20516] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5991 (20516) [ 707.515588][T20516] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 707.515618][T20516] BTRFS info (device loop5): using blake2b checksum algorithm [ 707.573444][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.068956][T20516] BTRFS info (device loop5): enabling ssd optimizations [ 708.068982][T20516] BTRFS info (device loop5): turning on async discard [ 708.068998][T20516] BTRFS info (device loop5): enabling free space tree [ 708.305210][ T5847] Bluetooth: hci0: command tx timeout [ 708.615085][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.693297][T20586] loop3: detected capacity change from 0 to 4096 [ 709.195060][T15203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.597372][T16777] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 709.653606][T16582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.059191][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.295500][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.299777][T20623] loop3: detected capacity change from 0 to 256 [ 710.375105][ T5847] Bluetooth: hci0: command tx timeout [ 710.554492][T20623] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 710.719668][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.974833][ T39] INFO: task kworker/u8:4:67 blocked in I/O wait for more than 143 seconds. [ 710.974861][ T39] Tainted: G L syzkaller #0 [ 710.974872][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 710.974882][ T39] task:kworker/u8:4 state:D stack:19704 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 710.974930][ T39] Workqueue: writeback wb_workfn (flush-7:2) [ 710.974968][ T39] Call Trace: [ 710.974975][ T39] [ 710.974987][ T39] __schedule+0x169e/0x54f0 [ 710.975018][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 710.975053][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 710.975074][ T39] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 710.975100][ T39] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 710.975132][ T39] ? __blk_flush_plug+0x416/0x4d0 [ 710.975155][ T39] ? __pfx___schedule+0x10/0x10 [ 710.975189][ T39] ? schedule+0x90/0x360 [ 710.975218][ T39] schedule+0x164/0x360 [ 710.975247][ T39] ? txBegin+0x670/0xc00 [ 710.975276][ T39] io_schedule+0x7f/0xd0 [ 710.975304][ T39] txBegin+0x27d/0xc00 [ 710.975341][ T39] ? __pfx_txBegin+0x10/0x10 [ 710.975380][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 710.975408][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 710.975434][ T39] ? __pfx_default_wake_function+0x10/0x10 [ 710.975469][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.975508][ T39] jfs_commit_inode+0x1b3/0x530 [ 710.975531][ T39] ? rt_spin_lock+0x1e0/0x400 [ 710.975555][ T39] ? __pfx_jfs_commit_inode+0x10/0x10 [ 710.975594][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 710.975624][ T39] jfs_write_inode+0x145/0x220 [ 710.975651][ T39] __writeback_single_inode+0x75d/0x10e0 [ 710.975683][ T39] writeback_sb_inodes+0x97f/0x1980 [ 710.975722][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.975757][ T39] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 710.975817][ T39] ? rcu_is_watching+0x15/0xb0 [ 710.975853][ T39] wb_writeback+0x445/0xb00 [ 710.975878][ T39] ? queue_io+0x2a1/0x440 [ 710.975905][ T39] ? __pfx_wb_writeback+0x10/0x10 [ 710.975940][ T39] wb_workfn+0x3fd/0xf20 [ 710.975962][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 710.975983][ T39] ? look_up_lock_class+0x57/0x110 [ 710.976024][ T39] ? __pfx_wb_workfn+0x10/0x10 [ 710.976052][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 710.976069][ T39] ? lock_acquire+0x106/0x350 [ 710.976094][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 710.976117][ T39] ? process_scheduled_works+0xa69/0x1910 [ 710.976138][ T39] ? process_scheduled_works+0xa69/0x1910 [ 710.976162][ T39] ? process_scheduled_works+0xa69/0x1910 [ 710.976178][ T39] ? process_scheduled_works+0xa69/0x1910 [ 710.976198][ T39] process_scheduled_works+0xb68/0x1910 [ 710.980131][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 710.980181][ T39] ? assign_work+0x3d5/0x5e0 [ 710.980206][ T39] worker_thread+0xa90/0x1040 [ 710.980255][ T39] kthread+0x388/0x470 [ 710.980280][ T39] ? __pfx_worker_thread+0x10/0x10 [ 710.980299][ T39] ? __pfx_kthread+0x10/0x10 [ 710.980325][ T39] ret_from_fork+0x514/0xb70 [ 710.980351][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 710.980371][ T39] ? __switch_to+0xc79/0x1410 [ 710.980403][ T39] ? __pfx_kthread+0x10/0x10 [ 710.980428][ T39] ret_from_fork_asm+0x1a/0x30 [ 710.980468][ T39] [ 710.980582][ T39] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 710.980601][ T39] Tainted: G L syzkaller #0 [ 710.980611][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 710.980619][ T39] task:syz-executor state:D stack:22160 pid:5834 tgid:5834 ppid:1 task_flags:0x400140 flags:0x00080002 [ 710.980666][ T39] Call Trace: [ 710.980672][ T39] [ 710.980683][ T39] __schedule+0x169e/0x54f0 [ 710.980728][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.980758][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 710.980787][ T39] ? rt_spin_lock+0x1e0/0x400 [ 710.980810][ T39] ? __pfx___schedule+0x10/0x10 [ 710.980845][ T39] ? schedule+0x90/0x360 [ 710.980872][ T39] schedule+0x164/0x360 [ 710.980905][ T39] wb_wait_for_completion+0x3e8/0x790 [ 710.980944][ T39] ? __pfx_wb_wait_for_completion+0x10/0x10 [ 710.980971][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 710.981008][ T39] __writeback_inodes_sb_nr+0x24c/0x2d0 [ 710.981037][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.981073][ T39] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 710.981105][ T39] ? __dentry_kill+0x57e/0x690 [ 710.981314][ T39] ? get_nr_dirty_inodes+0x1c4/0x210 [ 710.981343][ T39] sync_filesystem+0xa2/0x250 [ 710.981373][ T39] generic_shutdown_super+0x77/0x2d0 [ 710.981403][ T39] kill_block_super+0x44/0x90 [ 710.981436][ T39] deactivate_locked_super+0xbc/0x130 [ 710.981463][ T39] cleanup_mnt+0x437/0x4d0 [ 710.981489][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 710.981512][ T39] task_work_run+0x1d9/0x270 [ 710.981553][ T39] ? __pfx_task_work_run+0x10/0x10 [ 710.981582][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.981601][ T39] exit_to_user_mode_loop+0xed/0x480 [ 710.981624][ T39] ? rcu_is_watching+0x15/0xb0 [ 710.981674][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.981696][ T39] do_syscall_64+0x33e/0xf80 [ 710.981722][ T39] ? trace_irq_disable+0x3b/0x140 [ 710.981745][ T39] ? clear_bhb_loop+0x40/0x90 [ 710.981766][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.981786][ T39] RIP: 0033:0x7f157dbbda57 [ 710.981804][ T39] RSP: 002b:00007ffd50546d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 710.981824][ T39] RAX: 0000000000000000 RBX: 00007f157dc52048 RCX: 00007f157dbbda57 [ 710.981837][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd50546e20 [ 710.981849][ T39] RBP: 00007ffd50546e20 R08: 00007ffd50547e20 R09: 00000000ffffffff [ 710.981863][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd50547eb0 [ 710.981876][ T39] R13: 00007f157dc52048 R14: 0000000000086876 R15: 00007ffd50547ef0 [ 710.981907][ T39] [ 710.981987][ T39] [ 710.981987][ T39] Showing all locks held in the system: [ 710.982000][ T39] 1 lock held by khungtaskd/39: [ 710.982010][ T39] #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 710.982064][ T39] 2 locks held by kworker/u8:4/67: [ 710.982074][ T39] #0: ffff88801fa8d138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 710.982114][ T39] #1: ffffc9000152fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 710.982176][ T39] 3 locks held by kworker/0:2/820: [ 710.982187][ T39] #0: ffff88801a052938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 710.982231][ T39] #1: ffffc90004987c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 710.982281][ T39] #2: ffff88802a13c210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 710.982344][ T39] 2 locks held by udevd/5204: [ 710.982353][ T39] #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: __d_lookup+0x66/0x780 [ 710.982398][ T39] #1: ffff88803cbbc7f0 (&lockref->lock){+.+.}-{3:3}, at: __d_lookup+0x23e/0x780 [ 710.982442][ T39] 2 locks held by getty/5588: [ 710.982452][ T39] #0: ffff8880329740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 710.982494][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 710.982542][ T39] 1 lock held by syz-executor/5834: [ 710.982553][ T39] #0: ffff88803b7140d0 (&type->s_umount_key#62){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 710.982610][ T39] 7 locks held by kworker/u8:3/15203: [ 710.982621][ T39] #0: ffff88801b296138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 710.982663][ T39] #1: ffffc90011157c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 710.982705][ T39] #2: ffffffff8f370ce0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 710.982747][ T39] #3: ffff888035e99160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 710.982794][ T39] #4: ffff88803c3ce310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 710.982841][ T39] #5: ffffffff8f37f5f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 710.982882][ T39] #6: ffff88805e4d8f40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x588/0x22b0 [ 710.982938][ T39] 2 locks held by kworker/u8:16/15219: [ 710.982948][ T39] #0: ffff88801a094138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 710.982992][ T39] #1: ffffc9001b907c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 710.983037][ T39] 3 locks held by syz-executor/16777: [ 710.983047][ T39] #0: ffff88803f288a60 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: filemap_remove_folio+0xd0/0x200 [ 710.983097][ T39] #1: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 710.983143][ T39] #2: ffff88803f288c38 (&xa->xa_lock#9){+.+.}-{3:3}, at: filemap_remove_folio+0xdc/0x200 [ 710.983206][ T39] 2 locks held by udevd/17677: [ 710.983217][ T39] #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: dput+0x37/0x1a0 [ 710.983262][ T39] #1: ffff88803cbbc7f0 (&lockref->lock){+.+.}-{3:3}, at: fast_dput+0xdd/0x430 [ 710.983310][ T39] 2 locks held by syz-executor/20505: [ 710.983321][ T39] #0: ffffffff8f370ce0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 710.983373][ T39] #1: ffffffff8f37f5f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 710.983419][ T39] 5 locks held by syz.3.6033/20623: [ 710.983430][ T39] #0: ffff88802a410480 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 710.983486][ T39] #1: ffff88805fdd2600 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: path_openat+0xb5e/0x38a0 [ 710.983539][ T39] #2: ffff88802a4120d8 (&sbi->s_lock){+.+.}-{4:4}, at: exfat_lookup+0x187/0x1950 [ 710.983578][ T39] #3: ffff8880b893d018 ((lock)#5){+.+.}-{3:3}, at: trylock_stock+0x103/0x350 [ 710.983625][ T39] #4: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 710.983672][ T39] 4 locks held by syz.1.6040/20639: [ 710.983682][ T39] #0: ffff88803486deb0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 710.983731][ T39] #1: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 710.983781][ T39] #2: ffff888029b13958 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 710.983835][ T39] #3: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 710.983881][ T39] [ 710.983886][ T39] ============================================= [ 710.983886][ T39] [ 710.983907][ T39] NMI backtrace for cpu 0 [ 710.983923][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 710.983946][ T39] Tainted: [L]=SOFTLOCKUP [ 710.983952][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.983962][ T39] Call Trace: [ 710.983969][ T39] [ 710.983976][ T39] dump_stack_lvl+0xe8/0x150 [ 710.984000][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 710.984022][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 710.984044][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 710.984069][ T39] sys_info+0x135/0x170 [ 710.984086][ T39] watchdog+0xfd3/0x1030 [ 710.984114][ T39] ? watchdog+0x1c9/0x1030 [ 710.984135][ T39] kthread+0x388/0x470 [ 710.984155][ T39] ? __pfx_watchdog+0x10/0x10 [ 710.984177][ T39] ? __pfx_kthread+0x10/0x10 [ 710.984196][ T39] ret_from_fork+0x514/0xb70 [ 710.984215][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 710.984231][ T39] ? __switch_to+0xc79/0x1410 [ 710.984259][ T39] ? __pfx_kthread+0x10/0x10 [ 710.984279][ T39] ret_from_fork_asm+0x1a/0x30 [ 710.984308][ T39] [ 710.984316][ T39] Sending NMI from CPU 0 to CPUs 1: [ 710.984343][ C1] NMI backtrace for cpu 1 [ 710.984359][ C1] CPU: 1 UID: 0 PID: 15202 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 710.984384][ C1] Tainted: [L]=SOFTLOCKUP [ 710.984390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.984401][ C1] Workqueue: events_unbound toggle_allocation_gate [ 710.984434][ C1] RIP: 0010:__lock_acquire+0xb17/0x2cf0 [ 710.984456][ C1] Code: cb ef 0d 48 c7 c6 c5 22 76 8d 67 48 0f b9 3a 90 48 bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd 60 c3 39 93 <48> 85 c0 0f 94 c1 48 83 c0 f8 0f 94 c2 08 ca 0f 84 1c 01 00 00 e8 [ 710.984470][ C1] RSP: 0018:ffffc90011147420 EFLAGS: 00000803 [ 710.984483][ C1] RAX: ffffffff93819918 RBX: 0000000000056aa4 