last executing test programs: 14m46.062111584s ago: executing program 32 (id=163): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x0, 0x0}) 14m30.896392125s ago: executing program 33 (id=255): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x9, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 11m48.664765548s ago: executing program 34 (id=1807): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x5, 0x22, 0x0, &(0x7f0000000340)="259a53f271a76d260800b76588a80a3a647d2f1562e7b04a03761878a0593ab1aca2", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 10m58.065759357s ago: executing program 35 (id=2184): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) 10m8.387324056s ago: executing program 36 (id=2548): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000480)=ANY=[], 0x2, 0xc3c, &(0x7f0000000e80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 9m17.280802527s ago: executing program 37 (id=2939): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') 8m17.386752086s ago: executing program 38 (id=3390): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 8m1.565084708s ago: executing program 39 (id=3462): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}]}, 0x2c}}, 0x4000040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xda, @tick=0xb61, 0x4}) 5m6.836091444s ago: executing program 3 (id=4591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000003340)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x6, 0x3, "e169"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x20008004) 5m6.523308767s ago: executing program 3 (id=4594): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x100000}) 5m5.961472629s ago: executing program 3 (id=4598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "dfcb71413ee8"}}}}}}, 0x0) 5m5.812843839s ago: executing program 3 (id=4600): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 5m4.931666954s ago: executing program 3 (id=4605): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x10001, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x50) 5m4.077890023s ago: executing program 3 (id=4613): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 5m3.105197372s ago: executing program 40 (id=4613): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 4m33.662235355s ago: executing program 7 (id=4778): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0xffffc000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 4m33.284279089s ago: executing program 7 (id=4781): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 4m32.753588658s ago: executing program 7 (id=4785): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x3e, &(0x7f00000004c0)={&(0x7f0000001400)={0x1, 0x0, 0x1000, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4001) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4m32.347942756s ago: executing program 7 (id=4788): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 4m32.094388433s ago: executing program 7 (id=4789): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 4m31.471749292s ago: executing program 7 (id=4795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000001200)) 4m30.873045237s ago: executing program 41 (id=4795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000001200)) 3m42.473115489s ago: executing program 5 (id=5175): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xafcc, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x0, 0x4}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m41.631825103s ago: executing program 5 (id=5182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 3m39.863397689s ago: executing program 5 (id=5189): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x100, 0xa0ca, 0x80000002, 0x0, 0x0, 0x9, 0xe, 0xd, 0x31e}) 3m39.519109338s ago: executing program 5 (id=5192): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m39.21967831s ago: executing program 5 (id=5193): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000002900)=[{&(0x7f0000000100)="ec", 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m38.717768028s ago: executing program 5 (id=5195): timerfd_create(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 3m37.984694278s ago: executing program 42 (id=5195): timerfd_create(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 1m41.294420839s ago: executing program 9 (id=6013): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000600)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 1m40.896344737s ago: executing program 9 (id=6015): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x400000001, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 1m40.622176857s ago: executing program 9 (id=6017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001300)=ANY=[], 0x438}, 0x1, 0x0, 0x0, 0x20044811}, 0x20000004) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) 1m39.284521522s ago: executing program 9 (id=6025): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1010002, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@uni_xlate}, {@fat=@dmask}, {@fat=@check_strict}, {@uni_xlateno}, {@numtail}]}, 0x1, 0x37f, &(0x7f00000007c0)="$eJzs3T+IXMUfAPDv3rvbvQR+v7tOFAJPO0GPxE4bL8gFgteoLP4pxMNcVHZP4Q4PkyKbtVAsBUut7BS0sBBLERSxs7A1gkTFQtMFDI7svvf23+1uYjCRw8+Hg52dme/MvJkH++7xdva59WidWYqzV65cjuXlWiyuP7IeV2uxGllULsZB9Sl5AMDhcDWl+D0VYn28bHl6SO22DAwAuGX6n/8vZBF5rBY5r385r37y6Q8Ah175//+ReXVm3AeIeOWWDAkAuMXG7v/33DNWXI9u1GOxers48lQAAHBYPfH0M4+e3Ix4PM+XI3beXOplPjQsP3k2Xop2bMfxWIlrEcWFQu+v1k+fOr25cTzP8078tBrNiFgoA5vFlcLJrBffiTgRK7FaxpdXGyml7NQnmxsn8r6IuNjZb+43I3Zq+82lOFr2//3R2B5eeFSN9F8iTm9uPJCXDTR3qvhORHf4oEJv/GuxEt8+P2imPniCcXPjwolq0MP4/WYjzgxmYeYdEAAAAAAAAAAAAAAAAAAAAAAAuClr+cDqYP+c1HstdspZW5tS3t8fp4gv9wfqFvsDpUaKlH577f7mW1mM7Q+U53l3LN5GggAAAAAAAAAAAAAAAAAAADCwd64eW+329u7eufOt0URnd+/cQkT0cl7++qMvjsTBOtdJLBZdNCIGXeRlt+dbWymrKqcs4mB41uu8yvng08GIR+s0BkcxdRiN2UXt9v/u/vHdYc6xrGr5z2GdLKYfYDYyjIcnWt75fzGkGdNSmzNjtXLCypxGxPJEO5dSSiNRb4yGX3j2YMtRi1j8+wt3vrUQs+ukXuKryy/eWc3+1uepcO99K09eeuf9X1pb7V7P0V/B+u7etdTaqlWVb6D3srnUX4LhuVGLcg5Hz4TFeQ12x3O2su9+fequt7+5sUlIozmv9s7niTpZcTgfT4bXi0RtuJRV0ZFh+FJ5EO3tpSkn//USN7Gmd7z32Ycp/fDzZNGlWV0MLVSrOTD5HgAAAAAAAAAAAAAAAAAA+AeMfFe8/NJ1pyhYmhf14GO3aXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFsMf/9/JNG9GEXi2NHJojmJPzpxsKixvbsXUf+3DxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+4vwIAAP//xCteBA==") timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xbc4040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 1m37.805187424s ago: executing program 9 (id=6034): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m36.752703871s ago: executing program 9 (id=6047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/67, 0x43}], 0x1}, 0x40010000) 1m36.053241813s ago: executing program 43 (id=6047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/67, 0x43}], 0x1}, 0x40010000) 8.687907604s ago: executing program 0 (id=6607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 8.039312888s ago: executing program 0 (id=6613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x2, 0x5, 0x4}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 6.925254477s ago: executing program 0 (id=6621): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a}, 0x28) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.802977916s ago: executing program 2 (id=6622): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 6.227707734s ago: executing program 0 (id=6626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 5.738906224s ago: executing program 0 (id=6629): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mremap(&(0x7f0000862000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000c52000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0xff7, 0x2, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.677829967s ago: executing program 1 (id=6630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 5.25265304s ago: executing program 8 (id=6634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 5.150534277s ago: executing program 4 (id=6635): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 4.979952849s ago: executing program 1 (id=6637): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) 4.915218684s ago: executing program 8 (id=6638): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x3, 0x300, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 4.520790151s ago: executing program 8 (id=6640): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.224858709s ago: executing program 8 (id=6641): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7aa4c585f22f2390962cca0f041113b93687bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438000000040023", @ANYRES8], 0x4, 0x337, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUznXany8y2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5CfLgnEOcW+NMsbDVvWADqHFsp3FQyZ6+jfiKIo+pab6mdPYqHyCLMHGzxgQPdOtT3oeWSHNmdbuR23q78YR1jsYQ8PMVxmOEREVD59//f0XWJIj989D5jU4/CTev9PZMY3e+XFcSyk938vfh8JuX9OqU1yvre22WysxFM4efS9ZJZYuIKotbtriM8sf9AYchm12KlYvPrqWrMxta0KeIY5zUg2pl5XkDREcUVbA2YATFjmph103fbUoGpDVbZh1hH/aKcarRPgD9/xyl7d4qcCMYmP4rNYFCFeYyUd/1UiIXeOOlJhW1eJ4592l6haGcapMq1shX9aVXJW14D3b1utrLv2awBfxmIjSxHt4/cwifNlzZ0LI8h+rBC3bsbdOpVrFKgINWswc82miX5bc42111VfrTYbU8t3m66T/mhZZ3TihbghJvAD77BgjP89mXoS7p6ZufILlVKfGR3bU1EpHccxQ3XgO131TFKuZy5+xTzHbVzB8P1HW+tLzWbjXvkLSVc5YPZzRxxPfMrq01Gukf8baRDIhSoAZzlV9ybrwp8oiqybKujFIaiqpl5+02ry1vqS0Ne8w1Uhr5xtm+bdiQHMA9BrkivCQWp/kuYaaBVYKPsvebTVGvsJmUTVgw6SVJXZ5GOgUE+p71uzk5Pr8f8HuwrRCdQ6+hi/WXYwVAY5dhDx/M+Yr0yrq458CTvMf6K8wo0SZxwzoBH1+l+xGVxarHOcOJgs5My5zl8ELrTV6CGp8Wl7saGOE8fxW8nuv8oQC/iCW/z8n4iIiIiIiIiIiIiIiIiIiIiIiIjopOn21wj7f06Qv5CtcbcP//AGEREREREREREREREREREREREREREREdHhGM//BXz1xJia7fm/nZ7UpPjxE2KCo3j+r1/g+b9iu4tWEpHN3wAAAP//98dcVw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x181e811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 4.069190875s ago: executing program 6 (id=6642): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x80, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 3.910607442s ago: executing program 2 (id=6643): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r2, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3.82632344s ago: executing program 4 (id=6644): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x2, 0x5, 0x5}, 0x2, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x7, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb78a, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x4, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x6, 0x67, 0x9483, 0x10, 0xe, 0x2, 0xef, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x4, 0x9], [0x3, 0x7, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x7, 0x7, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x5, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x6, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x5, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x6, 0x6, 0xb0fa, 0x4, 0x7ff, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x6, 0x800, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3e, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0x2, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x5, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x80000000, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x3, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) 3.69985821s ago: executing program 8 (id=6645): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) syz_usb_disconnect(r0) 3.636078303s ago: executing program 1 (id=6646): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x41, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000740)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000000, 0x4}) 3.554467103s ago: executing program 6 (id=6647): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.491094929s ago: executing program 2 (id=6648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.318790618s ago: executing program 4 (id=6649): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.186961178s ago: executing program 2 (id=6650): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffec, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x643, 0xffffffff, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11b1, 0x20002, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 2.954226441s ago: executing program 6 (id=6651): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002640)={0x1, 0x0, [{0xf004, 0x26, &(0x7f0000000540)=""/38}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x4003) 2.446516362s ago: executing program 2 (id=6652): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 2.27647308s ago: executing program 6 (id=6653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffcfa, 0x6, "cc5c8b1ae8cfe931ff31faefe2fc611f3489f7cd35a37ca1b3942a350b6092bf86ef05a67f280e7f21317e82a24975bbbf203e881bf050a1ea838fb717a5296eb2ae047d6708338f22359468b976edb294bd6f420900000000000000a3c642cdfa96bda151d16d19ceeceaaacc349cf714f0cbdc153356d15134097c4e3290289600f68f0bf273f9865bc01fccaa2df68cc89fecb4b4b4cb40d457285a87ba22398c2e93639622e8efa9a129b25f932939c3fc32993f169548756f65ad2ea6b5628d98cb1d0cbc47d9922e587541500d34a83259d4c1df64802986af10"}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.139193291s ago: executing program 1 (id=6654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.863787546s ago: executing program 4 (id=6655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d0387d7b985a34cfff48f3be52e23448818d40b43f61fa1f46196f2df5798b23c3", 0x21}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.632193492s ago: executing program 2 (id=6656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a31000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 1.52392264s ago: executing program 6 (id=6657): unshare(0x28040680) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 1.33454412s ago: executing program 4 (id=6658): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.079187932s ago: executing program 6 (id=6659): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodatacow}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400}) 663.849717ms ago: executing program 8 (id=6660): unshare(0x62020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 653.334325ms ago: executing program 1 (id=6661): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 531.947821ms ago: executing program 0 (id=6662): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000600)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,sys_immutable,shortname=mixed,shortname=winnt,shortname=win95,check=normal,codepage=861,uni_xlate=0,nonumtail=0,rodir,iocharset=cp932,shortname=win95,utf8=0,appraise_type=imasig,uid<', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',defcontext=unconfined_u,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 404.927304ms ago: executing program 4 (id=6663): unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x20002fb}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=6664): pipe2(&(0x7f0000000140), 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): [ 869.736052][T24699] EXT4-fs (loop0): mount failed [ 869.762286][ T5646] usb 5-1: USB disconnect, device number 31 [ 869.826236][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.130189][ T5756] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 870.279453][T24710] fido_id[24710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 870.381857][ T5756] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 870.399618][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.446976][ T5756] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 870.480086][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.504186][ T5756] usb 1-1: Product: syz [ 870.529054][ T5756] usb 1-1: Manufacturer: syz [ 870.538169][ T5756] usb 1-1: SerialNumber: syz [ 870.607084][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input57 [ 870.804831][ T4977] bcm5974 1-1:1.0: could not read from device [ 870.858331][T24727] loop1: detected capacity change from 0 to 2048 [ 870.899253][ T4977] bcm5974 1-1:1.0: could not read from device [ 870.945081][T24727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.977244][ T5618] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 870.985572][ T5756] bcm5974 1-1:1.0: could not read from device [ 871.054257][T24727] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.159327][ T5618] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 871.192407][ T5756] input: failed to attach handler mousedev to device input57, error: -5 [ 871.235003][ T4977] bcm5974 1-1:1.0: could not read from device [ 871.254740][ T5756] usb 1-1: USB disconnect, device number 32 [ 871.312189][ T4977] bcm5974 1-1:1.0: could not read from device [ 871.575050][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.728630][T24459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 871.788455][T24459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.823007][T24459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 871.858693][T24459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.874966][T24752] loop1: detected capacity change from 0 to 128 [ 871.887993][T24459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 871.941988][T24752] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.963203][T24459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.977591][T24459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 872.030993][T24459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.033831][T24752] ext4 filesystem being mounted at /542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.357687][T24459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.425109][T24459] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.468053][T12920] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 872.493243][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.500470][T16787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.547624][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.554892][T16787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.117851][T24792] loop0: detected capacity change from 0 to 164 [ 873.168114][T24792] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 873.219223][T24792] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 873.569941][T24799] loop6: detected capacity change from 0 to 32768 [ 873.577481][T24799] btrfs: Deprecated parameter 'usebackuproot' [ 873.583618][T24799] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 873.593775][ T5756] net_ratelimit: 29 callbacks suppressed [ 873.593793][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.594033][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.615855][T24799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5754 (24799) [ 873.631106][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.664720][T24799] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 873.674970][T24799] BTRFS info (device loop6): using crc32c checksum algorithm [ 873.838857][T24819] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.5757'. [ 873.924897][T16794] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 874.039061][T24799] BTRFS error (device loop6): failed to load root extent [ 874.040148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.046337][T24799] BTRFS warning (device loop6): try to load backup roots slot 1 [ 874.066505][ T1350] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 874.122608][T24799] BTRFS warning (device loop6): couldn't read tree root [ 874.129626][T24799] BTRFS warning (device loop6): try to load backup roots slot 2 [ 874.145602][T16794] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 874.173575][T24799] BTRFS warning (device loop6): couldn't read tree root [ 874.182805][T24799] BTRFS warning (device loop6): try to load backup roots slot 3 [ 874.231308][T24799] BTRFS info (device loop6): rebuilding free space tree [ 874.276670][T24799] BTRFS info (device loop6): checking UUID tree [ 874.280623][T11908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.291443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.307466][T24799] BTRFS info (device loop6): enabling ssd optimizations [ 874.314574][T24799] BTRFS info (device loop6): turning on async discard [ 874.321441][T24799] BTRFS info (device loop6): enabling free space tree [ 874.328215][T24799] BTRFS info (device loop6): force clearing of disk cache [ 874.335367][T24799] BTRFS info (device loop6): enabling auto defrag [ 874.343434][T24799] BTRFS info (device loop6): trying to use backup root at mount time [ 874.351549][T24799] BTRFS info (device loop6): force lzo compression, level 1 [ 874.601389][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.619147][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.684937][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.845406][T22792] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 874.934196][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.179111][T24459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.847177][T24459] veth0_vlan: entered promiscuous mode [ 876.918268][T24459] veth1_vlan: entered promiscuous mode [ 877.139335][T24459] veth0_macvtap: entered promiscuous mode [ 877.201804][T24459] veth1_macvtap: entered promiscuous mode [ 877.327958][T24459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.405843][T24459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.580993][ T1159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.618260][ T1159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.664052][ T1159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.698835][ T1159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.828243][T24944] loop9: detected capacity change from 0 to 256 [ 878.199517][T16785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.243705][T16785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.390473][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.418955][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.763206][ T10] net_ratelimit: 25 callbacks suppressed [ 878.763227][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.820892][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.842066][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.865318][T24962] loop1: detected capacity change from 0 to 512 [ 878.935020][T24962] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.5790: iget: bad i_size value: 38620345925642 [ 878.955931][T24962] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 878.960494][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 878.976077][ C0] EXT4-fs (loop1): initial error at time 1781483959: ext4_orphan_get:1397: inode 15 [ 878.985497][ C0] EXT4-fs (loop1): last error at time 1781483959: ext4_orphan_get:1397: inode 15 [ 879.010274][T24962] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5790: couldn't read orphan inode 15 (err -117) [ 879.079175][T24962] loop1: lost filesystem error report for type 5 error -117 [ 879.088275][T24962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.170670][T24968] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 879.224009][ T180] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28 [ 879.240097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.270074][ T180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 879.270074][ T180] [ 879.296560][ T180] EXT4-fs (loop1): Total free blocks count 0 [ 879.310908][ T180] EXT4-fs (loop1): Free/Dirty block details [ 879.320354][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.330528][ T180] EXT4-fs (loop1): free_blocks=0 [ 879.340326][ T180] EXT4-fs (loop1): dirty_blocks=160 [ 879.348893][ T180] EXT4-fs (loop1): Block reservation details [ 879.363329][ T180] EXT4-fs (loop1): i_reserved_data_blocks=160 [ 879.411343][T24962] EXT4-fs (loop1): shut down requested (0) [ 879.420242][ T1737] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 879.600117][ T1737] usb 1-1: Using ep0 maxpacket: 8 [ 879.614219][ T1737] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 879.648082][ T1737] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 879.689946][ T1737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 879.725371][ T1737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 879.746946][ T1737] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.780147][ T1737] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 879.798603][ T1737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.811344][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.881330][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.895182][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.921014][T24980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.944869][T24980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.846997][ T10] usb 1-1: USB disconnect, device number 33 [ 880.861114][T24996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5802'. [ 880.911261][T24996] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.918971][T24996] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.011666][T24999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5802'. [ 881.825201][T15221] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 882.016220][T15221] usb 9-1: config index 0 descriptor too short (expected 25183, got 144) [ 882.048270][T15221] usb 9-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 882.072158][T15221] usb 9-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 882.089965][T15221] usb 9-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 882.106810][T15221] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 882.117462][T25020] loop1: detected capacity change from 0 to 128 [ 882.145720][T15221] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.189605][T15221] usb 9-1: Product: syz [ 882.207200][T15221] usb 9-1: Manufacturer: syz [ 882.218348][T15221] usb 9-1: SerialNumber: syz [ 882.222800][T25020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 882.267265][T25020] ext4 filesystem being mounted at /556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 882.538926][T25032] loop6: detected capacity change from 0 to 128 [ 882.566831][T25032] EXT4-fs: Ignoring removed nobh option [ 882.595720][T12920] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 882.625024][T25032] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 882.776193][T25032] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 882.902904][T25032] fscrypt (loop6, inode 12): Reserved bits set in encryption policy [ 883.086282][T22792] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 883.218747][T15221] usb 9-1: USB disconnect, device number 38 [ 883.903226][T25080] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5834'. [ 883.960954][ T5646] net_ratelimit: 43 callbacks suppressed [ 883.960977][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.042238][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.121014][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.415481][T25090] loop5: detected capacity change from 0 to 8 [ 884.440110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.448756][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.521315][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.529880][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.649929][T25090] Dev loop5: unable to read RDB block 8 [ 884.659321][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 884.669109][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 884.678002][T25090] loop5: unable to read partition table [ 884.684629][T25090] loop5: partition table beyond EOD, truncated [ 884.696594][T25090] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 884.744043][T25094] loop9: detected capacity change from 0 to 512 [ 884.752079][T25094] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 884.769885][T25094] EXT4-fs (loop9): 1 truncate cleaned up [ 884.796459][T25094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.911699][T25099] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-61) [ 885.001625][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.083891][T20624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.091893][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.178503][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.243597][T25088] loop8: detected capacity change from 0 to 32768 [ 885.294778][T25088] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 885.406806][T25088] XFS (loop8): Ending clean mount [ 885.481728][ T5640] Bluetooth: hci0: command tx timeout [ 885.625339][T24459] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 885.905893][T25126] loop9: detected capacity change from 0 to 512 [ 885.965096][T25128] netlink: 'syz.6.5851': attribute type 1 has an invalid length. [ 886.001229][T25126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.074140][T25128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.223987][T25132] bond1: (slave geneve2): making interface the new active one [ 886.282152][T25132] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 886.373198][T20624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.590273][T21019] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 886.741508][T21019] usb 9-1: Using ep0 maxpacket: 8 [ 886.757871][T21019] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 886.785693][T21019] usb 9-1: config 0 has no interface number 0 [ 886.812769][T21019] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 886.869182][T21019] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 886.915236][T21019] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.927006][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 886.927024][ T30] audit: type=1800 audit(1781483967.772:1117): pid=25152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5860" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 886.969464][T21019] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 886.994726][T21019] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 887.014669][T21019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.035878][T21019] usb 9-1: config 0 descriptor?? [ 887.070726][T21019] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 887.285283][T21019] usb 9-1: USB disconnect, device number 39 [ 887.310291][T21019] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 888.098535][T25177] loop6: detected capacity change from 0 to 128 [ 888.145093][T25177] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 888.185844][T25177] hpfs: filesystem error: improperly stopped [ 888.213391][T25177] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 888.248045][T25177] hpfs: You really don't want any checks? You are crazy... [ 888.277753][T25177] hpfs: Code page index out of array [ 888.315053][T25177] hpfs: code page support is disabled [ 888.339517][T25177] hpfs: hpfs_map_4sectors(): unaligned read [ 888.367991][T25177] hpfs: hpfs_map_4sectors(): unaligned read [ 888.388118][T25177] hpfs: filesystem error: unable to find root dir [ 888.514868][T25164] loop9: detected capacity change from 0 to 32768 [ 888.682675][T25164] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 888.907197][T25164] VFS: Lookup of '' in ocfs2 loop9 would have caused loop [ 889.161843][ T5776] net_ratelimit: 26 callbacks suppressed [ 889.161864][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.240928][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.320387][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.335030][T20624] ocfs2: Unmounting device (7,9) on (node local) [ 889.640222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.690246][T25182] loop8: detected capacity change from 0 to 32768 [ 889.803191][T25182] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 890.017644][T25182] XFS (loop8): Ending clean mount [ 890.202362][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.288444][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.361880][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.417943][T24459] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 890.532577][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.612273][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.621114][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.152121][T25229] overlayfs: failed to clone upperpath [ 891.767329][T25249] loop9: detected capacity change from 0 to 4096 [ 891.885968][ T30] audit: type=1800 audit(1781483972.732:1118): pid=25249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5897" name="file0" dev="loop9" ino=33 res=0 errno=0 [ 892.510553][T25260] loop6: detected capacity change from 0 to 4096 [ 892.588509][T25260] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 892.793433][T25260] ntfs3(loop6): ino=1a, mi_enum_attr [ 892.822261][T25260] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 892.864854][T25260] ntfs3(loop6): ino=1a, mi_enum_attr [ 892.891304][T25260] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 894.410749][ T5646] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 894.520572][T15221] net_ratelimit: 23 callbacks suppressed [ 894.520592][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.534386][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.535980][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.543661][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.625113][ T5646] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.649181][ T5646] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 894.680196][ T5646] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 894.703251][ T5646] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.713291][ T5646] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.740843][ T5646] usb 9-1: Product: syz [ 894.755321][ T5646] usb 9-1: Manufacturer: syz [ 894.773222][ T5646] usb 9-1: SerialNumber: syz [ 894.840103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.877448][T25316] loop9: detected capacity change from 0 to 4096 [ 894.908295][T25316] EXT4-fs: Ignoring removed mblk_io_submit option [ 894.951994][T25316] EXT4-fs (loop9): Test dummy encryption mode enabled [ 894.990268][T25316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.136151][T25324] EXT4-fs (loop9): shut down requested (2) [ 895.178411][T25324] overlayfs: failed to resolve './bus': -2 [ 895.225358][T25326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.237465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.342609][T20624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.353442][T16786] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 895.398325][T16786] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 895.560454][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.561219][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.577426][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.687091][T25332] loop9: detected capacity change from 0 to 64 [ 895.822977][ T5646] cdc_ncm 9-1:1.0: bind() failure [ 895.844480][ T5646] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 895.870387][ T5646] cdc_ncm 9-1:1.1: bind() failure [ 896.027218][ T5646] usb 9-1: USB disconnect, device number 40 [ 896.485865][T25356] input: syz0 as /devices/virtual/input/input58 [ 896.937691][T25362] loop8: detected capacity change from 0 to 4096 [ 897.097995][T25362] ntfs3(loop8): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 897.630655][ T5776] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 897.668347][T25382] netlink: 'syz.4.5954': attribute type 26 has an invalid length. [ 897.725700][T25382] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 897.760552][T25382] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.767952][T25382] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.781740][T25384] loop0: detected capacity change from 0 to 256 [ 897.830120][ T5776] usb 10-1: Using ep0 maxpacket: 16 [ 897.834674][T25384] FAT-fs (loop0): Directory bread(block 64) failed [ 897.858197][ T5776] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 897.858638][T25384] FAT-fs (loop0): Directory bread(block 65) failed [ 897.899205][ T5776] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 897.914160][T25384] FAT-fs (loop0): Directory bread(block 66) failed [ 897.927693][T25384] FAT-fs (loop0): Directory bread(block 67) failed [ 897.937192][T25384] FAT-fs (loop0): Directory bread(block 68) failed [ 897.945011][T25384] FAT-fs (loop0): Directory bread(block 69) failed [ 897.952517][T25384] FAT-fs (loop0): Directory bread(block 70) failed [ 897.959419][T25384] FAT-fs (loop0): Directory bread(block 71) failed [ 897.975132][ T5776] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 897.987289][T25384] FAT-fs (loop0): Directory bread(block 72) failed [ 898.003139][T25384] FAT-fs (loop0): Directory bread(block 73) failed [ 898.005028][ T5776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.037733][ T5776] usb 10-1: Product: syz [ 898.048425][ T5776] usb 10-1: Manufacturer: syz [ 898.068438][ T5776] usb 10-1: SerialNumber: syz [ 898.088762][ T5776] usb 10-1: config 0 descriptor?? [ 898.088908][T25384] syz.0.5955: attempt to access beyond end of device [ 898.088908][T25384] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 898.110545][T25384] syz.0.5955: attempt to access beyond end of device [ 898.110545][T25384] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 898.124593][ T30] audit: type=1800 audit(1781483978.972:1119): pid=25384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5955" name="file0" dev="loop0" ino=1048906 res=0 errno=0 [ 898.163824][ T5776] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 898.205151][ T5776] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 898.770531][ T5776] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 898.801531][ T5776] em28xx 10-1:0.0: Config register raw data: 0xea [ 898.828941][ T5776] em28xx 10-1:0.0: I2S Audio (1 sample rate(s)) [ 898.849067][ T5776] em28xx 10-1:0.0: No AC97 audio processor [ 898.866008][T25404] netlink: 'syz.0.5963': attribute type 4 has an invalid length. [ 898.927592][T25408] netlink: 'syz.0.5963': attribute type 4 has an invalid length. [ 899.209800][ T5776] usb 10-1: USB disconnect, device number 14 [ 899.642283][ T1737] net_ratelimit: 26 callbacks suppressed [ 899.642305][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.720754][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.720968][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.738914][T21019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.747696][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.759283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.789185][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.798106][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.809602][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.889590][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.495884][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5980'. [ 902.510981][T25472] ALSA: seq fatal error: cannot create timer (-22) [ 902.737528][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 903.376990][T25492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6002'. [ 903.957005][T25508] loop1: detected capacity change from 0 to 512 [ 904.152651][T25508] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.6008: iget: bad i_size value: 38620345925642 [ 904.237374][T25508] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 904.237921][T25508] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6008: couldn't read orphan inode 15 (err -117) [ 904.247197][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 904.247221][ C1] EXT4-fs (loop1): initial error at time 1781483985: ext4_orphan_get:1397: inode 15 [ 904.247260][ C1] EXT4-fs (loop1): last error at time 1781483985: ext4_orphan_get:1397: inode 15 [ 904.310286][T25508] loop1: lost filesystem error report for type 5 error -117 [ 904.335027][T25508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.413531][T25512] loop8: detected capacity change from 0 to 128 [ 904.428474][T25512] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 904.711247][T25500] loop0: detected capacity change from 0 to 32768 [ 904.801201][T25500] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 904.920487][ T1737] net_ratelimit: 56 callbacks suppressed [ 904.920510][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.973068][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.160961][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.171955][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.240092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.268555][T25500] (syz.0.6005,25500,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 905.645859][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.646067][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.654210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.664559][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.670696][ T5763] kworker/1:5 (5763) used greatest stack depth: 17536 bytes left [ 905.699475][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.722758][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.322375][T25541] loop1: detected capacity change from 0 to 2048 [ 906.337931][T25541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 906.854309][T21382] ocfs2: Unmounting device (7,0) on (node local) [ 907.235195][T25550] loop9: detected capacity change from 0 to 256 [ 907.394510][T25550] FAT-fs (loop9): Directory bread(block 64) failed [ 907.426160][T25550] FAT-fs (loop9): Directory bread(block 65) failed [ 907.453928][T25550] FAT-fs (loop9): Directory bread(block 66) failed [ 907.484031][T25550] FAT-fs (loop9): Directory bread(block 67) failed [ 907.525197][T25550] FAT-fs (loop9): Directory bread(block 68) failed [ 907.565384][T25550] FAT-fs (loop9): Directory bread(block 69) failed [ 907.593498][T25550] FAT-fs (loop9): Directory bread(block 70) failed [ 907.614892][T25550] FAT-fs (loop9): Directory bread(block 71) failed [ 907.651194][T25550] FAT-fs (loop9): Directory bread(block 72) failed [ 907.683270][T25554] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6014'. [ 907.707176][T25550] FAT-fs (loop9): Directory bread(block 73) failed [ 908.535608][T20624] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 908.622323][T20624] FAT-fs (loop9): Filesystem has been set read-only [ 908.933091][T25558] syz.9.6025: attempt to access beyond end of device [ 908.933091][T25558] loop9: rw=2049, sector=1256, nr_sectors = 224 limit=256 [ 908.991100][T25558] syz.9.6025: attempt to access beyond end of device [ 908.991100][T25558] loop9: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 909.059394][T25558] syz.9.6025: attempt to access beyond end of device [ 909.059394][T25558] loop9: rw=2049, sector=1864, nr_sectors = 2048 limit=256 [ 909.083091][T25558] syz.9.6025: attempt to access beyond end of device [ 909.083091][T25558] loop9: rw=2049, sector=3912, nr_sectors = 2048 limit=256 [ 909.103587][T25558] syz.9.6025: attempt to access beyond end of device [ 909.103587][T25558] loop9: rw=2049, sector=5960, nr_sectors = 1136 limit=256 [ 909.309570][ T30] audit: type=1800 audit(1781483990.152:1120): pid=25541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6023" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 909.543989][T25598] loop0: detected capacity change from 0 to 16 [ 909.585356][T25598] erofs (device loop0): mounted with root inode @ nid 36. [ 909.618527][ T30] audit: type=1800 audit(1781483990.462:1121): pid=25598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6044" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 909.863659][T16798] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.925343][T16798] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.964421][ T1737] net_ratelimit: 38 callbacks suppressed [ 909.964442][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.140617][T15221] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 910.201778][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.313705][T15221] usb 1-1: config 0 has no interfaces? [ 910.338709][T15221] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 910.383502][T15221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.440194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.783741][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 910.806955][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 910.815185][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 910.827959][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 910.833499][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.837655][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 910.860437][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.913683][T15221] usb 1-1: config 0 descriptor?? [ 910.945684][T16798] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.972037][T16798] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.187243][T16798] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.228925][T16798] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.241436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.400315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.408947][T16786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.409902][T16798] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.421120][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.431785][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.474243][T16798] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.572257][T25629] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 4, id = 0 [ 912.154332][T16798] bridge_slave_1: left allmulticast mode [ 912.160649][T16798] bridge_slave_1: left promiscuous mode [ 912.167755][T16798] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.191922][T16798] bridge_slave_0: left allmulticast mode [ 912.205309][T16798] bridge_slave_0: left promiscuous mode [ 912.221864][T16798] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.856821][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 912.920390][T22795] Bluetooth: hci4: command tx timeout [ 913.080108][ T802] usb 1-1: USB disconnect, device number 34 [ 913.119875][T16798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.132954][T25666] input: syz1 as /devices/virtual/input/input60 [ 913.226291][T16798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.283235][T16798] bond0 (unregistering): Released all slaves [ 913.558788][T16798] tipc: Disabling bearer [ 913.607957][T16798] tipc: Left network mode [ 913.695804][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 915.000566][T22795] Bluetooth: hci4: command tx timeout [ 915.006394][ T802] net_ratelimit: 20 callbacks suppressed [ 915.006412][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.289914][T25613] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.329332][T25613] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.365491][T25613] bridge_slave_0: entered allmulticast mode [ 915.426209][T25613] bridge_slave_0: entered promiscuous mode [ 915.427868][T25686] loop6: detected capacity change from 0 to 32768 [ 915.555307][T25613] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.584999][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.593966][T25613] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.601895][T25613] bridge_slave_1: entered allmulticast mode [ 915.611438][T25613] bridge_slave_1: entered promiscuous mode [ 915.613563][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 915.669275][T25686] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 915.878977][T25686] (syz.6.6070,25686,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 915.960233][T25734] loop8: detected capacity change from 0 to 1024 [ 916.014390][T25734] EXT4-fs: Ignoring removed bh option [ 916.042693][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.144768][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.257986][T25734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 916.317709][T25734] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.601935][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.687204][T22792] ocfs2: Unmounting device (7,6) on (node local) [ 916.706426][T24459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 916.831070][T25613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.030653][T16798] hsr_slave_0: left promiscuous mode [ 917.074129][T16798] hsr_slave_1: left promiscuous mode [ 917.090729][T22795] Bluetooth: hci4: command tx timeout [ 917.096389][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.099731][T16798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.162310][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.170715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.180847][T16798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.235981][T16798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.267612][T16798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.268235][T25774] loop1: detected capacity change from 0 to 512 [ 917.358606][T25774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.369396][T16798] veth1_macvtap: left promiscuous mode [ 917.391933][T25774] ext4 filesystem being mounted at /603/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.410257][T16798] veth0_macvtap: left promiscuous mode [ 917.415945][T16798] veth1_vlan: left promiscuous mode [ 917.423386][T16798] veth0_vlan: left promiscuous mode [ 917.572042][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.640532][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.663265][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.776526][T25788] netlink: 3796 bytes leftover after parsing attributes in process `syz.6.6093'. [ 917.795569][T25788] netlink: 3796 bytes leftover after parsing attributes in process `syz.6.6093'. [ 918.350047][T25797] loop1: detected capacity change from 0 to 32768 [ 918.357505][T25797] btrfs: Deprecated parameter 'usebackuproot' [ 918.363646][T25797] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 918.375718][T25797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6096 (25797) [ 918.416528][T25797] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 918.426664][T25797] BTRFS info (device loop1): using crc32c checksum algorithm [ 918.472793][T16798] team0 (unregistering): Port device team_slave_1 removed [ 918.619457][T16798] team0 (unregistering): Port device team_slave_0 removed [ 918.668379][T16791] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 918.736755][T25797] BTRFS error (device loop1): failed to load root extent [ 918.743971][T25797] BTRFS warning (device loop1): try to load backup roots slot 1 [ 918.752943][ T57] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 918.829350][T25797] BTRFS warning (device loop1): couldn't read tree root [ 918.836941][T25797] BTRFS warning (device loop1): try to load backup roots slot 2 [ 918.846059][ T1159] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 918.884728][T25797] BTRFS warning (device loop1): couldn't read tree root [ 918.888423][T25808] loop6: detected capacity change from 0 to 32768 [ 918.892713][T25797] BTRFS warning (device loop1): try to load backup roots slot 3 [ 918.923487][T25808] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 918.932504][T25808] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 918.962731][T25797] BTRFS info (device loop1): rebuilding free space tree [ 918.985003][T25808] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 918.998154][ T5646] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 919.018166][T25797] BTRFS info (device loop1): checking UUID tree [ 919.027652][T25797] BTRFS info (device loop1): enabling ssd optimizations [ 919.034732][T25797] BTRFS info (device loop1): turning on sync discard [ 919.041506][T25797] BTRFS info (device loop1): enabling free space tree [ 919.042601][ T5646] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 919.048267][T25797] BTRFS info (device loop1): force clearing of disk cache [ 919.048291][T25797] BTRFS info (device loop1): enabling auto defrag [ 919.071601][T25797] BTRFS info (device loop1): trying to use backup root at mount time [ 919.160620][T22795] Bluetooth: hci4: command tx timeout [ 919.338017][ T5646] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 295ms [ 919.350627][T12920] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 919.361818][ T5646] gfs2: fsid=syz:syz.0: jid=0: Done [ 919.367730][T25808] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 919.660430][T25613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.767888][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 919.960926][T25613] team0: Port device team_slave_0 added [ 920.071008][T25613] team0: Port device team_slave_1 added [ 920.215590][ T10] net_ratelimit: 9 callbacks suppressed [ 920.215610][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.260132][T25613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.295666][T25613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.336079][ T5646] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 920.358540][T25613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.380992][T25613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.401408][T25613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.510083][T25613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.530965][ T5646] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 920.580061][ T5646] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.589632][ T5646] usb 9-1: Product: syz [ 920.600423][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.637652][ T5646] usb 9-1: Manufacturer: syz [ 920.656624][ T5646] usb 9-1: SerialNumber: syz [ 920.868412][T25613] hsr_slave_0: entered promiscuous mode [ 920.882872][T25613] hsr_slave_1: entered promiscuous mode [ 920.899450][T25613] debugfs: 'hsr0' already exists in 'hsr' [ 920.915796][T25613] Cannot create hsr debugfs directory [ 921.003147][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.011527][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.012162][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.068912][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.105247][ T5646] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 921.243838][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.793287][T25866] loop6: detected capacity change from 0 to 32768 [ 921.817116][T25866] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 921.825328][T25866] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 922.007334][T25866] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 922.020437][ T5776] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 922.030302][ T5776] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 922.054079][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.204255][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.227251][ T5776] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 196ms [ 922.263656][ T5776] gfs2: fsid=syz:syz.0: jid=0: Done [ 922.279034][T25866] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 922.288352][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.483909][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 923.077748][ T30] audit: type=1800 audit(1781484003.922:1122): pid=25866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6114" name="file1" dev="loop6" ino=9442 res=0 errno=0 [ 923.202746][ T5646] usb 9-1: USB disconnect, device number 41 [ 923.217836][ T5646] usblp0: removed [ 923.352251][T25613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 923.420988][T25613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 923.429279][T25613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 923.465309][T25613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 923.515815][T25613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 923.613831][T25613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 923.673250][T25613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 923.749212][T25613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.165715][T25613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.174162][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 924.198050][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 924.214538][ T5646] libceph: connect (1)[c::]:6789 error -101 [ 924.253145][T25613] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.261599][ T5646] libceph: mon0 (1)[c::]:6789 connect error [ 924.339353][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.346575][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.373484][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.380690][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.561115][ T5646] libceph: connect (1)[c::]:6789 error -101 [ 924.584637][ T5646] libceph: mon0 (1)[c::]:6789 connect error [ 924.592875][ T10] libceph: connect (1)[c::]:6789 error -101 [ 924.631291][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 924.637481][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 924.892286][T25912] ceph: No mds server is up or the cluster is laggy [ 924.913388][T25918] ceph: No mds server is up or the cluster is laggy [ 925.175031][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 925.223598][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 925.271206][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 925.308750][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 925.314349][T15221] net_ratelimit: 10 callbacks suppressed [ 925.314367][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.328939][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.404488][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.480857][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.669248][T25920] loop0: detected capacity change from 0 to 32768 [ 925.970504][T25920] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 926.268007][T15221] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 926.292280][T25964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.345654][T25964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.409823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.433207][T25964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.443133][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.488679][T15221] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 926.502132][T25968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.924687][T21382] ocfs2: Unmounting device (7,0) on (node local) [ 926.967273][T25613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.255072][T25613] veth0_vlan: entered promiscuous mode [ 927.318793][T25613] veth1_vlan: entered promiscuous mode [ 927.341733][T15221] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 927.458151][T25613] veth0_macvtap: entered promiscuous mode [ 927.501672][T25613] veth1_macvtap: entered promiscuous mode [ 927.563626][T15221] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.566751][T25613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.609557][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 927.623545][T25613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.660271][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 927.669923][T16783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.707306][T16783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.718085][T15221] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.762219][T16783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.763573][T15221] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.804929][T16783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.831063][T15221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.881247][T15221] usb 9-1: config 0 descriptor?? [ 927.912824][T25980] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 928.161359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.213470][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.333841][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.368697][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.499321][T15221] plantronics 0003:047F:FFFF.003C: reserved main item tag 0xd [ 928.586060][T15221] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 928.663124][ T5618] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 928.706654][ T5618] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 928.969566][ T5618] usb 9-1: USB disconnect, device number 42 [ 929.364785][T26021] loop6: detected capacity change from 0 to 256 [ 930.691069][ T802] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 930.899169][ T802] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 930.978156][ T802] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 931.069779][ T802] usb 3-1: config 1 interface 0 has no altsetting 0 [ 931.124230][ T802] usb 3-1: string descriptor 0 read error: -22 [ 931.148778][T26062] loop1: detected capacity change from 0 to 1024 [ 931.166014][ T802] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 931.172602][ T1737] net_ratelimit: 21 callbacks suppressed [ 931.172620][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.192142][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.207396][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.246994][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.247797][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.254882][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.290869][ T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.339938][T26047] loop0: detected capacity change from 0 to 131072 [ 931.349659][T26047] F2FS-fs (loop0): invalid crc value [ 931.403577][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.573007][T26047] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 931.589893][T26047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 931.840906][ T802] logitech 0003:046D:C626.003E: unknown main item tag 0x2 [ 931.848102][ T802] logitech 0003:046D:C626.003E: unexpected long global item [ 931.857437][ T802] logitech 0003:046D:C626.003E: parse failed [ 931.865702][ T802] logitech 0003:046D:C626.003E: probe with driver logitech failed with error -22 [ 932.080347][ T802] usb 3-1: USB disconnect, device number 12 [ 932.201023][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.308083][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.761082][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.168501][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.818830][T26113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6175'. [ 934.319089][T26110] loop2: detected capacity change from 0 to 131072 [ 934.327475][T26110] xfs: Deprecated parameter 'ikeep' [ 934.332761][T26110] XFS: ikeep mount option is deprecated. [ 934.382572][T26110] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 934.383204][T26130] overlayfs: failed to clone upperpath [ 934.613375][T26110] XFS (loop2): Starting recovery (logdev: internal) [ 934.652326][T26110] XFS (loop2): Ending recovery (logdev: internal) [ 934.795585][T25613] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 935.289355][T26146] overlayfs: failed to clone upperpath [ 935.326019][T22795] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 935.352285][T26147] loop8: detected capacity change from 0 to 128 [ 935.378405][T26147] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 935.390870][T26147] hpfs: filesystem error: improperly stopped [ 935.396903][T26147] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 935.404982][T26147] hpfs: You really don't want any checks? You are crazy... [ 935.412633][T26147] hpfs: Code page index out of array [ 935.420858][T26147] hpfs: code page support is disabled [ 935.440906][T26147] hpfs: hpfs_map_4sectors(): unaligned read [ 935.472860][T26147] hpfs: hpfs_map_4sectors(): unaligned read [ 935.492194][T26147] hpfs: filesystem error: unable to find root dir [ 935.654955][T26152] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6163'. [ 936.227874][ T1737] net_ratelimit: 14 callbacks suppressed [ 936.227895][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.376474][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.655205][T26181] input: syz0 as /devices/virtual/input/input62 [ 936.774058][T26187] 9p: Bad value for 'rfdno' [ 936.787428][T26184] loop1: detected capacity change from 0 to 2048 [ 936.882973][T26184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.001574][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.075317][T26192] loop8: detected capacity change from 0 to 1024 [ 937.194340][T26192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 937.207791][T26195] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 937.263404][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.292656][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.320720][T26195] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 34 with error 28 [ 937.384690][T26195] EXT4-fs (loop1): This should not happen!! Data will be lost [ 937.384690][T26195] [ 937.397403][T26192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.410297][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.419266][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.431440][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.443674][T26195] EXT4-fs (loop1): Total free blocks count 0 [ 937.454031][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.456688][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.504241][T26195] EXT4-fs (loop1): Free/Dirty block details [ 937.535562][T26195] EXT4-fs (loop1): free_blocks=2415919104 [ 937.553389][T26195] EXT4-fs (loop1): dirty_blocks=160 [ 937.581560][T26195] EXT4-fs (loop1): Block reservation details [ 937.611543][T26195] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 937.794791][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 937.862040][T12920] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 938.162292][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6201'. [ 938.257426][T24459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.891313][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6206'. [ 939.148609][T26242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.363819][T26250] team0 (unregistering): Port device team_slave_0 removed [ 939.437932][T26250] team0 (unregistering): Port device team_slave_1 removed [ 940.080075][T26272] loop2: detected capacity change from 0 to 32768 [ 940.099851][T26272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6215 (26272) [ 940.118777][T26272] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 940.128935][T26272] BTRFS info (device loop2): using crc32c checksum algorithm [ 940.278339][T26272] BTRFS info (device loop2): enabling ssd optimizations [ 940.285471][T26272] BTRFS info (device loop2): turning on flush-on-commit [ 940.294918][T26272] BTRFS info (device loop2): enabling free space tree [ 940.301819][T26272] BTRFS info (device loop2): force zlib compression, level 3 [ 940.309210][T26272] BTRFS info (device loop2): max_inline set to 4096 [ 940.603963][T25613] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 941.401160][ T24] net_ratelimit: 42 callbacks suppressed [ 941.401181][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.494215][T16783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.502607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.547058][T26337] loop8: detected capacity change from 0 to 128 [ 941.734777][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.881477][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.903821][T26342] loop2: detected capacity change from 0 to 1024 [ 942.150524][ T30] audit: type=1800 audit(1781484022.972:1123): pid=26342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6237" name=D70E6BC61D570A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop2" ino=26 res=0 errno=0 [ 942.291831][T26337] syz.8.6236: attempt to access beyond end of device [ 942.291831][T26337] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 942.365333][T26337] syz.8.6236: attempt to access beyond end of device [ 942.365333][T26337] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 942.457482][T26337] syz.8.6236: attempt to access beyond end of device [ 942.457482][T26337] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 942.473725][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.542255][T26337] syz.8.6236: attempt to access beyond end of device [ 942.542255][T26337] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 942.613073][T26337] syz.8.6236: attempt to access beyond end of device [ 942.613073][T26337] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 942.700281][T26337] syz.8.6236: attempt to access beyond end of device [ 942.700281][T26337] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 942.762233][T16794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.770960][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.785625][T26337] syz.8.6236: attempt to access beyond end of device [ 942.785625][T26337] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 942.857044][T26337] syz.8.6236: attempt to access beyond end of device [ 942.857044][T26337] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 942.915467][T26359] loop1: detected capacity change from 0 to 256 [ 942.925217][T26337] syz.8.6236: attempt to access beyond end of device [ 942.925217][T26337] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 942.963829][T26359] exfat: Deprecated parameter 'utf8' [ 942.998337][T26337] syz.8.6236: attempt to access beyond end of device [ 942.998337][T26337] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 943.036977][T26366] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 943.055075][T26359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 943.080975][T26366] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 943.480579][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.582013][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.653320][T26376] loop0: detected capacity change from 0 to 2048 [ 943.698783][T26381] overlayfs: failed lookup in lower (newroot/65, name='file0', err=-40): overlapping layers [ 943.753111][T26376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.212852][T26357] loop2: detected capacity change from 0 to 32768 [ 944.569326][T21382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.622246][T26407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6259'. [ 944.719199][T26410] fuse: fd is not a fuse device [ 946.373202][T26442] loop6: detected capacity change from 0 to 32768 [ 946.544205][T11354] net_ratelimit: 8 callbacks suppressed [ 946.544228][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.586250][T26442] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6272 (26442) [ 946.703383][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.712846][T26435] loop8: detected capacity change from 0 to 131072 [ 946.721570][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.728470][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.729791][T26435] F2FS-fs (loop8): Test dummy encryption mode enabled [ 946.748136][T26442] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 946.758447][T26442] BTRFS info (device loop6): using sha256 checksum algorithm [ 946.761859][T26435] F2FS-fs (loop8): invalid crc value [ 946.872195][T26435] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 946.900060][T26435] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 947.016047][T26442] BTRFS info (device loop6): enabling ssd optimizations [ 947.023169][T26442] BTRFS info (device loop6): turning on sync discard [ 947.029874][T26442] BTRFS info (device loop6): enabling free space tree [ 947.187518][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.200692][ T30] audit: type=1800 audit(1781484028.032:1124): pid=26442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6272" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 947.247292][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.255780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.270938][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.359546][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.410619][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.578718][T22792] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 948.256088][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6277'. [ 948.467105][ T30] audit: type=1326 audit(1781484029.312:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 948.563145][ T30] audit: type=1326 audit(1781484029.312:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 948.575558][T26494] loop1: detected capacity change from 0 to 64 [ 948.701385][ T30] audit: type=1326 audit(1781484029.312:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 948.873298][ T30] audit: type=1326 audit(1781484029.312:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 949.017420][ T30] audit: type=1326 audit(1781484029.322:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 949.152150][ T30] audit: type=1326 audit(1781484029.322:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb941d9ce59 code=0x7ffc0000 [ 949.222073][ T30] audit: type=1326 audit(1781484029.382:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb941d5d68e code=0x7ffc0000 [ 949.345318][ T30] audit: type=1326 audit(1781484029.392:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb941d5d68e code=0x7ffc0000 [ 949.431305][ T30] audit: type=1326 audit(1781484029.392:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26490 comm="syz.2.6280" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb941d5d68e code=0x7ffc0000 [ 949.662770][T26509] loop6: detected capacity change from 0 to 4096 [ 949.737199][T26509] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 950.012453][T26509] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 950.157754][T26509] ntfs3(loop6): Failed to load $Extend (-2). [ 950.215099][T26509] ntfs3(loop6): Failed to initialize $Extend. [ 950.287877][T26526] loop8: detected capacity change from 0 to 128 [ 950.378613][T26526] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 950.494996][T26526] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.853194][T24459] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 951.239252][T26503] loop0: detected capacity change from 0 to 40427 [ 951.300748][T26503] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 951.337140][T26503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 951.396788][T26503] F2FS-fs (loop0): invalid crc value [ 951.732468][ T802] net_ratelimit: 19 callbacks suppressed [ 951.732490][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.868272][T26503] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 951.898177][T26571] loop8: detected capacity change from 0 to 256 [ 951.993423][T26503] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 952.029553][T26503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 952.067364][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.363982][T16798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.659555][T26588] loop6: detected capacity change from 0 to 512 [ 952.701370][T26588] journal_path: Non-blockdev passed as './file1' [ 952.736304][T26588] EXT4-fs: error: could not find journal device path [ 952.761394][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.769544][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.846388][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.996316][T26592] fuse: fd is not a fuse device [ 953.003291][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.011637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.086107][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.160421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.005063][T26624] loop0: detected capacity change from 0 to 1024 [ 954.483793][T26639] loop0: detected capacity change from 0 to 1024 [ 954.944182][T26657] overlayfs: failed to clone upperpath [ 954.998433][T26659] loop6: detected capacity change from 0 to 512 [ 955.059412][T26659] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 955.181366][T26659] EXT4-fs (loop6): 1 truncate cleaned up [ 955.266695][T26659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.403522][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 955.403543][ T30] audit: type=1800 audit(1781484036.252:1199): pid=26659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6332" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 955.470793][T26674] loop0: detected capacity change from 0 to 512 [ 955.775485][T22792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.208640][T26701] loop1: detected capacity change from 0 to 128 [ 956.292511][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.324414][T26701] FAT-fs (loop1): Filesystem has been set read-only [ 956.350600][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.405711][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.448259][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.503744][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.542270][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.577481][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.613230][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.632981][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.679771][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.721910][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.761367][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.808861][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.858967][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.916990][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 956.930722][T21021] net_ratelimit: 12 callbacks suppressed [ 956.930742][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.977613][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 957.037817][T26701] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 957.165569][ T30] audit: type=1800 audit(1781484038.012:1200): pid=26701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6346" name="file1" dev="loop1" ino=1048938 res=0 errno=0 [ 957.241865][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.030932][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.051976][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.127966][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.208811][T26717] loop0: detected capacity change from 0 to 131072 [ 958.236822][T26717] xfs: Deprecated parameter 'ikeep' [ 958.242150][T26717] XFS: ikeep mount option is deprecated. [ 959.096388][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.104817][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.147042][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.155403][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.191043][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.203756][T26717] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 959.304923][T26727] loop1: detected capacity change from 0 to 131072 [ 959.317630][T26727] F2FS-fs (loop1): Test dummy encryption mode enabled [ 959.328544][T26727] F2FS-fs (loop1): invalid crc value [ 959.401163][T26717] XFS (loop0): Starting recovery (logdev: internal) [ 959.420393][T26727] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 959.455303][T26717] XFS (loop0): Ending recovery (logdev: internal) [ 959.463847][T26727] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 959.514287][ T30] audit: type=1800 audit(1781484040.362:1201): pid=26717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6354" name="bus" dev="loop0" ino=41 res=0 errno=0 [ 959.646259][T21382] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 960.037888][T26753] loop6: detected capacity change from 0 to 1024 [ 960.221528][T26753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.724715][T26764] EXT4-fs warning (device loop6): ext4_rmdir:3192: inode #11: comm syz.6.6363: empty directory 'file0' has too many links (111) [ 961.162971][T22792] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.508380][T26786] loop6: detected capacity change from 0 to 1024 [ 961.979705][ T57] net_ratelimit: 13 callbacks suppressed [ 961.979727][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.994298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.200742][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.281943][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.283466][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.370356][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.525399][T26809] loop8: detected capacity change from 0 to 512 [ 963.060305][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fd16000: rx timeout, send abort [ 963.068946][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803fd16000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 963.400342][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.518145][T26824] binder: 26823:26824 ioctl 4018620d 0 returned -22 [ 963.747333][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.755676][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.900512][T26818] loop0: detected capacity change from 0 to 131072 [ 963.916525][T26818] F2FS-fs (loop0): invalid crc value [ 964.016482][T26818] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 964.033591][T26818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 964.445770][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.650431][T26841] loop8: detected capacity change from 0 to 16 [ 964.695243][T26841] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 964.831896][ T5969] udevd[5969]: incorrect cramfs checksum on /dev/loop8 [ 964.928833][T26848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6391'. [ 965.028890][ T5664] udevd[5664]: incorrect cramfs checksum on /dev/loop8 [ 965.280571][T26850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6395'. [ 965.455080][T26854] bond0: Device is already in use. [ 965.943612][T26865] loop2: detected capacity change from 0 to 128 [ 966.001271][T26865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 966.016793][T26867] loop1: detected capacity change from 0 to 512 [ 966.095447][T26865] System zones: 1-3, 19-19, 35-36 [ 966.130615][T26867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.157395][T26865] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 966.177659][T26867] ext4 filesystem being mounted at /657/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.247818][T26865] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 966.272077][T26867] EXT4-fs (loop1): shut down requested (0) [ 966.382428][T26865] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1803188485 (only 1 groups) [ 966.384882][T26876] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.6402: iget: bad i_size value: 2533274857506816 [ 966.783865][T26880] overlayfs: failed to clone upperpath [ 966.976315][T26884] loop0: detected capacity change from 0 to 256 [ 967.038752][T26884] FAT-fs (loop0): Directory bread(block 64) failed [ 967.048822][T26884] FAT-fs (loop0): Directory bread(block 65) failed [ 967.059169][T26884] FAT-fs (loop0): Directory bread(block 66) failed [ 967.070568][T26884] FAT-fs (loop0): Directory bread(block 67) failed [ 967.080924][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 967.099588][T26884] FAT-fs (loop0): Directory bread(block 68) failed [ 967.119427][T26884] FAT-fs (loop0): Directory bread(block 69) failed [ 967.128733][T26884] FAT-fs (loop0): Directory bread(block 70) failed [ 967.140129][T26884] FAT-fs (loop0): Directory bread(block 71) failed [ 967.148603][T26884] FAT-fs (loop0): Directory bread(block 72) failed [ 967.160546][T26884] FAT-fs (loop0): Directory bread(block 73) failed [ 967.296939][T26886] loop8: detected capacity change from 0 to 8192 [ 967.560983][ T1737] net_ratelimit: 13 callbacks suppressed [ 967.561027][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.731362][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.739657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.880796][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.148935][T25613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.296015][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.440305][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.600611][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.720329][ T1737] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 968.892504][ T1737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.921505][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.937441][ T1737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.976080][ T1737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 969.000328][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.020125][ T1737] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.040279][ T1737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.056049][ T1737] usb 3-1: config 0 descriptor?? [ 969.513244][ T1737] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 969.645715][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.761563][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.407489][T26942] loop0: detected capacity change from 0 to 4096 [ 970.559131][T26946] loop1: detected capacity change from 0 to 4096 [ 970.634669][T26946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.800344][ C1] plantronics 0003:047F:FFFF.003F: usb_submit_urb(ctrl) failed: -1 [ 970.827901][T21021] usb 3-1: USB disconnect, device number 13 [ 970.894981][T26956] loop6: detected capacity change from 0 to 256 [ 970.941642][T26956] exfat: Deprecated parameter 'utf8' [ 970.969382][ T30] audit: type=1800 audit(1781484051.812:1202): pid=26946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6420" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 971.010189][T26956] exfat: Deprecated parameter 'namecase' [ 971.048165][T26956] exfat: Deprecated parameter 'namecase' [ 971.086959][T26956] exfat: Deprecated parameter 'utf8' [ 971.209189][T26956] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 971.251175][T26956] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 971.327352][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.357919][T26956] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 971.593728][ T30] audit: type=1326 audit(1781484052.442:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26972 comm="syz.0.6426" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5e639ce59 code=0x0 [ 972.187622][T26987] loop1: detected capacity change from 0 to 512 [ 972.472435][T26987] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6430: invalid indirect mapped block 4294967295 (level 1) [ 972.591344][T26987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 972.591837][T26987] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6430: invalid indirect mapped block 4294967295 (level 1) [ 972.601134][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 972.601158][ C0] EXT4-fs (loop1): initial error at time 1781484053: ext4_free_branches:1023: inode 11 [ 972.601198][ C0] EXT4-fs (loop1): last error at time 1781484053: ext4_free_branches:1023: inode 11 [ 972.611383][T26991] loop2: detected capacity change from 0 to 32768 [ 972.726901][T26991] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 972.735287][T26991] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 972.761594][ T24] net_ratelimit: 12 callbacks suppressed [ 972.761615][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.776236][T26987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 972.795265][T26987] EXT4-fs (loop1): 2 truncates cleaned up [ 972.840738][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.854370][T26987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.879718][T26991] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 972.889880][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 972.907544][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 972.977975][T27004] loop0: detected capacity change from 0 to 512 [ 973.043209][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.093832][T27004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.134893][T27005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.152598][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 973.161213][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 973.166469][T26991] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 973.170949][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.202007][T27005] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 973.214120][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.239406][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.276600][T27005] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 973.358756][T27004] EXT4-fs (loop0): shut down requested (2) [ 973.483400][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.491832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.529063][T27005] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 973.542519][T27005] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 973.545696][T21382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.718513][T27005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 973.746956][T27005] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 973.802441][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.812600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.823049][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.914665][T27005] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 973.986142][T27005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 974.010811][T27005] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 974.140265][T27005] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 974.981621][T27033] loop2: detected capacity change from 0 to 256 [ 975.161100][ T5649] Bluetooth: hci1: command 0x2016 tx timeout [ 975.240069][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 975.561566][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 975.670239][T21021] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 975.720673][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.830111][T21021] usb 1-1: Using ep0 maxpacket: 32 [ 975.849204][T21021] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 975.935961][T21021] usb 1-1: config 0 has no interface number 0 [ 975.955283][T21021] usb 1-1: config 0 interface 184 has no altsetting 0 [ 975.975272][T21021] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 976.001763][T21021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.033930][T21021] usb 1-1: Product: syz [ 976.040633][ T5649] Bluetooth: hci4: command 0x0c1a tx timeout [ 976.053120][T21021] usb 1-1: Manufacturer: syz [ 976.060262][T21021] usb 1-1: SerialNumber: syz [ 976.073277][T21021] usb 1-1: config 0 descriptor?? [ 976.167804][T27052] loop2: detected capacity change from 0 to 4096 [ 976.341174][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6455'. [ 976.485678][T27025] loop8: detected capacity change from 0 to 32768 [ 976.500577][T27052] ntfs3(loop2): ino=21, "file1" failed to extend initialized size to 8000c61. [ 976.587151][T27025] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 976.712958][T21021] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 976.730047][T21021] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 976.862062][T27025] XFS (loop8): Ending clean mount [ 976.943809][T21021] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 976.993586][T21021] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 977.021321][T21021] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 977.033717][ T30] audit: type=1800 audit(1781484057.872:1204): pid=27025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6441" name="file1" dev="loop8" ino=6150 res=0 errno=0 [ 977.074682][T21021] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 977.096518][T21021] usb 1-1: USB disconnect, device number 35 [ 977.320444][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 977.389712][T24459] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 977.642943][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 977.800611][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 977.960963][ T24] net_ratelimit: 19 callbacks suppressed [ 977.960984][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.121779][ T5649] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.315180][T27101] loop2: detected capacity change from 0 to 128 [ 978.324477][ T30] audit: type=1326 audit(1781484059.172:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27098 comm="syz.8.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb99ce59 code=0x7ffc0000 [ 978.424606][ T30] audit: type=1326 audit(1781484059.172:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27098 comm="syz.8.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb99ce59 code=0x7ffc0000 [ 978.454271][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.463181][ T30] audit: type=1326 audit(1781484059.172:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27098 comm="syz.8.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f03eb99ce59 code=0x7ffc0000 [ 978.486649][T27101] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 978.492746][ T30] audit: type=1326 audit(1781484059.262:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27098 comm="syz.8.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb99ce59 code=0x7ffc0000 [ 978.525507][ T30] audit: type=1326 audit(1781484059.262:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27098 comm="syz.8.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03eb99ce59 code=0x7ffc0000 [ 978.597521][T27101] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 978.608552][T16795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.617851][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.628345][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.638659][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.691540][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.705239][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.786104][T25613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 979.000511][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.008671][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.507714][T27123] loop2: detected capacity change from 0 to 1024 [ 979.538594][T27123] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 979.584267][T27123] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 979.604435][T27129] loop6: detected capacity change from 0 to 736 [ 979.614176][T27129] iso9660: Unknown parameter '¡Ì/*b:œÇ' [ 979.617756][T27123] EXT4-fs (loop2): orphan cleanup on readonly fs [ 979.648986][T27130] netlink: 'syz.4.6477': attribute type 1 has an invalid length. [ 979.762201][T27123] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 979.809900][T27123] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 979.825251][T27123] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6475: Failed to acquire dquot type 0 [ 979.841341][T27123] loop2: lost filesystem error report for type 5 error -117 [ 979.842399][T27123] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 979.859612][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 979.859638][ C0] EXT4-fs (loop2): initial error at time 1781484060: ext4_acquire_dquot:7034 [ 979.859669][ C0] EXT4-fs (loop2): last error at time 1781484060: ext4_acquire_dquot:7034 [ 979.894845][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 979.902410][T27134] input: syz0 as /devices/virtual/input/input63 [ 979.913597][T27123] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 980.000679][T27123] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6475: Failed to acquire dquot type 0 [ 980.023420][T27123] loop2: lost filesystem error report for type 5 error -117 [ 980.023982][T27123] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.6475: Freeing blocks not in datazone - block = 0, count = 4096 [ 980.056522][T27130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 980.097659][T27123] loop2: lost filesystem error report for type 5 error -117 [ 980.097805][T27139] loop1: detected capacity change from 0 to 512 [ 980.098828][T27123] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6475: Failed to acquire dquot type 0 [ 980.148590][T27139] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 980.187949][T27139] EXT4-fs (loop1): 1 truncate cleaned up [ 980.198173][T27123] loop2: lost filesystem error report for type 5 error -117 [ 980.199117][T27123] EXT4-fs (loop2): 1 orphan inode deleted [ 980.213195][ T5649] Bluetooth: hci4: command 0x0c1a tx timeout [ 980.237513][T27123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 980.279207][T27139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.350731][T27146] loop6: detected capacity change from 0 to 4096 [ 980.541677][ T5618] psmouse serio7: Failed to reset mouse on : -5 [ 980.553300][T27123] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.6475: iget: bad extended attribute block 6 [ 980.637270][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.753469][T25613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.967547][T27146] Invalid ELF header magic: != ELF [ 981.392579][T27166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.400328][T27166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.409581][T27166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.417180][T27166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.512105][T21021] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 981.685205][T21021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.701964][T21021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.717620][T21021] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.751909][T21021] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.763442][T21021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.777916][T21021] usb 3-1: config 0 descriptor?? [ 981.816637][T27173] loop6: detected capacity change from 0 to 4096 [ 981.824816][T27174] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 981.842066][T27173] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 981.926164][T27173] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 982.249522][T21021] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 982.760334][ T24] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 982.932042][ T24] usb 9-1: config 128 has an invalid interface number: 148 but max is 0 [ 982.948778][ T24] usb 9-1: config 128 has no interface number 0 [ 982.964747][ T24] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 982.984037][ T24] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 983.013069][ T24] usb 9-1: config 128 interface 148 has no altsetting 0 [ 983.034567][ T24] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 983.048780][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.063976][ T24] usb 9-1: Product: syz [ 983.068487][ T24] usb 9-1: Manufacturer: syz [ 983.073533][ T24] usb 9-1: SerialNumber: syz [ 983.352915][ T24] usb 9-1: USB disconnect, device number 43 [ 983.401074][ T1737] net_ratelimit: 16 callbacks suppressed [ 983.401093][ T1737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.481071][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.641540][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.649744][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.658941][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.671575][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.846157][T27221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6515'. [ 983.862552][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 983.880688][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.952063][T27224] netlink: 'syz.1.6516': attribute type 22 has an invalid length. [ 983.960125][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6516'. [ 983.985496][T16795] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.994620][T27224] netlink: 'syz.1.6516': attribute type 22 has an invalid length. [ 984.002621][T16795] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.011683][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6516'. [ 984.020045][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 984.027354][T16795] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.044340][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 984.061736][ T1159] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.076055][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.106292][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.152377][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 984.178549][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.205808][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 984.216489][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.257119][T27230] loop2: detected capacity change from 0 to 2048 [ 984.300091][ T5618] misc userio: Buffer overflowed, userio client isn't keeping up [ 984.309588][ T1737] usb 3-1: USB disconnect, device number 14 [ 984.335858][T27230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.404970][T27239] loop1: detected capacity change from 0 to 256 [ 984.413446][T27230] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.442767][ T24] usb 9-1: usb_control_msg returned -32 [ 984.454021][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.469594][ T24] usbtmc 9-1:16.0: can't read capabilities [ 984.503133][ T24] usb 9-1: USB disconnect, device number 44 [ 984.568183][T25613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.930504][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.013010][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.029311][T27250] loop1: detected capacity change from 0 to 64 [ 985.049755][T27250] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 985.372297][T27248] loop2: detected capacity change from 0 to 8192 [ 985.527746][ T5618] input: PS/2 Generic Mouse as /devices/serio7/input/input64 [ 985.575662][T27248] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 985.591129][T27248] FAT-fs (loop2): Filesystem has been set read-only [ 985.761268][T21021] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 985.967147][T21021] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 986.001999][ T5618] psmouse serio7: Failed to enable mouse on [ 986.012542][T21021] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 986.072671][T21021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 986.093119][T21021] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 986.104465][T21021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.145666][T21021] usb 9-1: config 0 descriptor?? [ 986.711599][T21021] lenovo 0003:17EF:60EE.0041: unknown main item tag 0x2 [ 986.736537][T21021] lenovo 0003:17EF:60EE.0041: unknown main item tag 0x6 [ 986.773799][T21021] lenovo 0003:17EF:60EE.0041: ignoring exceeding usage max [ 986.849431][T21021] lenovo 0003:17EF:60EE.0041: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.8-1/input0 [ 987.214643][T27286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6543'. [ 987.275771][T27286] netlink: 'syz.2.6543': attribute type 1 has an invalid length. [ 987.317003][T27286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6543'. [ 987.668589][T21021] usb 9-1: USB disconnect, device number 45 [ 988.357584][T27312] loop1: detected capacity change from 0 to 512 [ 988.414144][T27312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 988.498217][T27312] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6552: invalid indirect mapped block 4294967295 (level 1) [ 988.524120][T27312] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 988.530279][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 988.548108][ C0] EXT4-fs (loop1): initial error at time 1781484069: ext4_free_branches:1023: inode 11 [ 988.559185][ C0] EXT4-fs (loop1): last error at time 1781484069: ext4_free_branches:1023: inode 11 [ 988.572874][T27312] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6552: invalid indirect mapped block 4294967295 (level 1) [ 988.591456][T27312] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 988.608940][ T5790] net_ratelimit: 12 callbacks suppressed [ 988.608961][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.609745][T27312] EXT4-fs (loop1): 2 truncates cleaned up [ 988.651160][T27312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.776084][T27323] netlink: 'syz.0.6557': attribute type 6 has an invalid length. [ 988.852723][T21021] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 988.883400][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 988.883458][ T30] audit: type=1800 audit(1781484069.722:1211): pid=27312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6552" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 988.996863][T27312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6552: bg 0: block 5: invalid block bitmap [ 989.038588][T21021] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 989.061174][T21021] usb 9-1: config 1 interface 0 has no altsetting 0 [ 989.070639][T27325] loop6: detected capacity change from 0 to 4096 [ 989.080633][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.100454][T21021] usb 9-1: string descriptor 0 read error: -22 [ 989.113632][T21021] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 989.154558][T21021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.181074][T27335] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 989.469005][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.498990][T16795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.507428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.515044][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.605357][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.643197][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.729235][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.745141][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.757468][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.804266][T21021] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor [ 989.900604][ T5790] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 989.902780][T21021] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:0926:3333.0042/input/input65 [ 990.125293][ T5790] usb 3-1: Using ep0 maxpacket: 8 [ 990.161916][ T5790] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 990.205082][ T5790] usb 3-1: config 0 has no interface number 0 [ 990.242927][ T5790] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.303473][ T5790] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 990.355992][ T5790] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.397464][ T5790] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 990.455805][ T5790] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 990.498125][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.698626][T27362] loop6: detected capacity change from 0 to 128 [ 991.326430][ T5790] usb 3-1: config 0 descriptor?? [ 991.414118][T27362] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 991.469950][T27362] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 992.425402][T21021] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 992.430398][ T5790] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 992.463902][T22792] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 992.469071][T21021] usb 9-1: USB disconnect, device number 46 [ 992.591650][ T5790] usb 3-1: USB disconnect, device number 15 [ 992.655848][ T5790] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 992.685699][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.209290][T27356] loop1: detected capacity change from 0 to 131072 [ 993.233743][T27356] F2FS-fs (loop1): invalid crc value [ 993.440618][T27356] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 993.504247][T27391] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6582'. [ 994.281854][ T5776] net_ratelimit: 14 callbacks suppressed [ 994.281892][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.441178][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.455347][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.242210][T16794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.251086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.485781][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.486770][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.614739][T27429] Invalid ELF header len 12 [ 996.091344][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.293119][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.495884][T27438] loop2: detected capacity change from 0 to 256 [ 996.521821][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.553486][T27438] exfat: Deprecated parameter 'utf8' [ 996.613513][T27438] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 996.867166][T27445] loop0: detected capacity change from 0 to 1024 [ 996.934021][T27448] netlink: 'syz.1.6604': attribute type 10 has an invalid length. [ 997.285609][T27450] loop6: detected capacity change from 0 to 32768 [ 997.312158][T27450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6605 (27450) [ 997.335913][T27450] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 997.346681][T27450] BTRFS info (device loop6): using sha256 checksum algorithm [ 997.409649][T27448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.496634][T27450] BTRFS info (device loop6): enabling ssd optimizations [ 997.503695][T27450] BTRFS info (device loop6): turning on sync discard [ 997.510725][T27450] BTRFS info (device loop6): enabling free space tree [ 997.517503][T27450] BTRFS info (device loop6): use zlib compression, level 3 [ 997.573106][T27448] team0: Port device netdevsim1 added [ 997.650217][ T30] audit: type=1800 audit(1781484078.492:1212): pid=27450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6605" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 997.740960][T27468] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6606'. [ 998.266956][T27474] loop2: detected capacity change from 0 to 512 [ 998.414124][T27474] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 998.500570][T27474] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 998.545187][T27474] EXT4-fs (loop2): 1 truncate cleaned up [ 998.591784][T27474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.616591][T22792] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 998.778933][T27474] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 999.194680][T27474] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 999.323995][T21021] net_ratelimit: 11 callbacks suppressed [ 999.324045][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.640449][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.641914][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.688061][T25613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.300106][T15221] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1000.360470][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.450482][T15221] usb 3-1: Using ep0 maxpacket: 32 [ 1000.457565][T15221] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1000.470146][T15221] usb 3-1: config 0 has no interface number 0 [ 1000.489858][T15221] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1000.523398][T15221] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1000.535889][T15221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.554858][T15221] usb 3-1: Product: syz [ 1000.571667][T15221] usb 3-1: Manufacturer: syz [ 1000.586257][T27521] Cannot find add_set index 0 as target [ 1000.597004][T15221] usb 3-1: SerialNumber: syz [ 1000.637054][T15221] usb 3-1: config 0 descriptor?? [ 1000.666473][T27510] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.681136][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.684201][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.952912][T27510] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.994727][T27535] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6632'. [ 1001.009458][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.017875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.416564][T27510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.461553][T27510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.561956][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.570404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.719888][T15221] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1001.778667][T15221] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1001.860496][T15221] usb 3-1: USB disconnect, device number 16 [ 1002.299444][T27555] loop8: detected capacity change from 0 to 64 [ 1003.140062][T15221] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1003.148625][T27566] loop1: detected capacity change from 0 to 4096 [ 1003.182970][T27566] EXT4-fs: inline encryption not supported [ 1003.217701][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1003.235606][T27566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1003.270548][T27566] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1003.332243][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.353989][T27566] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1003.418004][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.429811][T27566] System zones: 0-5 [ 1003.478166][T27566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.515114][T27574] bond2: Invalid ad_actor_system MAC address. [ 1003.530555][T15221] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1003.605454][T27574] bond2: option ad_actor_system: invalid value (1) [ 1003.606066][T15221] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1003.651526][T15221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.688672][T27574] bond2 (unregistering): Released all slaves [ 1003.712415][T15221] usb 9-1: config 0 descriptor?? [ 1004.262303][T15221] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1004.326959][T12920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.461768][T27594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6653'. [ 1004.516960][T21021] usb 9-1: USB disconnect, device number 47 [ 1004.545043][T27594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6653'. [ 1004.692883][T27591] fido_id[27591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1004.844875][ T57] net_ratelimit: 9 callbacks suppressed [ 1004.844897][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.853001][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.863259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.957044][T27598] nbd1: detected capacity change from 0 to 63 [ 1005.045231][T27601] block nbd1: NBD_DISCONNECT [ 1005.121250][T27601] block nbd1: Disconnected due to user request. [ 1005.157533][T27601] block nbd1: shutting down sockets [ 1005.163194][ T5922] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.183148][ T5922] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1005.206123][ T4957] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1005.221471][ T4957] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1005.231169][ T4957] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1005.239146][ T4957] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1005.251147][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.254293][ T5922] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.413157][ T5922] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1005.529191][ T5922] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.617691][ T5922] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1005.627042][T27610] loop6: detected capacity change from 0 to 32768 [ 1005.647814][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.666588][ T5922] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.675935][T27610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6659 (27610) [ 1005.700411][T27610] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1005.712841][T27610] BTRFS info (device loop6): using sha256 checksum algorithm [ 1005.746159][ T5922] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1005.786288][ T5922] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.841281][ T5922] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1005.851658][ T5922] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.863176][ T5922] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1005.880554][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.901544][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.954737][ T5922] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.968090][ T5922] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1006.100511][ T5922] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.112081][ T5922] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.143842][T27610] BTRFS info (device loop6): rebuilding free space tree [ 1006.145783][ T5922] ldm_validate_partition_table(): Disk read failed. [ 1006.211665][T27610] BTRFS info (device loop6): setting nodatasum [ 1006.217903][T27610] BTRFS info (device loop6): setting nodatacow [ 1006.224129][T27610] BTRFS info (device loop6): turning off barriers [ 1006.225663][ T5922] Dev nbd1: unable to read RDB block 0 [ 1006.230897][T27610] BTRFS info (device loop6): turning on sync discard [ 1006.230923][T27610] BTRFS info (device loop6): enabling free space tree [ 1006.230945][T27610] BTRFS info (device loop6): force clearing of disk cache [ 1006.326817][T27631] loop0: detected capacity change from 0 to 256 [ 1006.351691][ T5922] nbd1: unable to read partition table [ 1006.450587][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.461367][T27610] [ 1006.463709][T27610] ====================================================== [ 1006.470719][T27610] WARNING: possible circular locking dependency detected [ 1006.477776][T27610] syzkaller #0 Tainted: G L [ 1006.483748][T27610] ------------------------------------------------------ [ 1006.490755][T27610] syz.6.6659/27610 is trying to acquire lock: [ 1006.496810][T27610] ffffffff8ea5f200 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 1006.506417][T27610] [ 1006.506417][T27610] but task is already holding lock: [ 1006.513768][T27610] ffffffff8e7fa9c0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9df/0x1f70 [ 1006.523103][T27610] [ 1006.523103][T27610] which lock already depends on the new lock. [ 1006.523103][T27610] [ 1006.533492][T27610] [ 1006.533492][T27610] the existing dependency chain (in reverse order) is: [ 1006.542497][T27610] [ 1006.542497][T27610] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 1006.549990][T27610] __mutex_lock+0x19d/0x1590 [ 1006.555103][T27610] __alloc_workqueue+0x9df/0x1f70 [ 1006.560654][T27610] alloc_workqueue_noprof+0xe3/0x210 [ 1006.566462][T27610] padata_alloc+0xbe/0x360 [ 1006.571421][T27610] pcrypt_init_padata+0x27/0x100 [ 1006.576884][T27610] pcrypt_init+0x60/0xc0 [ 1006.581645][T27610] do_one_initcall+0x250/0x870 [ 1006.586930][T27610] do_initcall_level+0x10a/0x1a0 [ 1006.592384][T27610] do_initcalls+0x59/0xa0 [ 1006.597229][T27610] kernel_init_freeable+0x29d/0x3e0 [ 1006.602940][T27610] kernel_init+0x1d/0x1d0 [ 1006.607789][T27610] ret_from_fork+0x514/0xb70 [ 1006.612895][T27610] ret_from_fork_asm+0x1a/0x30 [ 1006.618204][T27610] [ 1006.618204][T27610] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1006.625947][T27610] cpus_read_lock+0x42/0x160 [ 1006.631065][T27610] static_key_slow_inc+0x12/0x30 [ 1006.636520][T27610] setup_udp_tunnel_sock+0x2fd/0x510 [ 1006.642321][T27610] l2tp_tunnel_register+0xdda/0x1490 [ 1006.648124][T27610] pppol2tp_connect+0x8e3/0x18b0 [ 1006.653588][T27610] __sys_connect+0x323/0x460 [ 1006.658702][T27610] __x64_sys_connect+0x7a/0x90 [ 1006.663992][T27610] do_syscall_64+0x174/0x580 [ 1006.669098][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.675507][T27610] [ 1006.675507][T27610] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1006.683250][T27610] lock_sock_nested+0x41/0x100 [ 1006.688563][T27610] inet_shutdown+0x6a/0x390 [ 1006.693581][T27610] nbd_mark_nsock_dead+0x2cb/0x550 [ 1006.699222][T27610] sock_shutdown+0x15e/0x260 [ 1006.704340][T27610] nbd_clear_sock+0x24/0x170 [ 1006.709457][T27610] nbd_config_put+0x35b/0x660 [ 1006.714665][T27610] nbd_genl_connect+0x18f7/0x1c10 [ 1006.720217][T27610] genl_family_rcv_msg_doit+0x233/0x340 [ 1006.726280][T27610] genl_rcv_msg+0x614/0x7a0 [ 1006.731300][T27610] netlink_rcv_skb+0x226/0x4a0 [ 1006.736597][T27610] genl_rcv+0x28/0x40 [ 1006.741091][T27610] netlink_unicast+0x7bb/0x940 [ 1006.746380][T27610] netlink_sendmsg+0x813/0xb40 [ 1006.751679][T27610] ____sys_sendmsg+0x9b9/0xa20 [ 1006.756972][T27610] ___sys_sendmsg+0x2a5/0x360 [ 1006.762178][T27610] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1006.767646][T27610] do_syscall_64+0x174/0x580 [ 1006.772749][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.779159][T27610] [ 1006.779159][T27610] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1006.786811][T27610] __mutex_lock+0x19d/0x1590 [ 1006.791915][T27610] nbd_queue_rq+0x373/0x1150 [ 1006.797034][T27610] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1006.803102][T27610] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1006.809954][T27610] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1006.816459][T27610] blk_mq_run_hw_queue+0x348/0x4f0 [ 1006.822090][T27610] blk_mq_dispatch_list+0xd11/0xe10 [ 1006.827808][T27610] blk_mq_flush_plug_list+0x45f/0x540 [ 1006.833698][T27610] __blk_flush_plug+0x3ed/0x4d0 [ 1006.839066][T27610] __submit_bio+0x465/0x560 [ 1006.844090][T27610] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1006.850242][T27610] block_read_full_folio+0x599/0x830 [ 1006.856048][T27610] filemap_read_folio+0x12c/0x3a0 [ 1006.861601][T27610] do_read_cache_folio+0x354/0x590 [ 1006.867240][T27610] read_part_sector+0xb6/0x2b0 [ 1006.872527][T27610] adfspart_check_ICS+0xb1/0x960 [ 1006.877987][T27610] bdev_disk_changed+0x82b/0x1780 [ 1006.883532][T27610] blkdev_get_whole+0x372/0x510 [ 1006.888906][T27610] bdev_open+0x324/0xd70 [ 1006.893667][T27610] blkdev_open+0x461/0x600 [ 1006.898607][T27610] do_dentry_open+0x816/0x1380 [ 1006.903887][T27610] vfs_open+0x3b/0x340 [ 1006.908473][T27610] path_openat+0x2e3b/0x3890 [ 1006.913595][T27610] do_file_open+0x23e/0x4a0 [ 1006.918626][T27610] do_sys_openat2+0x113/0x200 [ 1006.923825][T27610] __x64_sys_openat+0x138/0x170 [ 1006.929195][T27610] do_syscall_64+0x174/0x580 [ 1006.934298][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.940705][T27610] [ 1006.940705][T27610] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1006.947920][T27610] __mutex_lock+0x19d/0x1590 [ 1006.953028][T27610] nbd_queue_rq+0xc1/0x1150 [ 1006.958061][T27610] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1006.964163][T27610] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1006.971016][T27610] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1006.977520][T27610] blk_mq_run_hw_queue+0x348/0x4f0 [ 1006.983148][T27610] blk_mq_dispatch_list+0xd11/0xe10 [ 1006.988869][T27610] blk_mq_flush_plug_list+0x45f/0x540 [ 1006.994788][T27610] __blk_flush_plug+0x3ed/0x4d0 [ 1007.000159][T27610] __submit_bio+0x465/0x560 [ 1007.005185][T27610] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1007.011334][T27610] block_read_full_folio+0x599/0x830 [ 1007.017136][T27610] filemap_read_folio+0x12c/0x3a0 [ 1007.022686][T27610] do_read_cache_folio+0x354/0x590 [ 1007.028324][T27610] read_part_sector+0xb6/0x2b0 [ 1007.033606][T27610] adfspart_check_ICS+0xb1/0x960 [ 1007.039065][T27610] bdev_disk_changed+0x82b/0x1780 [ 1007.044606][T27610] blkdev_get_whole+0x372/0x510 [ 1007.049976][T27610] bdev_open+0x324/0xd70 [ 1007.054740][T27610] blkdev_open+0x461/0x600 [ 1007.059683][T27610] do_dentry_open+0x816/0x1380 [ 1007.064964][T27610] vfs_open+0x3b/0x340 [ 1007.069551][T27610] path_openat+0x2e3b/0x3890 [ 1007.074668][T27610] do_file_open+0x23e/0x4a0 [ 1007.079700][T27610] do_sys_openat2+0x113/0x200 [ 1007.084935][T27610] __x64_sys_openat+0x138/0x170 [ 1007.090304][T27610] do_syscall_64+0x174/0x580 [ 1007.095408][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.101815][T27610] [ 1007.101815][T27610] -> #4 (set->srcu){.+.+}-{0:0}: [ 1007.108945][T27610] __synchronize_srcu+0xc9/0x2f0 [ 1007.114394][T27610] elevator_switch+0x1e8/0x7b0 [ 1007.119676][T27610] elevator_change+0x2fa/0x480 [ 1007.124958][T27610] elevator_set_default+0x375/0x440 [ 1007.130672][T27610] blk_register_queue+0x3f3/0x4e0 [ 1007.136216][T27610] __add_disk+0x6cb/0xe30 [ 1007.141068][T27610] add_disk_fwnode+0xfb/0x4b0 [ 1007.146272][T27610] nbd_dev_add+0x733/0xb60 [ 1007.151214][T27610] nbd_init+0x15f/0x1e0 [ 1007.155893][T27610] do_one_initcall+0x250/0x870 [ 1007.161183][T27610] do_initcall_level+0x10a/0x1a0 [ 1007.166636][T27610] do_initcalls+0x59/0xa0 [ 1007.171478][T27610] kernel_init_freeable+0x29d/0x3e0 [ 1007.177195][T27610] kernel_init+0x1d/0x1d0 [ 1007.182049][T27610] ret_from_fork+0x514/0xb70 [ 1007.187151][T27610] ret_from_fork_asm+0x1a/0x30 [ 1007.192433][T27610] [ 1007.192433][T27610] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1007.200300][T27610] __mutex_lock+0x19d/0x1590 [ 1007.205407][T27610] elevator_change+0x1af/0x480 [ 1007.210688][T27610] elevator_set_none+0xb5/0x140 [ 1007.216057][T27610] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1007.222387][T27610] nbd_start_device+0x189/0xb30 [ 1007.227768][T27610] nbd_genl_connect+0x1597/0x1c10 [ 1007.233317][T27610] genl_family_rcv_msg_doit+0x233/0x340 [ 1007.239382][T27610] genl_rcv_msg+0x614/0x7a0 [ 1007.244404][T27610] netlink_rcv_skb+0x226/0x4a0 [ 1007.249690][T27610] genl_rcv+0x28/0x40 [ 1007.254189][T27610] netlink_unicast+0x7bb/0x940 [ 1007.259477][T27610] netlink_sendmsg+0x813/0xb40 [ 1007.264783][T27610] ____sys_sendmsg+0x9b9/0xa20 [ 1007.270078][T27610] ___sys_sendmsg+0x2a5/0x360 [ 1007.275284][T27610] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1007.280754][T27610] do_syscall_64+0x174/0x580 [ 1007.285946][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.292353][T27610] [ 1007.292353][T27610] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1007.300970][T27610] blk_alloc_queue+0x544/0x690 [ 1007.306255][T27610] __blk_mq_alloc_disk+0x194/0x390 [ 1007.311896][T27610] nbd_dev_add+0x494/0xb60 [ 1007.316839][T27610] nbd_init+0x15f/0x1e0 [ 1007.321521][T27610] do_one_initcall+0x250/0x870 [ 1007.326802][T27610] do_initcall_level+0x10a/0x1a0 [ 1007.332256][T27610] do_initcalls+0x59/0xa0 [ 1007.337097][T27610] kernel_init_freeable+0x29d/0x3e0 [ 1007.342809][T27610] kernel_init+0x1d/0x1d0 [ 1007.347657][T27610] ret_from_fork+0x514/0xb70 [ 1007.352762][T27610] ret_from_fork_asm+0x1a/0x30 [ 1007.358046][T27610] [ 1007.358046][T27610] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1007.365262][T27610] fs_reclaim_acquire+0x71/0x100 [ 1007.370729][T27610] prepare_alloc_pages+0x15b/0x650 [ 1007.376367][T27610] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1007.382704][T27610] __alloc_pages_noprof+0x10/0x100 [ 1007.388344][T27610] pcpu_populate_chunk+0x181/0xb30 [ 1007.393979][T27610] pcpu_alloc_noprof+0xbca/0x1900 [ 1007.399533][T27610] xt_percpu_counter_alloc+0x145/0x1e0 [ 1007.405511][T27610] translate_table+0x1311/0x2040 [ 1007.410976][T27610] ip6t_register_table+0x112/0x320 [ 1007.416613][T27610] ip6table_mangle_table_init+0x41/0x70 [ 1007.422700][T27610] xt_find_table_lock+0x311/0x400 [ 1007.428244][T27610] xt_request_find_table_lock+0x26/0x100 [ 1007.434390][T27610] do_ip6t_get_ctl+0x719/0x1240 [ 1007.439852][T27610] nf_getsockopt+0x26e/0x290 [ 1007.444961][T27610] ipv6_getsockopt+0x213/0x2c0 [ 1007.450241][T27610] do_sock_getsockopt+0x51d/0x7e0 [ 1007.455792][T27610] __x64_sys_getsockopt+0x1a4/0x240 [ 1007.461550][T27610] do_syscall_64+0x174/0x580 [ 1007.466696][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.473109][T27610] [ 1007.473109][T27610] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1007.480848][T27610] __lock_acquire+0x1520/0x2cd0 [ 1007.486218][T27610] lock_acquire+0x106/0x350 [ 1007.491240][T27610] __mutex_lock+0x19d/0x1590 [ 1007.496345][T27610] pcpu_alloc_noprof+0x231/0x1900 [ 1007.501893][T27610] __alloc_workqueue+0xa6f/0x1f70 [ 1007.507441][T27610] alloc_workqueue_noprof+0xe3/0x210 [ 1007.513247][T27610] scrub_workers_get+0x1db/0x490 [ 1007.518708][T27610] btrfs_scrub_dev+0x23c/0xff0 [ 1007.523992][T27610] btrfs_ioctl_scrub+0x243/0x4a0 [ 1007.529444][T27610] __se_sys_ioctl+0xfc/0x170 [ 1007.534561][T27610] do_syscall_64+0x174/0x580 [ 1007.539666][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.546081][T27610] [ 1007.546081][T27610] other info that might help us debug this: [ 1007.546081][T27610] [ 1007.556293][T27610] Chain exists of: [ 1007.556293][T27610] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 1007.556293][T27610] [ 1007.569346][T27610] Possible unsafe locking scenario: [ 1007.569346][T27610] [ 1007.576784][T27610] CPU0 CPU1 [ 1007.582135][T27610] ---- ---- [ 1007.587483][T27610] lock(wq_pool_mutex); [ 1007.591732][T27610] lock(cpu_hotplug_lock); [ 1007.598762][T27610] lock(wq_pool_mutex); [ 1007.605551][T27610] lock(pcpu_alloc_mutex); [ 1007.610056][T27610] [ 1007.610056][T27610] *** DEADLOCK *** [ 1007.610056][T27610] [ 1007.618182][T27610] 2 locks held by syz.6.6659/27610: [ 1007.623365][T27610] #0: ffff888057532410 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 1007.633247][T27610] #1: ffffffff8e7fa9c0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9df/0x1f70 [ 1007.643034][T27610] [ 1007.643034][T27610] stack backtrace: [ 1007.648915][T27610] CPU: 1 UID: 0 PID: 27610 Comm: syz.6.6659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.648948][T27610] Tainted: [L]=SOFTLOCKUP [ 1007.648958][T27610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1007.648974][T27610] Call Trace: [ 1007.648985][T27610] [ 1007.648997][T27610] dump_stack_lvl+0xe8/0x150 [ 1007.649027][T27610] print_circular_bug+0x2e1/0x300 [ 1007.649064][T27610] check_noncircular+0x12e/0x150 [ 1007.649100][T27610] __lock_acquire+0x1520/0x2cd0 [ 1007.649128][T27610] ? check_path+0x21/0x40 [ 1007.649157][T27610] ? check_noncircular+0xda/0x150 [ 1007.649189][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649219][T27610] ? add_lock_to_list+0xc7/0x100 [ 1007.649250][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649279][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649309][T27610] ? __lock_acquire+0x13e8/0x2cd0 [ 1007.649338][T27610] ? pcpu_alloc_noprof+0x231/0x1900 [ 1007.649374][T27610] lock_acquire+0x106/0x350 [ 1007.649399][T27610] ? pcpu_alloc_noprof+0x231/0x1900 [ 1007.649437][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649471][T27610] __mutex_lock+0x19d/0x1590 [ 1007.649497][T27610] ? pcpu_alloc_noprof+0x231/0x1900 [ 1007.649537][T27610] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1007.649572][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649603][T27610] ? pcpu_alloc_noprof+0x231/0x1900 [ 1007.649636][T27610] ? trace_contention_end+0x3d/0x140 [ 1007.649670][T27610] ? __pfx___mutex_lock+0x10/0x10 [ 1007.649694][T27610] ? __mutex_lock+0x30f/0x1590 [ 1007.649727][T27610] ? __pfx___mutex_lock+0x10/0x10 [ 1007.649754][T27610] pcpu_alloc_noprof+0x231/0x1900 [ 1007.649792][T27610] ? __kmalloc_cache_node_noprof+0x3dd/0x690 [ 1007.649831][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.649864][T27610] __alloc_workqueue+0xa6f/0x1f70 [ 1007.649906][T27610] alloc_workqueue_noprof+0xe3/0x210 [ 1007.649943][T27610] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1007.649982][T27610] ? __kmalloc_noprof+0x379/0x750 [ 1007.650019][T27610] scrub_workers_get+0x1db/0x490 [ 1007.650054][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650085][T27610] ? __pfx_scrub_workers_get+0x10/0x10 [ 1007.650117][T27610] ? mutex_init_lockdep+0xdf/0x110 [ 1007.650149][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650178][T27610] ? scrub_setup_ctx+0x2dd/0x390 [ 1007.650212][T27610] btrfs_scrub_dev+0x23c/0xff0 [ 1007.650249][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650280][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650314][T27610] ? __pfx_btrfs_scrub_dev+0x10/0x10 [ 1007.650344][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650377][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650407][T27610] ? sb_start_write+0x114/0x1c0 [ 1007.650444][T27610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.650477][T27610] btrfs_ioctl_scrub+0x243/0x4a0 [ 1007.650510][T27610] ? __pfx_btrfs_ioctl+0x10/0x10 [ 1007.650541][T27610] __se_sys_ioctl+0xfc/0x170 [ 1007.650580][T27610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.650606][T27610] do_syscall_64+0x174/0x580 [ 1007.650629][T27610] ? trace_irq_disable+0x3b/0x140 [ 1007.650670][T27610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.650696][T27610] RIP: 0033:0x7f152119ce59 [ 1007.650719][T27610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.650741][T27610] RSP: 002b:00007f1522135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.650766][T27610] RAX: ffffffffffffffda RBX: 00007f1521415fa0 RCX: 00007f152119ce59 [ 1007.650784][T27610] RDX: 0000200000000000 RSI: 00000000c400941b RDI: 0000000000000004 [ 1007.650801][T27610] RBP: 00007f1521232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1007.650817][T27610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.650833][T27610] R13: 00007f1521416038 R14: 00007f1521415fa0 R15: 00007fff27c21288 [ 1007.650880][T27610] [ 1008.032853][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.155035][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.329592][T22792] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1008.444471][ T5922] ldm_validate_partition_table(): Disk read failed. [ 1008.456202][ T5922] Dev nbd1: unable to read RDB block 0 [ 1008.533448][ T5922] nbd1: unable to read partition table [ 1010.122581][ T5618] net_ratelimit: 10 callbacks suppressed [ 1010.122604][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.210371][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.602606][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.162830][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.241872][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.481033][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.730296][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.203081][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.290411][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.528255][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.321743][T15221] net_ratelimit: 10 callbacks suppressed [ 1015.321767][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.410206][T21021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.560304][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.720336][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.200204][T15221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.364208][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog