last executing test programs: 13m9.987555968s ago: executing program 32 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 11m38.585877211s ago: executing program 33 (id=709): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 11m18.460478574s ago: executing program 5 (id=782): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1-2:5'], 0x31) 11m18.165089631s ago: executing program 5 (id=785): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 11m17.043390246s ago: executing program 5 (id=789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800714, &(0x7f0000000100), 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x81ff) getrandom(&(0x7f0000001100)=""/272, 0x110, 0x0) 11m16.453298341s ago: executing program 5 (id=792): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x83}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x476, &(0x7f0000000d40)="$eJzs3MtvVFUYAPDv3naKtWAr4gt8VNFIfLQUUFm4UKOJC0xMdKHLSVsIUsDQmghpYnGBK2NM3BOX/guudGOMKxO3ujckxLARXI25M/e284bSmQ44v18y8J376DnfnHvac+/pNIChNZ39k0TsjIg/ImKyVmw8YLr23/Vrq/M3rq3OJ1GpvP93Uj3un2ur88WhxXkT9YVIYl+bepfPXzhVXlpaPJeXZ1dOfzK7fP7CSydPl08snlg8c+jo0SOH51595dDLPclzItI8euejb9499lVD/k159Mh0t53PVio9rm6wdtXFowNsB5szkvdXqTr+J2Okrvcm4+0v1gufD6iBQN9UKpXKROfdaxXgfyyJxrIhD8Oi+EFf3P+2uw9+vW+zj8G7+kbtBijL+3r+qu0ZXX9iUGq6v+2l6Yj4cO3fy9kr+vMcAgCgwY/Z/OfFbLazOp/NPTbmH2k8VHfcffna0FRE3B8RuyPigTgTeyLiwYjqsQ9HxCObrL95kaR1/pNeua3EblE2/3stX9tqnP8Vs7+YGslLu6r5l5LjJ5cWD+bvyYEo7cjKc13q+Omt37/utK9u/pe9t5ez+ou5YN6OK6M7Gs9ZKK+Ut5JzvasXI/aOtss/WV8JSCLi0YjY2+4LpDev4+Tz3z/WaV/9/Dd7tebfRQ8WmirfRTxX6/+1aMq/kHRfn5y9J5YWD84WV0WrX3+79F6n+reUfw9k/X9v2+t/Pf+ppH69dnnzdVz688uO9zTTpTzomH/r9b9WXimPJR9U47F822fllZVzcxFjybFao+u3H9o4tygXx2f5H9jffvzvjo13Yl9EZBfx4xHxREQ8mffdUxHxdETs75L/L28+83HztvEi/zug/xc21f8bwVg0b2kfjJz6+YeGSqc2wjz/G53zz/r/SDU6kG+5le9/t9Ku27uaAQAA4O6TRsTOSNKZ9ThNZ2Zqv8O/JyJdOru88sLxs5+eWah9RmAqSmnxpGuy7nnoXH5bXytfjIjarxYU+w9HWn1u/O3IeLU8M392aWHQycOQm+gw/jN/jQy6dUDf+cAWDC/jH4ZX1/Ff2r52ANuvZfx3HfM7+toWYHu1+fk/Poh2ANuv3fzf3/uB4dA0/i37wRDx/B+Gl/EPw8v4h6G0PB43/5B816D4Srd5+s2CyYittnAwQZTuiGb0LYi071WM9ffS6luQ3IVtbgkG9z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgl/4LAAD//9yCzmA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xe0880, 0x4b) getdents(r0, 0x0, 0x0) 11m15.542916624s ago: executing program 5 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0xfdef) 11m14.853016474s ago: executing program 5 (id=798): mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 11m14.207853761s ago: executing program 34 (id=798): mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 8m20.164624628s ago: executing program 6 (id=1860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d03, 0x0, 0x81}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m19.519622956s ago: executing program 6 (id=1862): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x1, 0x200, 0x5}) 8m17.394966709s ago: executing program 6 (id=1874): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x20) 8m15.794280363s ago: executing program 6 (id=1884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8m15.600954804s ago: executing program 6 (id=1878): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 8m15.236564006s ago: executing program 6 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0xdd345000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 8m15.060018546s ago: executing program 35 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0xdd345000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 8m6.757987559s ago: executing program 1 (id=1913): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0x26000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m6.376361341s ago: executing program 1 (id=1914): socket(0x2, 0x805, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) fchdir(r0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 8m6.189028763s ago: executing program 1 (id=1915): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x10000030, r1, 0x0) 8m6.097896828s ago: executing program 1 (id=1916): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x2000010, &(0x7f0000000e00)=ANY=[], 0x4, 0x6eb, &(0x7f0000001240)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x8, 0x1e) 8m5.404187728s ago: executing program 1 (id=1920): unshare(0x20000400) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000a, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 8m4.694957589s ago: executing program 1 (id=1923): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f0000000480), 0x8000, 0x10000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1}) 8m4.088785415s ago: executing program 36 (id=1923): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f0000000480), 0x8000, 0x10000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1}) 5m12.677403599s ago: executing program 7 (id=3017): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m12.300751271s ago: executing program 7 (id=3022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x6071, 0x0, 0xe7}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="3c784eba8270c3", 0x7, 0x4814, 0x0, 0x0) 5m11.911334393s ago: executing program 7 (id=3025): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x200080c0) 5m11.814664699s ago: executing program 7 (id=3026): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x106) 5m9.774164877s ago: executing program 7 (id=3039): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = timerfd_create(0x0, 0x800) timerfd_gettime(r1, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) 5m8.161956502s ago: executing program 7 (id=3047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3915515ca1431aab"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e4f437c475ab08d784755838aa14c33b5190972a86892fc4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d9eed50475a276381a284ca1348b5ad0"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080) 5m7.67310261s ago: executing program 37 (id=3047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3915515ca1431aab"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e4f437c475ab08d784755838aa14c33b5190972a86892fc4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d9eed50475a276381a284ca1348b5ad0"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080) 4m48.746254822s ago: executing program 0 (id=3103): munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 4m47.940897149s ago: executing program 0 (id=3107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 4m47.449514338s ago: executing program 0 (id=3111): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xa, 0x24ccd5, 0x7a36f}) 4m47.425013659s ago: executing program 9 (id=3112): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b00)='\n', 0x1}], 0x1}}], 0x1, 0x440088d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 4m47.204733502s ago: executing program 0 (id=3113): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4m47.204294542s ago: executing program 9 (id=3114): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee5, 0x800, 0xffffffff, 0x330}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 4m46.322434294s ago: executing program 0 (id=3116): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x30044850) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) 4m46.084945877s ago: executing program 9 (id=3118): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 4m45.254896396s ago: executing program 9 (id=3122): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000a80)='./file0/file0\x00') 4m44.306188511s ago: executing program 0 (id=3128): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m43.355520837s ago: executing program 38 (id=3128): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m43.040959965s ago: executing program 9 (id=3131): unshare(0x2040400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.events\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 4m41.100871018s ago: executing program 9 (id=3137): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000000c0)=0x37) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e25, 0x496f, @empty, 0x7ff}}, [0x6ffeaad6, 0x2, 0xa, 0x7, 0x10000000000000d, 0x408, 0x100000000000009, 0x200000000000003, 0x1, 0x8, 0xa, 0xfff, 0x7, 0xfffffffffffffffa, 0x40003a0]}, &(0x7f0000000200)=0x100) 4m40.298696894s ago: executing program 39 (id=3137): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000000c0)=0x37) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e25, 0x496f, @empty, 0x7ff}}, [0x6ffeaad6, 0x2, 0xa, 0x7, 0x10000000000000d, 0x408, 0x100000000000009, 0x200000000000003, 0x1, 0x8, 0xa, 0xfff, 0x7, 0xfffffffffffffffa, 0x40003a0]}, &(0x7f0000000200)=0x100) 14.681339205s ago: executing program 3 (id=4495): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, 0x0) 13.855432593s ago: executing program 3 (id=4499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000017c0)="eb545a387bf53fd0b3d11e6d0dbc970a9a536d78b4799413f11c1b1b0c1e0100", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40012003, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="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", 0x13c}, {&(0x7f0000002dc0)="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", 0xec4}], 0x2, 0x0, 0x0, 0x8041}, 0x0) 13.337177893s ago: executing program 3 (id=4502): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="46b8", 0x2, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) 13.157389014s ago: executing program 3 (id=4504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 12.956324246s ago: executing program 3 (id=4505): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xb) 12.556349239s ago: executing program 3 (id=4507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.064861158s ago: executing program 40 (id=4507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.619049981s ago: executing program 4 (id=4536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x8001ff, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 3.594403911s ago: executing program 4 (id=4538): setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 2.680219604s ago: executing program 8 (id=4540): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6105060409000000000000000101"], 0x61) 2.499510245s ago: executing program 4 (id=4541): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2.473397016s ago: executing program 2 (id=4542): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000002000000000000001"]) 2.193655153s ago: executing program 2 (id=4543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e25, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0x1, 0x4000805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1}, 0x2}], 0x1, 0x22, 0x0) 2.147689165s ago: executing program 8 (id=4544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', '', [{0x20, 'cpuacct.usage_sys\x00ND\xa7N\xb1\xc5m\xc4\xf1\xb6\xf9L%\xafo;\xcf\xe0\xa5\xea\x15\xe1w)G\xfdnH\xb8\xdf\x98\x0f#\xbc\xbd\xdd1\xdf\xb8JJ\xb3\\\xb4\x95\xd4\xf9\x19\xb9\x1e\x94\xb5\xb6\xe5\xccb\xbd\xe3 2\x88F\xef\xee\xce7\xe6\xb6\xe4\x11\xff;\xe1i\x04BX\x81H\xcc\xceD~\x132\x97\x8dz\xf8\x16\xaf\xf9VD\x95\baK[\xf9*c\'\xb0T\xd7\xb2w\xe4\x14\n\x9c\x95x\xe3m\x1f/\x1d\xee\xa8\xbdT\x0f\xa9\"p~\vv-\xfbK\xbf\xfc\xd7\xbc\xf7C\x8a\xff\xbe\xf7\xc63\xa6\x16\xe1`R4\xc9P\x0f*:Q\x06\xc4\x8d\xcbe\x93\x99\xe8\xe6\"F\x17\x10\xbdX\xc3\xcfc\x8c \x19\xa7\xedN<\x95\xb3%.\xf7\xa3\x1b\xf4p\x88u\x01I^\xb0\xd9\'w\xe7\xf0P\x18\x06\x84\xe4k;\x00'}]}, 0xe9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x3) 1.963399026s ago: executing program 4 (id=4545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 1.962323316s ago: executing program 8 (id=4552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000051500000200000007"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.937964648s ago: executing program 2 (id=4546): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.748232238s ago: executing program 8 (id=4547): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock2(&(0x7f00000e3000/0x2000)=nil, 0x2000, 0x0) pread64(r0, &(0x7f0000000080)=""/196, 0xc4, 0x3) 1.290402775s ago: executing program 4 (id=4548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 925.692667ms ago: executing program 4 (id=4549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 865.65496ms ago: executing program 2 (id=4550): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 710.744609ms ago: executing program 8 (id=4551): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, 0x0, 0x4}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2727, &(0x7f0000000040)={0x0, 0x21e1, 0x1c080, 0x1, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 593.585406ms ago: executing program 2 (id=4553): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd790b}, @IFLA_GRE_TTL={0x5, 0x8, 0x4a}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) 281.455364ms ago: executing program 8 (id=4554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 0s ago: executing program 2 (id=4555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8125}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 9-1: SerialNumber: syz [ 790.525477][T12804] usb 9-1: config 0 descriptor?? [ 790.747778][T12804] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 790.774283][T12804] usb 9-1: No valid video chain found. [ 790.816549][T12804] usb 9-1: USB disconnect, device number 38 [ 790.911055][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.021848][T16156] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 791.950332][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.044398][T19209] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 792.365682][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3841'. [ 792.784712][T19227] loop8: detected capacity change from 0 to 4096 [ 792.967620][T19232] overlayfs: failed to clone upperpath [ 792.984492][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.068758][T19227] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 793.088215][T19227] ntfs3: loop8: Failed to load $Extend (-2). [ 793.131660][T19227] ntfs3: loop8: Failed to initialize $Extend. [ 793.244072][T16331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.319146][T19243] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 793.452419][T19248] loop3: detected capacity change from 0 to 512 [ 793.523961][T19248] EXT4-fs (loop3): Test dummy encryption mode enabled [ 793.593430][T19248] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3852: invalid indirect mapped block 2185560079 (level 0) [ 793.747813][T19248] EXT4-fs (loop3): Remounting filesystem read-only [ 793.813788][T19248] EXT4-fs (loop3): 1 truncate cleaned up [ 793.820844][T19248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.024477][T12110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.103007][T16156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.484235][T16422] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 794.681061][T16422] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 794.703833][T16422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.733792][T16422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.748319][T16422] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 794.768692][T16422] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 794.778939][T16422] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 794.793307][T16422] usb 9-1: Manufacturer: syz [ 794.801850][T16422] usb 9-1: config 0 descriptor?? [ 794.874217][ T5815] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 795.064694][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.083952][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 795.091647][ T5815] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 795.112089][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.132550][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.145250][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.193745][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.246039][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.272749][T16422] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 795.294027][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.308164][T16422] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 795.346231][T19284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.346649][T16422] appleir 0003:05AC:8243.003D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 795.398598][T19284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.464549][T19284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.533580][T19289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.562632][ T5815] usb 3-1: usb_control_msg returned -32 [ 795.579985][ T5815] usbtmc 3-1:16.0: can't read capabilities [ 795.619087][T19289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.104787][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.184959][T16331] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 796.266753][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.391559][T16331] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 796.405965][T16331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.437043][T16331] usb 5-1: config 0 descriptor?? [ 796.462182][T16331] cp210x 5-1:0.0: cp210x converter detected [ 796.871445][T16331] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 796.907432][T16331] usb 5-1: cp210x converter now attached to ttyUSB0 [ 796.922265][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 796.922281][ T28] audit: type=1326 audit(1771012780.653:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.3.3867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0e8b9bf79 code=0x0 [ 797.104922][T16331] usb 5-1: USB disconnect, device number 56 [ 797.122722][T16331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 797.145364][T12110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.222537][T16331] cp210x 5-1:0.0: device disconnected [ 797.447427][T19343] loop8: detected capacity change from 0 to 512 [ 797.460431][T19343] EXT4-fs: Ignoring removed i_version option [ 797.468437][T19343] EXT4-fs: Ignoring removed bh option [ 797.492792][T16422] usb 9-1: USB disconnect, device number 39 [ 797.529916][T19343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.555147][T19343] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 797.615476][ T28] audit: type=1800 audit(1771012781.343:427): pid=19343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3869" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 797.879534][T16422] usb 3-1: USB disconnect, device number 24 [ 797.962570][T17510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.979186][T19353] loop3: detected capacity change from 0 to 8 [ 798.184777][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.281062][T19363] loop8: detected capacity change from 0 to 128 [ 798.392050][T19363] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.486750][T19363] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 798.519285][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.695139][T19363] syz.8.3873 (pid 19363) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 798.819512][T19370] loop3: detected capacity change from 0 to 1024 [ 798.855060][T19370] EXT4-fs: Ignoring removed bh option [ 798.902434][T19370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 798.959778][T17510] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.971353][T19370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 798.992273][T19370] EXT4-fs: test_dummy_encryption requires encrypt feature [ 799.292498][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3878'. [ 799.352048][T19384] veth0_macvtap: left promiscuous mode [ 800.273911][T16422] net_ratelimit: 2 callbacks suppressed [ 800.273930][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.493381][T19372] loop2: detected capacity change from 0 to 40427 [ 800.540065][T19372] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 800.567221][T19372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 800.588395][T19372] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 800.610158][T19372] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 800.634961][T19372] F2FS-fs (loop2): Image doesn't support compression [ 800.656026][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.662010][T19372] F2FS-fs (loop2): invalid crc value [ 800.683483][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.698134][T19372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 800.705262][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.736500][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.755313][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.787203][T19418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.824085][T19417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.874653][T19372] F2FS-fs (loop2): Start checkpoint disabled! [ 800.910234][T19372] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 800.938915][T19372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 800.993394][T19405] loop3: detected capacity change from 0 to 32768 [ 801.183549][T19372] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x105a/0x1a00 [ 801.249273][T19372] bio_check_eod: 10 callbacks suppressed [ 801.249295][T19372] syz.2.3876: attempt to access beyond end of device [ 801.249295][T19372] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.305187][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.386822][T19372] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 801.882027][T19433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.928251][T19452] loop2: detected capacity change from 0 to 32768 [ 802.937300][T19452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3886 (19452) [ 802.962449][T19452] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 802.973114][T19452] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 802.982421][T19452] BTRFS info (device loop2): force clearing of disk cache [ 802.990080][T19452] BTRFS info (device loop2): enabling auto defrag [ 802.996808][T19452] BTRFS info (device loop2): enabling ssd optimizations [ 803.004056][T19452] BTRFS info (device loop2): setting nodatacow, compression disabled [ 803.012192][T19452] BTRFS info (device loop2): enabling disk space caching [ 803.019361][T19452] BTRFS info (device loop2): disk space caching is enabled [ 803.111702][T19452] BTRFS info (device loop2): rebuilding free space tree [ 803.156118][T19452] BTRFS info (device loop2): disabling free space tree [ 803.163462][T19452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 803.173530][T19452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 803.196273][T19452] BTRFS info (device loop2): checking UUID tree [ 803.555792][T16192] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 803.587575][T13729] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 804.297402][T16329] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 804.516379][T16329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.533703][T16329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.568294][T16329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.644847][T16329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.708061][T16329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.740331][T16329] usb 3-1: config 0 descriptor?? [ 805.110001][T19497] Invalid argument reading file caps for ./file0 [ 805.266754][T16329] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 805.304519][T16329] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 805.464243][T16329] net_ratelimit: 11 callbacks suppressed [ 805.464264][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.584603][T12109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.676298][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.841070][T19533] loop3: detected capacity change from 0 to 128 [ 807.494530][T19545] netlink: 'syz.2.3908': attribute type 10 has an invalid length. [ 807.526432][T19545] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.539736][T19545] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.578263][ T5854] usb 3-1: USB disconnect, device number 25 [ 807.622437][T19545] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.629790][T19545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.637550][T19545] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.645049][T19545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.704008][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.768499][T19545] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 807.920838][T12111] IPVS: starting estimator thread 0... [ 807.999299][T19556] loop8: detected capacity change from 0 to 256 [ 808.044107][T19552] IPVS: using max 16 ests per chain, 38400 per kthread [ 808.203054][T19556] FAT-fs (loop8): Directory bread(block 64) failed [ 808.243733][T19556] FAT-fs (loop8): Directory bread(block 65) failed [ 808.256167][T19556] FAT-fs (loop8): Directory bread(block 66) failed [ 808.281390][T19556] FAT-fs (loop8): Directory bread(block 67) failed [ 808.292468][T19556] FAT-fs (loop8): Directory bread(block 68) failed [ 808.372213][T19556] FAT-fs (loop8): Directory bread(block 69) failed [ 808.407394][T19556] FAT-fs (loop8): Directory bread(block 70) failed [ 808.487014][T19556] FAT-fs (loop8): Directory bread(block 71) failed [ 808.504865][T16331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.562558][T19556] FAT-fs (loop8): Directory bread(block 72) failed [ 808.603831][T19556] FAT-fs (loop8): Directory bread(block 73) failed [ 808.743971][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.783999][T19572] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3914'. [ 808.962666][T19556] syz.8.3909: attempt to access beyond end of device [ 808.962666][T19556] loop8: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 809.174293][T19556] loop6: detected capacity change from 0 to 7 [ 809.384124][T12111] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 809.616471][T12111] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 809.646873][T12111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.702167][T12111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.753478][T12111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 809.775753][ T5854] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 809.784122][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.795546][T13718] IPVS: stop unused estimator thread 0... [ 809.815433][T12111] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 809.836692][T12111] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 809.864671][T12111] usb 4-1: Manufacturer: syz [ 809.894516][T12111] usb 4-1: config 0 descriptor?? [ 810.004020][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 810.026299][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.049022][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.068873][ T5854] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.089157][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.125357][ T5854] usb 5-1: config 0 descriptor?? [ 810.147569][ T5854] hub 5-1:0.0: USB hub found [ 810.329982][T12111] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 810.353071][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.359985][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.385230][T12111] appleir 0003:05AC:8243.003F: No inputs registered, leaving [ 810.413984][ T5854] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 810.470235][T12111] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 810.824203][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.865585][ T5854] hid-generic 0003:046D:C31C.0040: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 811.284208][T12732] usb 5-1: USB disconnect, device number 57 [ 811.561944][T12732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.864921][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.371878][T19646] loop8: detected capacity change from 0 to 8192 [ 812.481534][T19646] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 812.518591][T19655] loop3: detected capacity change from 0 to 256 [ 812.565340][T19635] loop2: detected capacity change from 0 to 40427 [ 812.586026][ T5854] usb 4-1: USB disconnect, device number 19 [ 812.594189][T19635] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x7ffff [ 812.611522][T19655] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 812.613534][T19635] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c [ 812.676653][T19635] F2FS-fs (loop2): invalid crc value [ 812.693163][T19646] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 812.710093][T19635] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 812.738930][T19646] REISERFS (device loop8): using ordered data mode [ 812.766342][T19635] F2FS-fs (loop2): Found nat_bits in checkpoint [ 812.780715][T19646] reiserfs: using flush barriers [ 812.829862][T19646] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 812.906352][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.951443][T19635] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 813.001537][T19646] REISERFS (device loop8): checking transaction log (loop8) [ 813.045114][T19646] REISERFS (device loop8): Using r5 hash to sort names [ 813.052514][T19646] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 813.085399][T19635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 813.214320][T19635] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 813.389424][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 813.490342][T19678] loop3: detected capacity change from 0 to 512 [ 813.524177][T19678] FAT-fs (loop3): Unrecognized mount option "/dev/loop3" or missing value [ 813.579169][T16192] syz-executor: attempt to access beyond end of device [ 813.579169][T16192] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 813.595051][T16192] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 813.944001][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.058026][T19681] input: syz0 as /devices/virtual/input/input65 [ 814.229064][T19685] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 814.584002][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.983995][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.993800][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.004772][T12732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.025673][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.977798][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3945'. [ 816.106819][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.395205][T19692] loop8: detected capacity change from 0 to 32768 [ 816.547460][T19692] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 817.078973][T19692] XFS (loop8): Ending clean mount [ 817.144282][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.624109][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.766668][T17510] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 818.185400][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.218047][T19774] overlayfs: conflicting lowerdir path [ 819.233768][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.463068][T19777] loop2: detected capacity change from 0 to 32768 [ 819.523938][T19777] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 819.711960][ T5920] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 819.737406][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.104815][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.113916][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.153901][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.673771][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.230822][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.904298][ T5854] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 822.124234][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 822.155056][ T5854] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 822.178504][ T5854] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.207834][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 822.226525][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 822.243711][ T5854] usb 4-1: Product: syz [ 822.248153][ T5854] usb 4-1: Manufacturer: syz [ 822.252810][ T5854] usb 4-1: SerialNumber: syz [ 822.263987][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.465130][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3987'. [ 822.494801][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 822.545732][T19874] netlink: 'syz.4.3987': attribute type 6 has an invalid length. [ 822.584449][ T5854] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 822.672039][T19874] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.681927][T19874] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.690773][T19874] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.699562][T19874] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.720026][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3987'. [ 822.744332][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 822.753461][T19874] netlink: 'syz.4.3987': attribute type 6 has an invalid length. [ 822.807789][T12804] usb 4-1: USB disconnect, device number 20 [ 822.848065][T19853] usblp0: removed [ 823.011873][T19888] loop2: detected capacity change from 0 to 512 [ 823.060714][T19888] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 823.109721][T19888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.214971][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 823.315072][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.388758][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 823.473749][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 823.539972][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 823.579258][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 823.649350][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 823.704745][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.717764][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 823.762093][T19888] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.3990: lblock 23 mapped to illegal pblock 18 (length 1) [ 823.828299][T19888] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz.2.3990: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 823.966420][T16192] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 824.018444][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.239959][T19919] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 824.350554][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.219021][T19925] loop2: detected capacity change from 0 to 40427 [ 825.228509][T19925] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 825.237916][T19925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 825.247803][T19925] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 825.256145][T19925] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 825.264659][T19925] F2FS-fs (loop2): Image doesn't support compression [ 825.274001][T19925] F2FS-fs (loop2): invalid crc value [ 825.286018][T19925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 825.343793][T19925] F2FS-fs (loop2): Start checkpoint disabled! [ 825.364416][T19925] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 825.372136][T19925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 825.384103][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.588122][T19925] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 825.603208][T19925] syz.2.3997: attempt to access beyond end of device [ 825.603208][T19925] loop2: rw=2049, sector=53248, nr_sectors = 56 limit=40427 [ 825.704309][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.713430][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.762010][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.874500][T19946] loop8: detected capacity change from 0 to 512 [ 825.882336][T19946] EXT4-fs: Ignoring removed bh option [ 826.005862][T19946] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 826.063869][T19946] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 826.135714][T19946] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 826.257507][T19946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 826.290790][T19946] System zones: 0-2, 18-18, 34-35 [ 826.327581][T19946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.385531][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4004'. [ 826.429726][T19955] netlink: 'syz.4.4004': attribute type 15 has an invalid length. [ 826.480747][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4004'. [ 826.573094][T13718] kworker/u4:11: attempt to access beyond end of device [ 826.573094][T13718] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 826.633866][T13718] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 826.640837][T13718] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 826.744281][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.885629][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.074874][T17510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.945552][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.058549][T19984] loop3: detected capacity change from 0 to 1024 [ 828.184067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.193833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.459538][T19994] syz.4.4015 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 828.521685][T13725] hfsplus: b-tree write err: -5, ino 4 [ 828.625516][T19973] loop8: detected capacity change from 0 to 32768 [ 828.710091][T19973] XFS (loop8): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 828.879382][T19973] XFS (loop8): Ending clean mount [ 828.984501][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.200744][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 829.520470][T20017] loop2: detected capacity change from 0 to 2048 [ 829.602381][T20017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.642590][T17510] XFS (loop8): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 829.794632][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.031459][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.526579][T20027] loop2: detected capacity change from 0 to 64 [ 830.589574][T20029] loop8: detected capacity change from 0 to 128 [ 830.653083][T20029] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 830.724196][T20029] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 830.839994][T13725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.854212][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.135037][T17510] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 831.804745][T20044] loop8: detected capacity change from 0 to 128 [ 831.844898][T20044] FAT-fs (loop8): Unrecognized mount option "0177777777777777777777718446744073709551615ŠIÍüÇ`Ç°0" or missing value [ 831.945235][ T5854] net_ratelimit: 1 callbacks suppressed [ 831.945253][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.824209][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.993750][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.326596][T20067] loop3: detected capacity change from 0 to 4096 [ 833.528699][T20071] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.711278][ T28] audit: type=1800 audit(1771012817.433:428): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4038" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 833.844184][T20065] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 833.993852][T20065] Remounting filesystem read-only [ 833.999617][T20065] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 834.023970][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.095265][T20067] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 834.354410][T16156] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 834.383431][T20080] loop2: detected capacity change from 0 to 128 [ 834.393521][T16156] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 834.470379][T16156] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 835.010139][T20091] syzkaller1: entered promiscuous mode [ 835.023394][T20091] syzkaller1: entered allmulticast mode [ 835.098696][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.167167][ T5854] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 835.356183][ T5854] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 835.386081][ T5854] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 256 [ 835.430024][ T5854] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.452196][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.482026][ T5854] usb 5-1: Product: syz [ 835.496226][ T5854] usb 5-1: Manufacturer: syz [ 835.512444][ T5854] usb 5-1: SerialNumber: syz [ 835.730124][T20104] loop2: detected capacity change from 0 to 256 [ 835.768723][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 835.837213][T20104] FAT-fs (loop2): Directory bread(block 64) failed [ 835.874331][T20104] FAT-fs (loop2): Directory bread(block 65) failed [ 835.881079][T20104] FAT-fs (loop2): Directory bread(block 66) failed [ 835.893956][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.908590][T20104] FAT-fs (loop2): Directory bread(block 67) failed [ 835.918828][T20104] FAT-fs (loop2): Directory bread(block 68) failed [ 835.940316][T20104] FAT-fs (loop2): Directory bread(block 69) failed [ 835.960734][T20104] FAT-fs (loop2): Directory bread(block 70) failed [ 836.009251][T20104] FAT-fs (loop2): Directory bread(block 71) failed [ 836.044029][T20104] FAT-fs (loop2): Directory bread(block 72) failed [ 836.050659][T20104] FAT-fs (loop2): Directory bread(block 73) failed [ 836.121902][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.284894][ T28] audit: type=1800 audit(1771012820.023:429): pid=20104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4052" name="file1" dev="loop2" ino=1048796 res=0 errno=0 [ 836.341090][T20104] syz.2.4052: attempt to access beyond end of device [ 836.341090][T20104] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 836.424894][T20089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.585129][T13725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.594386][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.622306][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.660576][ T5854] cdc_ncm 5-1:1.0: bind() failure [ 836.687056][ T5854] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 836.723972][ T5854] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 836.747974][ T5854] usbtest: probe of 5-1:1.1 failed with error -71 [ 836.792313][ T5854] usb 5-1: USB disconnect, device number 58 [ 836.954794][T20106] loop8: detected capacity change from 0 to 8192 [ 837.046242][T20106] loop8: p1 p2 p3 [ 837.050090][T20106] loop8: partition table partially beyond EOD, truncated [ 837.078310][T20106] loop8: p1 start 51379968 is beyond EOD, truncated [ 837.115420][T20106] loop8: p3 size 100663552 extends beyond EOD, truncated [ 837.163907][T12804] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 837.418489][T12804] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.489907][T12804] usb 9-1: config 0 has no interfaces? [ 837.503982][T20102] loop3: detected capacity change from 0 to 32768 [ 837.522518][T12804] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 837.552243][T12804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.592357][T12804] usb 9-1: config 0 descriptor?? [ 837.704375][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.790427][T20102] JBD2: Ignoring recovery information on journal [ 837.895373][T12804] usb 9-1: USB disconnect, device number 40 [ 837.916629][T20102] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 838.084671][T20102] (syz.3.4051,20102,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 838.145541][T20102] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #64 has an invalid bg_blkno of 190215511605312 [ 838.192714][T20102] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 838.213423][T20102] OCFS2: File system is now read-only. [ 838.223550][T20102] (syz.3.4051,20102,0):ocfs2_test_suballoc_bit:2792 ERROR: read group 64 failed -30 [ 838.245016][T20102] (syz.3.4051,20102,0):ocfs2_test_suballoc_bit:2803 ERROR: status = -30 [ 838.257243][T20102] (syz.3.4051,20102,0):ocfs2_test_inode_bit:2865 ERROR: test suballoc bit failed -30 [ 838.283312][T20102] (syz.3.4051,20102,0):ocfs2_test_inode_bit:2874 ERROR: status = -30 [ 838.299893][T20102] (syz.3.4051,20102,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 838.397443][T16156] ocfs2: Unmounting device (7,3) on (node local) [ 838.749120][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.904456][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.787604][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.845090][T20157] loop3: detected capacity change from 0 to 256 [ 839.874275][T20157] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 839.903753][T20157] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 839.970774][T20157] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 840.436260][T20170] loop3: detected capacity change from 0 to 128 [ 840.535620][T20170] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 840.585221][T20170] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 840.702714][T16156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 840.824856][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.996880][T20182] loop2: detected capacity change from 0 to 512 [ 841.024838][T20182] EXT4-fs: Ignoring removed bh option [ 841.044291][T20182] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 841.053411][T20182] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 841.159035][T20182] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 841.218765][T20182] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 841.250399][T20182] System zones: 0-2, 18-18, 34-35 [ 841.260248][T20182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.544594][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.872110][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.955980][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.357276][T13713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.384331][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.428065][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.539401][T20215] loop3: detected capacity change from 0 to 512 [ 842.614762][T20215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 842.663710][T20215] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 842.717698][T20215] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 842.733730][T20215] System zones: 0-2, 18-18, 34-35 [ 842.740702][T20215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 842.846155][T20215] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 842.910191][T20215] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 842.933981][T20215] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 842.980574][ T28] audit: type=1800 audit(1771012826.713:430): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4091" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 843.170320][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 843.189436][T16156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.469793][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.538566][T20230] input: syz0 as /devices/virtual/input/input66 [ 843.663465][T20210] loop8: detected capacity change from 0 to 40427 [ 843.704183][T20210] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 843.712809][T20210] F2FS-fs (loop8): heap/no_heap options were deprecated [ 843.785895][T20210] F2FS-fs (loop8): invalid crc value [ 843.816003][T20210] F2FS-fs (loop8): Found nat_bits in checkpoint [ 843.979089][T20210] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 844.032224][T20210] F2FS-fs (loop8): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 844.079992][T20210] syz.8.4090: attempt to access beyond end of device [ 844.079992][T20210] loop8: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 844.119367][T20235] loop2: detected capacity change from 0 to 4096 [ 844.168511][T20239] syz.8.4090: attempt to access beyond end of device [ 844.168511][T20239] loop8: rw=2049, sector=77864, nr_sectors = 8 limit=40427 [ 844.268018][T20210] syz.8.4090: attempt to access beyond end of device [ 844.268018][T20210] loop8: rw=2049, sector=77872, nr_sectors = 16 limit=40427 [ 844.284966][T20235] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 844.306039][T20235] ntfs3: loop2: Failed to load $Extend (-22). [ 844.314312][T20235] ntfs3: loop2: Failed to initialize $Extend. [ 844.339884][T20210] syz.8.4090: attempt to access beyond end of device [ 844.339884][T20210] loop8: rw=2049, sector=77912, nr_sectors = 8 limit=40427 [ 844.405004][T20210] syz.8.4090: attempt to access beyond end of device [ 844.405004][T20210] loop8: rw=2049, sector=77928, nr_sectors = 8 limit=40427 [ 844.463282][T20239] syz.8.4090: attempt to access beyond end of device [ 844.463282][T20239] loop8: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 844.464189][T20210] syz.8.4090: attempt to access beyond end of device [ 844.464189][T20210] loop8: rw=2049, sector=77944, nr_sectors = 24 limit=40427 [ 844.505920][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.609970][T20210] syz.8.4090: attempt to access beyond end of device [ 844.609970][T20210] loop8: rw=2049, sector=77992, nr_sectors = 32 limit=40427 [ 844.657617][T20239] syz.8.4090: attempt to access beyond end of device [ 844.657617][T20239] loop8: rw=2049, sector=78048, nr_sectors = 8 limit=40427 [ 844.698734][T20210] syz.8.4090: attempt to access beyond end of device [ 844.698734][T20210] loop8: rw=2049, sector=78056, nr_sectors = 16 limit=40427 [ 844.826698][T17510] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 844.987957][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.544634][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.067269][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 846.093766][T16329] IPVS: starting estimator thread 0... [ 846.186306][T20272] IPVS: using max 17 ests per chain, 40800 per kthread [ 846.326354][T20261] loop2: detected capacity change from 0 to 40427 [ 846.349757][T20261] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 846.392863][T20261] F2FS-fs (loop2): Image doesn't support compression [ 846.405558][T20261] F2FS-fs (loop2): Image doesn't support compression [ 846.439951][T20261] F2FS-fs (loop2): invalid crc value [ 846.468816][T20261] F2FS-fs (loop2): Found nat_bits in checkpoint [ 846.584592][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.617688][T20261] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 846.780346][T16192] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 846.879766][T13713] IPVS: stop unused estimator thread 0... [ 847.202233][T20274] loop3: detected capacity change from 0 to 40427 [ 847.223997][T20274] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 847.232567][T20274] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 847.257363][T20274] F2FS-fs (loop3): Image doesn't support compression [ 847.271895][T20274] F2FS-fs (loop3): invalid crc value [ 847.322362][T20274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 847.473284][T20274] F2FS-fs (loop3): Start checkpoint disabled! [ 847.502938][T20274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 847.624839][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.749116][T20274] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xf6b/0x1360 [ 847.791116][T20274] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 847.807641][T20274] overlayfs: failed to verify upper (/file1, ino=14, err=-5) [ 847.825072][T20274] overlayfs: failed to verify index dir 'upper' xattr [ 847.832000][T20274] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 848.023986][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.104220][T12107] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 848.165098][T13718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.193036][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.225576][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.303995][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.500138][T20330] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 850.066103][T20341] binder: 20338:20341 ioctl c0306201 0 returned -14 [ 850.163946][T11957] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 850.343933][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.374375][T11957] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.413730][T11957] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 850.444420][T11957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.472584][T11957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 850.506931][T11957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 850.542690][T11957] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 850.572843][T11957] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 850.593451][T11957] usb 4-1: Product: syz [ 850.603639][T11957] usb 4-1: Manufacturer: syz [ 850.636178][T11957] cdc_wdm 4-1:1.0: skipping garbage [ 850.659162][T11957] cdc_wdm 4-1:1.0: skipping garbage [ 850.689595][T11957] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 850.717037][T11957] cdc_wdm 4-1:1.0: Unknown control protocol [ 850.871470][T20348] loop2: detected capacity change from 0 to 32768 [ 850.891453][T20348] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 851.049788][T20350] loop8: detected capacity change from 0 to 32768 [ 851.064637][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.074442][ T7549] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 851.091111][T20350] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.4142 (20350) [ 851.114621][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 851.123635][ C0] wdm_int_callback: 15 callbacks suppressed [ 851.123662][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 851.136259][ C0] wdm_int_callback: 15 callbacks suppressed [ 851.136284][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 851.155039][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 851.161885][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 851.168609][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 851.175279][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 851.184210][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 851.190915][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 851.197510][T16329] usb 4-1: USB disconnect, device number 21 [ 851.203829][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 851.210543][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 851.216741][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 851.246432][T20350] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 851.268239][T20350] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 851.284008][T20350] BTRFS info (device loop8): force zlib compression, level 3 [ 851.325837][T20350] BTRFS info (device loop8): force clearing of disk cache [ 851.340559][T20350] BTRFS info (device loop8): turning off barriers [ 851.350326][T20350] BTRFS info (device loop8): doing ref verification [ 851.358621][T20350] BTRFS info (device loop8): enabling disk space caching [ 851.381123][T20350] BTRFS info (device loop8): disk space caching is enabled [ 851.389330][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.557130][T20350] BTRFS info (device loop8): enabling ssd optimizations [ 851.564543][T20350] BTRFS info (device loop8): auto enabling async discard [ 851.578794][T20350] BTRFS info (device loop8): rebuilding free space tree [ 851.642249][T20350] BTRFS info (device loop8): disabling free space tree [ 851.654230][T20350] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 851.694130][T20350] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 851.873420][T17510] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 851.993937][ T5815] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 852.240456][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 852.259353][ T5815] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 852.290758][T20380] loop3: detected capacity change from 0 to 4096 [ 852.301350][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.346400][ T5815] usb 3-1: config 0 descriptor?? [ 852.424133][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.597341][T16329] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 852.813743][T16329] usb 9-1: Using ep0 maxpacket: 8 [ 852.825704][ T5815] wacom 0003:056A:0315.0041: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 852.855518][T16329] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 852.888343][ T5815] wacom 0003:056A:0315.0041: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 852.893805][T16329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 852.926430][ T5815] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.0041/input/input67 [ 852.984079][T16329] usb 9-1: Product: syz [ 852.988344][T16329] usb 9-1: Manufacturer: syz [ 852.993524][T16329] usb 9-1: SerialNumber: syz [ 853.085953][T16329] usb 9-1: config 0 descriptor?? [ 853.202142][ T5815] usb 3-1: USB disconnect, device number 26 [ 853.202827][T16329] gspca_main: sq905-2.14.0 probing 2770:9120 [ 853.467121][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.874444][T13727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.883454][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.898045][T20387] loop3: detected capacity change from 0 to 32768 [ 853.904687][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.014678][T20387] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 854.119250][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.146831][T16329] gspca_sq905: bulk read fail (-22) len 0/4 [ 854.154318][T16329] sq905: probe of 9-1:0.0 failed with error -5 [ 854.299249][T20387] XFS (loop3): Ending clean mount [ 854.354109][T12111] usb 9-1: USB disconnect, device number 41 [ 854.549749][T16156] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 854.989919][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.339068][T20417] loop3: detected capacity change from 0 to 128 [ 855.411108][T20419] netlink: 'syz.8.4161': attribute type 4 has an invalid length. [ 855.938631][T20429] loop8: detected capacity change from 0 to 2048 [ 856.024443][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.069024][T20434] loop3: detected capacity change from 0 to 256 [ 856.173707][T20434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 856.553799][T12111] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 856.733758][T11957] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 856.763703][T12111] usb 3-1: Using ep0 maxpacket: 16 [ 856.780418][T12111] usb 3-1: config 0 has no interfaces? [ 856.797433][T12111] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 856.817697][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.847946][T12111] usb 3-1: Product: syz [ 856.859922][T12111] usb 3-1: Manufacturer: syz [ 856.873981][T12111] usb 3-1: SerialNumber: syz [ 856.888709][T12111] r8152-cfgselector 3-1: config 0 descriptor?? [ 856.941366][T11957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 856.974102][T11957] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 856.999466][T11957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.018601][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.038955][T20442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 857.051987][T11957] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 857.069044][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.143906][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.165724][T12111] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 857.198147][T20445] loop8: detected capacity change from 0 to 2048 [ 857.217843][T13729] usb 3-1: config 0 descriptor?? [ 857.296497][T12111] usb 4-1: USB disconnect, device number 22 [ 857.325250][T20445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.385179][T13729] usb 3-1: can't set config #0, error -71 [ 857.398076][ T5854] usb 3-1: USB disconnect, device number 27 [ 857.470392][ T28] audit: type=1800 audit(1771012841.203:431): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4171" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 857.617563][T17510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.105647][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.283679][T12111] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 858.519419][T12111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 858.548716][T12111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.573789][T12111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.589100][T12111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 858.615055][T12111] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 858.624540][T12111] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 858.634060][T12111] usb 3-1: Manufacturer: syz [ 858.641343][T12111] usb 3-1: config 0 descriptor?? [ 858.671035][T20468] bridge_slave_0: left allmulticast mode [ 858.714027][T20468] bridge_slave_0: left promiscuous mode [ 858.725351][T20468] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.767420][T20468] bridge_slave_1: left allmulticast mode [ 858.791284][T20468] bridge_slave_1: left promiscuous mode [ 858.800244][T20471] overlayfs: failed to clone upperpath [ 858.807756][T20468] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.854133][T20468] bond0: (slave bond_slave_0): Releasing backup interface [ 858.910988][T20468] bond0: (slave bond_slave_1): Releasing backup interface [ 859.076393][T12111] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 859.102861][T12111] appleir 0003:05AC:8243.0042: No inputs registered, leaving [ 859.149624][T20468] team0: Port device team_slave_0 removed [ 859.154406][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.169945][T12111] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 859.190390][T20468] team0: Port device team_slave_1 removed [ 859.226375][T20468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.264478][T20468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.284312][T20468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.306330][T20468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.361743][T11957] usb 3-1: USB disconnect, device number 28 [ 859.402140][T20478] fido_id[20478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 859.625117][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.654717][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.687598][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.187527][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.904411][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 860.976918][T11957] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 861.186712][T11957] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.205475][T11957] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.216445][T11957] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.226433][T11957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.240227][T20502] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 861.263256][T11957] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 861.640827][T11957] usb 9-1: USB disconnect, device number 42 [ 861.805131][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.824409][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.097347][T20553] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 863.224684][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.803755][T11957] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 863.874042][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.968922][T20562] loop8: detected capacity change from 0 to 32768 [ 864.013717][T11957] usb 5-1: Using ep0 maxpacket: 32 [ 864.021322][T11957] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 864.031115][T11957] usb 5-1: config 0 has no interface number 0 [ 864.043833][T11957] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 864.052972][T11957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.061603][T11957] usb 5-1: Product: syz [ 864.068083][T20562] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 864.088535][T11957] usb 5-1: Manufacturer: syz [ 864.105555][T11957] usb 5-1: SerialNumber: syz [ 864.133453][T11957] usb 5-1: config 0 descriptor?? [ 864.147476][T11957] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 864.213822][T20562] XFS (loop8): Ending clean mount [ 864.245320][T20562] XFS (loop8): Quotacheck needed: Please wait. [ 864.414896][T11957] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 864.456575][T11957] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 864.491207][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.555919][T20562] XFS (loop8): Quotacheck: Done. [ 864.575563][T20562] XFS (loop8): User initiated shutdown received. [ 864.586369][T20562] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 864.622993][T20562] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 864.793135][T17510] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 864.866631][T20569] loop3: detected capacity change from 0 to 40427 [ 864.876677][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 864.878026][T12111] usb 5-1: USB disconnect, device number 59 [ 864.920006][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.949949][T12111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 864.964355][T20569] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 864.972888][T20569] F2FS-fs (loop3): Image doesn't support compression [ 865.003845][T20569] F2FS-fs (loop3): Image doesn't support compression [ 865.035056][T12111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 865.063809][T20569] F2FS-fs (loop3): invalid crc value [ 865.094712][T12111] quatech2 5-1:0.51: device disconnected [ 865.131445][T20569] F2FS-fs (loop3): Found nat_bits in checkpoint [ 865.354228][T20569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 865.707744][T16156] bio_check_eod: 9 callbacks suppressed [ 865.707762][T16156] syz-executor: attempt to access beyond end of device [ 865.707762][T16156] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 865.763769][T16156] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 865.774909][T20584] loop2: detected capacity change from 0 to 32768 [ 865.862953][T20584] [ 865.862953][T20584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 865.862953][T20584] [ 865.944050][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.033857][T20584] read_mapping_page failed! [ 866.039833][T20584] ERROR: (device loop2): txCommit: [ 866.039833][T20584] [ 866.087872][T20584] read_mapping_page failed! [ 866.092464][T20584] ERROR: (device loop2): txCommit: [ 866.092464][T20584] [ 866.144088][T20584] jfs_create: dtSearch returned -17 [ 866.198994][T16192] [ 866.198994][T16192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 866.198994][T16192] [ 866.227951][T16192] [ 866.227951][T16192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 866.227951][T16192] [ 866.264004][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.544166][ T5815] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 866.723677][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 866.746614][ T5815] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 866.771475][ T5815] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 866.784648][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 866.794002][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 866.804646][ T5815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 866.826213][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 866.853460][ T5815] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 866.873701][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.892858][ T5815] usb 5-1: config 0 descriptor?? [ 866.990343][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.123207][T20610] loop3: detected capacity change from 0 to 32768 [ 867.168258][ T5815] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 867.204281][T20610] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 867.276549][T20610] XFS (loop3): Ending clean mount [ 867.381359][T16329] usb 5-1: USB disconnect, device number 60 [ 867.395813][T16329] usblp0: removed [ 867.455732][ T28] audit: type=1804 audit(1771012851.193:432): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4230" name="/newroot/263/file1/file1" dev="loop3" ino=4422 res=1 errno=0 [ 867.540260][T16156] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 868.026404][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.437446][T20651] loop2: detected capacity change from 0 to 128 [ 868.475235][T20651] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 868.593212][T20651] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.651634][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 868.677291][T20651] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 18, filenames 0) [ 868.769411][T16192] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 869.077205][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.162163][ T5781] Bluetooth: Wrong link type (-71) [ 869.304119][T16329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.333251][T20667] loop8: detected capacity change from 0 to 8192 [ 870.104139][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.691279][T20675] loop8: detected capacity change from 0 to 40427 [ 870.819100][T20675] F2FS-fs (loop8): Found nat_bits in checkpoint [ 870.929360][T20691] loop2: detected capacity change from 0 to 4096 [ 870.936788][T20675] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 871.007465][T20693] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 871.153926][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.794260][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.800637][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.184087][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.250356][T20711] loop8: detected capacity change from 0 to 1024 [ 872.344601][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.362324][T20713] smc: net device bond0 applied user defined pnetid SYZ2 [ 872.372721][T20713] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4268'. [ 872.507504][T20711] hfsplus: xattr search failed [ 872.546190][T20715] Bluetooth: hci0: unsupported parameter 4095 [ 872.557219][T20715] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 872.614728][T20713] smc: removing net device bond0 with user defined pnetid SYZ2 [ 872.687718][T20713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.747869][T20713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.800128][T20713] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 872.813288][T20713] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.820725][T20713] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.855861][T20713] bond0 (unregistering): Released all slaves [ 872.971396][T20721] batadv0: entered promiscuous mode [ 873.029177][T20721] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 873.223978][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.317918][T20731] loop3: detected capacity change from 0 to 512 [ 873.395857][T20731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.435154][T20731] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.716417][T16156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.158123][T20757] loop8: detected capacity change from 0 to 2048 [ 874.237135][T20757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.251786][T20757] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 874.285088][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.498503][T17510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.930573][T20754] loop2: detected capacity change from 0 to 40427 [ 874.945353][T20754] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x7ffff [ 874.968257][T20754] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c [ 875.008551][T20754] F2FS-fs (loop2): invalid crc value [ 875.030365][T20754] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 875.070548][T20754] F2FS-fs (loop2): Found nat_bits in checkpoint [ 875.196420][T20754] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 875.275179][T20754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 875.307292][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.316507][T20754] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 875.384053][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.424713][T20754] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_mpage_readpages+0xc1a/0x1ea0 [ 875.450385][T20754] syz.2.4285: attempt to access beyond end of device [ 875.450385][T20754] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 875.502760][T16192] syz-executor: attempt to access beyond end of device [ 875.502760][T16192] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 875.531181][T16192] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 875.668611][T20786] bridge_slave_0: default FDB implementation only supports local addresses [ 876.165074][T16329] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 876.344115][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.364243][T16329] usb 9-1: Using ep0 maxpacket: 32 [ 876.385328][T16329] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 876.412582][T16329] usb 9-1: config 0 has no interface number 0 [ 876.442885][T16329] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 876.472741][T16329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.511201][T16329] usb 9-1: Product: syz [ 876.530088][T16329] usb 9-1: Manufacturer: syz [ 876.548663][T16329] usb 9-1: SerialNumber: syz [ 876.598069][T16329] usb 9-1: config 0 descriptor?? [ 876.608415][T16329] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 876.832671][T16329] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 876.894285][T16329] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 877.203752][ T5815] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 877.250397][T20828] loop3: detected capacity change from 0 to 256 [ 877.304495][T20828] FAT-fs (loop3): Directory bread(block 64) failed [ 877.317295][T20828] FAT-fs (loop3): Directory bread(block 65) failed [ 877.325698][T20828] FAT-fs (loop3): Directory bread(block 66) failed [ 877.332477][T20828] FAT-fs (loop3): Directory bread(block 67) failed [ 877.345694][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 877.350590][T20828] FAT-fs (loop3): Directory bread(block 68) failed [ 877.363187][T20828] FAT-fs (loop3): Directory bread(block 69) failed [ 877.375884][T16329] usb 9-1: USB disconnect, device number 43 [ 877.380143][T20828] FAT-fs (loop3): Directory bread(block 70) failed [ 877.395809][T20828] FAT-fs (loop3): Directory bread(block 71) failed [ 877.404181][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.417533][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.427058][T16329] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 877.437954][T20828] FAT-fs (loop3): Directory bread(block 72) failed [ 877.446165][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.470015][T16329] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 877.470018][ T5815] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 877.472247][T16329] quatech2 9-1:0.51: device disconnected [ 877.506709][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 877.513858][T20828] FAT-fs (loop3): Directory bread(block 73) failed [ 877.538838][ T5815] usb 5-1: SerialNumber: syz [ 877.660276][T20828] syz.3.4303: attempt to access beyond end of device [ 877.660276][T20828] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 877.679014][T20828] syz.3.4303: attempt to access beyond end of device [ 877.679014][T20828] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 877.698316][ T28] audit: type=1800 audit(1771012861.433:433): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4303" name="file0" dev="loop3" ino=1048804 res=0 errno=0 [ 877.779993][ T5815] usb 5-1: 0:2 : does not exist [ 877.820550][ T5815] usb 5-1: USB disconnect, device number 61 [ 877.886324][ T7549] udevd[7549]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.428531][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.459395][T20837] UBIFS error (pid: 20837): cannot open "./file0", error -22 [ 878.555042][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.263773][ T5854] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 879.447039][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.470078][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.496912][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.528175][ T5854] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.555802][T12111] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 879.573712][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.599952][ T5854] usb 4-1: config 0 descriptor?? [ 879.624074][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.763808][T12111] usb 3-1: Using ep0 maxpacket: 8 [ 879.805593][T12111] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 879.833789][T12111] usb 3-1: config 179 has no interface number 0 [ 879.840309][T12111] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 879.855554][T12111] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 879.867499][T12111] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 879.879635][T12111] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 879.891204][T12111] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 879.910010][T12111] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 879.919592][T12111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.948223][T20855] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 880.069044][ T5854] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 880.120253][ T5854] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 880.217134][T20855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.244836][T20855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.512927][ T5854] usb 3-1: USB disconnect, device number 29 [ 880.512994][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 880.527328][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 880.665466][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.183830][T12804] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 881.285541][ C0] plantronics 0003:047F:FFFF.0043: usb_submit_urb(ctrl) failed: -1 [ 881.319109][T11957] usb 4-1: USB disconnect, device number 23 [ 881.378450][T12804] usb 9-1: config 0 has no interfaces? [ 881.399487][T12804] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 881.414301][T12804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.443045][T12804] usb 9-1: Product: syz [ 881.453230][T12804] usb 9-1: Manufacturer: syz [ 881.463655][T12804] usb 9-1: SerialNumber: syz [ 881.478430][T12732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.489212][T12804] usb 9-1: config 0 descriptor?? [ 881.704118][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.998439][T11957] usb 9-1: USB disconnect, device number 44 [ 882.030756][T20891] syz.4.4329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 882.080806][T20891] CPU: 1 PID: 20891 Comm: syz.4.4329 Not tainted syzkaller #0 [ 882.088440][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 882.098620][T20891] Call Trace: [ 882.102134][T20891] [ 882.105102][T20891] dump_stack_lvl+0x18c/0x250 [ 882.109836][T20891] ? show_regs_print_info+0x20/0x20 [ 882.115085][T20891] ? load_image+0x400/0x400 [ 882.119643][T20891] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 882.126106][T20891] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 882.132740][T20891] warn_alloc+0x246/0x340 [ 882.137126][T20891] ? stack_trace_save+0xaa/0x100 [ 882.142141][T20891] ? zone_watermark_ok_safe+0x230/0x230 [ 882.147809][T20891] ? kasan_set_track+0x5f/0x70 [ 882.152634][T20891] ? kasan_set_track+0x4e/0x70 [ 882.157462][T20891] ? __kasan_kmalloc+0x8f/0xa0 [ 882.162334][T20891] ? xsk_init_queue+0xad/0x100 [ 882.167156][T20891] ? xsk_setsockopt+0x4e5/0x760 [ 882.172053][T20891] ? do_sock_setsockopt+0x175/0x1a0 [ 882.177294][T20891] ? __x64_sys_setsockopt+0x182/0x200 [ 882.182705][T20891] __vmalloc_node_range+0x126/0x1330 [ 882.188058][T20891] ? free_vm_area+0x50/0x50 [ 882.192613][T20891] vmalloc_user+0x74/0x80 [ 882.196980][T20891] ? xskq_create+0xbf/0x170 [ 882.201557][T20891] xskq_create+0xbf/0x170 [ 882.205926][T20891] xsk_init_queue+0xad/0x100 [ 882.210731][T20891] xsk_setsockopt+0x4e5/0x760 [ 882.215464][T20891] ? xsk_poll+0x680/0x680 [ 882.219844][T20891] ? __fget_files+0x28/0x4b0 [ 882.224482][T20891] ? __fget_files+0x28/0x4b0 [ 882.229123][T20891] ? aa_sock_opt_perm+0x74/0x100 [ 882.234100][T20891] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 882.239683][T20891] ? security_socket_setsockopt+0x7e/0xa0 [ 882.245433][T20891] ? xsk_poll+0x680/0x680 [ 882.249812][T20891] do_sock_setsockopt+0x175/0x1a0 [ 882.254878][T20891] ? __fdget+0x180/0x210 [ 882.259160][T20891] __x64_sys_setsockopt+0x182/0x200 [ 882.264401][T20891] do_syscall_64+0x55/0xa0 [ 882.268854][T20891] ? clear_bhb_loop+0x40/0x90 [ 882.273562][T20891] ? clear_bhb_loop+0x40/0x90 [ 882.278279][T20891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.284223][T20891] RIP: 0033:0x7ffb95d9bf79 [ 882.288818][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.308482][T20891] RSP: 002b:00007ffb96bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 882.317049][T20891] RAX: ffffffffffffffda RBX: 00007ffb96015fa0 RCX: 00007ffb95d9bf79 [ 882.325149][T20891] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 882.333249][T20891] RBP: 00007ffb95e327e0 R08: 0000000000000004 R09: 0000000000000000 [ 882.341261][T20891] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 882.349292][T20891] R13: 00007ffb96016038 R14: 00007ffb96015fa0 R15: 00007ffef8a79e58 [ 882.357308][T20891] [ 882.370213][T20893] bridge_slave_0: left allmulticast mode [ 882.383728][T20891] Mem-Info: [ 882.387108][T20891] active_anon:22944 inactive_anon:0 isolated_anon:0 [ 882.387108][T20891] active_file:16212 inactive_file:41077 isolated_file:0 [ 882.387108][T20891] unevictable:384 dirty:146 writeback:0 [ 882.387108][T20891] slab_reclaimable:11659 slab_unreclaimable:97179 [ 882.387108][T20891] mapped:25298 shmem:13214 pagetables:1202 [ 882.387108][T20891] sec_pagetables:0 bounce:0 [ 882.387108][T20891] kernel_misc_reclaimable:0 [ 882.387108][T20891] free:1318163 free_pcp:8876 free_cma:0 [ 882.432997][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.444246][T20893] bridge_slave_0: left promiscuous mode [ 882.450132][T20893] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.467467][T20891] Node 0 active_anon:90240kB inactive_anon:0kB active_file:64784kB inactive_file:164108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101128kB dirty:584kB writeback:0kB shmem:51320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13512kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no [ 882.499971][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.519579][T20893] bridge_slave_1: left allmulticast mode [ 882.533151][T20893] bridge_slave_1: left promiscuous mode [ 882.538780][T20891] Node 1 active_anon:1536kB inactive_anon:0kB active_file:64kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 882.569460][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.579358][T20891] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.587404][T20893] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.606882][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.611450][T20891] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 882.627129][T20891] Node 0 DMA32 free:1371224kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:90112kB inactive_anon:0kB active_file:64784kB inactive_file:163280kB unevictable:1536kB writepending:688kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:4736kB local_pcp:2008kB free_cma:0kB [ 882.657758][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.666593][T20891] lowmem_reserve[]: 0 0 0 0 0 [ 882.672042][T20891] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.703322][T20891] lowmem_reserve[]: 0 0 0 0 0 [ 882.711756][T20891] Node 1 Normal free:3885812kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:64kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:31200kB local_pcp:19668kB free_cma:0kB [ 882.741622][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.745067][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.757234][T20893] bond0: (slave bond_slave_0): Releasing backup interface [ 882.769391][T20891] lowmem_reserve[]: 0 0 0 0 0 [ 882.775701][T20891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 882.834579][T20891] Node 0 DMA32: 3412*4kB (UM) 1855*8kB (UME) 746*16kB (UME) 507*32kB (UME) 261*64kB (UME) 144*128kB (UME) 108*256kB (UM) 56*512kB (UME) 22*1024kB (UME) 10*2048kB (UME) 288*4096kB (UM) = 1370760kB [ 882.860766][T20893] bond0: (slave bond_slave_1): Releasing backup interface [ 882.868537][T20891] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 882.886392][T20891] Node 1 Normal: 253*4kB (UME) 58*8kB (UME) 55*16kB (UME) 108*32kB (UME) 39*64kB (UME) 7*128kB (UME) 5*256kB (ME) 1*512kB (M) 0*1024kB 0*2048kB 946*4096kB (M) = 3885812kB [ 882.906079][T20891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.963088][T20891] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 882.983419][T20891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.999314][T20891] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 883.010064][T20891] 69850 total pagecache pages [ 883.015556][T20891] 0 pages in swap cache [ 883.020529][T20891] Free swap = 124604kB [ 883.024902][T20891] Total swap = 124996kB [ 883.029108][T20891] 2097051 pages RAM [ 883.033100][T20891] 0 pages HighMem/MovableOnly [ 883.039844][T20891] 416922 pages reserved [ 883.053623][T20891] 0 pages cma reserved [ 883.097743][T20893] team0: Port device team_slave_0 removed [ 883.142626][T20893] team0: Port device team_slave_1 removed [ 883.167833][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.176390][T20893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.211461][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.223903][T20893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.290471][T20893] bond0: (slave netdevsim0): Releasing backup interface [ 883.374460][T20893] bond0: (slave vlan2): Releasing backup interface [ 883.405352][T20893] batadv0: left promiscuous mode [ 883.621743][T20897] pim6reg: entered allmulticast mode [ 883.632631][T20898] pim6reg: left allmulticast mode [ 883.787823][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.158469][T20900] loop8: detected capacity change from 0 to 40427 [ 884.181380][T20900] F2FS-fs (loop8): invalid crc value [ 884.227429][T20900] F2FS-fs (loop8): Found nat_bits in checkpoint [ 884.463859][T20900] F2FS-fs (loop8): Start checkpoint disabled! [ 884.495814][T20900] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 884.509173][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.697885][T20900] Invalid argument reading file caps for ./file0 [ 884.806584][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.853769][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.996840][T20939] loop2: detected capacity change from 0 to 512 [ 885.003814][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.040025][T20939] EXT4-fs: Ignoring removed bh option [ 885.084532][T13713] kworker/u4:9: attempt to access beyond end of device [ 885.084532][T13713] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 885.109611][T20939] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 885.161110][T13713] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 885.179098][T13713] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 885.199540][T20939] EXT4-fs (loop2): 1 truncate cleaned up [ 885.235069][T20939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.428168][T20946] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 885.662767][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.864167][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.200694][T20964] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 886.673851][T16422] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 886.887158][T16422] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 886.909748][T16422] usb 9-1: config 0 has no interface number 0 [ 886.917061][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.934205][T16422] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.953932][T16422] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.964351][T16422] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 886.982476][T16422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.021937][T16422] usb 9-1: config 0 descriptor?? [ 887.507781][T16422] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.0044/input/input70 [ 887.527444][T20993] loop3: detected capacity change from 0 to 512 [ 887.588910][T12732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.669761][T20993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 887.712212][T20993] System zones: 1-12 [ 887.744771][T20971] loop8: detected capacity change from 0 to 2048 [ 887.763117][T20993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4366: error while reading EA inode 32 err=-116 [ 887.785956][T20971] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=18576, location=18576 [ 887.845730][T16422] holtek_kbd 0003:04D9:A055.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 887.894114][T20993] EXT4-fs (loop3): Remounting filesystem read-only [ 887.906884][T20971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.938292][T20993] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 887.985227][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.021104][T20993] EXT4-fs (loop3): 1 orphan inode deleted [ 888.061274][T20993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.159314][T21000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.167954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.304567][T20999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.317347][T13731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.354317][T20999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.380396][T16422] usb 9-1: USB disconnect, device number 45 [ 888.414649][T16156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.469991][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.488953][T21004] loop2: detected capacity change from 0 to 2048 [ 888.557937][T21008] loop3: detected capacity change from 0 to 128 [ 888.581171][T21004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.720440][ T28] audit: type=1800 audit(1771012872.453:434): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4369" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 888.902238][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.078931][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.529779][T21025] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 889.613707][T16422] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 889.701464][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4378'. [ 889.721955][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 889.739542][T21029] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.748987][T21029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.760565][T21029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.769427][T21029] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.789865][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4378'. [ 889.799137][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 889.816040][T16422] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 889.831147][T16422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.856294][T16422] usb 9-1: config 0 descriptor?? [ 889.864485][T16422] cp210x 9-1:0.0: cp210x converter detected [ 890.277944][T16422] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 890.311136][T16422] usb 9-1: cp210x converter now attached to ttyUSB0 [ 890.521854][T16422] usb 9-1: USB disconnect, device number 46 [ 890.544423][T16422] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 890.598185][T16422] cp210x 9-1:0.0: device disconnected [ 890.875879][T21061] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 891.863250][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4402'. [ 892.184411][ T5854] net_ratelimit: 3 callbacks suppressed [ 892.184433][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.220572][T21097] ip6gretap1: entered promiscuous mode [ 892.236512][T21097] ip6gretap1: entered allmulticast mode [ 892.423797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.871000][T21113] loop8: detected capacity change from 0 to 256 [ 892.972670][T21109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 893.475234][T16422] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 893.523686][T11957] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 893.668859][T16422] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 893.685696][T16422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.702258][T16422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.712834][T16422] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 893.729816][T11957] usb 5-1: Using ep0 maxpacket: 32 [ 893.737364][T11957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.743886][T16422] usb 9-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 893.760791][T11957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.774393][T16422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.794015][T11957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 893.796296][T16422] usb 9-1: config 0 descriptor?? [ 893.827818][T11957] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 893.837564][T21122] loop2: detected capacity change from 0 to 32768 [ 893.848996][T11957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.889939][T11957] usb 5-1: config 0 descriptor?? [ 893.916173][T21122] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 894.029424][T21122] XFS (loop2): Ending clean mount [ 894.040694][T21122] XFS (loop2): Quotacheck needed: Please wait. [ 894.185491][T21122] XFS (loop2): Quotacheck: Done. [ 894.279720][T16422] wacom 0003:056A:0015.0045: unknown main item tag 0x0 [ 894.331729][T16422] wacom 0003:056A:0015.0045: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 894.378538][T16422] wacom 0003:056A:0015.0045: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.8-1/input0 [ 894.438202][T16422] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0015.0045/input/input71 [ 894.440862][T11957] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0046/input/input74 [ 894.676434][T21122] XFS (loop2): User initiated shutdown received. [ 894.703998][T21122] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 894.716550][T11957] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0046/input/input75 [ 894.772009][T21122] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 894.856531][T16422] usb 9-1: USB disconnect, device number 47 [ 894.898938][T16192] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 894.945390][T11957] kye 0003:0458:5011.0046: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 895.313881][T11957] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 895.505940][T11957] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.534816][T11957] usb 4-1: config 0 has no interface number 0 [ 895.541306][T11957] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.563383][T11957] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.579071][ T28] audit: type=1326 audit(1771012879.313:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21151 comm="syz.2.4423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77a359bf79 code=0x0 [ 895.601343][T11957] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 895.610919][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.627719][ C1] kye 0003:0458:5011.0046: usb_submit_urb(ctrl) failed: -1 [ 895.645899][T11957] usb 4-1: config 0 descriptor?? [ 895.933873][T12111] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 896.085169][T11957] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0047/input/input76 [ 896.113726][T12111] usb 9-1: Using ep0 maxpacket: 16 [ 896.134264][T12111] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 896.146069][T12111] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 896.163728][T12111] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.202159][T12111] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.239614][T12111] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 896.258432][T11957] holtek_kbd 0003:04D9:A055.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 896.290456][T12111] usb 9-1: SerialNumber: syz [ 896.323958][T21150] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 896.361078][T21147] loop3: detected capacity change from 0 to 2048 [ 896.396090][T21147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 896.458719][ T5854] usb 5-1: USB disconnect, device number 62 [ 896.471260][T21147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.727849][T21150] loop8: detected capacity change from 0 to 2048 [ 896.869722][T11957] usb 4-1: USB disconnect, device number 24 [ 896.897077][T21150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.926434][T12111] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 896.940030][T12111] usb 9-1: USB disconnect, device number 48 [ 897.845534][T17510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.029865][T21187] Invalid argument reading file caps for ./file0 [ 898.239637][T21192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4437'. [ 898.320187][T21198] binder: 21195:21198 ioctl 40046205 0 returned -22 [ 899.111242][T21210] loop8: detected capacity change from 0 to 40427 [ 899.119509][T21210] F2FS-fs (loop8): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 899.128926][T21210] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 899.144975][T21210] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 899.153187][T21210] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 899.161671][T21210] F2FS-fs (loop8): Image doesn't support compression [ 899.179875][T21210] F2FS-fs (loop8): invalid crc value [ 899.213418][T21210] F2FS-fs (loop8): Found nat_bits in checkpoint [ 899.269856][T21210] F2FS-fs (loop8): Start checkpoint disabled! [ 899.287639][T21210] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 899.294899][T21210] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 899.409497][T21210] F2FS-fs (loop8): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x108/0x1030 [ 899.465885][ T5854] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 899.669082][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 899.672660][T13722] kworker/u4:13: attempt to access beyond end of device [ 899.672660][T13722] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 899.697243][ T5854] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 899.708520][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 899.739878][T13722] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 899.747035][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 899.770301][T13722] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 899.784223][T13722] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 899.809173][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 899.836396][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 899.861939][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 899.883674][ T5854] usb 4-1: Product: syz [ 899.887914][ T5854] usb 4-1: Manufacturer: syz [ 899.934866][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 899.940159][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 899.965795][ T5854] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 899.974988][ T5854] cdc_wdm 4-1:1.0: Unknown control protocol [ 900.155784][T12804] usb 4-1: USB disconnect, device number 25 [ 900.290145][T21214] loop2: detected capacity change from 0 to 32768 [ 900.417824][T21214] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 900.417824][T21214] [ 900.853742][T12804] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 901.014091][ T5854] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 901.058270][T12804] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 901.077369][T12804] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 901.103786][T12804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 901.112850][T12804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 901.159819][T12804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 901.182278][T12804] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 901.192022][T12804] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 901.217768][T12804] usb 4-1: Product: syz [ 901.222033][T12804] usb 4-1: Manufacturer: syz [ 901.237284][ T5854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.259897][T12804] cdc_wdm 4-1:1.0: skipping garbage [ 901.269766][ T5854] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 901.278388][T12804] cdc_wdm 4-1:1.0: skipping garbage [ 901.304520][T12804] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 901.314421][ T5854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.328666][T12804] cdc_wdm 4-1:1.0: Unknown control protocol [ 901.346133][ T5854] usb 9-1: config 0 descriptor?? [ 901.495549][T11957] usb 4-1: USB disconnect, device number 26 [ 901.739630][T21244] netlink: 'syz.2.4457': attribute type 1 has an invalid length. [ 901.770550][T21244] netlink: 'syz.2.4457': attribute type 2 has an invalid length. [ 901.809614][T12804] usb 9-1: USB disconnect, device number 49 [ 903.309731][T21250] loop2: detected capacity change from 0 to 131072 [ 903.363764][T21250] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 903.371975][T21250] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 903.402534][T21250] F2FS-fs (loop2): invalid crc value [ 903.485306][T21250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 903.548429][T21250] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 903.555714][T21250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 905.538888][T21276] loop8: detected capacity change from 0 to 2048 [ 905.675878][T21279] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 906.273759][T12804] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 906.474309][T12804] usb 4-1: Using ep0 maxpacket: 16 [ 906.513706][T12804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 906.520374][T12804] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 906.537297][T12804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.558316][T12804] usb 4-1: config 0 descriptor?? [ 907.155828][T21297] loop2: detected capacity change from 0 to 1024 [ 907.178932][T21297] EXT4-fs: Ignoring removed orlov option [ 907.194821][T21297] EXT4-fs: inline encryption not supported [ 907.265199][T21297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.307152][T12111] usb 4-1: USB disconnect, device number 27 [ 907.491886][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.647407][T21293] loop8: detected capacity change from 0 to 32768 [ 908.118342][T21315] loop2: detected capacity change from 0 to 128 [ 908.174787][T21315] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 908.275187][T21315] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 908.338917][T21318] team0: Port device syz_tun added [ 908.447178][T21319] team0: Port device syz_tun removed [ 908.493986][T16192] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 908.766688][T21323] loop8: detected capacity change from 0 to 256 [ 908.816819][T21323] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 908.883704][T21323] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 908.947595][T21323] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 908.978879][T21328] loop3: detected capacity change from 0 to 1024 [ 909.115911][ T28] audit: type=1800 audit(1771012892.843:436): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4487" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 909.486706][ C1] Unknown status report in ack skb [ 909.720139][T21341] loop3: detected capacity change from 0 to 512 [ 909.863878][T21341] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.4493: invalid block [ 909.912841][T21341] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4493: invalid indirect mapped block 10 (level 1) [ 909.936416][T21346] loop2: detected capacity change from 0 to 512 [ 909.962924][T21341] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4493: invalid indirect mapped block 8 (level 1) [ 909.997715][T21346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.031210][T21341] EXT4-fs (loop3): 1 truncate cleaned up [ 910.048777][T21341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.085107][T21346] fs-verity: sha256 using implementation "sha256-avx2" [ 910.108352][T21346] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #16: comm syz.2.4494: verity is only allowed on extent-based files [ 910.248535][T16156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.550094][T21352] netlink: 'syz.4.4496': attribute type 4 has an invalid length. [ 910.582242][T21352] netlink: 'syz.4.4496': attribute type 4 has an invalid length. [ 910.626759][T21339] loop8: detected capacity change from 0 to 40427 [ 910.654055][T21339] F2FS-fs (loop8): invalid crc value [ 910.705786][T21339] F2FS-fs (loop8): Found nat_bits in checkpoint [ 910.780011][T16192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.825728][T13727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.834881][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.844666][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.864533][T13713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.881516][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.892194][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.901806][T21339] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 910.902034][T12732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.098078][T21339] syz.8.4492: attempt to access beyond end of device [ 911.098078][T21339] loop8: rw=524288, sector=77824, nr_sectors = 200 limit=40427 [ 911.145617][T21360] loop2: detected capacity change from 0 to 1024 [ 911.164820][T21339] syz.8.4492: attempt to access beyond end of device [ 911.164820][T21339] loop8: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 911.228820][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.252599][T21339] syz.8.4492: attempt to access beyond end of device [ 911.252599][T21339] loop8: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 911.304753][T21360] hfsplus: xattr searching failed [ 911.315111][T21339] syz.8.4492: attempt to access beyond end of device [ 911.315111][T21339] loop8: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 911.351224][T21339] syz.8.4492: attempt to access beyond end of device [ 911.351224][T21339] loop8: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 911.376300][T21360] hfsplus: xattr searching failed [ 911.421373][T21360] hfsplus: xattr searching failed [ 911.431904][T17510] syz-executor: attempt to access beyond end of device [ 911.431904][T17510] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 911.466846][T17510] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 912.264328][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.547206][T13718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.570646][T13718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.731022][T13718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.741720][T13718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.888412][T13718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.905006][T13718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.169856][T13718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.195784][T13718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.304138][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.493779][T12804] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 913.599119][T21397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4514'. [ 913.615227][T21397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4514'. [ 913.698858][T12804] usb 9-1: Using ep0 maxpacket: 16 [ 913.746149][T12804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.777954][T12804] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 913.815369][T12804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.872547][T12804] usb 9-1: config 0 descriptor?? [ 914.031790][T12107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 914.054632][T12107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 914.074155][T12107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 914.093222][T12107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 914.110364][T12107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 914.118274][T12107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.330231][T12804] mcp2221 0003:04D8:00DD.0049: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 914.589468][T12804] usb 9-1: USB disconnect, device number 50 [ 914.609350][T21410] loop2: detected capacity change from 0 to 256 [ 914.706190][T21410] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 915.826555][T12804] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 915.939502][T21434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.034309][T12804] usb 3-1: Using ep0 maxpacket: 16 [ 916.050640][T12804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.073290][T12804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.108907][T12804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 916.126349][T12804] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 916.137269][T12804] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.246348][T12804] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.266274][ T5781] Bluetooth: hci2: command tx timeout [ 916.286812][T12804] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.303985][T12804] usb 3-1: Manufacturer: syz [ 916.312169][T12804] usb 3-1: config 0 descriptor?? [ 916.344449][T21399] chnl_net:caif_netlink_parms(): no params data found [ 916.424011][T12111] net_ratelimit: 3 callbacks suppressed [ 916.424030][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.444818][T13713] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9 [ 916.653017][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.662456][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.681772][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.823849][T12804] rc_core: IR keymap rc-hauppauge not found [ 916.829879][T12804] Registered IR keymap rc-empty [ 916.879511][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 916.923810][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 916.974868][T12804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 917.000073][T12804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input77 [ 917.038106][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.075593][T21459] overlayfs: failed to clone upperpath [ 917.133823][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.212526][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.263977][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.283482][T21399] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.308637][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.317792][T21399] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.350998][T21399] bridge_slave_0: entered allmulticast mode [ 917.365261][T21399] bridge_slave_0: entered promiscuous mode [ 917.374040][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.399846][T21399] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.413823][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.423870][T21399] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.444205][T21399] bridge_slave_1: entered allmulticast mode [ 917.452124][T21399] bridge_slave_1: entered promiscuous mode [ 917.463773][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.464697][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.513996][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.532066][T13718] hsr_slave_0: left promiscuous mode [ 917.540593][T13718] hsr_slave_1: left promiscuous mode [ 917.554097][T12804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 917.589934][T12804] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 917.620493][T12804] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 917.633865][T13718] veth1_macvtap: left promiscuous mode [ 917.644457][T13718] veth0_macvtap: left promiscuous mode [ 917.655084][T12804] usb 3-1: USB disconnect, device number 30 [ 917.661776][T13718] veth1_vlan: left promiscuous mode [ 917.675797][T13718] veth0_vlan: left promiscuous mode [ 917.792274][T21452] loop8: detected capacity change from 0 to 32768 [ 917.835916][T21452] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 12 [ 918.097183][ T7549] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 12 [ 918.360172][ T5781] Bluetooth: hci2: command tx timeout [ 918.421582][T21476] loop8: detected capacity change from 0 to 1024 [ 918.533326][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.559105][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.724198][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.221429][T21488] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 920.377676][T21492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.398348][T21492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.463740][ T5781] Bluetooth: hci2: command tx timeout [ 920.786949][T12732] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 920.989894][T12732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.004337][T12732] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 921.014771][T12732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.041511][T12732] usb 3-1: config 0 descriptor?? [ 921.372234][T13718] bond0 (unregistering): Released all slaves [ 921.509857][T12732] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 921.544094][T12732] kovaplus 0003:1E7D:2D50.004A: unknown main item tag 0x0 [ 921.584169][T12732] kovaplus 0003:1E7D:2D50.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 921.643780][ T5815] net_ratelimit: 183 callbacks suppressed [ 921.643810][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.773996][ T5815] usb 3-1: USB disconnect, device number 31 [ 921.820949][T21399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.835660][T21399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.965846][T21399] team0: Port device team_slave_0 added [ 921.998031][T21399] team0: Port device team_slave_1 added [ 922.056854][T21399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.064140][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.090520][T21399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.104515][T21399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.111818][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.192180][T21399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.344706][T13727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.362693][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.384049][T12111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.452058][T13731] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9 [ 922.470033][T21399] hsr_slave_0: entered promiscuous mode [ 922.503752][ T5781] Bluetooth: hci2: command tx timeout [ 922.599971][T21399] hsr_slave_1: entered promiscuous mode [ 922.674218][T21399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.674571][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.681920][T21399] Cannot create hsr debugfs directory [ 923.704490][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.440210][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4553'. [ 924.748681][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.005855][T13722] ------------[ cut here ]------------ [ 925.012823][T13722] WARNING: CPU: 0 PID: 13722 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.024479][T13722] Modules linked in: [ 925.026704][T13731] ------------[ cut here ]------------ [ 925.028429][T13722] CPU: 0 PID: 13722 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 925.035159][T13731] WARNING: CPU: 1 PID: 13731 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.043065][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.043090][T13722] Workqueue: phy27 ieee80211_csa_finalize_work [ 925.054231][T13731] Modules linked in: [ 925.064452][T13722] [ 925.064467][T13722] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.064504][T13722] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 925.064576][T13722] RSP: 0018:ffffc9000b40f9c0 EFLAGS: 00010293 [ 925.064600][T13722] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: ffff888065fada00 [ 925.064618][T13722] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 925.064631][T13722] RBP: dffffc0000000000 R08: ffff88806af795af R09: 1ffff1100d5ef2b5 [ 925.064647][T13722] R10: dffffc0000000000 R11: ffffed100d5ef2b6 R12: 0000000000000001 [ 925.064663][T13722] R13: ffff88806af7a5d9 R14: ffff88802c452c70 R15: ffff88802c452ce8 [ 925.064681][T13722] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 925.064701][T13722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.064716][T13722] CR2: 00007f800c4a8368 CR3: 00000000657b8000 CR4: 00000000003506f0 [ 925.064736][T13722] Call Trace: [ 925.064746][T13722] [ 925.064772][T13722] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 925.064813][T13722] ieee80211_csa_finalize+0x5a6/0xf20 [ 925.064841][T13722] ? mutex_lock_nested+0x20/0x20 [ 925.064876][T13722] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 925.064903][T13722] ? ieee80211_csa_finalize_work+0x140/0x140 [ 925.064931][T13722] ? read_lock_is_recursive+0x20/0x20 [ 925.064968][T13722] ieee80211_csa_finalize_work+0xf6/0x140 [ 925.064997][T13722] ? process_scheduled_works+0x96f/0x15d0 [ 925.065027][T13722] process_scheduled_works+0xa5d/0x15d0 [ 925.065086][T13722] ? assign_work+0x430/0x430 [ 925.065122][T13722] ? assign_work+0x3d0/0x430 [ 925.065157][T13722] worker_thread+0xa55/0xfc0 [ 925.065215][T13722] kthread+0x2fa/0x390 [ 925.065237][T13722] ? pr_cont_work+0x560/0x560 [ 925.065267][T13722] ? kthread_blkcg+0xd0/0xd0 [ 925.065291][T13722] ret_from_fork+0x48/0x80 [ 925.065319][T13722] ? kthread_blkcg+0xd0/0xd0 [ 925.065344][T13722] ret_from_fork_asm+0x11/0x20 [ 925.065392][T13722] [ 925.065405][T13722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 925.065416][T13722] CPU: 0 PID: 13722 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 925.065436][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.065449][T13722] Workqueue: phy27 ieee80211_csa_finalize_work [ 925.065475][T13722] Call Trace: [ 925.065483][T13722] [ 925.065491][T13722] dump_stack_lvl+0x18c/0x250 [ 925.065525][T13722] ? show_regs_print_info+0x20/0x20 [ 925.065554][T13722] ? load_image+0x400/0x400 [ 925.065594][T13722] panic+0x2dc/0x730 [ 925.065623][T13722] ? bpf_jit_dump+0xd0/0xd0 [ 925.065658][T13722] ? ret_from_fork_asm+0x11/0x20 [ 925.065692][T13722] __warn+0x2e0/0x470 [ 925.065713][T13722] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.065740][T13722] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.065763][T13722] report_bug+0x2be/0x4f0 [ 925.065793][T13722] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.065828][T13722] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.065850][T13722] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 925.065873][T13722] handle_bug+0xcf/0x120 [ 925.065899][T13722] exc_invalid_op+0x1a/0x50 [ 925.065924][T13722] asm_exc_invalid_op+0x1a/0x20 [ 925.065943][T13722] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 925.065964][T13722] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 925.065979][T13722] RSP: 0018:ffffc9000b40f9c0 EFLAGS: 00010293 [ 925.065995][T13722] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: ffff888065fada00 [ 925.066008][T13722] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 925.066020][T13722] RBP: dffffc0000000000 R08: ffff88806af795af R09: 1ffff1100d5ef2b5 [ 925.066036][T13722] R10: dffffc0000000000 R11: ffffed100d5ef2b6 R12: 0000000000000001 [ 925.066051][T13722] R13: ffff88806af7a5d9 R14: ffff88802c452c70 R15: ffff88802c452ce8 [ 925.066076][T13722] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 925.066117][T13722] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 925.066145][T13722] ieee80211_csa_finalize+0x5a6/0xf20 [ 925.066169][T13722] ? mutex_lock_nested+0x20/0x20 [ 925.066200][T13722] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 925.066225][T13722] ? ieee80211_csa_finalize_work+0x140/0x140 [ 925.066251][T13722] ? read_lock_is_recursive+0x20/0x20 [ 925.066283][T13722] ieee80211_csa_finalize_work+0xf6/0x140 [ 925.066380][T13722] ? process_scheduled_works+0x96f/0x15d0 [ 925.066469][T13722] process_scheduled_works+0xa5d/0x15d0 [ 925.066624][T13722] ? assign_work+0x430/0x430 [ 925.066752][T13722] ? assign_work+0x3d0/0x430 [ 925.066845][T13722] worker_thread+0xa55/0xfc0 [ 925.066984][T13722] kthread+0x2fa/0x390 [ 925.067035][T13722] ? pr_cont_work+0x560/0x560 [ 925.067094][T13722] ? kthread_blkcg+0xd0/0xd0 [ 925.067147][T13722] ret_from_fork+0x48/0x80 [ 925.067209][T13722] ? kthread_blkcg+0xd0/0xd0 [ 925.067264][T13722] ret_from_fork_asm+0x11/0x20 [ 925.067381][T13722] [ 925.073093][T13722] Kernel Offset: disabled