RCX: 0000000000040000 [ 710.984495][ C1] RDX: 00000000a1164082 RSI: 00000000ca726525 RDI: ffff888069551ec0 [ 710.984506][ C1] RBP: 60c85b37dc361e5e R08: ffffffff8b37d637 R09: ffff88801a089c18 [ 710.984517][ C1] R10: dffffc0000000000 R11: fffffbfff1f1a23f R12: ffff888069552bd0 [ 710.984529][ C1] R13: ffff888069552bd0 R14: ffff888069551ec0 R15: 0000000000000007 [ 710.984540][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 710.984553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.984564][ C1] CR2: 00007f59f229d053 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 710.984578][ C1] Call Trace: [ 710.984584][ C1] [ 710.984595][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 710.984617][ C1] ? rt_spin_lock+0x157/0x400 [ 710.984633][ C1] lock_acquire+0x106/0x350 [ 710.984650][ C1] ? rt_spin_lock+0x157/0x400 [ 710.984670][ C1] ? rcu_is_watching+0x15/0xb0 [ 710.984691][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 710.984711][ C1] ? rt_spin_lock+0x157/0x400 [ 710.984728][ C1] rt_spin_lock+0x157/0x400 [ 710.984744][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.984764][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 710.984780][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 710.984799][ C1] ? __pte_offset_map+0x178/0x200 [ 710.984818][ C1] pte_offset_map_lock+0x13d/0x210 [ 710.984837][ C1] ? get_locked_pte+0x2c0/0x490 [ 710.984853][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 710.984875][ C1] __text_poke+0x2d3/0x9a0 [ 710.984897][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 710.984915][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 710.984948][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 710.984968][ C1] ? __pfx___text_poke+0x10/0x10 [ 710.984991][ C1] smp_text_poke_batch_finish+0x923/0x1160 [ 710.985015][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 710.985037][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.985062][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.985081][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 710.985102][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 710.985118][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 710.985139][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 710.985154][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 710.985176][ C1] static_key_disable+0x1a/0x20 [ 710.985195][ C1] toggle_allocation_gate+0x1fe/0x290 [ 710.985216][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 710.985236][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 710.985257][ C1] ? process_scheduled_works+0xa69/0x1910 [ 710.985272][ C1] ? process_scheduled_works+0xa69/0x1910 [ 710.985288][ C1] process_scheduled_works+0xb68/0x1910 [ 710.985314][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 710.985332][ C1] ? assign_work+0x3d5/0x5e0 [ 710.985348][ C1] worker_thread+0xa90/0x1040 [ 710.985373][ C1] kthread+0x388/0x470 [ 710.985391][ C1] ? __pfx_worker_thread+0x10/0x10 [ 710.985405][ C1] ? __pfx_kthread+0x10/0x10 [ 710.985428][ C1] ret_from_fork+0x514/0xb70 [ 710.985444][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 710.985463][ C1] ? __switch_to+0xc79/0x1410 [ 710.985484][ C1] ? __pfx_kthread+0x10/0x10 [ 710.985503][ C1] ret_from_fork_asm+0x1a/0x30 [ 710.985530][ C1] [ 710.986354][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 710.986371][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 710.986395][ T39] Tainted: [L]=SOFTLOCKUP [ 710.986401][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.986411][ T39] Call Trace: [ 710.986418][ T39] [ 710.986426][ T39] vpanic+0x56c/0xa60 [ 710.986452][ T39] ? __pfx_vpanic+0x10/0x10 [ 710.986483][ T39] panic+0xc5/0xd0 [ 710.986502][ T39] ? __pfx_panic+0x10/0x10 [ 710.986524][ T39] ? __pfx_preempt_count_add+0x10/0x10 [ 710.986547][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 710.986571][ T39] watchdog+0x102c/0x1030 [ 710.986598][ T39] ? watchdog+0x1c9/0x1030 [ 710.986621][ T39] kthread+0x388/0x470 [ 710.986642][ T39] ? __pfx_watchdog+0x10/0x10 [ 710.986660][ T39] ? __pfx_kthread+0x10/0x10 [ 710.986680][ T39] ret_from_fork+0x514/0xb70 [ 710.986702][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 710.986722][ T39] ? __switch_to+0xc79/0x1410 [ 710.986751][ T39] ? __pfx_kthread+0x10/0x10 [ 710.986772][ T39] ret_from_fork_asm+0x1a/0x30 [ 710.986809][ T39] [ 710.987563][ T39] Kernel Offset: disabled