last executing test programs: 14m0.189247797s ago: executing program 1 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) socket$unix(0x1, 0x1, 0x0) 13m57.922102608s ago: executing program 1 (id=253): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r4 = creat(0x0, 0x182) close(r4) r5 = socket$pptp(0x18, 0x1, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000940)}, 0x4008080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680200000005010400000000000000000200000654020100"], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) modify_ldt$write2(0x11, &(0x7f0000000380)={0x20d8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, 0xfffffffffffffe43) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x6}, {0x6, 0x68, 0x3d, 0x1594}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 13m55.749520596s ago: executing program 1 (id=255): syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f00000000c0)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000000340)={0x2}) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r8, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getpid() 13m52.98579177s ago: executing program 1 (id=258): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x50, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 13m50.142778186s ago: executing program 1 (id=262): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x1d, 0x80802, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$FUSE_STATFS(r9, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, r8, {{0xffffffffffffff6a, 0xb4e1, 0x6, 0x3, 0xb, 0x5, 0x400, 0x8000}}}, 0x60) io_submit(r10, 0x3, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0x1, 0x407f0b00}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000000340)="8661945a7ab4d8adcb49754bbb608a644c9ef6e0054b9eba0013c4a35f5f0ab7c3dbe8fb7f4db98efaabd2862d5350617567821126efa2c9d15501016eaf", 0x3e, 0x8000000000000001, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xf, r6, &(0x7f00000008c0)="a402ab125457ce7b98e551081f13aa9e665d39351949b9d37aaf344bae02a96fcee9c4ce48e894309133fd3f5d2ac847f19baa3d96fbab5521446ffc6e24efd809", 0x41, 0x80000000, 0x0, 0x1}]) dup3(r9, r7, 0x0) r11 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$UHID_INPUT(r11, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000003, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 13m45.045141122s ago: executing program 1 (id=271): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r3, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 13m27.497583101s ago: executing program 32 (id=271): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r3, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 7m16.08139328s ago: executing program 2 (id=1287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 7m15.859173076s ago: executing program 2 (id=1291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 7m15.70633185s ago: executing program 2 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 7m15.518789075s ago: executing program 2 (id=1298): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@gid}, {@gid}, {@nls={'nls', 0x3d, 'cp863'}}, {@force}]}, 0x1, 0x5e6, &(0x7f0000002f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 7m15.276372422s ago: executing program 2 (id=1299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1200002, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=cp936,quota,errors=remount-ro,errors=remount-ro,nodiscard,noquota,discard=0x00000000000005a6\x00integrity,discard=0x0000000000000009,umask=0x00000000000bfe,quota,quota,errors=remount-ro,umask=0x0000000000020046,\x00'], 0xfc, 0x61e8, &(0x7f000001e9c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8000) 7m11.942192171s ago: executing program 2 (id=1310): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) 7m11.481354913s ago: executing program 33 (id=1310): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) 2m43.630144697s ago: executing program 5 (id=2094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000083}]}) 2m43.070678881s ago: executing program 5 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 2m40.822282582s ago: executing program 5 (id=2104): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 2m37.588815178s ago: executing program 5 (id=2118): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000005800)=ANY=[@ANYBLOB="666f72636500006961e38c8000000000000000303035303030073f411036b030c3e5c51949cec546392c637265613699bb3d25f4ea8321f02c64b3d4c4b956f4c9c24cf91302006f72712402a9c8023a1ceb6cff75724acdc6bf741701005345d303007fb7829750340644608ba87292d3e1821a704e46584fb946cf3b277b74f3d94d7f3f3b27b1b953c928a63d7786e23b2dcf98f4bbb4903a06ab8c627b7bb93295be12b82c458f84c3ae25bcf2d853e98b8725d8aebabb359657997a1939b79f37ab02810bde52e8c3d1e3a07f5116b544b9f372663913ffa789b243bd3ee1780c061fdfed191df07d52d68db92963efbe8511ae0ce4abceb6516b9873787883ad7974dbecb645be4a0f566675ca9e56f4cccc8de78f7ca803d7c0f266c3b5ce9b120dd6e926a5b8cc435331a9a75bb9f9ca0f4d0056a114daeb4c5e3171de79f904f801c5c24d0617f5d83051dbb6fcb25b8d09967293855e13c0d4bb8eec9bf81b53f9ffffffed05b5b60cb8cdf158f18dede7224c4655ed010c60315b9645a78767a5ca8ebf01eba918ae9706f00ae9d597e9000062897e9a389d9143e6eb069e037c29b97568c59065c293a513bcd7fe7880f6675464cbaa3b7d660cffffffffffffffff72b6fa8a579221c6776cc015b26e66f61551069b4b16dfdc1f6e725bc75aa9870bf6c85a78179518c6f1ec9a1fbba7b11cbe385859972f41ba4c2dd6303fdb36d9829c007cba31a150c0f05d0aa83faf5336e00b07000000000000005e5f9912fa11394a7d340100000000d42328e075d22ca6e0f2f1de326c5b968693c44320067b81ae9c93af2f992209565d76aaa1447c343e11387d691903f3410a3c31e4f13fcaf3f0b9572bea2c76c7001b062abd8cb38a986e3d51d5005180762e4ff3e73f255e9b2ca5f6b76b38c6c8e1f1deaa0e5afc201d596f66f4b238c79f77b6e3b7d16341e3cb9aa8d2b2bcd077be1fd0b86548a838363b561c08e139765c52bf0590b08398266c8a414d5669f300075c87e9d3f9efb6bfbd59b12a2e0c0de44b19c10eeb9d96b3ab7387bb09f94bdb6c5898c07d43fb9732af8e7aa1965b1b7dcd1bd3ec59fe27af9efa7af350f337af57ec608a8dc913cef60101d45ccb6ee5af09f857c0681be54bb1cf9f963cec8b9313d04f72a0b19cd504215c9777f5a7a7bd7ef55cc3e1aa338da966235ba67e5cf31e27b13ea06f3e3ea43b9e49e9b014afe174005046ac5db758fc17fdf79f101824bd40c0d599b87b455e7d990e831fceb037157ffea6b9b7b32968cc4b730bf28d5b5be32be17dacb7c6273ec1acef44c9cd812c81416df90a84bdccf41fd6c9cc83a31c6827123f2827699387b1440ab1847be5713549b60926508d00000000000084beb7f245e243146d9a3156386e5b82ade505d8da00a1d3038c3b98e71f78308ef835f00b41806172205fca3fda4782bfaf55e97942f7fd393244ceda1f95627e075941470488066905b96beb0edd6bd2cf0155d162910a03df05909b50311a6058e8409d000000000000000000000000000094f7748e403f8d23f64e2d2ed07b0cf5ac6a24574a0ebcd82498252a7cbd2e5450116c30273a2f5ad5079d0300d11b334f1e00ff0476a8468407392ef81712931ad7628f7d0df98f0fedbe22b752c5a23a111fc00a0411fd85399c2438032944a3de85837537d3a652a24d760d6863a3dd08abe4160ba9c517b3ade3064f955b3166e513145d88b9b4a3f734f5245ccfc703688f0604b109000000000000000b12ccde50d0900dded7328dbde895e79326042cf9a970000075da00320516f2878879a20068af04002bc9598c472bfc35ee7c774860dd65d0d6b9cdb2581c19ee3ab249f5232cf9069de2a919d099e933dafb0b7926277d87bd09d8fe7900000000000000000000000000000000eb0799773ae040c7be9a37b86db244387f5fc8df8205ffd21105368500cd7a87d271269608df20341c4f3c685fffaa65a0883107d045706c0130b3706ae090577006a6ea840753fa61108c9b973eec9f3469bcc27ebe2c1a188ad730cd0d543688689fdf11ff53e3ce60071134ef20aa32870787f7ac762b58c686f859fb76bd967a8b19209c0760d6f17d8d9696c930db8d2f8c08bc0f74129a137b967dc51e9289420a9e647f07d3f3f9c087826b161da96b041585683e36de3e558397db9ef424efe4e6770dee5d63ceb21f4a49f7893e53fd6e572eb76f4caa4d27fd896d9e20b9513126ca438272c506f7e82aa42037f8540e721be8e5a962f95fd4a6ca24c44ec3e3bcd2b3091698fe9bc5bef5be68000f01ecb45d89d52704c49d7833d94f6e5b42b755b8e117b9f7a45468d8dad15e9c25134f63c6eb96531d6ab783deb3327db3b42c90c65b3efe62922f630b17efcf356be378450e7c43f16c7efc6f34198d6c3042a450c1389df042ea0085144322f1fef6d1f822895cb85146bf7163afde735ed6dea772b13c5c75ebf900fc723817295f62bfd52178a7d644aeac1051a0af0678f3ea4837cfa2693607eec06a95536f888efee5134a83b70d00e61a0fec986297eaecd7ebc7b2e7a7f7d16b7c666a1987df125d32859ad0eff488191be2df4d1d06c4d9645d0317128469ca36deb70838ed1207f46d4acefb49341ececb91f8ee98550eb397e842b1e50000000000000000", @ANYRES32, @ANYRESOCT], 0x1, 0x615, &(0x7f0000000a00)="$eJzs3U9oHNcdB/DvrFay5IKjOHZqSqAihrRU1NYflFa91C2l6BBKSA89C1uOhddKkDZFCaUo/XvtIddCevCtp0Lvhvbc3HLVMVDoJSdBDyozOyutpJW6thVplXw+5u17b968P/ubmZ3dFWYDfGUtTaf5JEWWpt/YLOvbjy/1NreSlBsaSbOTpVhLmn9O7qSTMtqzf3HcPB+tLr716efbn3VqzTpV+zcODvEstuqUqSQjdX7UCdPs7h473t1jxxtUsReZMmA3y3zruQaE07F7RPfM/O8g3Y+93oGLo+jcN4+YTC4nGa/fB6R+dWic7epOn/svAAAAXwUv7GQnm7ly3usAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi6T+/f+iTo1ueSpF9/f/x+ptqcsXTHGg9uTc1gEAAAAAAAAAp+ebO9nJZq5067tF9Tf/V6vKterxa3kvG1nJem5lM8tpp531zCaZ7BlobHO53V6fHaDnXN+ec2fzfAEAAAAAAADgS+o3Wdr/+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyDIhnpZFW61i1PptFMMp5krNxvK/mkW77Inpz3AgAAAOAMvLCTnWzmSre+W1Sf+V+uPveP572spZ3VtNPKSu5V3wV0PvU3th/Pt7Yfzz8q09Fxf/Sfp1pGNWI63z30n/lGkmYmcj+r1ZZbuZt30sq9NKqepRvd9fRf14flmoofdhQDruxenZf7/6nOh8NkFbPRvYjM1Gsro/HiyZF4yqNzeKbZNPa++bk2SMxH0gn6gPNdrvPy+fxhqGM+V599n5TXzMmRSL7197/+4kFr7eGD+xvTw/OUnlEdia1mHYn5nuvw608ViQ/PfvGnaqaKxPW9+lJ+mp9nOlN5M+tZzS+znHZWMpWfVKXl+nwuHydPjtSdA7U3/99Kxurj0nkVfbo1vVr1vZLV/Czv5F5W8nr1by6z+V4WspDFniN8fYCrvlG/0g541d/8dl2YSPLHOh8OZVxf7Ilr72vuZNXWu6WRq3W/q8dHqTh8PzopSpf2i81v1IXySPy2zofD4UjM9pwvL518vvxlt3zcaK09XH+w/O6A871W52Uofz9Ud4nyfLlavV/JkbOjbHupb9ts1XZtr61xpO36XlvfK3W9O/9itffLfUeay9iBSPW2zVf9bvT06/d+C4Chd/k7l8cm/j3xr4mPJ3438WDijfEfX/r+pVfGMvrP0R80Z0Zea7xS/C0f59f7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnt/H+Bw+XW62V9XMuFPUP+QzLehS++ELGD23JkCxMoTw6wJfc7fajd29vvP/Bd1cfLb+98vbK2ujCwuLM4sLr87fvr7ZWZjqP571K4Iuwf9M/75UAAAAAAAAAAAAAgzqL/05w3NyTZ/tUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtqaTrNJykyO3NrpqxvP55vlalb3t+zmaSRpPhVUvwjuZNOymTPcMVx83y0uvjWp59vf7Y/VrO7f+Okfn2NHt6wVadMJRmp8+dwYLy7zz1esfcMy4Dd7AYOztv/AgAA//9rZAoZ") mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./config\x00', &(0x7f0000001080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./config/usb_gadget/g1/strings/file0\x00', 0x1ff) 2m37.273331626s ago: executing program 5 (id=2121): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4080, 0xff0}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2m35.962642061s ago: executing program 5 (id=2128): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000900)=ANY=[], 0x1, 0x1be, &(0x7f0000000400)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m35.582089671s ago: executing program 34 (id=2128): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000900)=ANY=[], 0x1, 0x1be, &(0x7f0000000400)="$eJzsmD9v2kAYxp+zAddVW+Z2aaUilQ41tmmrMnRg7tBKrVp1CwoOIjEhAg/AEuVTZM7HQFkY8i2SIcmUIWSLFCnDRWef4YLCvwGIlPc3vDx39/r83svpQQIEQTxZzs+uTzVkTKFfIANDzl/owxxNye+mbz8eV38e7ttXJ93ej8LofgwA57O/PwGgV9QRyDHn95/OyM8/0GKdVNf/gcGSeg0a/krtgeG/1JuKrot8y9qo+p61XvfLQtgiOCK4IuRH6+vvMZQjGZbIlPVmu7NV8n2vsUAxrX/9oobvSv/U7yvujT3sHxxocKTOg+G31N9gxL2JWqKc/01iuL8+7/l5WghxkxbfrBnEK1n7cl76Oj0lJ4mVdmP5QlylR1DGRPEs9pG5H2cQ4tIEVn+KZQhjzBKODOkf/IDhg+JPCcU/ckFtJ9dsdz5Va6WKV/G2XTf/1f5s21/cXGhEUZzgf2boT8+V/ZNjclMshVYpCBpOFAdjt2UgaLgPOW4q9D8N2fdR1UzOxbyM5jjnu+/EOKsD7IbP8xNIEARBEARBEARBEARBEAQxI2/Bwn9BOTf5gAL4CO6vMPsuAAD///V3agM=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 11.347112395s ago: executing program 3 (id=2872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 9.932248644s ago: executing program 3 (id=2876): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_usb_control_io(r0, 0x0, 0x0) close(0x3) 9.832422487s ago: executing program 7 (id=2877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 8.695707419s ago: executing program 0 (id=2882): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1=0xe000003f}}}}, 0x0) 8.30094327s ago: executing program 0 (id=2884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 7.618294629s ago: executing program 7 (id=2885): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.105975313s ago: executing program 7 (id=2888): set_mempolicy(0x3, &(0x7f0000000000)=0x4000004000000ffe, 0xe) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.13775395s ago: executing program 0 (id=2889): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5.988519304s ago: executing program 7 (id=2891): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 5.867945267s ago: executing program 3 (id=2892): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 5.7464651s ago: executing program 7 (id=2893): accept4(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.941064109s ago: executing program 4 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000c80)={0x1, 0x0, [{0x2, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0xa767, 0x3, 0x8, 0xa}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.756344093s ago: executing program 0 (id=2904): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x142, 0x1ef) write$P9_RREAD(r0, 0x0, 0x10) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0/file1'}, 0x11) 2.687622965s ago: executing program 4 (id=2905): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x108441, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x2f}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x4, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d588380003c1"}]}}, {"ec03110a900ac361a4ef895e60b5497200005d8444d25e730971e6b681b9cf8527852a1d4f01c6ab2bcc"}}}}}, 0x6c) 2.680488356s ago: executing program 0 (id=2906): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xfd, 0x60fa, &(0x7f0000005580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000100)='./file1\x00', 0x0) 2.367848334s ago: executing program 4 (id=2907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 2.300803886s ago: executing program 6 (id=2908): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x6a, {"48b8ffff0000009acf004889042520100000c60425000100009d6a20488d05030000005048cb0f20c00fbaf81f0f22c0b9800000c00fd70fbaf8080f306a006a006a006a006a00680000010068020002006a006800010000cf"}}], 0x6a}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000025c0)) 2.298291326s ago: executing program 3 (id=2909): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x4100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x1c, r1, 0x1, 0x10, 0x6, @random="26d47aeb4ed2"}, 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 2.276779217s ago: executing program 7 (id=2910): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x1, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 2.092607112s ago: executing program 3 (id=2911): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 1.931268177s ago: executing program 3 (id=2912): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$FITRIM(r1, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 1.817580369s ago: executing program 6 (id=2913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 1.666443234s ago: executing program 0 (id=2914): socket$igmp6(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01060301090212000100000000090400000010", @ANYRES16=r0], 0x0) 704.4636ms ago: executing program 6 (id=2915): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x474, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x450, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x401]}, @beacon_params=[@NL80211_ATTR_IE={0x75, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x4, 0x9, @device_a, 0xe67, @value=@device_b, 0x90000, 0x9, 0x2, [{{0x1}, @broadcast, 0x7507}, {{}, @broadcast, 0x9}]}}, @supported_rates={0x1, 0x4, [{0x6, 0x1}, {0x18}, {0xb, 0x1}, {0x3fb5dc39d2cc6611}]}, @challenge={0x10, 0x1, 0x96}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0x20}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x5, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@challenge={0x10, 0x1, 0x6b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xaa, 0x64, 0xd}}, @peer_mgmt={0x75, 0x6, {0x1, 0x8, @val=0xc, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x32d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf}, @device_a, @device_a, @initial, {0x8, 0x3}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x0, @default, 0x200, @void, @val, @void, @void, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x74, {0x8, 0xb1, 0x4f, "d4558eb02970b74f51830437d9839125ee5e810101571997871e38fb9ff24dc16f982ae74545365800a7a28f7b56e8772af987d08e0fb7a600c254352f500b2e1486ba772c883c2d1732140422a68ac1992de31487a6b996fe500060c4ecb90bfd9a18838de5b3dc77d1dbe605dc1362cf"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x3, 0xb3, 