last executing test programs: 2m40.87510149s ago: executing program 1 (id=252): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 2m40.0179599s ago: executing program 1 (id=259): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9004}, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 2m39.17473516s ago: executing program 1 (id=265): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2m38.042791135s ago: executing program 1 (id=274): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 2m37.004043368s ago: executing program 1 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 2m36.327946863s ago: executing program 1 (id=293): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0xe6d25b5b2435066b, '\x00', @c}) 2m36.133690347s ago: executing program 32 (id=293): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0xe6d25b5b2435066b, '\x00', @c}) 2m10.63295768s ago: executing program 2 (id=556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x593, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r0, 0x10, 0x802, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc42f6fd7", 0x5}], 0x1, 0x5412, 0x0, 0x0) 2m10.491123893s ago: executing program 2 (id=557): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="3532e45a2a47b0", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="fd", 0x1}], 0x1}}], 0x5, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) 2m10.432252745s ago: executing program 2 (id=560): openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) mount$9p_unix(0x0, 0x0, &(0x7f0000000080), 0x801087, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 2m10.301865048s ago: executing program 2 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x489}]}) 2m10.099105633s ago: executing program 2 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sch-d/sc', 0x14) 2m10.061147093s ago: executing program 2 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYBLOB="17f4875d"], 0x15) 1m58.96497663s ago: executing program 0 (id=645): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m58.774359254s ago: executing program 0 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) 1m58.610302418s ago: executing program 0 (id=648): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000dfe000/0x2000)=nil, 0x2000}}) 1m58.448326612s ago: executing program 0 (id=650): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='.\x02\x00', 0x44, &(0x7f0000000200), 0x7f, 0x46c, &(0x7f00000004c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 1m57.764781038s ago: executing program 0 (id=653): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.487110274s ago: executing program 0 (id=654): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x2809c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m54.907145553s ago: executing program 33 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYBLOB="17f4875d"], 0x15) 1m42.350969134s ago: executing program 34 (id=654): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x2809c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.819174262s ago: executing program 7 (id=1731): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.676010585s ago: executing program 7 (id=1732): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x4, "906a6007"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000500)={0x40, 0x0, 0x4, "ca9919c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.702474998s ago: executing program 4 (id=1748): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185) 2.306135837s ago: executing program 4 (id=1752): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x1000000000ff6, 0x58e1}) 2.083216982s ago: executing program 4 (id=1754): unshare(0x22020600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) 1.963235675s ago: executing program 4 (id=1757): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x121002, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000280)={0xe000003, 0x40000000000001b6, &(0x7f0000000080), 0x0, 0x4000007}) 1.484808966s ago: executing program 3 (id=1761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x365, 0x77b4, 0x2, 0xff}]}) 1.29521117s ago: executing program 6 (id=1764): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3c2, 0x5, 0x80, 0x4, 0x1, "f2d3926f00"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) 1.241564931s ago: executing program 3 (id=1765): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@', 0x2}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 1.201765742s ago: executing program 6 (id=1766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) 1.138400264s ago: executing program 3 (id=1767): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_ublk_setup_io_uring(0x22e9, &(0x7f0000000000)={0x0, 0xacc, 0x10000, 0x3, 0x1b5}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) 1.048986266s ago: executing program 4 (id=1768): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f00000003c0)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@partition={'partition', 0x3d, 0x6}}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@undelete}, {@nostrict}, {@undelete}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x9, 0x0, &(0x7f0000000080)) 986.601078ms ago: executing program 6 (id=1769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 911.158929ms ago: executing program 3 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026d57000fedbdf251f0000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002006970766c616e31"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40408d0) 872.3051ms ago: executing program 3 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 760.384343ms ago: executing program 6 (id=1772): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x10001, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 706.567574ms ago: executing program 5 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x40, r1, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "afcd98551cfb71ee9ea3a0d0db"}]}, 0x40}, 0x1, 0x0, 0x0, 0xba83542b86c80fd3}, 0x4) 705.854834ms ago: executing program 4 (id=1774): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000005740)={[{@noinline_dentry}, {@four_active_logs}, {@heap}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@quota}]}, 0x21, 0x5551, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 635.217035ms ago: executing program 3 (id=1775): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}], 0x1, 0x5081) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 601.446966ms ago: executing program 5 (id=1776): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001040)={r2, 0x1, 0x3, 0x7fff}, &(0x7f0000001080)=0x10) 593.676476ms ago: executing program 7 (id=1777): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000100)="9cb721609b", 0x5) 527.223168ms ago: executing program 6 (id=1778): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./bus\x00', 0x1004010, &(0x7f0000001040)=ANY=[], 0x11, 0xadc, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 501.755318ms ago: executing program 5 (id=1779): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7f}) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 474.244319ms ago: executing program 7 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) openat$kvm(0xffffff9c, 0x0, 0x80100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x797) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) 323.119563ms ago: executing program 5 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1ff}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) 200.066535ms ago: executing program 7 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @random}]}, 0x30}}, 0x0) 161.089726ms ago: executing program 5 (id=1783): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32877000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002480)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f00000000c0)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 43.167819ms ago: executing program 7 (id=1784): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) 27.16683ms ago: executing program 5 (id=1785): unshare(0x8040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 0s ago: executing program 6 (id=1786): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x3f, r1, &(0x7f0000000040)={0x20000001}) kernel console output (not intermixed with test programs): T7554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.062209][ T7554] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 185.085431][ T7554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.099335][ T4227] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 185.107899][ T7799] fido_id[7799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 185.136549][ T4227] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 185.147869][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.161275][ T7554] usb 5-1: config 0 descriptor?? [ 185.232297][ T4227] hub 7-1:1.0: bad descriptor, ignoring hub [ 185.238249][ T4227] hub: probe of 7-1:1.0 failed with error -5 [ 185.268194][ T4227] cdc_wdm 7-1:1.0: skipping garbage [ 185.273530][ T4227] cdc_wdm 7-1:1.0: skipping garbage [ 185.286318][ T4227] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 185.293868][ T4227] cdc_wdm 7-1:1.0: Unknown control protocol [ 185.605448][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1079'. [ 185.662017][ T7554] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 185.676790][ T7554] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 185.700365][ T7554] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 185.707652][ T7554] koneplus 0003:1E7D:2D51.000E: item fetching failed at offset 4/5 [ 185.746986][ T7819] tap0: tun_chr_ioctl cmd 2147774992 [ 185.758382][ T7819] tap0: tun_chr_ioctl cmd 2147767517 [ 185.771223][ T7554] koneplus 0003:1E7D:2D51.000E: parse failed [ 185.787393][ T7554] koneplus: probe of 0003:1E7D:2D51.000E failed with error -22 [ 185.830263][ T1334] Bluetooth: hci3: command 0x0406 tx timeout [ 185.831737][ T7556] Bluetooth: hci1: command 0x0406 tx timeout [ 185.880795][ T1334] usb 5-1: USB disconnect, device number 11 [ 185.913775][ T7787] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 186.029202][ T7824] loop7: detected capacity change from 0 to 2048 [ 186.073720][ T7820] loop5: detected capacity change from 0 to 32768 [ 186.129591][ T7820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1083 (7820) [ 186.189816][ T7820] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 186.199434][ T7824] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.232491][ T7820] BTRFS info (device loop5): setting nodatasum [ 186.238690][ T7820] BTRFS info (device loop5): force zlib compression, level 3 [ 186.246593][ T7820] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 186.260917][ T7820] BTRFS info (device loop5): use lzo compression, level 0 [ 186.268145][ T7820] BTRFS info (device loop5): turning on flush-on-commit [ 186.272712][ T7824] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.277536][ T7820] BTRFS info (device loop5): enabling auto defrag [ 186.294593][ T7820] BTRFS info (device loop5): max_inline at 4096 [ 186.301218][ T7820] BTRFS info (device loop5): using free space tree [ 186.307753][ T7820] BTRFS info (device loop5): has skinny extents [ 186.323382][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 186.349957][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 186.593994][ T7820] BTRFS info (device loop5): enabling ssd optimizations [ 186.714369][ T7176] usb 7-1: USB disconnect, device number 7 [ 187.276224][ T7855] loop7: detected capacity change from 0 to 32768 [ 187.440059][ T7873] loop5: detected capacity change from 0 to 4096 [ 187.445479][ T7855] XFS (loop7): Mounting V5 Filesystem [ 187.537538][ T7873] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.595998][ T7855] XFS (loop7): Ending clean mount [ 187.615949][ T7873] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 187.828653][ T6660] XFS (loop7): Unmounting Filesystem [ 187.905019][ T7902] overlayfs: upper fs does not support tmpfile. [ 188.399298][ T7913] device ip6_vti0 entered promiscuous mode [ 188.462923][ T7918] Invalid argument reading file caps for ./file0 [ 188.650468][ T7924] loop4: detected capacity change from 0 to 2048 [ 188.707668][ T7924] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 188.754956][ T7924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.826763][ T7934] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.1118'. [ 189.051137][ T7945] loop7: detected capacity change from 0 to 512 [ 189.081247][ T7947] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.176078][ T7945] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 189.237416][ T7945] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.380278][ T26] audit: type=1800 audit(1788789149.029:23): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1123" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 189.797239][ T7982] loop3: detected capacity change from 0 to 512 [ 189.902663][ T7986] loop6: detected capacity change from 0 to 512 [ 190.002091][ T7982] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.315617][ T7982] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 190.316946][ T8005] loop5: detected capacity change from 0 to 512 [ 190.354592][ T7982] Quota error (device loop3): write_blk: dquota write failed [ 190.369723][ T8005] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 190.382145][ T7982] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 190.400314][ T7982] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1135: Failed to acquire dquot type 0 [ 190.436434][ T7982] EXT4-fs (loop3): 1 truncate cleaned up [ 190.480573][ T7982] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,grpquota,data_err=ignore,noblock_validity,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 190.535093][ T8005] EXT4-fs (loop5): 1 truncate cleaned up [ 190.569373][ T8005] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 190.595890][ T8013] loop4: detected capacity change from 0 to 256 [ 190.786966][ T8021] Quota error (device loop3): write_blk: dquota write failed [ 190.828994][ T8021] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 190.889816][ T8021] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1135: Failed to acquire dquot type 0 [ 190.985004][ T8025] EXT4-fs (loop6): Ignoring removed nobh option [ 191.079726][ T8025] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 191.228952][ T8025] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.268789][ T8025] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1151: corrupted inode contents [ 191.445285][ T8025] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.1151: mark_inode_dirty error [ 191.469012][ T26] audit: type=1326 audit(1788789151.109:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.4.1157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55f3fb159 code=0x0 [ 191.514946][ T8025] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1151: corrupted inode contents [ 191.569254][ T8025] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1151: mark_inode_dirty error [ 191.663034][ T8025] EXT4-fs error (device loop6): ext4_lookup:1855: inode #18: comm syz.6.1151: 'bus' linked to parent dir [ 191.687686][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1160'. [ 191.745441][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1160'. [ 191.800217][ T7176] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 191.940306][ T8053] FAULT_INJECTION: forcing a failure. [ 191.940306][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 191.963213][ T8053] CPU: 1 PID: 8053 Comm: syz.7.1162 Not tainted syzkaller #0 [ 191.970652][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.980744][ T8053] Call Trace: [ 191.984041][ T8053] [ 191.986988][ T8053] dump_stack_lvl+0x188/0x250 [ 191.991694][ T8053] ? show_regs_print_info+0x20/0x20 [ 191.996929][ T8053] ? load_image+0x410/0x410 [ 192.001463][ T8053] ? __might_sleep+0xf0/0xf0 [ 192.006075][ T8053] ? __lock_acquire+0x7b50/0x7b50 [ 192.011150][ T8053] should_fail+0x383/0x4b0 [ 192.015626][ T8053] should_failslab+0x5/0x20 [ 192.020157][ T8053] slab_pre_alloc_hook+0x51/0xc0 [ 192.025147][ T8053] kmem_cache_alloc_trace+0x47/0x290 [ 192.030448][ T8053] ? __se_sys_timerfd_create+0xe1/0x250 [ 192.036016][ T8053] __se_sys_timerfd_create+0xe1/0x250 [ 192.041432][ T8053] do_syscall_64+0x4c/0xa0 [ 192.045871][ T8053] ? clear_bhb_loop+0x30/0x80 [ 192.050577][ T8053] ? clear_bhb_loop+0x30/0x80 [ 192.055280][ T8053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.061194][ T8053] RIP: 0033:0x7fefc64e6159 [ 192.065626][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.085280][ T8053] RSP: 002b:00007fefc473e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 192.093735][ T8053] RAX: ffffffffffffffda RBX: 00007fefc676dfa0 RCX: 00007fefc64e6159 [ 192.101855][ T8053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.109849][ T8053] RBP: 00007fefc657d024 R08: 0000000000000000 R09: 0000000000000000 [ 192.117850][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.125844][ T8053] R13: 00007fefc676e038 R14: 00007fefc676dfa0 R15: 00007fff6afd9028 [ 192.133945][ T8053] [ 192.210201][ T7176] usb 6-1: Using ep0 maxpacket: 16 [ 192.340460][ T7176] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.362298][ T8043] set_capacity_and_notify: 2 callbacks suppressed [ 192.362312][ T8043] loop3: detected capacity change from 0 to 32768 [ 192.375869][ T7176] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.400256][ T7176] usb 6-1: config 0 interface 0 has no altsetting 0 [ 192.406961][ T7176] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 192.432393][ T8055] loop4: detected capacity change from 0 to 2048 [ 192.455634][ T7176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.512244][ T7176] usb 6-1: config 0 descriptor?? [ 192.563011][ T8055] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.959452][ T8051] loop6: detected capacity change from 0 to 32768 [ 193.073282][ T8051] JBD2: Ignoring recovery information on journal [ 193.075730][ T7176] cougar 0003:060B:500A.000F: unknown main item tag 0x0 [ 193.088239][ T7176] cougar 0003:060B:500A.000F: unknown main item tag 0x0 [ 193.091577][ T146] Bluetooth: hci2: link tx timeout [ 193.096620][ T7176] cougar 0003:060B:500A.000F: unexpected long global item [ 193.100362][ T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.102849][ T146] Bluetooth: hci2: link tx timeout [ 193.111731][ T7176] cougar 0003:060B:500A.000F: parse failed [ 193.115302][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.123673][ T7176] cougar: probe of 0003:060B:500A.000F failed with error -22 [ 193.149569][ T8051] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 193.186002][ T8051] JBD2: bad block at offset 32 [ 193.206614][ T8051] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 193.257213][ T7176] usb 6-1: USB disconnect, device number 13 [ 193.299313][ T6397] ocfs2: Unmounting device (7,6) on (node local) [ 193.441327][ T7877] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 193.643634][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'. [ 193.698511][ T8094] loop3: detected capacity change from 0 to 256 [ 193.719156][ T8094] exfat: Bad value for 'fmask' [ 193.800540][ T7877] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.817928][ T7877] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 193.855304][ T7877] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 193.874740][ T7877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.953212][ T7877] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 193.974377][ T8104] tun0: tun_chr_ioctl cmd 1074025675 [ 193.979710][ T8104] tun0: persist enabled [ 193.999472][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.005847][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.017319][ T8104] tun0: tun_chr_ioctl cmd 1074025675 [ 194.027901][ T8104] tun0: persist enabled [ 194.187364][ T8087] loop4: detected capacity change from 0 to 40427 [ 194.190353][ T7888] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 194.212564][ T8087] F2FS-fs (loop4): build fault injection attr: rate: 18, type: 0x1ffff [ 194.221986][ T8107] loop6: detected capacity change from 0 to 4096 [ 194.256703][ T8107] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 194.264203][ T8087] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 194.277722][ T8087] F2FS-fs (loop4): invalid crc value [ 194.300447][ T8107] EXT4-fs (loop6): Test dummy encryption mode enabled [ 194.318929][ T8087] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x48a3/0x7050 [ 194.340713][ T8107] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 194.405778][ T8087] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 194.459290][ T8103] loop5: detected capacity change from 0 to 32768 [ 194.506611][ T8103] XFS (loop5): Mounting V5 Filesystem [ 194.570471][ T7888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.586777][ T7888] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.645521][ T8107] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 194.670549][ T8103] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 194.708392][ T8103] XFS (loop5): Starting recovery (logdev: internal) [ 194.770444][ T7888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.772433][ T8103] XFS (loop5): Ending recovery (logdev: internal) [ 194.779529][ T7888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.779555][ T7888] usb 4-1: Product: syz [ 194.779571][ T7888] usb 4-1: Manufacturer: syz [ 194.877538][ T7888] usb 4-1: SerialNumber: syz [ 194.940088][ T5075] XFS (loop5): Unmounting Filesystem [ 194.961466][ T7888] cdc_mbim 4-1:1.0: skipping garbage [ 195.168276][ T8098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.216511][ T7876] Bluetooth: hci2: command 0x0406 tx timeout [ 195.303273][ T8139] sctp: [Deprecated]: syz.4.1191 (pid 8139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.303273][ T8139] Use struct sctp_sack_info instead [ 195.619909][ T8157] Illegal XDP return value 4294966772, expect packet loss! [ 195.860680][ T8098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.880600][ T7888] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 195.960410][ T7876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.969157][ T7888] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 195.979993][ T7176] usb 8-1: USB disconnect, device number 6 [ 195.991463][ T7176] idmouse 8-1:1.0: disconnected [ 196.061883][ T7888] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ce:9f:4f:1e:df:09 [ 196.134945][ T7888] usb 4-1: USB disconnect, device number 15 [ 196.158967][ T7888] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 196.230439][ T7876] usb 5-1: Using ep0 maxpacket: 32 [ 196.360501][ T7876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 196.397434][ T8191] loop5: detected capacity change from 0 to 256 [ 196.423423][ T8191] exfat: Unknown parameter 'dmask&u‹xT0000000P000002002' [ 196.448065][ T8191] nullb0: [CUMANA/ADFS] p1 [ 196.448824][ T8191] nullb0: p1 size 3609636590 extends beyond EOD, truncated [ 196.544610][ T7876] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 196.562289][ T7876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.590976][ T7876] usb 5-1: Product: syz [ 196.595179][ T7876] usb 5-1: Manufacturer: syz [ 196.629924][ T7876] usb 5-1: SerialNumber: syz [ 196.641138][ T7876] usb 5-1: config 0 descriptor?? [ 196.680509][ T8161] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 196.721104][ T7876] hub 5-1:0.0: bad descriptor, ignoring hub [ 196.737328][ T7876] hub: probe of 5-1:0.0 failed with error -5 [ 196.764841][ T7876] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 196.961570][ T7882] usb 5-1: USB disconnect, device number 12 [ 196.970219][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 197.064753][ T8220] loop5: detected capacity change from 0 to 512 [ 197.080439][ T7876] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 197.136049][ T8220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.172440][ T8220] EXT4-fs (loop5): 1 truncate cleaned up [ 197.187615][ T8220] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 197.302611][ T8228] loop3: detected capacity change from 0 to 4096 [ 197.315265][ T8228] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 197.414550][ T8228] ntfs: volume version 3.1. [ 197.460448][ T7876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.486891][ T7876] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 197.537682][ T7876] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.632321][ T8238] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 197.710539][ T7876] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 197.733207][ T7876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 197.771834][ T7876] usb 8-1: Product: syz [ 197.776039][ T7876] usb 8-1: Manufacturer: syz [ 197.822313][ T8210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.861569][ T7876] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 197.878707][ T7876] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 198.065735][ T7176] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 198.131592][ T7876] usb 8-1: USB disconnect, device number 7 [ 198.149741][ T7876] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 198.184886][ T7876] garmin_gps 8-1:1.0: device disconnected [ 198.252496][ T8266] loop5: detected capacity change from 0 to 128 [ 198.311086][ T8266] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,barrier=0x00000000000000e1,,errors=continue. Quota mode: writeback. [ 198.334583][ T8266] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.433330][ T8250] loop6: detected capacity change from 0 to 32768 [ 198.494513][ T8250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1230 (8250) [ 198.497856][ T7556] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 198.530569][ T7176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.548310][ T7176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.568733][ T7176] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 198.607285][ T7176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.623675][ T7176] usb 5-1: config 0 descriptor?? [ 198.676678][ T8250] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 198.695987][ T8250] BTRFS info (device loop6): setting nodatasum [ 198.704146][ T8250] BTRFS info (device loop6): force zlib compression, level 3 [ 198.718298][ T8250] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 198.764086][ T8250] BTRFS info (device loop6): use lzo compression, level 0 [ 198.777910][ T8250] BTRFS info (device loop6): turning on flush-on-commit [ 198.798443][ T8250] BTRFS info (device loop6): enabling auto defrag [ 198.809965][ T8250] BTRFS info (device loop6): max_inline at 4096 [ 198.818592][ T8250] BTRFS info (device loop6): using free space tree [ 198.832472][ T8250] BTRFS info (device loop6): has skinny extents [ 198.940489][ T7556] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 198.976237][ T7556] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 198.999730][ T8250] BTRFS info (device loop6): enabling ssd optimizations [ 198.999935][ T7556] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 199.077671][ T7556] usb 4-1: config 0 interface 0 has no altsetting 0 [ 199.114687][ T7176] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 199.121789][ T7554] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 199.144667][ T7176] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 199.260820][ T7556] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 199.269904][ T7556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.285417][ T7556] usb 4-1: Product: syz [ 199.289637][ T7556] usb 4-1: Manufacturer: syz [ 199.294551][ T7556] usb 4-1: SerialNumber: syz [ 199.317853][ T7556] usb 4-1: config 0 descriptor?? [ 199.333528][ T8264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.347015][ T7176] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 199.479340][ T8308] loop5: detected capacity change from 0 to 2048 [ 199.530763][ T8308] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 199.560604][ T7554] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.580296][ T7554] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.599989][ T8264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.609970][ T8309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.642699][ T7556] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 199.669449][ T26] audit: type=1800 audit(1788789159.309:25): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1245" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 199.720455][ T7554] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.729542][ T7554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.758284][ T26] audit: type=1800 audit(1788789159.319:26): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1245" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 199.779333][ T7176] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 199.788744][ T7554] usb 8-1: SerialNumber: syz [ 199.802705][ T7176] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71 [ 199.824883][ T7176] usb 5-1: USB disconnect, device number 13 [ 200.007622][ T7560] usb 4-1: USB disconnect, device number 16 [ 200.017314][ T8312] fido_id[8312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 200.088296][ T7554] usb 8-1: 0:2 : does not exist [ 200.093310][ T7561] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 200.129180][ T7554] usb 8-1: USB disconnect, device number 8 [ 200.340573][ T8320] 0x000000000000-0x000000020000 : "" [ 200.368388][ T8320] ftl_cs: FTL header not found. [ 200.374528][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.400955][ T7561] usb 7-1: Using ep0 maxpacket: 32 [ 200.530437][ T7561] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 200.539629][ T7561] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.569796][ T7561] usb 7-1: config 0 descriptor?? [ 200.799089][ T8342] loop7: detected capacity change from 0 to 256 [ 200.820379][ T7561] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 200.837194][ T7561] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.874845][ T7561] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 200.892791][ T7561] usb 7-1: media controller created [ 200.894005][ T7891] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 200.954105][ T7561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.956515][ T8346] loop5: detected capacity change from 0 to 2048 [ 201.056505][ T7561] az6027: usb out operation failed. (-71) [ 201.069752][ T8346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.080253][ T7561] az6027: usb out operation failed. (-71) [ 201.086121][ T7561] stb0899_attach: Driver disabled by Kconfig [ 201.094530][ T8350] FAULT_INJECTION: forcing a failure. [ 201.094530][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 201.114666][ T7561] az6027: no front-end attached [ 201.114666][ T7561] [ 201.124873][ T8350] CPU: 1 PID: 8350 Comm: syz.7.1263 Not tainted syzkaller #0 [ 201.132283][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.142356][ T8350] Call Trace: [ 201.145654][ T8350] [ 201.148670][ T8350] dump_stack_lvl+0x188/0x250 [ 201.153381][ T8350] ? show_regs_print_info+0x20/0x20 [ 201.158624][ T8350] ? load_image+0x410/0x410 [ 201.160667][ T7891] usb 4-1: Using ep0 maxpacket: 32 [ 201.163153][ T8350] ? __might_sleep+0xf0/0xf0 [ 201.172859][ T8350] ? __lock_acquire+0x7b50/0x7b50 [ 201.177910][ T8350] should_fail+0x383/0x4b0 [ 201.182349][ T8350] should_failslab+0x5/0x20 [ 201.186885][ T8350] slab_pre_alloc_hook+0x51/0xc0 [ 201.191847][ T8350] ? create_new_namespaces+0x34/0x700 [ 201.197261][ T8350] kmem_cache_alloc+0x3d/0x280 [ 201.202045][ T8350] ? _find_last_bit+0x79/0x110 [ 201.206847][ T8350] create_new_namespaces+0x34/0x700 [ 201.212078][ T8350] ? apparmor_capable+0x12c/0x190 [ 201.217134][ T8350] ? bpf_lsm_capable+0x5/0x10 [ 201.221861][ T8350] ? security_capable+0x85/0xb0 [ 201.226742][ T8350] unshare_nsproxy_namespaces+0x116/0x160 [ 201.232508][ T8350] ksys_unshare+0x4f6/0x8e0 [ 201.237082][ T8350] ? __lock_acquire+0x7b50/0x7b50 [ 201.242178][ T8350] ? sighand_ctor+0x40/0x40 [ 201.246707][ T8350] ? lock_chain_count+0x20/0x20 [ 201.251595][ T8350] ? syscall_enter_from_user_mode+0x21/0x70 [ 201.257553][ T8350] __x64_sys_unshare+0x34/0x40 [ 201.262346][ T8350] do_syscall_64+0x4c/0xa0 [ 201.266794][ T8350] ? clear_bhb_loop+0x30/0x80 [ 201.271499][ T8350] ? clear_bhb_loop+0x30/0x80 [ 201.276204][ T8350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.282129][ T8350] RIP: 0033:0x7fefc64e6159 [ 201.286568][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.306193][ T8350] RSP: 002b:00007fefc473e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.314631][ T8350] RAX: ffffffffffffffda RBX: 00007fefc676dfa0 RCX: 00007fefc64e6159 [ 201.322621][ T8350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 201.330612][ T8350] RBP: 00007fefc657d024 R08: 0000000000000000 R09: 0000000000000000 [ 201.338617][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.346603][ T8350] R13: 00007fefc676e038 R14: 00007fefc676dfa0 R15: 00007fff6afd9028 [ 201.354609][ T8350] [ 201.369349][ T7561] az6027: usb out operation failed. (-71) [ 201.375212][ T7561] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 201.388890][ T7561] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 201.402201][ T7561] dvb-usb: schedule remote query interval to 400 msecs. [ 201.409171][ T7561] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 201.431375][ T7561] usb 7-1: USB disconnect, device number 8 [ 201.493530][ T7561] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 201.610549][ T7891] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 201.641899][ T7891] usb 4-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 201.667465][ T7891] usb 4-1: Product: syz [ 201.678636][ T7891] usb 4-1: Manufacturer: syz [ 201.696987][ T7891] usb 4-1: SerialNumber: syz [ 201.712510][ T8356] loop5: detected capacity change from 0 to 4096 [ 201.742903][ T7891] usb 4-1: config 0 descriptor?? [ 201.771083][ T8356] ntfs3: Unknown parameter 'nocase' [ 201.812932][ T7891] usb 4-1: selecting invalid altsetting 3 [ 201.819087][ T7891] comedi comedi5: could not set alternate setting 3 in high speed [ 201.866582][ T8348] loop4: detected capacity change from 0 to 32768 [ 201.888052][ T7891] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 201.938277][ T7891] usbdux: probe of 4-1:0.0 failed with error -22 [ 201.973970][ T8348] XFS (loop4): Mounting V5 Filesystem [ 202.161099][ T7] usb 4-1: USB disconnect, device number 17 [ 202.185970][ T8348] XFS (loop4): Ending clean mount [ 202.324256][ T4194] XFS (loop4): Unmounting Filesystem [ 202.489638][ T26] audit: type=1800 audit(1788789162.129:27): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1275" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 202.528954][ T8358] loop7: detected capacity change from 0 to 32768 [ 202.805885][ T8393] FAULT_INJECTION: forcing a failure. [ 202.805885][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 202.830766][ T8393] CPU: 0 PID: 8393 Comm: syz.3.1280 Not tainted syzkaller #0 [ 202.838180][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.848258][ T8393] Call Trace: [ 202.851557][ T8393] [ 202.854511][ T8393] dump_stack_lvl+0x188/0x250 [ 202.859228][ T8393] ? show_regs_print_info+0x20/0x20 [ 202.864474][ T8393] ? load_image+0x410/0x410 [ 202.869031][ T8393] ? __might_sleep+0xf0/0xf0 [ 202.873667][ T8393] ? __lock_acquire+0x7b50/0x7b50 [ 202.878733][ T8393] should_fail+0x383/0x4b0 [ 202.883187][ T8393] should_failslab+0x5/0x20 [ 202.887719][ T8393] slab_pre_alloc_hook+0x51/0xc0 [ 202.892686][ T8393] ? vm_area_dup+0x1e/0xb0 [ 202.897134][ T8393] kmem_cache_alloc+0x3d/0x280 [ 202.901950][ T8393] vm_area_dup+0x1e/0xb0 [ 202.906217][ T8393] __split_vma+0xb1/0x410 [ 202.910564][ T8393] ? find_vma+0x1df/0x230 [ 202.914923][ T8393] __do_munmap+0x40b/0xe10 [ 202.919372][ T8393] __vm_munmap+0x13f/0x240 [ 202.923827][ T8393] ? vm_munmap+0x20/0x20 [ 202.928102][ T8393] ? blocking_notifier_call_chain+0x16a/0x1b0 [ 202.934203][ T8393] __x64_sys_munmap+0x67/0x70 [ 202.938902][ T8393] do_syscall_64+0x4c/0xa0 [ 202.943377][ T8393] ? clear_bhb_loop+0x30/0x80 [ 202.948087][ T8393] ? clear_bhb_loop+0x30/0x80 [ 202.952796][ T8393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.958742][ T8393] RIP: 0033:0x7f79adeb4f87 [ 202.963183][ T8393] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.982812][ T8393] RSP: 002b:00007f79ac10bd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 202.991346][ T8393] RAX: ffffffffffffffda RBX: 00007f79a8000000 RCX: 00007f79adeb4f87 [ 202.999351][ T8393] RDX: 0000000000000000 RSI: 00000000000ed000 RDI: 00007f79ac000000 [ 203.007363][ T8393] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 203.015370][ T8393] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 203.023366][ T8393] R13: 0000000000001000 R14: 00007f79ac000000 R15: 0000000003f13000 [ 203.031372][ T8393] [ 203.190513][ T7891] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 203.712063][ T8417] device ipvlan2 entered promiscuous mode [ 203.862566][ T8417] team0: Device ipvlan2 failed to register rx_handler [ 204.069043][ T8408] loop7: detected capacity change from 0 to 131072 [ 204.221963][ T8408] F2FS-fs (loop7): Found nat_bits in checkpoint [ 204.297430][ T8408] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 204.340392][ T7891] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 204.348633][ T7891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.409133][ T7891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.441098][ T7891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.465978][ T8435] loop4: detected capacity change from 0 to 1024 [ 204.479663][ T7891] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.524860][ T7891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.556432][ T7891] usb 6-1: config 0 descriptor?? [ 204.636386][ T8435] hfsplus: xattr searching failed [ 204.649202][ T8439] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.902780][ T8451] loop3: detected capacity change from 0 to 512 [ 204.948783][ T8451] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 204.970466][ T8452] device tunl0 entered promiscuous mode [ 205.015784][ T8452] netlink: 'syz.6.1300': attribute type 4 has an invalid length. [ 205.027572][ T8451] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 205.040258][ T8452] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1300'. [ 205.052086][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.065191][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.083062][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.100265][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.107801][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.115542][ T7891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 205.121003][ T8451] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1303: corrupted in-inode xattr [ 205.124803][ T7891] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 205.146334][ T7891] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 205.236774][ T8451] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1303: couldn't read orphan inode 15 (err -117) [ 205.279449][ T8451] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 205.375358][ T8451] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.1303: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 205.404845][ T7] usb 6-1: USB disconnect, device number 14 [ 205.600348][ T7891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 205.673017][ T8467] loop3: detected capacity change from 0 to 512 [ 205.724425][ T8467] EXT4-fs (loop3): Ignoring removed bh option [ 205.778873][ T8467] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 205.804953][ T8467] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.843831][ T8467] EXT4-fs (loop3): shut down requested (2) [ 205.850210][ T7891] usb 7-1: Using ep0 maxpacket: 32 [ 205.945176][ T8473] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1309'. [ 205.970558][ T7891] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 205.990299][ T7891] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.996948][ T7891] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 206.036478][ T7891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.048756][ T8478] loop5: detected capacity change from 0 to 16 [ 206.063697][ T8479] program syz.7.1313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.076157][ T7891] usb 7-1: config 0 descriptor?? [ 206.106072][ T8478] erofs: (device loop5): mounted with root inode @ nid 36. [ 206.268761][ T8485] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.510317][ T7176] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 206.768940][ T7176] usb 8-1: Using ep0 maxpacket: 16 [ 206.920513][ T7176] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.936677][ T7891] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 206.941784][ T7176] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.025303][ T8510] loop3: detected capacity change from 0 to 32768 [ 207.142123][ T8510] XFS (loop3): Mounting V5 Filesystem [ 207.161806][ T7891] corsair-cpro: probe of 0003:1B1C:0C10.0012 failed with error -71 [ 207.170458][ T7176] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.208008][ T7176] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.247318][ T7176] usb 8-1: Product: syz [ 207.270164][ T7176] usb 8-1: Manufacturer: syz [ 207.287473][ T7176] usb 8-1: SerialNumber: syz [ 207.317249][ T8510] XFS (loop3): Ending clean mount [ 207.345974][ T7560] usb 7-1: USB disconnect, device number 9 [ 207.429473][ T8514] loop5: detected capacity change from 0 to 32768 [ 207.487050][ T26] audit: type=1800 audit(1788789167.129:28): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1328" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 207.512363][ T7891] Bluetooth: hci0: command 0x1003 tx timeout [ 207.531508][ T4196] Bluetooth: hci0: sending frame failed (-49) [ 207.550620][ T8514] read_mapping_page failed! [ 207.565439][ T8514] ERROR: (device loop5): txCommit: [ 207.565439][ T8514] [ 207.609999][ T7176] usb 8-1: 0:2 : does not exist [ 207.636305][ T7176] usb 8-1: USB disconnect, device number 9 [ 207.645090][ T4187] XFS (loop3): Unmounting Filesystem [ 207.851036][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.974554][ T8527] loop5: detected capacity change from 0 to 512 [ 208.023537][ T8527] EXT4-fs (loop5): Test dummy encryption mode enabled [ 208.064419][ T8527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.183206][ T8527] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1341: bad orphan inode 131083 [ 208.214880][ T8527] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none. [ 208.406350][ T8549] loop7: detected capacity change from 0 to 512 [ 208.460081][ T8550] loop6: detected capacity change from 0 to 4096 [ 208.515696][ T8550] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 208.555709][ T8549] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=continue,minixdf,dioread_nolock,errors=remount-ro,. Quota mode: none. [ 208.670318][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.687139][ T26] audit: type=1800 audit(1788789168.329:29): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1338" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 208.731362][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1339'. [ 208.802495][ T8558] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d) [ 208.910216][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 209.041109][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 209.060425][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 209.105048][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.162291][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.233657][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.278044][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.433608][ T8574] set_capacity_and_notify: 1 callbacks suppressed [ 209.433623][ T8574] loop7: detected capacity change from 0 to 1024 [ 209.695610][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 209.880375][ T7] usbtmc 4-1:16.0: can't read capabilities [ 209.887560][ T7877] Bluetooth: hci0: command 0x1001 tx timeout [ 209.896225][ T4196] Bluetooth: hci0: sending frame failed (-49) [ 209.906528][ T7] usb 4-1: USB disconnect, device number 18 [ 209.940467][ T1504] hfsplus: b-tree write err: -5, ino 8 [ 209.950195][ T7891] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 209.980525][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1352'. [ 210.061900][ T8582] netlink: 'syz.7.1351': attribute type 2 has an invalid length. [ 210.270339][ T7891] usb 7-1: not running at top speed; connect to a high speed hub [ 210.365314][ T7891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.376165][ T7891] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 210.385961][ T7891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.433364][ T7891] usb 7-1: Found UVC 1.00 device (046d:0825) [ 210.640561][ T7] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 210.992949][ T8598] loop3: detected capacity change from 0 to 512 [ 211.000540][ T7] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.015133][ T8598] EXT4-fs (loop3): Ignoring removed nobh option [ 211.027921][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.066251][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.093162][ T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.121817][ T8598] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 211.137413][ T8598] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.181004][ T8598] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1360: corrupted inode contents [ 211.225713][ T7] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.245836][ T8598] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.1360: mark_inode_dirty error [ 211.264431][ T7] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.278004][ T7] usb 8-1: Manufacturer: syz [ 211.300456][ T7891] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 211.309247][ T7891] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 211.321303][ T7] usb 8-1: config 0 descriptor?? [ 211.326793][ T8598] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1360: corrupted inode contents [ 211.339422][ T8598] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.1360: mark_inode_dirty error [ 211.356469][ T8606] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #18: comm syz.3.1360: directory missing '.' [ 211.370490][ T7891] usb 7-1: USB disconnect, device number 10 [ 211.770310][ T7560] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 211.802031][ T7] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 211.824542][ T7] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 211.856661][ T7] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 211.917476][ T7] Bluetooth: hci0: command 0x1009 tx timeout [ 212.011502][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 212.072557][ T7] usb 8-1: USB disconnect, device number 10 [ 212.097102][ T8629] loop3: detected capacity change from 0 to 512 [ 212.111178][ T8625] fido_id[8625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 212.162194][ T8629] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 212.206414][ T8629] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 212.218693][ T7560] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 212.253449][ T7560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.256458][ T8629] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1371: corrupted in-inode xattr [ 212.283009][ T8629] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1371: couldn't read orphan inode 15 (err -117) [ 212.300143][ T7560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.324958][ T8629] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 212.360193][ T7560] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 212.488000][ T7560] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 212.519016][ T7560] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 212.539816][ T7560] usb 6-1: Manufacturer: syz [ 212.568538][ T7560] usb 6-1: config 0 descriptor?? [ 213.074266][ T7560] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 213.081763][ T7560] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 213.093994][ T7560] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 213.362748][ T7560] usb 6-1: USB disconnect, device number 15 [ 214.096105][ T8657] serio: Serial port ptm1 [ 214.645964][ T8680] loop3: detected capacity change from 0 to 2048 [ 214.687912][ T8682] loop6: detected capacity change from 0 to 2048 [ 214.737081][ T8680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.776287][ T8682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.156208][ T8689] loop3: detected capacity change from 0 to 512 [ 215.201995][ T8689] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 215.231418][ T8689] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.308081][ T8697] loop5: detected capacity change from 0 to 512 [ 215.318155][ T8690] loop7: detected capacity change from 0 to 4096 [ 215.353014][ T8690] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 215.375411][ T8697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.456106][ T8697] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1401: invalid indirect mapped block 9 (level 0) [ 215.549810][ T8702] loop6: detected capacity change from 0 to 256 [ 215.563562][ T8690] ntfs: volume version 3.1. [ 215.568729][ T8700] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1402'. [ 215.576175][ T8697] EXT4-fs (loop5): 1 truncate cleaned up [ 215.583893][ T8697] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 215.726395][ T8703] ntfs: (device loop7): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 216.310419][ T7554] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 216.473530][ T8730] loop6: detected capacity change from 0 to 512 [ 216.517003][ T8730] EXT4-fs (loop6): Ignoring removed bh option [ 216.551775][ T8730] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 216.594675][ T8734] mmap: syz.3.1417 (8734) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 216.637944][ T8730] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 216.648841][ T8730] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1416: Corrupt directory, running e2fsck is recommended [ 216.650437][ T7560] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 216.680471][ T7554] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 216.689773][ T7554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.717181][ T8730] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 216.721489][ T7554] usb 8-1: config 0 descriptor?? [ 216.743291][ T8730] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1416: corrupted in-inode xattr [ 216.766710][ T8730] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1416: couldn't read orphan inode 15 (err -117) [ 216.798710][ T8730] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.nogrpid,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 216.874930][ T8730] EXT4-fs (loop6): shut down requested (2) [ 216.883336][ T8730] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #2: comm syz.6.1416: directory missing '.' [ 217.037120][ T7560] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.065818][ T7560] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 217.100251][ T7560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.164568][ T7560] as10x_usb: device has been detected [ 217.175085][ T7560] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 217.240092][ T7560] usb 6-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 217.254463][ T7554] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 217.282664][ T7554] [drm] Initialized udl on minor 2 [ 217.337205][ T7560] as10x_usb: error during firmware upload part1 [ 217.353334][ T7560] Registered device Abilis Systems DVB-Titan [ 217.454821][ T8748] loop3: detected capacity change from 0 to 4096 [ 217.494429][ T8750] loop6: detected capacity change from 0 to 2048 [ 217.535418][ T8751] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.650366][ T7554] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 217.685912][ T7554] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 217.740460][ T7554] usb 8-1: USB disconnect, device number 11 [ 217.750069][ T7560] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.792044][ T7560] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.819575][ T7560] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 217.828660][ T8740] loop4: detected capacity change from 0 to 32768 [ 217.891262][ T8740] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1421 (8740) [ 217.930232][ T8740] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 217.969554][ T8740] BTRFS info (device loop4): using free space tree [ 217.977489][ T8740] BTRFS info (device loop4): has skinny extents [ 218.026529][ T8758] input: syz1 as /devices/virtual/input/input20 [ 218.221403][ T8740] BTRFS info (device loop4): enabling ssd optimizations [ 218.338655][ T7888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 218.373671][ T8787] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1431'. [ 218.385682][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1431'. [ 218.550285][ T7] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 218.584148][ T8789] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 218.604697][ T8789] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.625133][ T7888] usb 4-1: Using ep0 maxpacket: 32 [ 218.792734][ T7888] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 218.801082][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 218.810180][ T7888] usb 4-1: config 0 has no interface number 0 [ 218.884200][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.991256][ T7] usb 8-1: unable to get BOS descriptor or descriptor too short [ 218.999190][ T7888] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.016369][ T7888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.042029][ T7888] usb 4-1: Product: syz [ 219.056403][ T7888] usb 4-1: Manufacturer: syz [ 219.065632][ T7888] usb 4-1: SerialNumber: syz [ 219.075711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.103832][ T7888] usb 4-1: config 0 descriptor?? [ 219.120925][ T7] usb 8-1: config 9 has an invalid interface number: 86 but max is 0 [ 219.139366][ T7] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 219.152234][ T7888] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 219.165033][ T7] usb 8-1: config 9 has no interface number 0 [ 219.171274][ T7] usb 8-1: config 9 interface 86 altsetting 229 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.184859][ T7] usb 8-1: config 9 interface 86 has no altsetting 0 [ 219.294067][ T8810] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 219.329130][ T8810] EXT4-fs (loop6): shut down requested (2) [ 219.371680][ T7] usb 8-1: New USB device found, idVendor=0499, idProduct=1031, bcdDevice=54.87 [ 219.382553][ T7888] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 219.395734][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.406051][ T7560] usb 6-1: USB disconnect, device number 16 [ 219.409009][ T7] usb 8-1: Product: syz [ 219.412492][ T7177] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.416726][ T7888] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 219.433407][ T7] usb 8-1: Manufacturer: syz [ 219.438899][ T7] usb 8-1: SerialNumber: syz [ 219.481652][ T7560] Unregistered device Abilis Systems DVB-Titan [ 219.484940][ T7560] as10x_usb: device has been disconnected [ 219.519910][ T8815] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.549847][ T8816] FAULT_INJECTION: forcing a failure. [ 219.549847][ T8816] name failslab, interval 1, probability 0, space 0, times 0 [ 219.556823][ T8815] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 219.581472][ T8815] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.659830][ T8816] CPU: 0 PID: 8816 Comm: syz.5.1443 Not tainted syzkaller #0 [ 219.667236][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.677335][ T8816] Call Trace: [ 219.680637][ T8816] [ 219.683586][ T8816] dump_stack_lvl+0x188/0x250 [ 219.688285][ T8816] ? show_regs_print_info+0x20/0x20 [ 219.693511][ T8816] ? load_image+0x410/0x410 [ 219.698052][ T8816] ? rcu_lock_release+0x5/0x20 [ 219.702850][ T8816] should_fail+0x383/0x4b0 [ 219.707351][ T8816] should_failslab+0x5/0x20 [ 219.711889][ T8816] slab_pre_alloc_hook+0x51/0xc0 [ 219.716866][ T8816] kmem_cache_alloc_trace+0x47/0x290 [ 219.722176][ T8816] ? proc_self_get_link+0xe1/0x170 [ 219.727315][ T8816] proc_self_get_link+0xe1/0x170 [ 219.732285][ T8816] ? proc_setup_self+0x2d0/0x2d0 [ 219.737252][ T8816] pick_link+0x701/0xdc0 [ 219.741640][ T8816] step_into+0xac6/0xcd0 [ 219.746022][ T8816] ? set_root+0x3a0/0x3a0 [ 219.750382][ T8816] ? walk_component+0x1b6/0x460 [ 219.755262][ T8816] link_path_walk+0x688/0xde0 [ 219.759982][ T8816] ? handle_lookup_down+0x130/0x130 [ 219.765221][ T8816] path_openat+0x28e/0x2fb0 [ 219.769778][ T8816] ? __kasan_slab_alloc+0xa9/0xc0 [ 219.774846][ T8816] ? do_filp_open+0x400/0x400 [ 219.779590][ T8816] do_filp_open+0x1df/0x400 [ 219.784127][ T8816] ? vfs_tmpfile+0x300/0x300 [ 219.788758][ T8816] ? _raw_spin_unlock+0x24/0x40 [ 219.793627][ T8816] ? alloc_fd+0x59e/0x650 [ 219.797975][ T8816] do_sys_openat2+0x14b/0x500 [ 219.802656][ T8816] ? __lock_acquire+0x7b50/0x7b50 [ 219.807716][ T8816] ? do_sys_open+0xe0/0xe0 [ 219.812147][ T8816] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 219.818239][ T8816] ? lock_chain_count+0x20/0x20 [ 219.820890][ T7177] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 219.823117][ T8816] __x64_sys_openat+0x135/0x160 [ 219.838757][ T8816] do_syscall_64+0x4c/0xa0 [ 219.843202][ T8816] ? clear_bhb_loop+0x30/0x80 [ 219.847914][ T8816] ? clear_bhb_loop+0x30/0x80 [ 219.848800][ T7177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.852616][ T8816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.852644][ T8816] RIP: 0033:0x7f5a5b6d698e [ 219.852664][ T8816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.893446][ T8816] RSP: 002b:00007f5a5996df18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.901893][ T8816] RAX: ffffffffffffffda RBX: 00007f5a5996e6c0 RCX: 00007f5a5b6d698e [ 219.909893][ T8816] RDX: 0000000000000000 RSI: 00007f5a5b7ac75f RDI: ffffffffffffff9c [ 219.913418][ T7177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.918017][ T8816] RBP: 00007f5a5b7ad024 R08: 0000000000000000 R09: 0000000000000000 [ 219.918037][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.918052][ T8816] R13: 00007f5a5b99e038 R14: 00007f5a5b99dfa0 R15: 00007ffeeae46298 [ 219.918097][ T8816] [ 219.982244][ T7177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.019252][ T7] snd-usb-audio: probe of 8-1:9.86 failed with error -2 [ 220.032698][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.044716][ T7] usb 8-1: USB disconnect, device number 12 [ 220.102262][ T7177] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.114351][ T7177] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.122773][ T7177] usb 5-1: Manufacturer: syz [ 220.138897][ T7177] usb 5-1: config 0 descriptor?? [ 220.188079][ T8792] usb 4-1: USB disconnect, device number 19 [ 220.194278][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.213561][ T8792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 220.246378][ T8792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 220.296969][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.86/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.314565][ T8792] quatech2 4-1:0.51: device disconnected [ 220.611840][ T7177] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 220.629605][ T7177] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 220.643372][ T7177] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 220.740214][ T7176] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 220.891153][ T8845] set_capacity_and_notify: 3 callbacks suppressed [ 220.891168][ T8845] loop7: detected capacity change from 0 to 512 [ 220.923571][ T7177] usb 5-1: USB disconnect, device number 14 [ 220.938852][ T8845] EXT4-fs (loop7): Ignoring removed orlov option [ 220.978872][ T8845] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 220.986275][ T7176] usb 7-1: Using ep0 maxpacket: 8 [ 221.027392][ T8845] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1454: corrupted in-inode xattr [ 221.047662][ T8845] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.1454: couldn't read orphan inode 15 (err -117) [ 221.070693][ T8845] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 221.111516][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.120394][ T7176] usb 7-1: config 0 interface 0 has no altsetting 0 [ 221.130237][ T7176] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 221.169529][ T7176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.197174][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.254288][ T7176] usb 7-1: config 0 descriptor?? [ 221.733060][ T8830] device bridge1 entered promiscuous mode [ 221.782172][ T7176] samsung 0003:0419:0600.0016: unknown main item tag 0x1 [ 221.783163][ T8876] loop7: detected capacity change from 0 to 1024 [ 221.795485][ T7176] samsung 0003:0419:0600.0016: unknown main item tag 0x6 [ 221.810235][ T7176] samsung 0003:0419:0600.0016: unknown main item tag 0x4 [ 221.846972][ T7176] samsung 0003:0419:0600.0016: hidraw0: USB HID v0.81 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0 [ 221.979837][ T8883] loop3: detected capacity change from 0 to 512 [ 221.988831][ T7176] usb 7-1: USB disconnect, device number 11 [ 221.999099][ T8885] loop5: detected capacity change from 0 to 256 [ 222.104983][ T8885] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.116853][ T8883] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 222.225989][ T8885] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 222.245946][ T8886] fido_id[8886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 222.261127][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.269698][ T8883] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.334667][ T8885] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 222.933670][ T8894] loop3: detected capacity change from 0 to 8192 [ 223.278004][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.311571][ T8888] loop4: detected capacity change from 0 to 32768 [ 223.492333][ T8888] JBD2: Ignoring recovery information on journal [ 223.608754][ T8888] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.727711][ T4187] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 223.766029][ T4187] FAT-fs (loop3): Filesystem has been set read-only [ 224.032151][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 224.160389][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.319027][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.370960][ T8909] device syzkaller1 entered promiscuous mode [ 224.395151][ T8909] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 224.648302][ T8924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.757720][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.772998][ T8925] loop7: detected capacity change from 0 to 4096 [ 224.781600][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.800770][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.821933][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.840716][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.859446][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.902842][ T8924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.918820][ T8925] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 224.956133][ T8923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.458461][ T8945] loop7: detected capacity change from 0 to 16 [ 225.504987][ T8919] loop5: detected capacity change from 0 to 32768 [ 225.530896][ T8945] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 225.557553][ T4358] udevd[4358]: incorrect cramfs checksum on /dev/loop7 [ 225.624453][ T4358] udevd[4358]: incorrect cramfs checksum on /dev/loop7 [ 225.646288][ T8919] XFS (loop5): Mounting V5 Filesystem [ 225.835714][ T8919] XFS (loop5): Ending clean mount [ 225.910255][ T7892] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 225.970353][ T8966] loop7: detected capacity change from 0 to 764 [ 225.979716][ T8919] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 226.135373][ T5075] XFS (loop5): Unmounting Filesystem [ 226.170226][ T7892] usb 7-1: Using ep0 maxpacket: 16 [ 226.341454][ T26] audit: type=1800 audit(1788789185.989:30): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1507" name="attr_allow_any_host" dev="configfs" ino=48868 res=0 errno=0 [ 226.563050][ T7892] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 226.590391][ T7892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.598426][ T7892] usb 7-1: Product: syz [ 226.626245][ T7892] usb 7-1: Manufacturer: syz [ 226.635540][ T7892] usb 7-1: SerialNumber: syz [ 226.666137][ T7892] usb 7-1: config 0 descriptor?? [ 227.087738][ T9004] FAULT_INJECTION: forcing a failure. [ 227.087738][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 227.118060][ T9004] CPU: 0 PID: 9004 Comm: syz.7.1518 Not tainted syzkaller #0 [ 227.125476][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.135554][ T9004] Call Trace: [ 227.138848][ T9004] [ 227.141817][ T9004] dump_stack_lvl+0x188/0x250 [ 227.146537][ T9004] ? show_regs_print_info+0x20/0x20 [ 227.151777][ T9004] ? load_image+0x410/0x410 [ 227.156306][ T9004] ? __might_sleep+0xf0/0xf0 [ 227.160919][ T9004] ? __lock_acquire+0x7b50/0x7b50 [ 227.165989][ T9004] should_fail+0x383/0x4b0 [ 227.170441][ T9004] should_failslab+0x5/0x20 [ 227.174966][ T9004] slab_pre_alloc_hook+0x51/0xc0 [ 227.179928][ T9004] kmem_cache_alloc_trace+0x47/0x290 [ 227.185243][ T9004] ? futex_lock_pi+0xa31/0xbf0 [ 227.190044][ T9004] futex_lock_pi+0xa31/0xbf0 [ 227.194688][ T9004] ? futex_requeue+0x1920/0x1920 [ 227.199702][ T9004] ? verify_lock_unused+0x140/0x140 [ 227.204944][ T9004] ? verify_lock_unused+0x140/0x140 [ 227.210194][ T9004] do_futex+0xdda/0x12b0 [ 227.214471][ T9004] ? vfs_write+0xaa6/0xd70 [ 227.218946][ T9004] ? futex_exit_release+0x1c0/0x1c0 [ 227.224202][ T9004] ? __context_tracking_exit+0x4c/0x80 [ 227.229698][ T9004] __se_sys_futex+0x389/0x420 [ 227.234500][ T9004] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.240532][ T9004] ? __x64_sys_futex+0xf0/0xf0 [ 227.245339][ T9004] ? __x64_sys_futex+0x1d/0xf0 [ 227.250154][ T9004] do_syscall_64+0x4c/0xa0 [ 227.254588][ T9004] ? clear_bhb_loop+0x30/0x80 [ 227.259289][ T9004] ? clear_bhb_loop+0x30/0x80 [ 227.263992][ T9004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.269909][ T9004] RIP: 0033:0x7fefc64e6159 [ 227.274355][ T9004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.293997][ T9004] RSP: 002b:00007fefc473e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.302446][ T9004] RAX: ffffffffffffffda RBX: 00007fefc676dfa0 RCX: 00007fefc64e6159 [ 227.310458][ T9004] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000000000000000 [ 227.318453][ T9004] RBP: 00007fefc657d024 R08: 0000200000000040 R09: 0000000000000001 [ 227.326453][ T9004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.334477][ T9004] R13: 00007fefc676e038 R14: 00007fefc676dfa0 R15: 00007fff6afd9028 [ 227.342508][ T9004] [ 227.348173][ T7892] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 227.374516][ T7892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.420459][ T7892] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 227.430622][ T7892] usb 7-1: media controller created [ 227.456287][ T7892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.550304][ T7892] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 227.560235][ T7892] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 227.755534][ T9011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.802804][ T7560] usb 7-1: USB disconnect, device number 12 [ 227.882267][ T7560] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 228.140333][ T9008] loop3: detected capacity change from 0 to 40427 [ 228.163590][ T9029] loop7: detected capacity change from 0 to 256 [ 228.202925][ T9029] exfat: Deprecated parameter 'utf8' [ 228.208452][ T9029] exfat: Deprecated parameter 'namecase' [ 228.218611][ T9008] F2FS-fs (loop3): invalid crc value [ 228.225565][ T9029] exfat: Deprecated parameter 'utf8' [ 228.237457][ T9008] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.253682][ T9029] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 228.469814][ T9008] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 228.520331][ T9008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 228.648904][ T9016] loop4: detected capacity change from 0 to 32768 [ 228.741518][ T9016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 228.872291][ T9016] (syz.4.1523,9016,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 228.907699][ T7560] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 228.985006][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 229.160352][ T7560] usb 7-1: Using ep0 maxpacket: 32 [ 229.161391][ T7892] kernel write not supported for file /video6 (pid: 7892 comm: kworker/0:16) [ 229.280359][ T7560] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.339413][ T9068] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 229.455433][ T9073] loop3: detected capacity change from 0 to 512 [ 229.462001][ T7560] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 229.490348][ T7560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.498367][ T7560] usb 7-1: Product: syz [ 229.520200][ T7560] usb 7-1: Manufacturer: syz [ 229.530352][ T7560] usb 7-1: SerialNumber: syz [ 229.558318][ T7177] net_ratelimit: 6 callbacks suppressed [ 229.558331][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.618558][ T9071] loop4: detected capacity change from 0 to 8192 [ 229.619138][ T9080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1548'. [ 229.649252][ T9071] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 229.662856][ T9071] REISERFS (device loop4): using ordered data mode [ 229.669726][ T9073] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 229.684140][ T9071] reiserfs: using flush barriers [ 229.690711][ T9073] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.701809][ T9071] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.718578][ T9071] REISERFS (device loop4): checking transaction log (loop4) [ 229.812791][ T7892] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 229.919868][ T9071] REISERFS (device loop4): Using tea hash to sort names [ 229.936947][ T9071] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 230.045727][ T7560] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 230.106287][ T7892] usb 8-1: Using ep0 maxpacket: 16 [ 230.250466][ T7892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.261924][ T7560] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 230.270697][ T7892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.287208][ T7892] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 230.327796][ T7892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.341522][ T7892] usb 8-1: config 0 descriptor?? [ 230.405135][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.543567][ T9089] loop5: detected capacity change from 0 to 32768 [ 230.575380][ T7560] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 230.639637][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.713210][ T7811] udevd[7811]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.739328][ T7177] usb 7-1: USB disconnect, device number 13 [ 230.764630][ T9089] find_entry called with index = 0 [ 230.828345][ T9089] read_mapping_page failed! [ 230.846987][ T9089] ERROR: (device loop5): txCommit: [ 230.846987][ T9089] [ 230.858127][ T7892] corsair 0003:1B1C:1B02.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 230.964600][ T9089] read_mapping_page failed! [ 230.969593][ T9089] ERROR: (device loop5): txCommit: [ 230.969593][ T9089] [ 231.031986][ T425] read_mapping_page failed! [ 231.037216][ T425] ERROR: (device loop5): txCommit: [ 231.037216][ T425] [ 231.055519][ T425] jfs_write_inode: jfs_commit_inode failed! [ 231.061939][ T7892] corsair 0003:1B1C:1B02.0017: Read invalid backlight brightness: 75. [ 231.296055][ T7560] usb 8-1: USB disconnect, device number 13 [ 231.388354][ T9113] loop4: detected capacity change from 0 to 128 [ 231.515834][ T9113] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.548681][ T9113] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.563337][ T9113] fscrypt (loop4, inode 12): Unsupported encryption flags (0x7b) [ 231.680178][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.995980][ T9136] loop7: detected capacity change from 0 to 2048 [ 232.115014][ T9136] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.219229][ T9136] EXT4-fs error (device loop7): ext4_read_inline_dir:1626: inode #12: block 9: comm syz.7.1568: path /146/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=80 fake=0 [ 232.410241][ T9149] loop6: detected capacity change from 0 to 4096 [ 232.553693][ T9161] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.660385][ T7892] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 232.738555][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.775881][ T8792] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.060552][ T7892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.090572][ T7892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.121409][ T7892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.170209][ T7892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.179389][ T7892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.228308][ T7892] usb 6-1: config 0 descriptor?? [ 233.233986][ T8792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.250390][ T8792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.260956][ T8792] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 233.271085][ T8792] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.287593][ T9183] loop7: detected capacity change from 0 to 512 [ 233.311796][ T9183] EXT4-fs (loop7): Ignoring removed nobh option [ 233.339859][ T9183] EXT4-fs (loop7): orphan cleanup on readonly fs [ 233.356399][ T9183] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.1588: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 233.388040][ T9183] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.1588: ea_inode dec ref err=-117 [ 233.408101][ T9183] EXT4-fs (loop7): 1 orphan inode deleted [ 233.414338][ T9183] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 233.443209][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.489242][ T9176] loop3: detected capacity change from 0 to 40427 [ 233.498133][ T8792] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 233.511253][ T8792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.522704][ T8792] usb 5-1: Product: syz [ 233.526917][ T8792] usb 5-1: Manufacturer: syz [ 233.531811][ T8792] usb 5-1: SerialNumber: syz [ 233.567029][ T9176] F2FS-fs (loop3): invalid crc value [ 233.582893][ T8792] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 233.595315][ T9176] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.622239][ T8792] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 233.663638][ T8792] usbserial_generic 5-1:1.0: generic converter detected [ 233.694156][ T8792] usb 5-1: generic converter now attached to ttyUSB0 [ 233.710847][ T9176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.762241][ T7892] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 233.801840][ T7892] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 233.837641][ T7888] usb 5-1: USB disconnect, device number 15 [ 233.843123][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.860047][ T7892] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 233.875588][ T7888] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 233.901199][ T7888] usbserial_generic 5-1:1.0: device disconnected [ 234.041556][ T7892] usb 6-1: USB disconnect, device number 17 [ 234.127552][ T9195] fido_id[9195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 234.195555][ T9204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.355099][ T9206] loop6: detected capacity change from 0 to 2048 [ 234.471019][ T9206] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.784338][ T26] audit: type=1800 audit(1788789194.429:31): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1608" name="max_speed" dev="configfs" ino=49145 res=0 errno=0 [ 234.902217][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.697056][ T9249] loop5: detected capacity change from 0 to 512 [ 235.788533][ T9249] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.840296][ T9249] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.879289][ T9249] EXT4-fs error (device loop5): ext4_init_orphan_info:621: comm syz.5.1613: orphan file block 0: bad magic [ 235.918271][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.957355][ T9254] loop6: detected capacity change from 0 to 512 [ 235.984487][ T9249] EXT4-fs (loop5): mount failed [ 236.042034][ T9254] EXT4-fs (loop6): Test dummy encryption mode enabled [ 236.138120][ T9254] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 236.148019][ T9261] loop3: detected capacity change from 0 to 128 [ 236.178541][ T9254] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 236.234254][ T9254] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 236.258555][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.395250][ T9254] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 236.455292][ T9249] loop5: detected capacity change from 0 to 2048 [ 236.474876][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.623272][ T9249] hpfs: Bad version 183,140. Mount readonly to go around [ 236.656245][ T9249] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 236.962100][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.168237][ T9271] loop4: detected capacity change from 0 to 32768 [ 237.211664][ T9271] XFS: noikeep mount option is deprecated. [ 237.237650][ T9271] XFS (loop4): Mounting V5 Filesystem [ 237.279774][ T9271] XFS (loop4): Ending clean mount [ 237.335536][ T4194] XFS (loop4): Unmounting Filesystem [ 237.990766][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.935441][ T9301] input: syz0 as /devices/virtual/input/input22 [ 238.944880][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1626'. [ 239.046591][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.229914][ T9307] loop5: detected capacity change from 0 to 2048 [ 239.334855][ T9307] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 239.383600][ T9307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.510454][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.524122][ T9319] loop4: detected capacity change from 0 to 1024 [ 239.628517][ T9319] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 239.644856][ T9319] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 239.682545][ T9325] FAULT_INJECTION: forcing a failure. [ 239.682545][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 239.696192][ T9319] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 239.730371][ T9319] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.763294][ T9325] CPU: 0 PID: 9325 Comm: syz.5.1639 Not tainted syzkaller #0 [ 239.770702][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.780797][ T9325] Call Trace: [ 239.784097][ T9325] [ 239.787041][ T9325] dump_stack_lvl+0x188/0x250 [ 239.791750][ T9325] ? show_regs_print_info+0x20/0x20 [ 239.796984][ T9325] ? load_image+0x410/0x410 [ 239.801517][ T9325] ? __might_sleep+0xf0/0xf0 [ 239.806133][ T9325] ? __lock_acquire+0x7b50/0x7b50 [ 239.811189][ T9325] should_fail+0x383/0x4b0 [ 239.815634][ T9325] should_failslab+0x5/0x20 [ 239.820174][ T9325] slab_pre_alloc_hook+0x51/0xc0 [ 239.825136][ T9325] kmem_cache_alloc_trace+0x47/0x290 [ 239.830447][ T9325] ? __se_sys_mount+0x157/0x3d0 [ 239.835327][ T9325] __se_sys_mount+0x157/0x3d0 [ 239.840040][ T9325] ? __x64_sys_mount+0xc0/0xc0 [ 239.844853][ T9325] ? lockdep_hardirqs_on+0x94/0x140 [ 239.850078][ T9325] ? __x64_sys_mount+0x1c/0xc0 [ 239.854885][ T9325] do_syscall_64+0x4c/0xa0 [ 239.859328][ T9325] ? clear_bhb_loop+0x30/0x80 [ 239.864035][ T9325] ? clear_bhb_loop+0x30/0x80 [ 239.868754][ T9325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.874673][ T9325] RIP: 0033:0x7f5a5b716159 [ 239.879118][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.898760][ T9325] RSP: 002b:00007f5a5996e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.907219][ T9325] RAX: ffffffffffffffda RBX: 00007f5a5b99dfa0 RCX: 00007f5a5b716159 [ 239.915228][ T9325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.923227][ T9325] RBP: 00007f5a5b7ad024 R08: 0000200000002000 R09: 0000000000000000 [ 239.931232][ T9325] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 239.939235][ T9325] R13: 00007f5a5b99e038 R14: 00007f5a5b99dfa0 R15: 00007ffeeae46298 [ 239.947251][ T9325] [ 239.992567][ T9319] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 240.078672][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.387940][ T9310] loop3: detected capacity change from 0 to 32768 [ 240.565850][ T9348] device veth0_virt_wifi entered promiscuous mode [ 240.760496][ T9350] loop3: detected capacity change from 0 to 256 [ 241.010211][ T7892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 241.144317][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.290398][ T7892] usb 5-1: Using ep0 maxpacket: 16 [ 241.422651][ T7876] kernel read not supported for file /video9 (pid: 7876 comm: kworker/0:10) [ 241.450640][ T7892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.567962][ T7892] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 241.770569][ T7892] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 241.791425][ T7892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.824938][ T7892] usb 5-1: Product: syz [ 241.829382][ T7892] usb 5-1: Manufacturer: syz [ 241.846124][ T7892] usb 5-1: SerialNumber: syz [ 241.947627][ T9373] loop3: detected capacity change from 0 to 40427 [ 241.977817][ T9373] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 241.995595][ T9373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 242.004999][ T9406] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 242.040485][ T9373] F2FS-fs (loop3): invalid crc value [ 242.075162][ T9373] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 242.133812][ T7892] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 242.155204][ T7892] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 242.173211][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.191137][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.207793][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.255496][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.298960][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.347387][ T9412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.374842][ T9416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.409285][ T9411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.422625][ T9373] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 242.429701][ T9373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.576951][ T7892] usb 5-1: USB disconnect, device number 16 [ 242.599239][ T26] audit: type=1800 audit(1788789202.239:32): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1661" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 242.875943][ T9414] loop5: detected capacity change from 0 to 32768 [ 242.902469][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.017366][ T4187] attempt to access beyond end of device [ 243.017366][ T4187] loop3: rw=2049, want=45104, limit=40427 [ 243.670872][ T9445] loop5: detected capacity change from 0 to 8 [ 243.792324][ T9445] SQUASHFS error: zlib decompression failed, data probably corrupt [ 243.817044][ T9445] SQUASHFS error: Failed to read block 0x9b: -5 [ 243.844449][ T9445] SQUASHFS error: Unable to read metadata cache entry [99] [ 243.899331][ T9445] SQUASHFS error: Unable to read inode 0x127 [ 243.923652][ T9454] loop3: detected capacity change from 0 to 128 [ 244.006756][ T9454] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.044270][ T9454] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.236532][ T425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.268764][ T7892] kernel read not supported for file /sequencer (pid: 7892 comm: kworker/0:16) [ 244.285031][ T9465] loop6: detected capacity change from 0 to 1024 [ 244.486190][ T9465] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,noquota,delalloc,journal_dev=0x0000000000000006,block_validity,,errors=continue. Quota mode: none. [ 244.538624][ T9465] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.556500][ T9465] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm syz.6.1699: lblock 8 mapped to illegal pblock 8 (length 8) [ 244.563357][ T9479] netlink: 'syz.7.1705': attribute type 49 has an invalid length. [ 244.634025][ T9465] EXT4-fs error (device loop6): ext4_ext_remove_space:2944: inode #15: comm syz.6.1699: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 244.669275][ T9484] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.1699: lblock 0 mapped to illegal pblock 0 (length 6) [ 244.754457][ T9484] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 244.768759][ T9490] loop7: detected capacity change from 0 to 512 [ 244.776052][ T9484] EXT4-fs (loop6): This should not happen!! Data will be lost [ 244.776052][ T9484] [ 244.811354][ T7176] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.859140][ T9490] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 244.876202][ T154] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 244.910333][ T9490] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.934168][ T154] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 28 with error 28 [ 245.008317][ T154] EXT4-fs (loop6): This should not happen!! Data will be lost [ 245.008317][ T154] [ 245.019327][ T154] EXT4-fs (loop6): Total free blocks count 0 [ 245.036681][ T154] EXT4-fs (loop6): Free/Dirty block details [ 245.042723][ T154] EXT4-fs (loop6): free_blocks=0 [ 245.047762][ T154] EXT4-fs (loop6): dirty_blocks=32 [ 245.054189][ T154] EXT4-fs (loop6): Block reservation details [ 245.063009][ T7176] usb 4-1: Using ep0 maxpacket: 8 [ 245.068366][ T154] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 245.180498][ T7176] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 245.209500][ T7176] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 245.242602][ T7176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.245490][ T9490] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz.7.1709: Directory hole found for htree leaf block 0 [ 245.290341][ T7176] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 245.316556][ T7176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 245.336754][ T7176] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.351347][ T7176] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.361848][ T7176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.444967][ T7177] net_ratelimit: 9 callbacks suppressed [ 245.444982][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.567193][ T9512] loop4: detected capacity change from 0 to 64 [ 245.586034][ T9513] loop6: detected capacity change from 0 to 512 [ 245.594226][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.641515][ T7176] usb 4-1: usb_control_msg returned -32 [ 245.647583][ T7176] usbtmc 4-1:16.0: can't read capabilities [ 245.706566][ T9513] EXT4-fs (loop6): Ignoring removed nobh option [ 245.732061][ T9519] loop7: detected capacity change from 0 to 2048 [ 245.781081][ T9513] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 245.799195][ T9513] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.866532][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.885840][ T9513] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1720: corrupted inode contents [ 245.912710][ T9513] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.1720: mark_inode_dirty error [ 245.912797][ T9524] loop5: detected capacity change from 0 to 4096 [ 245.946495][ T9513] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1720: corrupted inode contents [ 246.005853][ T9519] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.018983][ T9524] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 246.021384][ T9513] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1720: mark_inode_dirty error [ 246.080873][ T9519] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.120941][ T9532] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.141506][ T9532] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 246.219043][ T9532] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 246.246087][ T26] audit: type=1800 audit(1788789205.889:33): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1724" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 246.277865][ T9532] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 246.322382][ T9532] System zones: 0-2, 18-18, 34-35 [ 246.333036][ T9532] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 246.418358][ T9532] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 246.525239][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.532582][ T9537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.566157][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.761156][ T9541] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 246.835607][ T9549] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.848918][ T4447] udevd[4447]: incorrect nilfs2 checksum on /dev/loop6 [ 247.028716][ T9558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24 [ 247.273372][ T9568] set_capacity_and_notify: 2 callbacks suppressed [ 247.273389][ T9568] loop5: detected capacity change from 0 to 512 [ 247.369696][ T9574] loop6: detected capacity change from 0 to 128 [ 247.391136][ T9568] EXT4-fs (loop5): 1 truncate cleaned up [ 247.397648][ T9574] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 247.417209][ T9568] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: none. [ 247.438533][ T26] audit: type=1800 audit(1788789207.079:34): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1739" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 247.455576][ T9568] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1739: invalid indirect mapped block 234881024 (level 0) [ 247.547743][ T7876] usb 4-1: USB disconnect, device number 20 [ 247.633554][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.723605][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 247.879417][ T9588] loop4: detected capacity change from 0 to 256 [ 247.945945][ T9588] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.997299][ T9588] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 248.027174][ T9588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 248.370058][ T9597] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 248.449459][ T9586] loop5: detected capacity change from 0 to 40427 [ 248.507981][ T9586] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 248.536042][ T9586] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 248.557449][ T9586] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 248.589277][ T9586] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 248.623169][ T9586] F2FS-fs (loop5): invalid crc value [ 248.632115][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.676396][ T9586] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.710712][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.807283][ T9615] loop3: detected capacity change from 0 to 1024 [ 248.811814][ T9586] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 248.840568][ T9586] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 248.895201][ T9615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.927745][ T26] audit: type=1800 audit(1788789208.569:35): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1747" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 248.948273][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.970624][ T9586] attempt to access beyond end of device [ 248.970624][ T9586] loop5: rw=34817, want=77952, limit=40427 [ 248.995806][ T9615] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1758'. [ 249.070504][ T5075] attempt to access beyond end of device [ 249.070504][ T5075] loop5: rw=2049, want=45104, limit=40427 [ 249.464510][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 249.613113][ T9636] loop4: detected capacity change from 0 to 2048 [ 249.614298][ T9638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.729905][ T9636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.765009][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.125736][ T9661] loop6: detected capacity change from 0 to 2048 [ 250.225314][ T9668] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.255774][ T26] audit: type=1800 audit(1788789209.899:36): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1778" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 250.569687][ T9676] loop7: detected capacity change from 0 to 128 [ 250.696810][ T9676] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.709343][ T9676] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.734172][ T9653] loop4: detected capacity change from 0 to 40427 [ 250.755153][ T9653] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 250.784796][ T9653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.794392][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.813353][ T9653] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 250.823253][ T9653] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 250.831706][ T9653] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 250.851370][ T9653] F2FS-fs (loop4): invalid crc value [ 250.889168][ T9653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.948207][ T9653] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 250.958365][ T9653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.670475][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.840895][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.230515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.878588][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.920796][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.713261][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.950780][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.432871][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.439216][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.445772][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.996815][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.111508][ T146] Bluetooth: hci2: link tx timeout [ 256.116769][ T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 256.124479][ T146] Bluetooth: hci2: link tx timeout [ 256.129605][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 257.030480][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.750353][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.070791][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.118095][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.150650][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.791117][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.195486][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.238389][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.630242][ T7177] Bluetooth: hci4: command 0x0406 tx timeout [ 263.278177][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.830420][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.321141][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.030307][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.367958][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.671590][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.684013][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.398332][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.440488][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.476333][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.712526][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.515712][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.550769][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.596038][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.760800][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.636440][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.670613][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.718813][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.791084][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.280826][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.758673][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.911568][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.921725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.790666][ T7177] net_ratelimit: 7 callbacks suppressed [ 276.790686][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.848448][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.870645][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.950380][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.030394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.916719][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.971098][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.991943][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.003987][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.030642][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.076180][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.030354][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.115364][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.521652][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.166049][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.198363][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.081021][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.237950][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.280896][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.317719][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.120329][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.358612][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.398416][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.435309][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.150453][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.478563][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.112070][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.510797][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.558230][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.190842][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.595510][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.640488][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.677507][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.232142][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.720231][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.750636][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.808129][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.270494][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.836506][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.710413][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.877799][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.918218][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.311384][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.967723][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.976570][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.989816][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.071032][ T7177] net_ratelimit: 1 callbacks suppressed [ 308.071052][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.110310][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.350445][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.150436][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.196746][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.241117][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.390578][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.270381][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.310582][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.319010][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.350760][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.431705][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.390378][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.872554][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.879088][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.430293][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.470365][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.485000][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.510316][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.550398][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.804192][ T146] Bluetooth: hci2: link tx timeout [ 320.809449][ T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 320.817281][ T146] Bluetooth: hci2: link tx timeout [ 320.822450][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.510475][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.601006][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.630482][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.670392][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.910464][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.550447][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.724918][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.760444][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.790377][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.592431][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.831179][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.870358][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.910717][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.630419][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.952920][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.990403][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.040451][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.510496][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.681009][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.070387][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.110366][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.150342][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.720835][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.190316][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.244674][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.271271][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.750853][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.310359][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.350366][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.394599][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.791154][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.110459][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.430339][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.480437][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.510371][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.830475][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.550506][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.602442][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.632067][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.876754][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.671646][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.720333][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.760399][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.920387][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.726091][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.792205][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.830336][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.870328][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.950995][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.920891][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.950283][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.990494][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.998654][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.040805][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.070457][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.040521][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.110432][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.150878][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.310898][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.190269][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.070372][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.243022][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.274092][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.310356][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.120330][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.350293][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.390390][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.430381][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.150336][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.482695][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.510471][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.910434][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.561046][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.203767][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.600344][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.630324][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.270220][ T8792] Bluetooth: hci5: command 0x0406 tx timeout [ 375.670311][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.232097][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.710338][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.751932][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.313648][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.319987][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.795946][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.270380][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.830316][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.883173][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.510485][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.922858][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.310349][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.962931][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.430744][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.990254][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.034590][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.638423][ T146] Bluetooth: hci2: link tx timeout [ 385.643611][ T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 385.651656][ T146] Bluetooth: hci2: link tx timeout [ 385.656783][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 386.070364][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.470420][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.111924][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.151885][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.190366][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.520369][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.230381][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.115215][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.280321][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.310429][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.550389][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.350303][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.670568][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.690277][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.391180][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.430334][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.486542][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.710382][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.510834][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.550393][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.595726][ T7560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.750368][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.630504][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.670251][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.710344][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.792946][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.270533][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.764401][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.911424][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.923960][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.935669][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.948547][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.794528][ T7177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.870348][ T7561] net_ratelimit: 2 callbacks suppressed [ 406.870362][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.920325][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.402866][ T27] INFO: task jbd2/sda1-8:3520 blocked for more than 143 seconds. [ 408.410768][ T27] Not tainted syzkaller #0 [ 408.415731][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.424447][ T27] task:jbd2/sda1-8 state:D stack:25872 pid: 3520 ppid: 2 flags:0x00004000 [ 408.433740][ T27] Call Trace: [ 408.437041][ T27] [ 408.439991][ T27] __schedule+0x11c3/0x4350 [ 408.444693][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 408.450739][ T27] ? lock_chain_count+0x20/0x20 [ 408.455620][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 408.460989][ T27] ? release_firmware_map_entry+0x190/0x190 [ 408.467385][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 408.474537][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 408.479786][ T27] schedule+0x11b/0x1e0 [ 408.484055][ T27] io_schedule+0x7c/0xd0 [ 408.488324][ T27] bit_wait_io+0xd/0xc0 [ 408.492611][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 408.498098][ T27] ? bit_wait+0xc0/0xc0 [ 408.502379][ T27] ? __wait_on_bit+0x170/0x170 [ 408.507172][ T27] ? do_raw_write_lock+0x11a/0x260 [ 408.514487][ T27] ? bit_waitqueue+0x30/0x30 [ 408.519122][ T27] ? do_raw_read_unlock+0x39/0x70 [ 408.524350][ T27] jbd2_journal_commit_transaction+0x2f0b/0x5c30 [ 408.530866][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 408.537657][ T27] ? _raw_spin_unlock+0x40/0x40 [ 408.542569][ T27] ? rcu_is_watching+0x11/0xa0 [ 408.547366][ T27] ? __timer_delete_sync+0x1f5/0x290 [ 408.552957][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 408.558008][ T27] ? timer_delete_sync+0x20/0x20 [ 408.563055][ T27] ? do_raw_read_unlock+0x70/0x70 [ 408.568344][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 408.573492][ T27] kjournald2+0x45a/0x900 [ 408.577871][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 408.583132][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 408.589074][ T27] ? init_wait_entry+0xd0/0xd0 [ 408.593993][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 408.599912][ T27] ? __kthread_parkme+0x14e/0x1b0 [ 408.604995][ T27] kthread+0x42e/0x520 [ 408.609084][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 408.614337][ T27] ? kthread_blkcg+0xd0/0xd0 [ 408.618944][ T27] ret_from_fork+0x1f/0x30 [ 408.625595][ T27] [ 408.628705][ T27] INFO: task syz-executor:4173 blocked for more than 143 seconds. [ 408.636642][ T27] Not tainted syzkaller #0 [ 408.641691][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.650651][ T27] task:syz-executor state:D stack:22960 pid: 4173 ppid: 4172 flags:0x00004002 [ 408.659906][ T27] Call Trace: [ 408.663328][ T27] [ 408.666290][ T27] __schedule+0x11c3/0x4350 [ 408.671260][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 408.677275][ T27] ? lock_chain_count+0x20/0x20 [ 408.682276][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 408.687767][ T27] ? release_firmware_map_entry+0x190/0x190 [ 408.693756][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 408.699675][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 408.705034][ T27] schedule+0x11b/0x1e0 [ 408.709222][ T27] io_schedule+0x7c/0xd0 [ 408.713620][ T27] bit_wait_io+0xd/0xc0 [ 408.717885][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 408.723584][ T27] ? bit_wait+0xc0/0xc0 [ 408.727767][ T27] ? __wait_on_bit+0x170/0x170 [ 408.734900][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 408.739952][ T27] ? bit_waitqueue+0x30/0x30 [ 408.744683][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 408.749920][ T27] do_get_write_access+0x134/0xe40 [ 408.755142][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 408.761226][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 408.767426][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 408.773967][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 408.779279][ T27] ? __might_sleep+0xf0/0xf0 [ 408.783973][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 408.789546][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 408.795240][ T27] ext4_dirty_inode+0xbf/0x100 [ 408.800161][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 408.806016][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 408.811165][ T27] generic_update_time+0x1cd/0x1f0 [ 408.816317][ T27] file_update_time+0x3c0/0x440 [ 408.821280][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 408.826429][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 408.831592][ T27] ? wp_page_shared+0x15b/0x6c0 [ 408.836476][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 408.844761][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 408.849861][ T27] do_page_mkwrite+0x168/0x3c0 [ 408.854910][ T27] wp_page_shared+0x163/0x6c0 [ 408.859625][ T27] handle_mm_fault+0x1fbd/0x4440 [ 408.864947][ T27] ? get_page+0xe0/0xe0 [ 408.869148][ T27] ? vmacache_find+0x238/0x590 [ 408.874729][ T27] ? find_vma+0xd2/0x230 [ 408.879030][ T27] do_user_addr_fault+0x494/0xc90 [ 408.887531][ T27] exc_page_fault+0x60/0x100 [ 408.890558][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.892492][ T27] asm_exc_page_fault+0x22/0x30 [ 408.905164][ T27] RIP: 0033:0x7fa6fac8a6e2 [ 408.909600][ T27] RSP: 002b:00007fff8344bbf0 EFLAGS: 00010202 [ 408.915759][ T27] RAX: 00007fa6f8cd6000 RBX: 0000555582bd4c70 RCX: 0000000000000004 [ 408.923914][ T27] RDX: 0000000000002690 RSI: 0000555582bd1fc0 RDI: 0000000000000010 [ 408.931966][ T27] RBP: 00007fff8344c0f0 R08: 0000555582bd22b0 R09: 0000000000000086 [ 408.939964][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff8344bf30 [ 408.948043][ T27] R13: 00007fff8344bd20 R14: 585858582e7a7973 R15: 00007fff8344bc70 [ 408.957713][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.965958][ T27] [ 408.969080][ T27] INFO: task syz.4.1774:9652 blocked for more than 143 seconds. [ 408.977036][ T27] Not tainted syzkaller #0 [ 408.982084][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.990825][ T27] task:syz.4.1774 state:D stack:27696 pid: 9652 ppid: 4194 flags:0x00004004 [ 409.000135][ T27] Call Trace: [ 409.003441][ T27] [ 409.006397][ T27] __schedule+0x11c3/0x4350 [ 409.011046][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.017083][ T27] ? lock_chain_count+0x20/0x20 [ 409.021996][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 409.027297][ T27] ? release_firmware_map_entry+0x190/0x190 [ 409.036140][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 409.042176][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 409.047399][ T27] schedule+0x11b/0x1e0 [ 409.051605][ T27] io_schedule+0x7c/0xd0 [ 409.055878][ T27] bit_wait_io+0xd/0xc0 [ 409.062665][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 409.068203][ T27] ? bit_wait+0xc0/0xc0 [ 409.072480][ T27] ? __wait_on_bit+0x170/0x170 [ 409.077476][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 409.082617][ T27] ? bit_waitqueue+0x30/0x30 [ 409.087254][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 409.092534][ T27] do_get_write_access+0x134/0xe40 [ 409.097680][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 409.103779][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 409.110136][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 409.116319][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 409.121694][ T27] ? __might_sleep+0xf0/0xf0 [ 409.126317][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 409.132002][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 409.137516][ T27] ext4_dirty_inode+0xbf/0x100 [ 409.142379][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 409.148205][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 409.153335][ T27] generic_update_time+0x1cd/0x1f0 [ 409.158468][ T27] file_update_time+0x3c0/0x440 [ 409.163431][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 409.168561][ T27] ? mark_lock+0x94/0x320 [ 409.175287][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 409.180687][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 409.186446][ T27] ? pte_alloc_one+0x287/0x310 [ 409.191356][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 409.197631][ T27] ? count_memcg_event_mm+0x324/0x370 [ 409.203050][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 409.209239][ T27] ? finish_lock_switch+0x12d/0x290 [ 409.214538][ T27] do_page_mkwrite+0x168/0x3c0 [ 409.219330][ T27] handle_mm_fault+0x1e47/0x4440 [ 409.224451][ T27] ? get_page+0xe0/0xe0 [ 409.228637][ T27] ? vmacache_find+0x4e3/0x590 [ 409.233477][ T27] ? vmacache_update+0xa0/0x100 [ 409.238348][ T27] ? find_vma+0x1df/0x230 [ 409.242744][ T27] do_user_addr_fault+0x494/0xc90 [ 409.247805][ T27] exc_page_fault+0x60/0x100 [ 409.252539][ T27] asm_exc_page_fault+0x22/0x30 [ 409.257410][ T27] RIP: 0033:0x7fc55f2cf809 [ 409.261876][ T27] RSP: 002b:00007ffdbd363b40 EFLAGS: 00010202 [ 409.267962][ T27] RAX: 0000001b32824000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 409.275988][ T27] RDX: 0000001b32823ffc RSI: 00000000003ffde8 RDI: 00007fc5601b2700 [ 409.284335][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc55f66f000 [ 409.293805][ T27] R10: 00007fc5601b2700 R11: 0000000000000000 R12: 0000000000000000 [ 409.302505][ T27] R13: 000000000007ffff R14: ffffffff83894968 R15: 00007fc5601b2720 [ 409.311269][ T27] ? f2fs_build_node_manager+0x1d88/0x2c00 [ 409.317120][ T27] [ 409.320266][ T27] INFO: task syz.7.1784:9675 blocked for more than 144 seconds. [ 409.327918][ T27] Not tainted syzkaller #0 [ 409.333032][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.341822][ T27] task:syz.7.1784 state:D stack:26864 pid: 9675 ppid: 6660 flags:0x00004004 [ 409.351264][ T27] Call Trace: [ 409.354568][ T27] [ 409.357518][ T27] __schedule+0x11c3/0x4350 [ 409.362190][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.368207][ T27] ? lock_chain_count+0x20/0x20 [ 409.373157][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 409.378471][ T27] ? release_firmware_map_entry+0x190/0x190 [ 409.384489][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 409.390548][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 409.395777][ T27] schedule+0x11b/0x1e0 [ 409.399957][ T27] io_schedule+0x7c/0xd0 [ 409.406695][ T27] bit_wait_io+0xd/0xc0 [ 409.412579][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 409.418098][ T27] ? bit_wait+0xc0/0xc0 [ 409.423116][ T27] ? __wait_on_bit+0x170/0x170 [ 409.427928][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 409.433325][ T27] ? bit_waitqueue+0x30/0x30 [ 409.437959][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 409.443498][ T27] do_get_write_access+0x134/0xe40 [ 409.448667][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 409.454980][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 409.461420][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 409.467595][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 409.473220][ T27] ? __might_sleep+0xf0/0xf0 [ 409.477841][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 409.483717][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 409.489265][ T27] ext4_dirty_inode+0xbf/0x100 [ 409.494313][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 409.500254][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 409.505321][ T27] generic_update_time+0x1cd/0x1f0 [ 409.512022][ T27] file_update_time+0x3c0/0x440 [ 409.516908][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 409.522718][ T27] ? mark_lock+0x94/0x320 [ 409.527183][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 409.532903][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 409.538638][ T27] ? pte_alloc_one+0x287/0x310 [ 409.543507][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 409.549778][ T27] ? count_memcg_event_mm+0x324/0x370 [ 409.555306][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 409.561602][ T27] ? verify_lock_unused+0x140/0x140 [ 409.566844][ T27] do_page_mkwrite+0x168/0x3c0 [ 409.571728][ T27] handle_mm_fault+0x1e47/0x4440 [ 409.576714][ T27] ? get_page+0xe0/0xe0 [ 409.580992][ T27] ? vmacache_find+0x4e3/0x590 [ 409.585786][ T27] ? vmacache_update+0xa0/0x100 [ 409.591100][ T27] ? find_vma+0x1df/0x230 [ 409.595469][ T27] do_user_addr_fault+0x494/0xc90 [ 409.600667][ T27] exc_page_fault+0x60/0x100 [ 409.605305][ T27] asm_exc_page_fault+0x22/0x30 [ 409.610438][ T27] RIP: 0033:0x7fefc63ba809 [ 409.614890][ T27] RSP: 002b:00007fff6afd9070 EFLAGS: 00010202 [ 409.622555][ T27] RAX: 0000001b34824000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 409.631727][ T27] RDX: 0000001b34823ffc RSI: 00000000003ffde8 RDI: 00007fefc729d700 [ 409.639717][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fefc675a000 [ 409.648582][ T27] R10: 00007fefc729d700 R11: 0000000000000000 R12: 0000000000000000 [ 409.656686][ T27] R13: 000000000002469e R14: ffffffff819d5b94 R15: 00007fefc729d720 [ 409.664802][ T27] ? trace_user_enter+0x74/0x190 [ 409.669787][ T27] [ 409.671698][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.674052][ T27] INFO: task syz.5.1785:9677 blocked for more than 144 seconds. [ 409.683840][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.688558][ T27] Not tainted syzkaller #0 [ 409.701850][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.710402][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.719096][ T27] task:syz.5.1785 state:D stack:27696 pid: 9677 ppid: 5075 flags:0x00004004 [ 409.729090][ T27] Call Trace: [ 409.733695][ T27] [ 409.736651][ T27] __schedule+0x11c3/0x4350 [ 409.742146][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.748194][ T27] ? lock_chain_count+0x20/0x20 [ 409.754146][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 409.759468][ T27] ? release_firmware_map_entry+0x190/0x190 [ 409.765713][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 409.771845][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 409.777105][ T27] schedule+0x11b/0x1e0 [ 409.781588][ T27] io_schedule+0x7c/0xd0 [ 409.785859][ T27] bit_wait_io+0xd/0xc0 [ 409.790078][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 409.795765][ T27] ? bit_wait+0xc0/0xc0 [ 409.799949][ T27] ? __wait_on_bit+0x170/0x170 [ 409.804851][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 409.809933][ T27] ? bit_waitqueue+0x30/0x30 [ 409.814741][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 409.819961][ T27] do_get_write_access+0x134/0xe40 [ 409.825453][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 409.831655][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 409.837843][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 409.845587][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 409.851728][ T27] ? __might_sleep+0xf0/0xf0 [ 409.856358][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 409.862177][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 409.867692][ T27] ext4_dirty_inode+0xbf/0x100 [ 409.873388][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 409.879250][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 409.884611][ T27] generic_update_time+0x1cd/0x1f0 [ 409.889755][ T27] file_update_time+0x3c0/0x440 [ 409.894941][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 409.900207][ T27] ? mark_lock+0x94/0x320 [ 409.904586][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 409.909643][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 409.915683][ T27] ? pte_alloc_one+0x287/0x310 [ 409.920689][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 409.926961][ T27] ? count_memcg_event_mm+0x324/0x370 [ 409.932689][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 409.938868][ T27] ? verify_lock_unused+0x140/0x140 [ 409.944907][ T27] do_page_mkwrite+0x168/0x3c0 [ 409.949722][ T27] handle_mm_fault+0x1e47/0x4440 [ 409.956227][ T27] ? get_page+0xe0/0xe0 [ 409.961208][ T27] ? vmacache_find+0x53c/0x590 [ 409.966007][ T27] ? vmacache_update+0xa0/0x100 [ 409.971253][ T27] ? find_vma+0x1df/0x230 [ 409.975620][ T27] do_user_addr_fault+0x494/0xc90 [ 409.981696][ T27] exc_page_fault+0x60/0x100 [ 409.986338][ T27] asm_exc_page_fault+0x22/0x30 [ 409.991493][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.994684][ T27] RIP: 0033:0x7f5a5b5ea809 [ 410.004341][ T27] RSP: 002b:00007ffeeae462e0 EFLAGS: 00010202 [ 410.010681][ T27] RAX: 0000001b31524000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 410.018669][ T27] RDX: 0000001b31523ffc RSI: 00000000003ffde8 RDI: 00007f5a5c4cd700 [ 410.026915][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f5a5b98a000 [ 410.035172][ T27] R10: 00007f5a5c4cd700 R11: 0000000000000000 R12: 0000000000000000 [ 410.043412][ T27] R13: 0000000000000dbe R14: ffffffff819d5b94 R15: 00007f5a5c4cd720 [ 410.051666][ T27] ? trace_user_enter+0x74/0x190 [ 410.056652][ T27] [ 410.059756][ T27] INFO: task syz.6.1786:9679 blocked for more than 145 seconds. [ 410.069222][ T27] Not tainted syzkaller #0 [ 410.075077][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.084008][ T27] task:syz.6.1786 state:D stack:27696 pid: 9679 ppid: 6397 flags:0x00004004 [ 410.094176][ T27] Call Trace: [ 410.097478][ T27] [ 410.100721][ T27] __schedule+0x11c3/0x4350 [ 410.105353][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 410.111754][ T27] ? lock_chain_count+0x20/0x20 [ 410.116633][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 410.122182][ T27] ? release_firmware_map_entry+0x190/0x190 [ 410.128101][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 410.134451][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 410.139682][ T27] schedule+0x11b/0x1e0 [ 410.144185][ T27] io_schedule+0x7c/0xd0 [ 410.148452][ T27] bit_wait_io+0xd/0xc0 [ 410.153076][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 410.158567][ T27] ? bit_wait+0xc0/0xc0 [ 410.163503][ T27] ? __wait_on_bit+0x170/0x170 [ 410.168293][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 410.174988][ T27] ? bit_waitqueue+0x30/0x30 [ 410.179617][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 410.185124][ T27] do_get_write_access+0x134/0xe40 [ 410.191156][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 410.197174][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 410.204345][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 410.210719][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 410.216031][ T27] ? __might_sleep+0xf0/0xf0 [ 410.220988][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 410.226571][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 410.232373][ T27] ext4_dirty_inode+0xbf/0x100 [ 410.237168][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 410.243325][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 410.248380][ T27] generic_update_time+0x1cd/0x1f0 [ 410.253822][ T27] file_update_time+0x3c0/0x440 [ 410.258704][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 410.264135][ T27] ? mark_lock+0x94/0x320 [ 410.268511][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 410.273876][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 410.279738][ T27] ? pte_alloc_one+0x287/0x310 [ 410.286194][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 410.293164][ T27] ? __rwlock_init+0x140/0x140 [ 410.297996][ T27] ? count_memcg_event_mm+0x324/0x370 [ 410.303709][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 410.309063][ T27] do_page_mkwrite+0x168/0x3c0 [ 410.315442][ T27] handle_mm_fault+0x1e47/0x4440 [ 410.320639][ T27] ? get_page+0xe0/0xe0 [ 410.324832][ T27] ? vmacache_find+0x4e3/0x590 [ 410.329620][ T27] ? vmacache_update+0xa0/0x100 [ 410.334948][ T27] ? find_vma+0x1df/0x230 [ 410.339315][ T27] do_user_addr_fault+0x494/0xc90 [ 410.344660][ T27] exc_page_fault+0x60/0x100 [ 410.349272][ T27] ? clear_bhb_loop+0x30/0x80 [ 410.354325][ T27] asm_exc_page_fault+0x22/0x30 [ 410.359209][ T27] RIP: 0033:0x7efd45f7caa3 [ 410.363930][ T27] RSP: 002b:00007ffc3abd27c0 EFLAGS: 00010246 [ 410.370168][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33e64000 [ 410.378165][ T27] RDX: 0000001b33e24000 RSI: 0000000000400000 RDI: 00007efd462f1708 [ 410.386205][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.395590][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 410.404310][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3abd2a50 [ 410.412481][ T27] [ 410.415604][ T27] [ 410.415604][ T27] Showing all locks held in the system: [ 410.424008][ T27] 4 locks held by kworker/u4:0/9: [ 410.429064][ T27] #0: ffff8880191e2138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 410.439754][ T27] #1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 410.451599][ T27] #2: ffff88814cda80e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 410.461700][ T27] #3: ffff88814cdaac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 410.472614][ T27] 1 lock held by khungtaskd/27: [ 410.477477][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 410.486887][ T27] 2 locks held by getty/3942: [ 410.491624][ T27] #0: ffff88814cc97098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 410.502546][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 410.513397][ T27] 3 locks held by syz-executor/4173: [ 410.518702][ T27] #0: ffff888024600828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 410.528581][ T27] #1: ffff88814cda8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 410.538833][ T27] #2: ffff88814cdac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 410.548544][ T27] 2 locks held by kworker/u5:2/4191: [ 410.554100][ T27] #0: ffff8880215cb938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 410.564811][ T27] #1: ffffc90002e4fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 410.575964][ T27] 2 locks held by kworker/u5:4/4195: [ 410.581339][ T27] #0: ffff8880215cb938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 410.592108][ T27] #1: ffffc90002e9fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 410.603254][ T27] 2 locks held by kworker/u5:6/4198: [ 410.608568][ T27] #0: ffff8880215cb938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 410.620726][ T27] #1: ffffc90002ebfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 410.632646][ T27] 4 locks held by kworker/u4:6/4456: [ 410.637962][ T27] 3 locks held by syz.4.1774/9652: [ 410.643765][ T27] #0: ffff88807cfd6328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 410.653749][ T27] #1: ffff88814cda8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 410.663570][ T27] #2: ffff88814cdac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 410.673383][ T27] 3 locks held by syz.7.1784/9675: [ 410.678514][ T27] #0: ffff88802c2ac028 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 410.688445][ T27] #1: ffff88814cda8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 410.698290][ T27] #2: ffff88814cdac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 410.708019][ T27] 3 locks held by syz.5.1785/9677: [ 410.713213][ T27] #0: ffff888024d83928 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 410.723774][ T27] #1: ffff88814cda8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 410.734207][ T27] #2: ffff88814cdac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 410.744639][ T27] 3 locks held by syz.6.1786/9679: [ 410.749764][ T27] #0: ffff88802c2a8128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 410.760725][ T27] #1: ffff88814cda8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 410.770573][ T27] #2: ffff88814cdac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 410.780336][ T27] [ 410.782681][ T27] ============================================= [ 410.782681][ T27] [ 410.791192][ T27] NMI backtrace for cpu 0 [ 410.795544][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 410.802766][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.812841][ T27] Call Trace: [ 410.816125][ T27] [ 410.819085][ T27] dump_stack_lvl+0x188/0x250 [ 410.823814][ T27] ? show_regs_print_info+0x20/0x20 [ 410.829072][ T27] ? load_image+0x410/0x410 [ 410.833611][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 410.838758][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 410.843715][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 410.849900][ T27] ? _printk+0xda/0x130 [ 410.854068][ T27] ? load_image+0x410/0x410 [ 410.858586][ T27] ? load_image+0x410/0x410 [ 410.863094][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 410.869184][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 410.875183][ T27] watchdog+0xe1b/0xe60 [ 410.879405][ T27] kthread+0x42e/0x520 [ 410.883497][ T27] ? hungtask_pm_notify+0x40/0x40 [ 410.888559][ T27] ? kthread_blkcg+0xd0/0xd0 [ 410.893202][ T27] ret_from_fork+0x1f/0x30 [ 410.897646][ T27] [ 410.900980][ T27] Sending NMI from CPU 0 to CPUs 1: [ 410.906234][ C1] NMI backtrace for cpu 1 [ 410.906247][ C1] CPU: 1 PID: 4456 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 410.906261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.906269][ C1] Workqueue: bat_events batadv_nc_worker [ 410.906286][ C1] RIP: 0010:kasan_check_range+0x40/0x290 [ 410.906304][ C1] Code: 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 fa 01 00 00 49 bc 01 00 00 00 00 fc ff df 49 89 fe <49> c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e [ 410.906315][ C1] RSP: 0018:ffffc9000325fa90 EFLAGS: 00000246 [ 410.906326][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815d6bd4 [ 410.906336][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d8b1228 [ 410.906345][ C1] RBP: ffffc9000325fbd0 R08: 000000000001ffff R09: 1ffffffff203de18 [ 410.906355][ C1] R10: dffffc0000000000 R11: fffffbfff203de19 R12: dffffc0000000001 [ 410.906365][ C1] R13: dffffc0000000000 R14: ffffffff8d8b1228 R15: ffff888020a32cd0 [ 410.906375][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 410.906387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.906396][ C1] CR2: 0000558afa184168 CR3: 000000007e349000 CR4: 00000000003506e0 [ 410.906408][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.906416][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.906425][ C1] Call Trace: [ 410.906429][ C1] [ 410.906434][ C1] lock_release+0xa4/0x8a0 [ 410.906453][ C1] ? rcu_lock_release+0x5/0x20 [ 410.906466][ C1] ? read_lock_is_recursive+0x10/0x10 [ 410.906483][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 410.906504][ C1] batadv_nc_worker+0x255/0x5c0 [ 410.906520][ C1] process_one_work+0x867/0xff0 [ 410.906542][ C1] ? worker_detach_from_pool+0x240/0x240 [ 410.906556][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 410.906574][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 410.906587][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 410.906602][ C1] ? wq_worker_running+0x97/0x170 [ 410.906617][ C1] worker_thread+0xad7/0x12a0 [ 410.906637][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 410.906656][ C1] kthread+0x42e/0x520 [ 410.906668][ C1] ? rcu_lock_release+0x20/0x20 [ 410.906681][ C1] ? kthread_blkcg+0xd0/0xd0 [ 410.906695][ C1] ret_from_fork+0x1f/0x30 [ 410.906716][ C1] [ 410.909180][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 411.147698][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 411.155081][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.165223][ T27] Call Trace: [ 411.168505][ T27] [ 411.171428][ T27] dump_stack_lvl+0x188/0x250 [ 411.176104][ T27] ? show_regs_print_info+0x20/0x20 [ 411.181294][ T27] ? load_image+0x410/0x410 [ 411.185796][ T27] panic+0x2f8/0x850 [ 411.189684][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 411.195317][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 411.199830][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 411.206128][ T27] watchdog+0xe5a/0xe60 [ 411.210313][ T27] kthread+0x42e/0x520 [ 411.214397][ T27] ? hungtask_pm_notify+0x40/0x40 [ 411.219419][ T27] ? kthread_blkcg+0xd0/0xd0 [ 411.224003][ T27] ret_from_fork+0x1f/0x30 [ 411.228429][ T27] [ 411.231829][ T27] Kernel Offset: disabled [ 411.236168][ T27] Rebooting in 86400 seconds..