0x5}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x401, 0x8, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0xfffffffa, 0xf}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x2, 0xfa, 0x49}}, @void, [{0xdd, 0xfa, "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"}, {0xdd, 0xda, "d1e5f8f3cb0d5cda5104c519ac49f8d96b7affb89567c0f0cd633ac6877bd4ab937a165fe82f18c39d4d696c45972d7426424b712dbd5d4c3cab0f467fefa231b690a1e50eb0f71f2e0e4d4c9a23f4dc619d151fe0139c5243599f5f50ab04a2d0434975f1a882d8d1d616abe7e966a9fc010c153f9933f546052ba71f26282e598604a6e02be37447a3dd68c3f57458a7114ab6cc137ef988a2577017621fcd628250dc78b8f4b15a0db5840b3f9a345cc5250badd33fbb2e9a784752d29af948312f27a4a3780ffbb1bee9a8c9fe876eeaa75515b416faba0e"}, {0xdd, 0x78, "49b787033893f891a0fdfd2059ca6271e4de212325e639d330a27cf787ca14e0048cbb1086f2e38e0d2bb19ff8a8590cc283a11861f47b5b5b1f11eba3e4144d875051369f7736ac58d429e2b881adb7a4ba89824ea65d392823c98ec0aaaa02626df86b6621ea53a21dfc98136431cf8c9bebb5f1f888c6"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x84, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "0dc173122c975aa3417ed9dfc51530e5e98ba594ac4aa879d958e16a53e7c5d2e4f0d294bb39bdd6097e5435fdb346f3c22c90608645621bfc22193d021712fe1d"}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "e65a38a69a3193dc8f4b1dd2a11bf8b6aefb4f701e7d74f12d6b0d31b95ebe7c4de41595ca8b8ae9c6b4f474b1e543d903"}]}]]}]}, 0x474}, 0x1, 0x0, 0x0, 0xc4}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) 625.081622ms ago: executing program 6 (id=2916): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 480.340936ms ago: executing program 4 (id=2917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xb, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) 480.144726ms ago: executing program 6 (id=2918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 390.603569ms ago: executing program 6 (id=2919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 104.659997ms ago: executing program 4 (id=2920): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x6}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 0s ago: executing program 4 (id=2921): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) preadv2(r3, &(0x7f0000001840), 0x0, 0x1, 0x7fffffff, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) kernel console output (not intermixed with test programs): dequeue, screwing up backlog [ 948.084439][T10475] usb 4-1: USB disconnect, device number 26 [ 948.088489][ T4370] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 948.091938][T10475] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 948.305013][ T4370] usb 5-1: Using ep0 maxpacket: 32 [ 948.312214][ T4370] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 948.354853][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.363310][ T7] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 948.414675][ T4370] usb 5-1: config 0 descriptor?? [ 948.497650][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 948.511234][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 948.530058][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 948.540678][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 948.551503][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 948.558970][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.576247][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 948.595484][ T7] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 948.641303][ T7] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 948.660179][ T4370] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 948.692991][ T4370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.710633][ T26] audit: type=1800 audit(1785801919.497:33): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2137" name="UDC" dev="configfs" ino=59668 res=0 errno=0 [ 948.739443][T12433] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 948.782473][ T7] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 948.803666][T12433] udc dummy_udc.0: failed to start g1: -19 [ 948.803851][ T4370] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 948.809940][T12433] UDC core: g1: couldn't find an available UDC or it's busy [ 948.821793][ T7] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 948.842358][ T4370] usb 5-1: media controller created [ 948.879108][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 948.888167][ T4370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.900575][ T7] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 948.923834][ T7] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 948.944075][ T7] usb 7-1: Product: syz [ 948.948800][ T4370] az6027: usb out operation failed. (-71) [ 948.959619][ T7] usb 7-1: Manufacturer: syz [ 948.964263][ T7] usb 7-1: SerialNumber: syz [ 948.969756][ T4370] az6027: usb out operation failed. (-71) [ 948.979996][ T4370] stb0899_attach: Driver disabled by Kconfig [ 948.986055][ T4370] az6027: no front-end attached [ 948.986055][ T4370] [ 949.002938][ T7] usb 7-1: config 0 descriptor?? [ 949.019052][ T4370] az6027: usb out operation failed. (-71) [ 949.025444][ T4370] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 949.035177][ T7] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 949.046882][ T4370] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 949.061395][ T7] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 949.071782][ T4370] dvb-usb: schedule remote query interval to 400 msecs. [ 949.081416][T12024] udevd[12024]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.081567][ T4370] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 949.110093][ T4370] usb 5-1: USB disconnect, device number 22 [ 949.173083][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.205196][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.314514][ T4370] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 949.367535][ T7] usb 7-1: USB disconnect, device number 18 [ 949.385615][ T7] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 950.327563][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.832307][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 951.420936][T12447] loop3: detected capacity change from 0 to 32768 [ 951.428543][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.464466][T12469] loop6: detected capacity change from 0 to 128 [ 951.473998][T12468] loop4: detected capacity change from 0 to 128 [ 951.516828][T12447] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 951.527285][T12469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 951.563311][T12447] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 951.572295][T12468] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 951.589330][T12469] hpfs: filesystem error: improperly stopped [ 951.595605][T12469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 951.604871][T12468] hpfs: filesystem error: improperly stopped [ 951.613443][T12447] BTRFS info (device loop3): turning off barriers [ 951.619922][T12447] BTRFS info (device loop3): setting nodatasum [ 951.632444][T12447] BTRFS info (device loop3): metadata ratio 772 [ 951.638897][T12469] hpfs: You really don't want any checks? You are crazy... [ 951.654114][T12468] hpfs: You really don't want any checks? You are crazy... [ 951.662779][T12468] hpfs: hpfs_map_sector(): read error [ 951.673975][T12447] BTRFS info (device loop3): setting nodatacow, compression disabled [ 951.686757][T12469] hpfs: hpfs_map_sector(): read error [ 951.693369][T12469] hpfs: code page support is disabled [ 951.731451][T12469] hpfs: hpfs_map_4sectors(): unaligned read [ 951.737963][T12469] hpfs: hpfs_map_4sectors(): unaligned read [ 951.744235][T12447] BTRFS info (device loop3): turning on flush-on-commit [ 951.751256][T12447] BTRFS info (device loop3): setting datacow [ 951.774057][T12468] hpfs: code page support is disabled [ 951.784212][T12469] hpfs: filesystem error: unable to find root dir [ 951.808457][T12468] hpfs: hpfs_map_4sectors(): unaligned read [ 951.814530][T12468] hpfs: hpfs_map_4sectors(): unaligned read [ 951.838254][T12447] BTRFS info (device loop3): enabling disk space caching [ 951.845374][T12447] BTRFS info (device loop3): force clearing of disk cache [ 951.892692][T12468] hpfs: filesystem error: unable to find root dir [ 951.934798][T12447] BTRFS info (device loop3): disk space caching is enabled [ 951.964839][ T26] audit: type=1800 audit(1785801922.505:34): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2148" name="id" dev="configfs" ino=60540 res=0 errno=0 [ 952.429493][T12447] BTRFS info (device loop3): enabling ssd optimizations [ 952.453359][T12424] chnl_net:caif_netlink_parms(): no params data found [ 952.463728][T12447] BTRFS info (device loop3): rebuilding free space tree [ 952.471959][ T9056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.554055][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.611077][T12507] loop6: detected capacity change from 0 to 128 [ 952.673675][T12507] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 952.724685][T12447] BTRFS info (device loop3): disabling free space tree [ 952.770296][T12447] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 952.783819][T12507] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 952.813836][ T9056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.826646][T12447] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 952.976167][T10475] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 952.987121][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 953.073715][ T9282] Bluetooth: hci4: command 0x041b tx timeout [ 953.086900][ T4392] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 953.218602][T10475] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.257817][T10475] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 953.307597][T10475] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 953.344544][T10475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.397955][T10475] usb 1-1: config 0 descriptor?? [ 953.416354][T10475] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 953.463806][T10475] dvb-usb: bulk message failed: -22 (3/0) [ 953.529751][T10475] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 953.742506][T10475] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 953.892451][T10475] usb 1-1: media controller created [ 953.996852][T10475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 954.195701][T10475] dvb-usb: bulk message failed: -22 (6/0) [ 954.327233][T10475] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 954.350955][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.408304][T10475] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 954.437309][T10475] dvb-usb: schedule remote query interval to 150 msecs. [ 954.467512][T12424] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.547003][T10475] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 954.556155][T12424] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.614651][T10475] usb 1-1: USB disconnect, device number 25 [ 954.623706][T12424] device bridge_slave_0 entered promiscuous mode [ 954.673606][T12528] device erspan0 entered promiscuous mode [ 954.695037][T10475] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 954.775786][T12424] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.793990][T12424] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.830764][T12424] device bridge_slave_1 entered promiscuous mode [ 955.226896][T12424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.392909][ T9282] Bluetooth: hci4: command 0x040f tx timeout [ 955.518049][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.747748][T12424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.944841][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.191155][T12550] loop3: detected capacity change from 0 to 2048 [ 956.217430][T12424] team0: Port device team_slave_0 added [ 956.229526][T12424] team0: Port device team_slave_1 added [ 956.254082][T12424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.261384][T12424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.288486][T12424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.302119][T12424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.309271][T12424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.338954][T12424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.414330][ T4390] device hsr_slave_0 left promiscuous mode [ 956.425556][T12550] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 956.481233][ T4390] device hsr_slave_1 left promiscuous mode [ 956.492848][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.505466][T12550] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 956.538495][T12550] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 956.564429][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.576350][T12550] UDF-fs: Scanning with blocksize 512 failed [ 956.587333][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.596893][ T4390] device bridge_slave_1 left promiscuous mode [ 956.624384][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.633123][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.648070][T12550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.674202][T12526] loop4: detected capacity change from 0 to 40427 [ 956.684803][T12526] F2FS-fs (loop4): invalid crc value [ 956.714065][ T4390] device bridge_slave_0 left promiscuous mode [ 956.725113][T12557] loop6: detected capacity change from 0 to 256 [ 956.727060][T12526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 956.743190][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.964446][ T7994] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 957.041722][T12526] F2FS-fs (loop4): Start checkpoint disabled! [ 957.051781][ T4390] device veth1_macvtap left promiscuous mode [ 957.059553][T12563] loop3: detected capacity change from 0 to 512 [ 957.083943][ T4390] device veth0_macvtap left promiscuous mode [ 957.112423][ T4390] device veth1_vlan left promiscuous mode [ 957.134018][ T4390] device veth0_vlan left promiscuous mode [ 957.143545][T12526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 957.187034][ T7994] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 957.189432][T12563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 957.213844][ T7994] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 957.224645][ T7994] usb 1-1: Product: syz [ 957.233392][ T7994] usb 1-1: Manufacturer: syz [ 957.238760][ T7994] usb 1-1: SerialNumber: syz [ 957.245528][ T7994] usb 1-1: config 0 descriptor?? [ 957.424675][T12563] EXT4-fs (loop3): shut down requested (2) [ 957.562459][ T7994] usb 1-1: USB disconnect, device number 26 [ 957.584378][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 957.640509][ T4390] infiniband syz0: set down [ 957.698394][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 957.810043][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.857655][ T4392] kworker/u4:12: attempt to access beyond end of device [ 957.857655][ T4392] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 959.231448][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.486866][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.671599][ T7994] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 959.694112][T12595] loop4: detected capacity change from 0 to 256 [ 959.890630][ T7994] usb 1-1: Using ep0 maxpacket: 16 [ 959.901099][ T7994] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 959.917000][ T7994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.919094][T12597] loop4: detected capacity change from 0 to 256 [ 959.931600][ T7994] usb 1-1: Product: syz [ 959.935927][ T7994] usb 1-1: Manufacturer: syz [ 959.940728][ T7994] usb 1-1: SerialNumber: syz [ 959.942553][T12597] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 959.955827][ T7994] r8152-cfgselector 1-1: config 0 descriptor?? [ 960.009151][T12597] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.103251][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 960.194861][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 960.231133][ T7994] r8152-cfgselector 1-1: Needed 2 retries to read version [ 960.348926][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.362971][ T9] smc: removing ib device syz0 [ 960.446113][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.460231][ T7994] r8152-cfgselector 1-1: Unknown version 0x0000 [ 960.493826][ T7994] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 960.624823][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.038201][ T4390] bond0 (unregistering): Released all slaves [ 961.238703][T12424] device hsr_slave_0 entered promiscuous mode [ 961.247976][T12424] device hsr_slave_1 entered promiscuous mode [ 961.314152][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.893887][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.722388][T12622] siw: device registration error -23 [ 962.750729][ T4069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.076007][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.181796][T12424] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 963.201579][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.220193][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.243843][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.255292][T12424] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.274586][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.324975][T12424] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 963.376499][T12424] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 964.717502][T12424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.737132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 964.777147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 964.792050][T12424] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.833905][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 964.849918][T12636] net_ratelimit: 119 callbacks suppressed [ 964.849934][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.868469][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 964.971012][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.978260][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.080718][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 965.158032][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 965.188480][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 965.224406][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.231575][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.239751][T12661] loop4: detected capacity change from 0 to 512 [ 965.301415][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 965.340745][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.360787][T12661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 965.398221][T12661] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.410618][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 965.429457][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 965.454046][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 965.473633][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 965.494440][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 965.514338][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 965.530874][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 965.566110][T12424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.612256][T12424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 965.669459][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 965.679378][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 965.722069][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 965.727258][T12638] loop6: detected capacity change from 0 to 40427 [ 965.803137][T12638] F2FS-fs (loop6): invalid crc value [ 965.841987][T10821] EXT4-fs (loop4): unmounting filesystem. [ 965.873110][T12638] F2FS-fs (loop6): Found nat_bits in checkpoint [ 966.082412][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.146835][T12638] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 966.209351][T12638] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 966.437876][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.454424][T12686] loop3: detected capacity change from 0 to 4096 [ 966.649127][T12686] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 966.707537][T12686] NILFS (loop3): error -5 reading inode: ino=2 [ 966.714935][T12686] NILFS (loop3): error -5 getting root inode [ 967.379502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 967.555242][ T9280] syz-executor: attempt to access beyond end of device [ 967.555242][ T9280] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 967.579187][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.953078][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 967.969597][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 968.006103][T12424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.383983][T12689] loop4: detected capacity change from 0 to 32768 [ 968.403275][T12689] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2200 (12689) [ 968.474698][T12689] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 968.528528][T12689] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 968.567122][T12689] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 968.586779][T12719] device gretap0 entered promiscuous mode [ 968.628690][T12689] BTRFS info (device loop4): use zstd compression, level 3 [ 968.636397][T12689] BTRFS info (device loop4): using free space tree [ 968.693238][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.766910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.681918][ T4069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.285537][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.296951][T12689] BTRFS error (device loop4): open_ctree failed: -12 [ 970.824950][ T8977] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (8977) [ 971.268763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.413418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 971.466697][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.609469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.686017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 971.742569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 971.770189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 971.815956][T12783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.825363][T12424] device veth0_vlan entered promiscuous mode [ 971.885661][T12424] device veth1_vlan entered promiscuous mode [ 971.899142][T12783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.939746][T12783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.973007][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 971.993025][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.002821][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 972.033941][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 972.035867][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.072779][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 972.083345][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.091838][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.114698][T12424] device veth0_macvtap entered promiscuous mode [ 972.142522][T12788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.169409][T12424] device veth1_macvtap entered promiscuous mode [ 972.202477][ T5292] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 972.251343][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.315397][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.376486][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.405870][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.414421][ T5292] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 972.434406][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.442742][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.467283][ T5292] usb 4-1: config 0 descriptor?? [ 972.481792][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.486771][ T5292] cp210x 4-1:0.0: cp210x converter detected [ 972.504344][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.566923][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.600125][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.633135][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.667910][T12424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.695714][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 972.711160][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 972.746668][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 972.757951][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 972.796246][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.825983][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.868883][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.911115][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.949389][ T5292] usb 4-1: cp210x converter now attached to ttyUSB0 [ 972.960919][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.987940][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.008773][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.032989][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.053748][T12424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.075231][T12424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.099096][T12424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.122476][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 973.153130][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 973.173922][T12424] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.193716][T12424] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.211874][ T5913] usb 4-1: USB disconnect, device number 27 [ 973.227011][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 973.236251][T12424] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.253713][ T5913] cp210x 4-1:0.0: device disconnected [ 973.262827][T12424] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.272006][ T9059] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 973.447889][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.473370][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.485690][ T9059] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 973.507393][ T9059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.519770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 973.520431][ T9059] usb 5-1: Product: syz [ 973.531759][ T9059] usb 5-1: Manufacturer: syz [ 973.550448][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.558626][ T9059] usb 5-1: SerialNumber: syz [ 973.588922][ T9059] usb 5-1: config 0 descriptor?? [ 973.600310][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.607957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 973.841184][ T9059] usb 5-1: ignoring: probably an ADSL modem [ 974.277624][ T9059] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 974.444107][T12838] loop6: detected capacity change from 0 to 512 [ 974.471870][T12838] EXT4-fs: Ignoring removed orlov option [ 974.512030][ T9059] usb 5-1: USB disconnect, device number 23 [ 974.648676][T12838] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 974.697147][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'. [ 974.742469][T12838] EXT4-fs (loop6): 1 truncate cleaned up [ 974.781946][T12838] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 975.075194][T12838] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2230: invalid indirect mapped block 4294901760 (level 0) [ 975.195742][T12838] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2230: invalid indirect mapped block 4294967295 (level 1) [ 975.247991][ T9059] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 975.465814][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 975.488697][ T9059] usb 1-1: Using ep0 maxpacket: 16 [ 975.506993][ T9059] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 975.540964][ T9059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.571492][ T9059] usb 1-1: Product: syz [ 975.586912][ T9059] usb 1-1: Manufacturer: syz [ 975.602391][ T9059] usb 1-1: SerialNumber: syz [ 975.842711][ T9059] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 975.887487][ T9059] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.920026][ T9059] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 975.928569][ T9059] usb 1-1: media controller created [ 975.996758][ T9059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.069840][ T7994] net_ratelimit: 117 callbacks suppressed [ 976.069861][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.288399][ T9059] zl10353_read_register: readreg error (reg=127, ret==-110) [ 976.351553][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.395527][ T9059] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 976.418550][ T9059] usb 1-1: USB disconnect, device number 28 [ 976.613046][T12892] loop7: detected capacity change from 0 to 4096 [ 976.806926][ T26] audit: type=1800 audit(1785801945.424:35): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2245" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 977.177547][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.708021][ T9059] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 977.902954][ T9059] usb 4-1: Using ep0 maxpacket: 16 [ 977.910573][ T9059] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.957690][ T9059] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.967250][T12936] loop7: detected capacity change from 0 to 512 [ 977.991496][ T9059] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 978.015759][ T9059] usb 4-1: config 0 interface 0 has no altsetting 0 [ 978.033515][ T9059] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 978.053738][ T9059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.109728][ T9059] usb 4-1: config 0 descriptor?? [ 978.304415][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.652822][T12947] loop4: detected capacity change from 0 to 4096 [ 978.744761][T12947] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 978.759213][T12947] NILFS (loop4): error -5 reading inode: ino=2 [ 978.777522][T12947] NILFS (loop4): error -5 getting root inode [ 978.826072][ T5913] usb 4-1: USB disconnect, device number 28 [ 979.161372][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.190489][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.222593][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.269206][T12963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.312211][T12963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.348282][T12963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.454959][T13011] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2285'. [ 981.487701][T13005] loop3: detected capacity change from 0 to 4096 [ 981.509522][T13012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.519599][T13012] bond0: (slave bond1): Enslaving as an active interface with an up link [ 981.737027][ T26] audit: type=1800 audit(1785801949.973:36): pid=13005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2283" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 981.778923][ T4317] net_ratelimit: 106 callbacks suppressed [ 981.778943][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.845147][T13022] loop6: detected capacity change from 0 to 256 [ 981.872459][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.890548][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.928480][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.937957][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.946855][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.950611][T13022] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 981.966252][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.975534][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.024022][T13027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.085517][T13027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.412093][T13036] loop7: detected capacity change from 0 to 4096 [ 983.495209][T13036] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 983.693409][ T26] audit: type=1800 audit(1785801951.782:37): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2293" name="bus" dev="loop7" ino=33 res=0 errno=0 [ 983.950736][T10475] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 984.165678][T10475] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 984.176944][T10475] usb 4-1: config 0 has no interface number 0 [ 984.190558][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2301'. [ 984.231219][T10475] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 984.265887][T10475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.273971][T10475] usb 4-1: Product: syz [ 984.325068][T10475] usb 4-1: Manufacturer: syz [ 984.331208][T10475] usb 4-1: SerialNumber: syz [ 984.354754][T10475] usb 4-1: config 0 descriptor?? [ 984.620630][T10475] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 984.651132][T10475] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 984.695967][T10475] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 984.793105][T10475] usb 4-1: media controller created [ 985.475341][T10475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.626365][T10475] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 985.778703][T10475] usb 4-1: USB disconnect, device number 29 [ 986.213907][T13100] loop7: detected capacity change from 0 to 128 [ 986.288909][T13100] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 986.383540][T13100] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.632595][T12424] EXT4-fs (loop7): unmounting filesystem. [ 986.641091][T13114] loop4: detected capacity change from 0 to 64 [ 987.148487][T10821] hfs: node 4:3 still has 1 user(s)! [ 987.203582][T13127] Mass Storage Function, version: 2009/09/11 [ 987.228572][T13127] LUN: removable file: (no medium) [ 987.264827][T13127] LUN: removable file: (no medium) [ 988.449178][ T7994] net_ratelimit: 227 callbacks suppressed [ 988.449199][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.554359][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.727981][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.854582][T13156] loop3: detected capacity change from 0 to 4096 [ 988.904201][T13156] EXT4-fs: inline encryption not supported [ 988.917120][T13156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 988.965127][T13156] EXT4-fs (loop3): Test dummy encryption mode enabled [ 989.012740][T13156] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 989.020995][T13156] System zones: 0-5 [ 989.133021][T13156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 989.579358][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.722686][T13184] loop4: detected capacity change from 0 to 128 [ 989.842152][T13142] loop7: detected capacity change from 0 to 32768 [ 989.940779][T13142] XFS (loop7): Mounting V5 Filesystem [ 990.169931][T13142] XFS (loop7): Ending clean mount [ 990.192760][T13142] XFS (loop7): Quotacheck needed: Please wait. [ 990.386686][T13142] XFS (loop7): Quotacheck: Done. [ 990.516610][T13156] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 990.702949][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.732095][T12424] XFS (loop7): Unmounting Filesystem [ 990.824117][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 990.964554][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.159499][T13218] loop6: detected capacity change from 0 to 8192 [ 991.199641][T13218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 991.214176][T13218] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 991.250120][T13218] REISERFS (device loop6): using ordered data mode [ 991.272396][T13218] reiserfs: using flush barriers [ 991.323619][T13218] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 991.344631][T13218] REISERFS (device loop6): checking transaction log (loop6) [ 991.355216][T13218] REISERFS (device loop6): Using r5 hash to sort names [ 991.385428][T13218] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 991.400360][T13218] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 991.574878][T13230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2343'. [ 991.629644][T13230] netlink: 'syz.3.2343': attribute type 12 has an invalid length. [ 991.656127][T13230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2343'. [ 991.665604][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.707100][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.716668][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.732932][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.990246][T13242] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2348'. [ 992.466593][T13256] loop8: detected capacity change from 0 to 7 [ 992.478152][T13254] loop7: detected capacity change from 0 to 4096 [ 992.491102][ T7994] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 992.511370][T13256] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 992.531284][T13256] loop8: partition table partially beyond EOD, truncated [ 992.552519][T13256] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 992.576210][T13256] loop8: p2 start 121280928 is beyond EOD, truncated [ 992.583304][ T26] audit: type=1800 audit(1785801959.966:38): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2337" name="file2" dev="loop7" ino=33 res=0 errno=0 [ 992.641947][ T26] audit: type=1800 audit(1785801959.966:39): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2337" name="file2" dev="loop7" ino=33 res=0 errno=0 [ 992.688703][ T8977] udevd[8977]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 992.720519][ T7994] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 992.731214][ T7994] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 992.741591][ T7994] usb 1-1: config 1 interface 0 has no altsetting 0 [ 992.763158][ T7994] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 992.797281][ T7994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.822901][ T7994] usb 1-1: Product: syz [ 992.837013][ T7994] usb 1-1: Manufacturer: syz [ 992.857819][ T7994] usb 1-1: SerialNumber: syz [ 992.877827][T13249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 992.888564][T13249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 993.410013][T13274] retu-mfd 0-0001: could not read Retu revision: -5 [ 993.435657][T13274] retu-mfd: probe of 0-0001 failed with error -5 [ 993.459737][T13274] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 993.482604][T13275] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 993.496049][T13275] retu-mfd: probe of 0-0002 failed with error -5 [ 993.507022][T13275] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 994.061288][ T7994] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:3a:32:23:36:a4 [ 994.094883][ T4317] net_ratelimit: 108 callbacks suppressed [ 994.094900][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.116379][ T4370] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 994.147489][ T7994] rtl8150 1-1:1.0: eth9: rtl8150 is detected [ 994.172596][ T7994] usb 1-1: USB disconnect, device number 29 [ 994.344114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.356873][ T4370] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 994.365740][T13301] loop6: detected capacity change from 0 to 512 [ 994.368560][ T4370] usb 5-1: config 0 has no interface number 0 [ 994.403830][ T4370] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 994.439231][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.449118][T13301] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 994.484388][ T4370] usb 5-1: Product: syz [ 994.505193][T13301] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.538234][ T4370] usb 5-1: Manufacturer: syz [ 994.565039][ T4370] usb 5-1: SerialNumber: syz [ 994.601231][ T4370] usb 5-1: config 0 descriptor?? [ 994.825582][T13298] loop3: detected capacity change from 0 to 32768 [ 994.852900][ T4370] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 994.881869][ T4370] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 994.887960][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 994.897751][ T4370] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 994.908054][ T4370] usb 5-1: media controller created [ 994.940684][ T4370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.960874][T13298] XFS (loop3): Mounting V5 Filesystem [ 995.221144][T13298] XFS (loop3): Ending clean mount [ 995.221237][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.308510][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.726089][ T4274] XFS (loop3): Unmounting Filesystem [ 996.175845][ T4370] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 996.266412][ T4370] usb 5-1: USB disconnect, device number 24 [ 996.380215][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.566649][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.578456][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.093873][T13353] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 997.196269][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.206940][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.218974][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.234708][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.252225][T13353] siw: device registration error -19 [ 997.465311][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.007182][ T4317] net_ratelimit: 191 callbacks suppressed [ 1000.007202][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.023497][T13399] ffs_data_put(): freeing [ 1000.586915][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.675634][T13423] netlink: 'syz.7.2397': attribute type 3 has an invalid length. [ 1000.741666][T13423] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1000.788232][T13427] netlink: 'syz.7.2397': attribute type 3 has an invalid length. [ 1000.844323][T13423] netlink: 'syz.7.2397': attribute type 3 has an invalid length. [ 1000.854415][T13427] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1000.908613][T13423] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1000.933145][ T7994] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1001.133792][T13438] loop6: detected capacity change from 0 to 512 [ 1001.141656][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.153729][ T7994] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.164683][ T7994] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1001.201856][ T7994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.233984][ T7994] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1001.358647][T13444] Bluetooth: MGMT ver 1.22 [ 1001.404729][T13438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1001.424415][T13438] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.445454][T13438] EXT4-fs (loop6): shut down requested (2) [ 1002.317528][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.341453][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1002.521735][T13458] loop4: detected capacity change from 0 to 4096 [ 1002.559837][T13458] EXT4-fs: inline encryption not supported [ 1002.585190][ T7994] stv0680 1-1:4.0: Could not get descriptor 0200 [ 1002.595157][T13458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1002.653170][T13458] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1002.687134][T13464] loop3: detected capacity change from 0 to 1024 [ 1002.695468][T13458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1002.721567][T13458] System zones: 0-5 [ 1002.726648][T13464] EXT4-fs: inline encryption not supported [ 1002.803408][ T7994] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1002.833988][T13458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1002.844190][ T7994] stv0680 1-1:4.0: last error: 34, command = 0x2 [ 1002.855918][T13464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1002.921880][ T7994] usb 1-1: USB disconnect, device number 30 [ 1003.240865][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1003.277220][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1003.448433][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.459156][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.497848][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.517850][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.734368][T13481] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1003.842837][T13481] siw: device registration error -19 [ 1003.872308][T13462] loop6: detected capacity change from 0 to 32768 [ 1004.020542][T13455] loop7: detected capacity change from 0 to 40427 [ 1004.212497][T13462] XFS (loop6): Mounting V5 Filesystem [ 1004.219184][T13455] F2FS-fs (loop7): invalid crc value [ 1004.379628][ T5913] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1004.987747][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.008572][ T5913] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1005.016973][ T5913] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1005.047691][T13455] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1005.086591][ T5913] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.172801][ T5913] usb 1-1: config 220 has no interface number 2 [ 1005.204818][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1005.273105][ T5913] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1005.311683][T13455] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1005.316913][ T5913] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1005.365963][ T5913] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1005.390182][T13462] XFS (loop6): Ending clean mount [ 1005.400454][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1005.415567][T13462] XFS (loop6): Quotacheck needed: Please wait. [ 1005.457955][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.473450][ T5913] usb 1-1: Product: syz [ 1005.478038][ T5913] usb 1-1: Manufacturer: syz [ 1005.482816][ T5913] usb 1-1: SerialNumber: syz [ 1005.504673][T13455] syz.7.2408: attempt to access beyond end of device [ 1005.504673][T13455] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1005.575338][T13462] XFS (loop6): Quotacheck: Done. [ 1005.742287][ T5913] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1005.781663][ T5913] usb 1-1: No valid video chain found. [ 1005.787365][ T5913] usb 1-1: selecting invalid altsetting 0 [ 1005.862244][T12424] syz-executor: attempt to access beyond end of device [ 1005.862244][T12424] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1005.882315][ T5913] usb 1-1: selecting invalid altsetting 0 [ 1005.911836][T13522] sctp: [Deprecated]: syz.4.2418 (pid 13522) Use of int in max_burst socket option deprecated. [ 1005.911836][T13522] Use struct sctp_assoc_value instead [ 1005.918457][ T5913] usbtest: probe of 1-1:220.1 failed with error -22 [ 1005.996857][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.018328][ T5913] usb 1-1: USB disconnect, device number 31 [ 1006.042481][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.079978][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.101617][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.123130][ T9280] XFS (loop6): Unmounting Filesystem [ 1006.136509][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.145531][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.217601][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.275529][T13522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.829226][ T4069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.265735][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.076280][T13559] loop4: detected capacity change from 0 to 512 [ 1008.140416][T13559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1008.264996][T13559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1008.291662][T13559] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.431378][T13559] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.2430: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1008.537993][T13559] EXT4-fs (loop4): Remounting filesystem read-only [ 1008.562742][T13559] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.2430: directory missing '.' [ 1008.628842][T13559] EXT4-fs (loop4): Remounting filesystem read-only [ 1008.803290][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1009.027883][T13586] loop4: detected capacity change from 0 to 512 [ 1009.091173][T13586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1009.159804][T13586] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #17: comm syz.4.2438: corrupted in-inode xattr [ 1009.174211][T13586] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2438: couldn't read orphan inode 17 (err -117) [ 1009.197621][T13586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.228353][T13586] EXT4-fs (loop4): shut down requested (0) [ 1009.383453][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1011.292188][T13591] loop3: detected capacity change from 0 to 40427 [ 1011.321657][T13591] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1011.384221][T13591] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1011.435273][T13591] F2FS-fs (loop3): invalid crc value [ 1011.469578][T13591] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1011.497290][T13600] loop4: detected capacity change from 0 to 32768 [ 1011.578072][T13624] loop7: detected capacity change from 0 to 4096 [ 1011.744425][T13591] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1011.760318][T13591] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1011.768946][T13624] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1011.784098][T13600] XFS (loop4): Mounting V5 Filesystem [ 1011.857772][ T4319] net_ratelimit: 6 callbacks suppressed [ 1011.857791][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.894157][T13600] XFS (loop4): Ending clean mount [ 1012.000303][T13600] XFS (loop4): User initiated shutdown received. [ 1012.084004][T13600] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 1012.106923][T13600] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 1012.172098][T12424] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 1012.195891][T13591] syz.3.2440: attempt to access beyond end of device [ 1012.195891][T13591] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1012.253192][T13654] syz.3.2440: attempt to access beyond end of device [ 1012.253192][T13654] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1012.356614][T10821] XFS (loop4): Unmounting Filesystem [ 1012.670250][T13660] loop7: detected capacity change from 0 to 1024 [ 1012.998865][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.295672][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.491420][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.597704][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.665353][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.682768][T13694] loop7: detected capacity change from 0 to 64 [ 1014.705228][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.770692][T13695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.815614][T13695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.863947][T13695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.081600][ T4317] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1017.310499][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.333686][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1017.374904][ T4317] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1017.417347][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.450573][ T4317] usb 1-1: Product: syz [ 1017.454852][ T4317] usb 1-1: Manufacturer: syz [ 1017.459477][ T4317] usb 1-1: SerialNumber: syz [ 1017.508744][ T4317] usb 1-1: config 0 descriptor?? [ 1017.534085][ T4317] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1017.543337][T13761] net_ratelimit: 242 callbacks suppressed [ 1017.543354][T13761] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1017.711948][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1017.724486][ T4317] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1017.741444][ T4317] usb 1-1: media controller created [ 1017.762926][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.777097][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.688776][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.707995][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.842614][ T4317] DVB: Unable to find symbol tda10046_attach() [ 1019.959881][ T4317] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1020.016312][ T4317] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1020.074138][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.091134][ T4317] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 1020.137640][ T4317] usb 1-1: USB disconnect, device number 32 [ 1021.000036][T13811] loop6: detected capacity change from 0 to 1024 [ 1021.041326][T13811] EXT4-fs: inline encryption not supported [ 1021.048781][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.111705][T13800] loop3: detected capacity change from 0 to 32768 [ 1021.162217][T13811] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 1: comm syz.6.2497: lblock 1 mapped to illegal pblock 1 (length 1) [ 1021.180920][T13811] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.193765][T13797] loop4: detected capacity change from 0 to 32768 [ 1021.203737][T13811] Quota error (device loop6): write_blk: dquota write failed [ 1021.223275][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.249033][T13811] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1021.298724][T13811] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2497: Failed to acquire dquot type 0 [ 1021.322801][T13800] XFS (loop3): Mounting V5 Filesystem [ 1021.337815][T13824] loop7: detected capacity change from 0 to 256 [ 1021.345972][T13811] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.355017][T13811] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.2497: Freeing blocks not in datazone - block = 0, count = 4096 [ 1021.389363][T13797] XFS (loop4): Mounting V5 Filesystem [ 1021.403831][T13811] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.406966][T13824] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1021.441815][T13811] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2497: Invalid inode bitmap blk 0 in block_group 0 [ 1021.460068][ T9] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1021.496444][T13800] XFS (loop3): Ending clean mount [ 1021.523133][ T9] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.546570][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1021.561394][T13811] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.579691][T13797] XFS (loop4): Ending clean mount [ 1021.588682][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 1021.606322][T13824] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1021.619346][T13800] XFS (loop3): User initiated shutdown received. [ 1021.644937][T13811] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 1021.654356][ T26] audit: type=1800 audit(1785801986.798:40): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2490" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 1021.670307][T13800] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 1021.715975][ T9] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.756798][T13811] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.775433][T13800] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1021.795843][T13811] EXT4-fs (loop6): 1 orphan inode deleted [ 1021.801649][T13811] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1021.826044][T10821] XFS (loop4): Unmounting Filesystem [ 1022.002103][ T4274] XFS (loop3): Unmounting Filesystem [ 1022.154423][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1022.302173][T13840] loop6: detected capacity change from 0 to 256 [ 1022.324253][T13840] exfat: Deprecated parameter 'utf8' [ 1022.336981][T13840] exfat: Deprecated parameter 'utf8' [ 1022.354085][T13840] exfat: Deprecated parameter 'namecase' [ 1022.354864][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.389413][T13840] exfat: Deprecated parameter 'namecase' [ 1022.471898][T13840] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1022.604794][ T26] audit: type=1800 audit(1785801987.684:41): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2503" name="file1" dev="loop6" ino=1048664 res=0 errno=0 [ 1023.026873][T13856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.040723][T13856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.066140][T13856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.089154][T13856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.117331][T13856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.148921][T13855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.155784][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1023.485861][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.343837][ T4069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.501549][T13882] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.511309][T13882] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.520071][T13882] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.528789][T13882] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.584455][T13882] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.593579][T13882] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.603242][T13882] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.612181][T13882] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.623456][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.709123][T13883] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.718407][T13883] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.727270][T13883] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.736128][T13883] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.751602][T13883] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.760915][T13883] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.770194][T13883] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.779419][T13883] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.437295][ T7994] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1025.634531][ T7994] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1025.666486][ T7994] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1025.690240][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1025.707512][ T7994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1025.718658][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1025.726312][ T7994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 1025.736676][T13908] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1025.749839][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.763247][ T7994] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1025.783333][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1025.789945][ T7994] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1025.823661][ T7994] usb 5-1: Product: syz [ 1025.834386][ T7994] usb 5-1: Manufacturer: syz [ 1025.875076][ T7994] cdc_wdm 5-1:1.0: skipping garbage [ 1025.892764][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1025.954727][ T7994] cdc_wdm 5-1:1.0: skipping garbage [ 1025.962020][T13913] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1026.302076][ T7994] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1026.387515][ T7994] cdc_wdm 5-1:1.0: Unknown control protocol [ 1026.691540][ T7994] usb 5-1: USB disconnect, device number 25 [ 1026.752008][T13920] input: syz0 as /devices/virtual/input/input35 [ 1027.769153][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1027.816404][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1027.866137][T13950] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1028.124642][T13924] loop6: detected capacity change from 0 to 40427 [ 1028.237935][T13924] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1028.260993][T13936] loop7: detected capacity change from 0 to 32768 [ 1028.311158][T13936] (syz.7.2537,13936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.376225][T13936] (syz.7.2537,13936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.405094][T13924] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 1028.468449][T13924] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1028.518093][T13936] JBD2: Ignoring recovery information on journal [ 1028.638470][T13936] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1028.688924][ T9] ocfs2: Finishing quota recovery on device (7,7) for slot 0 [ 1029.112269][T10475] net_ratelimit: 10 callbacks suppressed [ 1029.112288][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.126178][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.259870][T12424] ocfs2: Unmounting device (7,7) on (node local) [ 1029.471612][T13985] device netdevsim0 entered promiscuous mode [ 1029.518547][T13985] device batadv0 entered promiscuous mode [ 1029.554369][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1029.765249][T13991] "syz.3.2557" (13991) uses obsolete ecb(arc4) skcipher [ 1030.769864][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.932422][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.893572][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.014450][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.142641][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.227277][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.314704][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.364777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1036.334706][T14037] loop3: detected capacity change from 0 to 32768 [ 1036.409827][T14037] XFS (loop3): Mounting V5 Filesystem [ 1036.437119][T14079] loop4: detected capacity change from 0 to 1024 [ 1036.482292][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.506222][T14079] hfsplus: keylen 65060 too large [ 1036.612657][T14037] XFS (loop3): Ending clean mount [ 1036.872539][ T4274] XFS (loop3): Unmounting Filesystem [ 1037.172113][T14100] __nla_validate_parse: 3 callbacks suppressed [ 1037.172131][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2595'. [ 1037.195851][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.218067][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.226809][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.262861][T14097] loop7: detected capacity change from 0 to 4096 [ 1037.281846][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.322968][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.351072][T14097] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1037.357362][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.392808][T14101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.411568][T14103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.426698][ T26] audit: type=1800 audit(1785802001.359:42): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2594" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 1038.850879][T14112] device batadv0 entered promiscuous mode [ 1038.878790][T14112] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1038.886443][T14112] Cannot create hsr debugfs directory [ 1038.898336][T14112] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1038.964043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1039.050425][T14115] loop6: detected capacity change from 0 to 512 [ 1039.057812][T14115] EXT4-fs: Ignoring removed mblk_io_submit option [ 1039.346844][T14115] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1039.366936][T14115] ext4 filesystem being mounted at /259/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.836638][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1040.270887][T14117] loop3: detected capacity change from 0 to 131072 [ 1040.292760][T14117] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1040.301027][T14117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1040.312938][T14117] F2FS-fs (loop3): invalid crc value [ 1040.452152][T14144] loop6: detected capacity change from 0 to 512 [ 1040.515352][T14117] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1040.645834][T14117] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1040.652977][T14117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1040.837600][T14144] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1041.009642][T14144] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.078146][ T4322] net_ratelimit: 118 callbacks suppressed [ 1041.078168][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.380186][ T26] audit: type=1800 audit(1785802004.939:43): pid=14117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2593" name="file3" dev="loop3" ino=8 res=0 errno=0 [ 1041.418424][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.619614][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1041.793734][T14160] loop6: detected capacity change from 0 to 1024 [ 1041.839343][T14160] EXT4-fs: Ignoring removed bh option [ 1041.940995][T14160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1042.124380][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1042.287651][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.606368][T14175] loop3: detected capacity change from 0 to 4096 [ 1042.725017][T14175] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1042.832605][ T26] audit: type=1800 audit(1785802006.350:44): pid=14175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2613" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1042.881612][T14185] loop6: detected capacity change from 0 to 512 [ 1042.955429][T14185] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1043.036855][T14185] EXT4-fs (loop6): 1 truncate cleaned up [ 1043.081448][T14185] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1043.351915][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1043.417464][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.815555][T14203] loop6: detected capacity change from 0 to 512 [ 1043.899568][T14203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1043.987288][T14210] netlink: 710 bytes leftover after parsing attributes in process `syz.3.2633'. [ 1044.030949][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1044.539890][T14224] netlink: 'syz.4.2639': attribute type 1 has an invalid length. [ 1044.560031][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.605663][T14190] loop7: detected capacity change from 0 to 32768 [ 1044.680219][T14190] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1044.716011][T14190] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1044.785067][ T4322] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1044.853674][T14190] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1044.886554][ T7994] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1044.903191][ T7994] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1044.996748][ T4322] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1045.021737][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.046638][ T4322] usb 4-1: Product: syz [ 1045.055604][ T4322] usb 4-1: Manufacturer: syz [ 1045.066215][ T4322] usb 4-1: SerialNumber: syz [ 1045.080164][ T4322] usb 4-1: config 0 descriptor?? [ 1045.088912][ T7994] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 1045.106159][ T4322] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1045.124436][ T7994] gfs2: fsid=syz:syz.0: jid=0: Done [ 1045.136597][T14190] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1045.147763][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.494699][T14239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.543570][T14190] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1045.672099][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.234144][ T4322] gspca_sunplus: reg_w_riv err -71 [ 1046.247769][ T4322] sunplus: probe of 4-1:0.0 failed with error -71 [ 1046.395843][ T4322] usb 4-1: USB disconnect, device number 30 [ 1046.598213][T14190] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 1046.711955][T14190] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 1046.762954][T14190] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 1046.800294][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.822748][T14190] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 1047.943836][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.014704][T12424] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1048.072283][T12424] CPU: 0 PID: 12424 Comm: syz-executor Not tainted syzkaller #0 [ 1048.080011][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.090109][T12424] Call Trace: [ 1048.093411][T12424] [ 1048.096363][T12424] dump_stack_lvl+0x188/0x24e [ 1048.101131][T12424] ? show_regs_print_info+0x12/0x12 [ 1048.106365][T12424] ? load_image+0x410/0x410 [ 1048.110934][T12424] ? do_raw_spin_unlock+0x11d/0x230 [ 1048.116204][T12424] gfs2_assert_warn_i+0x187/0x2c0 [ 1048.121346][T12424] gfs2_quota_cleanup+0x48c/0x670 [ 1048.126419][T12424] gfs2_make_fs_ro+0x3e0/0x4c0 [ 1048.131214][T12424] ? gfs2_dinode_out+0xb00/0xb00 [ 1048.136195][T12424] ? do_raw_spin_lock+0x128/0x2f0 [ 1048.141265][T12424] ? __rwlock_init+0x140/0x140 [ 1048.146079][T12424] ? do_raw_spin_unlock+0x11d/0x230 [ 1048.151309][T12424] gfs2_put_super+0x220/0x920 [ 1048.156035][T12424] ? gfs2_evict_inode+0x1290/0x1290 [ 1048.161277][T12424] generic_shutdown_super+0x130/0x340 [ 1048.166757][T12424] kill_block_super+0x7c/0xe0 [ 1048.171464][T12424] deactivate_locked_super+0x93/0xf0 [ 1048.176786][T12424] cleanup_mnt+0x471/0x4f0 [ 1048.181310][T12424] task_work_run+0x1d0/0x260 [ 1048.186118][T12424] ? task_work_cancel+0x220/0x220 [ 1048.191202][T12424] ? exit_to_user_mode_loop+0x3b/0x110 [ 1048.196810][T12424] exit_to_user_mode_loop+0xe6/0x110 [ 1048.202165][T12424] exit_to_user_mode_prepare+0xee/0x180 [ 1048.207773][T12424] syscall_exit_to_user_mode+0x16/0x40 [ 1048.213323][T12424] do_syscall_64+0x58/0xa0 [ 1048.217789][T12424] ? clear_bhb_loop+0x60/0xb0 [ 1048.222651][T12424] ? clear_bhb_loop+0x60/0xb0 [ 1048.227380][T12424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.233320][T12424] RIP: 0033:0x7f729d99f257 [ 1048.237779][T12424] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1048.257520][T12424] RSP: 002b:00007fffa68c24f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1048.266168][T12424] RAX: 0000000000000000 RBX: 00007f729da3445c RCX: 00007f729d99f257 [ 1048.274187][T12424] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa68c25b0 [ 1048.282201][T12424] RBP: 00007fffa68c25b0 R08: 00007fffa68c35b0 R09: 00000000ffffffff [ 1048.290222][T12424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa68c3640 [ 1048.298242][T12424] R13: 00007f729da3445c R14: 00000000000eec58 R15: 00007fffa68c3680 [ 1048.306273][T12424] [ 1048.450552][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.493351][ T26] audit: type=1326 audit(1785802011.573:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.6.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafc9d9e019 code=0x0 [ 1048.619660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.639830][T14278] loop4: detected capacity change from 0 to 4096 [ 1048.674846][ T9059] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1048.734017][T14278] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1048.793943][ T26] audit: type=1800 audit(1785802011.840:46): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2660" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 1048.935828][ T9059] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1048.948741][ T9059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.982694][ T9059] usb 4-1: config 0 descriptor?? [ 1049.003592][ T9059] cp210x 4-1:0.0: cp210x converter detected [ 1049.053957][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.319669][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.328518][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.337424][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.347966][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.356887][T14291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.443157][ T9059] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1049.704001][ T9059] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1050.098065][ T5292] usb 4-1: USB disconnect, device number 31 [ 1050.306970][ T5292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1050.396928][ T5292] cp210x 4-1:0.0: device disconnected [ 1050.888489][T14313] loop7: detected capacity change from 0 to 4096 [ 1050.912644][T14317] loop3: detected capacity change from 0 to 1024 [ 1050.922755][T14313] EXT4-fs: inline encryption not supported [ 1050.928576][T14317] EXT4-fs: inline encryption not supported [ 1050.969523][T14317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1050.990906][T14317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1051.019545][T14313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1051.112443][T14317] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1051.122191][T14317] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.159620][T14313] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1051.214562][T14327] block device autoloading is deprecated and will be removed. [ 1051.229533][T14313] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1051.245899][T14317] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2672: bg 0: block 112: padding at end of block bitmap is not set [ 1051.275095][T14313] System zones: 0-5 [ 1051.302156][T14313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1051.330032][T14317] EXT4-fs (loop3): Remounting filesystem read-only [ 1051.460117][T14325] loop6: detected capacity change from 0 to 4096 [ 1051.939073][T14325] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1052.385195][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 1052.482137][ T26] audit: type=1800 audit(1785802015.254:47): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2674" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 1052.521756][ T4322] net_ratelimit: 127 callbacks suppressed [ 1052.521775][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.624699][T12424] EXT4-fs (loop7): unmounting filesystem. [ 1052.724230][T14341] loop4: detected capacity change from 0 to 8 [ 1052.917485][T14341] SQUASHFS error: zstd decompression error: 10 [ 1052.939789][T14341] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1052.988767][T14341] SQUASHFS error: Failed to read block 0x62b: -5 [ 1053.001704][T14341] SQUASHFS error: Unable to read metadata cache entry [629] [ 1053.021021][T14341] SQUASHFS error: Unable to read directory block [629:ff26] [ 1053.147715][T14351] loop7: detected capacity change from 0 to 1024 [ 1053.277852][T14351] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1053.307513][T14351] hfsplus: xattr searching failed [ 1053.372260][T14356] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1053.459843][T14356] hfsplus: xattr search failed [ 1053.478255][T14351] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1053.506572][T14356] hfsplus: b-tree write err: -5, ino 2 [ 1053.554146][T14351] hfsplus: xattr searching failed [ 1053.649190][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.716347][ T4636] hfsplus: b-tree write err: -5, ino 25 [ 1053.722691][ T4636] hfsplus: b-tree write err: -5, ino 4 [ 1053.737162][ T4636] hfsplus: b-tree write err: -5, ino 2 [ 1053.751048][ T4636] hfsplus: b-tree write err: -5, ino 28 [ 1053.961299][T14354] loop6: detected capacity change from 0 to 32768 [ 1053.999245][T14354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2682 (14354) [ 1054.039302][T14354] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1054.060673][T14354] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1054.071236][T14354] BTRFS info (device loop6): setting nodatasum [ 1054.077683][T14354] BTRFS info (device loop6): force zlib compression, level 3 [ 1054.089516][T14354] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1054.105816][T14354] BTRFS info (device loop6): use lzo compression, level 0 [ 1054.114443][T14354] BTRFS info (device loop6): turning on flush-on-commit [ 1054.125579][T14354] BTRFS info (device loop6): enabling auto defrag [ 1054.137862][T14354] BTRFS info (device loop6): max_inline at 4096 [ 1054.170246][T14354] BTRFS info (device loop6): using free space tree [ 1054.221136][T14354] BTRFS info (device loop6): enabling ssd optimizations [ 1054.284233][T14354] 9pnet_virtio: no channels available for device syz [ 1054.330856][ T4322] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1054.547732][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 1054.576749][ T4322] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1054.624251][ T9280] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1054.635512][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.643561][ T4322] usb 4-1: Product: syz [ 1054.683472][ T4322] usb 4-1: Manufacturer: syz [ 1054.688199][ T4322] usb 4-1: SerialNumber: syz [ 1054.712719][ T4322] usb 4-1: config 0 descriptor?? [ 1054.718593][T14396] loop4: detected capacity change from 0 to 4096 [ 1054.750678][T14396] EXT4-fs: inline encryption not supported [ 1054.830833][T14396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1054.839376][T14396] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1054.925478][ T8977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (8977) [ 1054.947380][ T4322] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.974679][T14396] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1054.999935][T14396] System zones: 0-5 [ 1055.031087][T14396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1055.040526][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.209364][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1055.229574][ T9282] Bluetooth: hci5: command 0x1003 tx timeout [ 1055.365536][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.478164][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1055.612737][ T4322] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1055.638134][ T4322] usb 4-1: USB disconnect, device number 32 [ 1055.684693][T14411] loop7: detected capacity change from 0 to 16 [ 1055.718769][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2692'. [ 1055.768157][T14411] erofs: (device loop7): mounted with root inode @ nid 36. [ 1055.877719][T14411] syz.7.2696: attempt to access beyond end of device [ 1055.877719][T14411] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1055.958391][T14411] erofs: (device loop7): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1055.997639][T14411] syz.7.2696: attempt to access beyond end of device [ 1055.997639][T14411] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1056.062226][T14411] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1056.084965][ T26] audit: type=1800 audit(1785802018.567:48): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2696" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1056.085138][T14417] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1056.162920][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.180066][ T26] audit: type=1800 audit(1785802018.659:49): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2696" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1056.978165][T14414] syz.7.2696 (14414): drop_caches: 2 [ 1057.289954][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.332734][T14448] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1057.450083][T14427] loop4: detected capacity change from 0 to 40427 [ 1057.500763][T14427] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1057.549118][T14427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1057.580667][T14427] F2FS-fs (loop4): invalid crc value [ 1057.609955][T14427] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1058.022038][T14427] F2FS-fs (loop4): Start checkpoint disabled! [ 1058.417139][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.546969][T14427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1058.623625][T14427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1058.690083][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.992437][ T4329] kworker/u4:5: attempt to access beyond end of device [ 1058.992437][ T4329] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1059.281426][T14447] loop7: detected capacity change from 0 to 40427 [ 1059.336709][T14447] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1059.369119][T14447] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1059.411722][T14447] F2FS-fs (loop7): invalid crc value [ 1059.455616][T14447] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1059.543952][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.687858][T14480] device syzkaller1 entered promiscuous mode [ 1059.694040][T14447] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1059.717402][T14447] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1059.808263][T14484] loop4: detected capacity change from 0 to 2048 [ 1059.851673][T14484] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1059.881972][T14484] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1059.958543][T14484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1059.990621][T12424] syz-executor: attempt to access beyond end of device [ 1059.990621][T12424] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1060.671894][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.018519][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.250637][T14503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.289132][T14503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.297604][T14503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.336875][T14503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.369949][T14503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.450333][T14507] device bond_slave_0 entered promiscuous mode [ 1061.457414][T14507] device bond_slave_1 entered promiscuous mode [ 1061.479004][T14507] device bond_slave_0 left promiscuous mode [ 1061.485071][T14507] device bond_slave_1 left promiscuous mode [ 1063.101346][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1063.107862][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.228063][T14537] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2733'. [ 1063.296565][T14516] loop6: detected capacity change from 0 to 40427 [ 1063.332584][T14516] F2FS-fs (loop6): invalid crc value [ 1063.382440][T14516] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1063.524988][T14516] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 1063.579090][T14516] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1063.817446][T14516] syz.6.2728: attempt to access beyond end of device [ 1063.817446][T14516] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1063.924768][T14555] KVM: debugfs: duplicate directory 14555-4 [ 1064.052786][ T7994] net_ratelimit: 116 callbacks suppressed [ 1064.052807][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.102116][ T9280] syz-executor: attempt to access beyond end of device [ 1064.102116][ T9280] loop6: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 1064.118976][ T9280] syz-executor: attempt to access beyond end of device [ 1064.118976][ T9280] loop6: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 1064.146823][ T9280] F2FS-fs (loop6): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 1064.146896][ T9280] F2FS-fs (loop6): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 1064.495555][T14570] loop5: detected capacity change from 0 to 6 [ 1064.543325][T14570] Dev loop5: unable to read RDB block 6 [ 1064.551062][T14570] loop5: AHDI p3 [ 1064.568112][T14570] loop5: partition table partially beyond EOD, truncated [ 1065.202271][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.277313][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.271991][T14623] loop3: detected capacity change from 0 to 128 [ 1066.412820][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.527193][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.571921][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1067.624253][T14619] loop4: detected capacity change from 0 to 32768 [ 1067.718938][T14616] syz.0.2756 (14616): drop_caches: 2 [ 1067.868544][T14619] JBD2: Ignoring recovery information on journal [ 1067.948222][T14623] syz.3.2759: attempt to access beyond end of device [ 1067.948222][T14623] loop3: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 1068.030741][T14619] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1068.110024][T14637] syz.3.2759: attempt to access beyond end of device [ 1068.110024][T14637] loop3: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 1068.202703][T14619] (syz.4.2758,14619,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1068.477017][T10821] ocfs2: Unmounting device (7,4) on (node local) [ 1068.572018][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.582484][ T4317] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1068.649698][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.777915][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 1068.797665][ T4317] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1068.823006][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.831287][ T4317] usb 1-1: Product: syz [ 1068.855550][ T4317] usb 1-1: Manufacturer: syz [ 1068.860229][ T4317] usb 1-1: SerialNumber: syz [ 1068.909410][ T4317] usb 1-1: config 0 descriptor?? [ 1069.093128][T14669] loop3: detected capacity change from 0 to 128 [ 1069.149203][ T4317] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1069.201313][ T4322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1069.309698][ T8009] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1069.501066][ T4322] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1069.620458][ T8009] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1069.647385][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.730865][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1069.777078][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.787897][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1069.807110][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1069.821037][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1069.924990][ T4317] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1069.941161][ T4317] usb 1-1: USB disconnect, device number 33 [ 1069.948935][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1069.958299][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1069.971123][ T4322] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1069.980241][ T4322] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1069.989874][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1069.997950][ T4322] usb 5-1: Manufacturer: syz [ 1070.004656][ T4322] usb 5-1: config 0 descriptor?? [ 1070.010661][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.025141][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.034110][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.045994][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.054165][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.075909][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.089132][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.110667][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.118401][T14675] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2777'. [ 1070.119672][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.140545][T14675] loop7: detected capacity change from 0 to 256 [ 1070.150658][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.174873][T14677] loop3: detected capacity change from 0 to 16 [ 1070.177833][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.195190][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.206779][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2777'. [ 1070.229755][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.241316][T14677] erofs: (device loop3): mounted with root inode @ nid 36. [ 1070.253007][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.261985][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.282486][T14677] syz.3.2776: attempt to access beyond end of device [ 1070.282486][T14677] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1070.295959][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.316521][ T8009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1070.361688][T14677] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1070.370769][ T8009] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1070.370804][ T8009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.373495][ T8009] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1070.417357][T14677] syz.3.2776: attempt to access beyond end of device [ 1070.417357][T14677] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1070.427270][ T8009] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1070.452621][ T8009] usb 7-1: Product: syz [ 1070.453220][T14677] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1070.457120][ T8009] usb 7-1: Manufacturer: syz [ 1070.480867][ T4322] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 1070.498349][ T4322] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 1070.504749][ T26] audit: type=1800 audit(1785802031.872:50): pid=14677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2776" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1070.506081][ T8009] usb 7-1: SerialNumber: syz [ 1070.531049][T14679] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1070.588806][ T8009] usb 7-1: config 0 descriptor?? [ 1070.599363][ T4322] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1070.625548][ T8009] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 1070.625841][ T26] audit: type=1800 audit(1785802031.992:51): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2776" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1070.969854][ T8009] usb 5-1: USB disconnect, device number 26 [ 1071.458064][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.466318][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.674424][T14691] netlink: 'syz.7.2781': attribute type 3 has an invalid length. [ 1071.753703][T14687] fido_id[14687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1071.835502][T14693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.855750][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.871874][ T4322] usb 7-1: USB disconnect, device number 19 [ 1071.890203][ T4322] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 1071.919953][T14696] netlink: 'syz.7.2783': attribute type 1 has an invalid length. [ 1071.931419][T14693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.939888][T14693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.959390][T14696] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2783'. [ 1071.981790][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.999196][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.014866][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.030218][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.037428][T14696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.063817][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.131527][T14678] syz.3.2776 (14678): drop_caches: 2 [ 1073.296862][ T5913] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1074.174356][T14730] loop6: detected capacity change from 0 to 256 [ 1074.286376][ T5913] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1074.313043][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.332019][ T5913] usb 5-1: config 0 has no interfaces? [ 1074.337927][ T5913] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1074.347075][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.385015][ T5913] usb 5-1: config 0 descriptor?? [ 1074.395078][ T26] audit: type=1804 audit(1785802035.461:52): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2795" name="/newroot/297/file0/bus" dev="loop6" ino=1048680 res=1 errno=0 [ 1074.424090][ T4322] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1074.654047][ T4322] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1074.680352][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.702223][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.714456][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1074.722913][ T5913] usb 5-1: USB disconnect, device number 27 [ 1074.744052][ T4322] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1074.761945][ T4322] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1074.778627][ T4322] usb 4-1: Manufacturer: syz [ 1074.795216][ T4322] usb 4-1: config 0 descriptor?? [ 1075.594032][ T8009] net_ratelimit: 98 callbacks suppressed [ 1075.594049][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.611021][ T4322] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 1075.636973][ T4322] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 1075.651797][ T4322] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1076.079999][ T9059] usb 4-1: USB disconnect, device number 33 [ 1076.194804][ T5913] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1076.429380][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 1076.467288][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.586291][ T5913] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.761071][ T5913] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1076.858448][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.879799][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.912649][ T5913] usb 7-1: Product: syz [ 1076.921128][ T5913] usb 7-1: Manufacturer: syz [ 1076.930589][ T5913] usb 7-1: SerialNumber: syz [ 1077.184665][ T5913] usb 7-1: 0:2 : does not exist [ 1077.190076][T14766] input: syz1 as /devices/virtual/input/input36 [ 1077.202434][ T5913] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1077.266315][T14770] loop3: detected capacity change from 0 to 16 [ 1077.294682][ T5913] usb 7-1: USB disconnect, device number 20 [ 1077.321667][T14770] erofs: (device loop3): mounted with root inode @ nid 36. [ 1077.491661][T14772] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1077.578844][ T8977] udevd[8977]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.759048][T14736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1078.022584][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.167429][T14768] loop4: detected capacity change from 0 to 40427 [ 1078.206905][T14768] F2FS-fs (loop4): invalid crc value [ 1078.234595][T14768] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1078.446127][T14768] F2FS-fs (loop4): Start checkpoint disabled! [ 1078.542365][T14768] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1078.588453][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.499244][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.017561][ T47] kworker/u4:3: attempt to access beyond end of device [ 1080.017561][ T47] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1080.623526][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.161852][T14814] loop6: detected capacity change from 0 to 64 [ 1081.280590][T14817] loop4: detected capacity change from 0 to 1024 [ 1081.412150][T14817] EXT4-fs: Ignoring removed orlov option [ 1081.617268][T14817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1081.925944][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.977209][T14817] EXT4-fs (loop4): shut down requested (1) [ 1081.999509][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.179527][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.188218][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.385917][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1082.559002][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2826'. [ 1082.626984][T14830] loop4: detected capacity change from 0 to 2048 [ 1082.627565][T14827] device netdevsim0 entered promiscuous mode [ 1082.737716][T14830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1082.746334][T14830] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.780665][T14827] device gretap0 entered promiscuous mode [ 1082.809951][T14827] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1082.855941][T14827] Cannot create hsr debugfs directory [ 1082.883660][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2826'. [ 1082.892249][T14830] fs-verity: sha256 using implementation "sha256-avx2" [ 1083.762906][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.818697][T10821] EXT4-fs (loop4): unmounting filesystem. [ 1083.998703][T14854] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2835'. [ 1084.149857][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1084.369003][T14864] PID 14864 killed due to inadequate hugepage pool [ 1084.416485][ T8009] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1084.798147][ T8009] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1084.809263][ T8009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.820673][ T8009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.831780][ T8009] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1085.468935][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.643303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.654360][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.664904][ T8009] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1085.674170][ T8009] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1085.682293][ T8009] usb 4-1: Manufacturer: syz [ 1085.690121][ T8009] usb 4-1: config 0 descriptor?? [ 1086.107069][ T4370] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1086.156097][ T8009] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 1086.172982][ T8009] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 1086.196285][ T8009] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1086.233980][T14900] loop7: detected capacity change from 0 to 4096 [ 1086.311523][T14900] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1086.336937][ T4370] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1086.351984][ T4370] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1086.371424][ T4370] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1086.386072][ T26] audit: type=1800 audit(1785802046.534:53): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2852" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1086.407783][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.416130][ T4370] usb 5-1: Product: syz [ 1086.420531][ T4370] usb 5-1: Manufacturer: syz [ 1086.425406][ T4370] usb 5-1: SerialNumber: syz [ 1086.520805][T14405] usb 4-1: USB disconnect, device number 34 [ 1086.663938][ T4370] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1086.693804][T12424] EXT4-fs (loop7): unmounting filesystem. [ 1086.769199][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.838480][T14898] loop6: detected capacity change from 0 to 32768 [ 1086.948621][T14898] XFS (loop6): Mounting V5 Filesystem [ 1087.170677][ T4370] usb 5-1: USB disconnect, device number 28 [ 1087.182343][ T4370] usblp0: removed [ 1087.238023][T14898] XFS (loop6): Ending clean mount [ 1087.268159][T14898] XFS (loop6): Quotacheck needed: Please wait. [ 1087.307439][ T4390] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 1087.344953][ T4390] XFS (loop6): Unmount and run xfs_repair [ 1087.363826][ T4390] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1087.424911][ T4390] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1087.567960][ T4390] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 1087.761996][ T4390] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1087.904401][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.933578][ T4390] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 1088.116753][ T4390] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 1088.248988][ T4390] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1088.258026][ T4390] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1088.266982][ T4390] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1088.276273][ T4390] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 1088.292412][T14898] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1088.424464][T14935] loop7: detected capacity change from 0 to 1024 [ 1088.545141][ T26] audit: type=1800 audit(1785802048.518:54): pid=14935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2861" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1088.633563][T14898] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 1088.697404][T14898] XFS (loop6): Unmount and run xfs_repair [ 1088.719690][T14898] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1088.756186][T14898] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1088.773757][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.797596][T14898] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 1088.832199][T14898] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1088.874292][T14898] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 1088.910459][T14898] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 1088.946399][T14898] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1088.986006][T14898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1089.017149][T14898] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1089.027281][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.055248][T14898] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 1089.090769][T14898] XFS (loop6): page discard on page ffffea00011c9080, inode 0x244a, pos 0. [ 1090.159022][ T9280] XFS (loop6): Unmounting Filesystem [ 1090.170132][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.211086][T14938] loop4: detected capacity change from 0 to 32768 [ 1090.304126][T14938] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1090.342877][T14938] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1090.402434][T14938] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1090.439566][T14938] BTRFS info (device loop4): use zstd compression, level 3 [ 1090.475440][T14938] BTRFS info (device loop4): using free space tree [ 1090.734996][T14938] BTRFS info (device loop4): enabling ssd optimizations [ 1091.277373][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.068762][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.233833][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.375338][T10821] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1092.534973][T10475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.325524][T14405] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1093.643883][T14405] usb 4-1: Using ep0 maxpacket: 32 [ 1093.654390][T14405] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1093.663546][T14405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.671588][T14405] usb 4-1: Product: syz [ 1093.675839][T14405] usb 4-1: Manufacturer: syz [ 1093.680540][T14405] usb 4-1: SerialNumber: syz [ 1093.744550][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.746425][T14405] usb 4-1: config 0 descriptor?? [ 1094.336754][T14405] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 035 [ 1094.832151][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.221633][T14405] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1095.932032][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.958786][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.142851][T14405] usb 5-1: Using ep0 maxpacket: 8 [ 1096.164583][T14405] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1096.182561][ T7994] usb 4-1: USB disconnect, device number 35 [ 1096.188349][T14405] usb 5-1: config 179 has no interface number 0 [ 1096.195407][T14405] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1096.226383][T14405] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1096.243111][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2891'. [ 1096.253384][T14405] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1096.277091][T15055] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1096.293518][T14405] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1096.307575][T15057] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1096.316375][T14405] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1096.342191][T14405] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1096.359606][T14405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.379904][T15037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1096.545675][T15062] loop6: detected capacity change from 0 to 128 [ 1096.587861][T15062] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1096.609289][T15062] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.717593][ T7994] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1096.745382][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1096.801350][T14405] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input37 [ 1096.872738][T15066] loop6: detected capacity change from 0 to 512 [ 1096.915570][T15066] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1096.927278][ T7994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.952664][ T7994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.973025][T15066] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.992895][ T7994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1097.024361][ T7994] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1097.034183][ T7994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.074857][ T4319] usb 5-1: USB disconnect, device number 29 [ 1097.075012][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1097.085180][ T7994] usb 4-1: config 0 descriptor?? [ 1097.089330][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1097.105936][ T4319] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1097.145760][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.186444][ T9280] EXT4-fs (loop6): unmounting filesystem. [ 1097.598053][ T7994] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 1097.618716][ T7994] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1097.792723][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.803072][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.811477][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.824554][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.833984][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.258024][ T9059] net_ratelimit: 117 callbacks suppressed [ 1099.258046][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.601588][T15097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.861358][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.900534][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.933442][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.956080][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.004228][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.050206][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.069573][T14405] usb 4-1: USB disconnect, device number 36 [ 1100.105200][T15109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.132485][T15118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.140882][T15118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.748674][T15122] loop3: detected capacity change from 0 to 32768 [ 1101.799638][T15122] JBD2: Ignoring recovery information on journal [ 1101.841748][T15122] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1102.154168][T15122] [ 1102.156575][T15122] ============================================ [ 1102.162756][T15122] WARNING: possible recursive locking detected [ 1102.168920][T15122] syzkaller #0 Not tainted [ 1102.173336][T15122] -------------------------------------------- [ 1102.179488][T15122] syz.3.2912/15122 is trying to acquire lock: [ 1102.185553][T15122] ffff88804c778660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x266/0x980 [ 1102.196596][T15122] [ 1102.196596][T15122] but task is already holding lock: [ 1102.203962][T15122] ffff88804c71dbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_move_extents+0x3fc/0xa40 [ 1102.215057][T15122] [ 1102.215057][T15122] other info that might help us debug this: [ 1102.223205][T15122] Possible unsafe locking scenario: [ 1102.223205][T15122] [ 1102.230654][T15122] CPU0 [ 1102.233937][T15122] ---- [ 1102.237218][T15122] lock(&ocfs2_file_ip_alloc_sem_key); [ 1102.242771][T15122] lock(&ocfs2_file_ip_alloc_sem_key); [ 1102.248327][T15122] [ 1102.248327][T15122] *** DEADLOCK *** [ 1102.248327][T15122] [ 1102.256468][T15122] May be due to missing lock nesting notation [ 1102.256468][T15122] [ 1102.264789][T15122] 10 locks held by syz.3.2912/15122: [ 1102.270073][T15122] #0: ffff88802a4d2460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 1102.279835][T15122] #1: ffff88804c71df48 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: ocfs2_move_extents+0x19d/0xa40 [ 1102.290811][T15122] #2: ffff88804c71dbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_move_extents+0x3fc/0xa40 [ 1102.301870][T15122] #3: ffff888063699898 (&new->rf_sem){+.+.}-{3:3}, at: ocfs2_lock_refcount_tree+0x1aa/0x9d0 [ 1102.312070][T15122] #4: ffff88804c77c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 1102.325755][T15122] #5: ffff88804c77ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x131f/0x3450 [ 1102.339442][T15122] #6: ffff88804c71ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1a31/0x3450 [ 1102.353112][T15122] #7: ffff88802a4d2650 (sb_internal#2){.+.+}-{0:0}, at: __ocfs2_move_extents_range+0x1a42/0x3450 [ 1102.363755][T15122] #8: ffff888078ee44e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 1102.374468][T15122] #9: ffff8880244a8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 1102.384212][T15122] [ 1102.384212][T15122] stack backtrace: [ 1102.390113][T15122] CPU: 1 PID: 15122 Comm: syz.3.2912 Not tainted syzkaller #0 [ 1102.397578][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.407638][T15122] Call Trace: [ 1102.410929][T15122] [ 1102.413868][T15122] dump_stack_lvl+0x188/0x24e [ 1102.418568][T15122] ? show_regs_print_info+0x12/0x12 [ 1102.423776][T15122] ? load_image+0x410/0x410 [ 1102.428296][T15122] __lock_acquire+0x12c8/0x7c40 [ 1102.433178][T15122] ? __bfs+0x27a/0x560 [ 1102.437258][T15122] ? verify_lock_unused+0x140/0x140 [ 1102.442466][T15122] ? check_path+0x21/0x40 [ 1102.446806][T15122] ? check_noncircular+0x189/0x330 [ 1102.451928][T15122] ? hlock_conflict+0x59/0x1f0 [ 1102.456708][T15122] lock_acquire+0x1bb/0x4a0 [ 1102.461223][T15122] ? ocfs2_read_virt_blocks+0x266/0x980 [ 1102.466779][T15122] ? __might_sleep+0xd0/0xd0 [ 1102.471437][T15122] ? lockdep_lock+0xf1/0x1f0 [ 1102.476034][T15122] ? read_lock_is_recursive+0x10/0x10 [ 1102.481417][T15122] ? lockdep_unlock+0x142/0x2e0 [ 1102.486277][T15122] ? lockdep_lock+0x1f0/0x1f0 [ 1102.490967][T15122] down_read+0x42/0x2d0 [ 1102.495126][T15122] ? ocfs2_read_virt_blocks+0x266/0x980 [ 1102.500692][T15122] ocfs2_read_virt_blocks+0x266/0x980 [ 1102.506074][T15122] ? ocfs2_validate_dx_leaf+0x200/0x200 [ 1102.511779][T15122] ? ocfs2_seek_data_hole_offset+0x990/0x990 [ 1102.517771][T15122] ? verify_lock_unused+0x140/0x140 [ 1102.522983][T15122] ? verify_lock_unused+0x140/0x140 [ 1102.528202][T15122] ocfs2_find_entry+0x3a8/0x2080 [ 1102.533165][T15122] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 1102.539256][T15122] ? start_this_handle+0x2037/0x2240 [ 1102.544544][T15122] ? start_this_handle+0x20ec/0x2240 [ 1102.549919][T15122] ? slab_post_alloc_hook+0x4b/0x490 [ 1102.555232][T15122] ? kmem_cache_alloc+0x18b/0x2f0 [ 1102.560262][T15122] ? jbd2__journal_start+0x13c/0x5a0 [ 1102.565565][T15122] ? jbd2__journal_start+0x5a0/0x5a0 [ 1102.570858][T15122] ocfs2_find_files_on_disk+0x102/0x390 [ 1102.576420][T15122] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 1102.581980][T15122] ocfs2_find_victim_alloc_group+0x203/0x9e0 [ 1102.587970][T15122] ? ocfs2_move_extents+0xa40/0xa40 [ 1102.593178][T15122] ? jbd2__journal_start+0x38e/0x5a0 [ 1102.598471][T15122] ? jbd2_journal_start+0x26/0x30 [ 1102.603497][T15122] ? ocfs2_start_trans+0x4d9/0x6f0 [ 1102.608622][T15122] ? ocfs2_recovery_exit+0x50/0x50 [ 1102.613749][T15122] __ocfs2_move_extents_range+0x1c72/0x3450 [ 1102.619681][T15122] ? ocfs2_find_victim_alloc_group+0x9e0/0x9e0 [ 1102.625842][T15122] ? ocfs2_refresh_inode+0x940/0x940 [ 1102.631149][T15122] ? mark_lock+0x94/0x320 [ 1102.635497][T15122] ? __lock_acquire+0x1465/0x7c40 [ 1102.640529][T15122] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 1102.646689][T15122] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 1102.652687][T15122] ? verify_lock_unused+0x140/0x140 [ 1102.657894][T15122] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 1102.664061][T15122] ? rwsem_write_trylock+0x135/0x1c0 [ 1102.669440][T15122] ? clear_nonspinnable+0x60/0x60 [ 1102.674470][T15122] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 1102.680563][T15122] ocfs2_move_extents+0x409/0xa40 [ 1102.685596][T15122] ? ocfs2_validate_and_adjust_move_goal+0x460/0x460 [ 1102.692364][T15122] ? __lock_acquire+0x7c40/0x7c40 [ 1102.697416][T15122] ? __brelse+0x55/0x90 [ 1102.701640][T15122] ? ocfs2_validate_and_adjust_move_goal+0x330/0x460 [ 1102.708324][T15122] ocfs2_ioctl_move_extents+0x4d4/0x6e0 [ 1102.713879][T15122] ? ocfs2_dump_resv+0x540/0x540 [ 1102.718820][T15122] ? tomoyo_path_number_perm+0x205/0x650 [ 1102.724492][T15122] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1102.729962][T15122] ocfs2_ioctl+0x31d/0x7c0 [ 1102.734389][T15122] ? ocfs2_fileattr_set+0x800/0x800 [ 1102.739597][T15122] ? __fget_files+0x28/0x460 [ 1102.744207][T15122] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1102.749204][T15122] ? security_file_ioctl+0x7c/0xa0 [ 1102.754346][T15122] ? ocfs2_fileattr_set+0x800/0x800 [ 1102.759551][T15122] __se_sys_ioctl+0xfa/0x170 [ 1102.764183][T15122] do_syscall_64+0x4c/0xa0 [ 1102.768608][T15122] ? clear_bhb_loop+0x60/0xb0 [ 1102.773295][T15122] ? clear_bhb_loop+0x60/0xb0 [ 1102.778067][T15122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.783971][T15122] RIP: 0033:0x7faf87f9e019 [ 1102.788391][T15122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.808010][T15122] RSP: 002b:00007faf88e02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.816429][T15122] RAX: ffffffffffffffda RBX: 00007faf88225fa0 RCX: 00007faf87f9e019 [ 1102.824413][T15122] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000005 [ 1102.832388][T15122] RBP: 00007faf8803500c R08: 0000000000000000 R09: 0000000000000000 [ 1102.840363][T15122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.848337][T15122] R13: 00007faf88226038 R14: 00007faf88225fa0 R15: 00007ffeca462388 [ 1102.856329][T15122] [ 1102.976547][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 1105.506988][ T4319] net_ratelimit: 326 callbacks suppressed [ 1105.507012][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.189622][ T9059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.623420][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.750388][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.888422][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.484408][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.004614][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.131842][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog