last executing test programs: 12m28.809618222s ago: executing program 32 (id=916): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x1, 0xc2eccbe01de1e72e) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x80400a, &(0x7f00000010c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m10.774446155s ago: executing program 2 (id=2836): unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = syz_io_uring_setup(0x7aa, &(0x7f00000002c0)={0x0, 0x3f2b, 0x80, 0x3, 0x2ee}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) ioctl$FICLONE(r1, 0x40049409, r0) 8m10.438862518s ago: executing program 2 (id=2842): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x508}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 8m10.062377345s ago: executing program 2 (id=2847): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000480)={r1, @in={{0x2, 0x4e20, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0x1, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) 8m9.776251444s ago: executing program 2 (id=2852): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 8m9.161129306s ago: executing program 2 (id=2860): syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m8.61285972s ago: executing program 2 (id=2863): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x360, 0x3706) ptrace$pokeuser(0x6, r0, 0x388, 0xf) 8m8.139206811s ago: executing program 33 (id=2863): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x360, 0x3706) ptrace$pokeuser(0x6, r0, 0x388, 0xf) 7m26.47072366s ago: executing program 6 (id=3161): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7m25.832624425s ago: executing program 6 (id=3165): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 7m25.518034331s ago: executing program 6 (id=3167): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4}, 0x94) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 7m25.229601696s ago: executing program 6 (id=3172): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file1\x00', 0x804, &(0x7f0000001f80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,dmask=00000000000000000000010,sys_tz,iocharset=cp932,umask=00000000000000000000015,namecase=1,keep_last_dots,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c00f96e5b623ab6ac457ac7b0494ce434e5328fcfc500b38491c3278aa8e5e1e0e39de4dc97c724a6e1d9796e8b281b94f30dcb4d328a4f084f23b65caaf205a313b608000000000000001ad3357a0993f21fcad205f7cf7f03111458a7da03c4b1a12d12e868474fb9df62caa3b1474eccfbb0967b59d9eaea3a0000000000000000"], 0x51, 0x152e, &(0x7f000000a300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 7m24.365830212s ago: executing program 6 (id=3179): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffc, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0xffff, 0xc}, {0x8}}}, 0x24}}, 0x40004) 7m23.740242733s ago: executing program 6 (id=3183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 7m22.799143762s ago: executing program 34 (id=3183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 7m17.573124844s ago: executing program 0 (id=3228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 7m17.288566782s ago: executing program 0 (id=3230): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7m16.924993673s ago: executing program 0 (id=3234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "967c877a134ad40a382fd0553b88f17e"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4008010) 7m15.599412028s ago: executing program 0 (id=3247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x11d) 7m14.424924517s ago: executing program 0 (id=3252): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0xa, 0x2, 0x0, 0xfa}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 7m11.298845723s ago: executing program 0 (id=3264): r0 = io_uring_setup(0x59b3, &(0x7f00000006c0)={0x0, 0x8202, 0x100, 0x0, 0x2a2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x20000000, 0x1, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x80000000}, {}, 0x70bd2a, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x77c1816f4f559e4e) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 7m10.334501579s ago: executing program 35 (id=3264): r0 = io_uring_setup(0x59b3, &(0x7f00000006c0)={0x0, 0x8202, 0x100, 0x0, 0x2a2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x20000000, 0x1, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x80000000}, {}, 0x70bd2a, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x77c1816f4f559e4e) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 5m42.081753184s ago: executing program 7 (id=3883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) 5m40.648171007s ago: executing program 7 (id=3893): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001e00)={0x0, 0x0, r1, r2, 0x100, 0x4, 0xffffffff, 0x80000001, {0x1, 0xeb, 0x7, 0xfff, 0x2, 0xd, 0x9, 0x1, 0xf, 0x1, 0x0, 0x4, 0x1, 0x4b2a, "4e79dd4e91532a83af5477078ad106c7e967cf6e1ce5fb85801a47f58e902ab2"}}) 5m40.209774254s ago: executing program 7 (id=3897): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000007c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 5m39.923265587s ago: executing program 7 (id=3901): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m39.320931368s ago: executing program 7 (id=3903): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000200)={[{@dots}, {@dots}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {}, {@dots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 5m38.120914635s ago: executing program 7 (id=3912): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000b, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000340)=0x6) 5m37.210738397s ago: executing program 36 (id=3912): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000b, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000340)=0x6) 1m17.156025984s ago: executing program 9 (id=5631): r0 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r0, 0x0) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 1m15.4628364s ago: executing program 9 (id=5654): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff) 1m15.280311646s ago: executing program 9 (id=5645): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x2000002, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1m11.33965255s ago: executing program 9 (id=5667): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 1m9.447462807s ago: executing program 9 (id=5674): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) 1m8.444103399s ago: executing program 9 (id=5677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2, 0x0, 0x4e20, 0x8, 0x2}, {0x0, 0x4, 0x1, 0x1, 0x0, 0xb, 0x80, 0x1}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x3502, 0x1, 0x3, 0x0, 0x1, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1m7.587694037s ago: executing program 37 (id=5677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2, 0x0, 0x4e20, 0x8, 0x2}, {0x0, 0x4, 0x1, 0x1, 0x0, 0xb, 0x80, 0x1}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x3502, 0x1, 0x3, 0x0, 0x1, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1m7.093512672s ago: executing program 4 (id=5680): capset(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.28372378s ago: executing program 4 (id=5682): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) 1m3.263240582s ago: executing program 4 (id=5697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m2.77633966s ago: executing program 4 (id=5701): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 1m1.653571677s ago: executing program 4 (id=5705): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 57.559881545s ago: executing program 4 (id=5718): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x7fff}}}}}, 0x0) 56.692763477s ago: executing program 38 (id=5718): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x7fff}}}}}, 0x0) 52.900972229s ago: executing program 8 (id=5731): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0xc0089364, &(0x7f00000000c0)=0x4) 52.476978561s ago: executing program 8 (id=5733): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) 52.059073905s ago: executing program 8 (id=5736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x1000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 50.964901945s ago: executing program 8 (id=5741): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 50.312842997s ago: executing program 8 (id=5744): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e2d20223673feacf3b7545c037b5222", 0xfdef, 0x3b00, 0x0, 0x0) 49.34799475s ago: executing program 8 (id=5751): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 48.388509333s ago: executing program 39 (id=5751): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.411754727s ago: executing program 1 (id=5950): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61901, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0}]) 4.843905557s ago: executing program 1 (id=5955): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup2(r1, r1) read$char_usb(r2, 0x0, 0x0) 3.621881061s ago: executing program 5 (id=5963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.061608162s ago: executing program 1 (id=5964): socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 2.955418509s ago: executing program 1 (id=5965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) close(r0) 2.757714864s ago: executing program 1 (id=5967): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 2.639361427s ago: executing program 1 (id=5968): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x104b82b, 0x0, 0x1, 0x0, &(0x7f0000000880)) 1.617064084s ago: executing program 3 (id=5974): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x26020400) 1.362516828s ago: executing program 3 (id=5975): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 1.160384122s ago: executing program 3 (id=5976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SSID={0x4}]}, 0x28}}, 0xc00) 1.030598594s ago: executing program 3 (id=5977): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x8, 0x40000cca8, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @auto="97d853586ffab461"}}) 793.156595ms ago: executing program 5 (id=5978): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x600980, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r2, r0, 0x0) 631.370234ms ago: executing program 3 (id=5979): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) 535.295974ms ago: executing program 5 (id=5980): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f00000001c0)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0xcb}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523133529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865073177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f2400"}, 0x418, 0x1008}) close(0x3) 367.738542ms ago: executing program 5 (id=5981): r0 = io_uring_setup(0x43ae, &(0x7f0000000640)={0x0, 0x4178, 0x8, 0x3, 0x200003d5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 244.930953ms ago: executing program 5 (id=5982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 210.304362ms ago: executing program 3 (id=5983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 0s ago: executing program 5 (id=5984): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) kernel console output (not intermixed with test programs): 9][ T5635] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 866.963300][ T5635] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 867.002833][ T5635] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 867.084117][T13408] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 867.195954][ T5635] hid-generic 00A0:0006:0003.003B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 867.253981][T13408] usb 6-1: Using ep0 maxpacket: 16 [ 867.303257][T13408] usb 6-1: config 0 has no interfaces? [ 867.346870][T13408] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 867.400649][T13408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.447305][T13408] usb 6-1: Product: syz [ 867.468305][T13408] usb 6-1: Manufacturer: syz [ 867.490681][T13408] usb 6-1: SerialNumber: syz [ 867.515324][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 867.542392][T13408] usb 6-1: config 0 descriptor?? [ 867.724163][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 867.763149][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 867.797702][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 867.816499][ T5635] usb 6-1: USB disconnect, device number 20 [ 867.817559][T13415] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 867.838760][T13415] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 867.857926][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 867.886262][T13612] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.897722][T13612] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 867.910612][ T10] usb 4-1: config 1 has no interface number 0 [ 867.930352][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.956378][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 867.993561][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 868.023671][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.065495][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 868.086439][T20876] loop4: detected capacity change from 0 to 131072 [ 868.095894][T20876] F2FS-fs (loop4): invalid crc value [ 868.107085][T13612] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.118726][T13612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.127108][T13415] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 868.138202][T13612] usb 9-1: Product: syz [ 868.142442][T13612] usb 9-1: Manufacturer: syz [ 868.147252][T13612] usb 9-1: SerialNumber: syz [ 868.228386][T20876] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 868.248654][T20876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 868.281869][T13415] usb 10-1: USB disconnect, device number 16 [ 868.292404][T13612] cdc_mbim 9-1:1.0: skipping garbage [ 868.302162][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 868.492364][T20867] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 868.835906][T13415] usb 4-1: USB disconnect, device number 44 [ 868.876647][T13415] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 868.946636][T20896] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 869.137690][T20867] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 869.156394][T13612] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 869.181114][T13612] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 869.317856][T13612] wwan wwan0: port wwan0mbim0 attached [ 869.410482][T13612] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 9e:3c:8d:bd:e8:8f [ 869.469344][T13612] usb 9-1: USB disconnect, device number 22 [ 869.500424][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.506956][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.545869][T13612] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 869.726667][T13612] wwan wwan0: port wwan0mbim0 disconnected [ 870.755870][T13610] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 870.791780][T13610] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 871.021068][T20906] loop1: detected capacity change from 0 to 32768 [ 871.034223][T13612] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 871.125901][T20906] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 871.218201][T13612] usb 10-1: config 0 has no interfaces? [ 871.236682][T13612] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.263968][T13612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 871.273810][T13612] usb 10-1: SerialNumber: syz [ 871.295227][T20906] XFS (loop1): Ending clean mount [ 871.315580][T13612] usb 10-1: config 0 descriptor?? [ 871.373710][T20916] loop8: detected capacity change from 0 to 32768 [ 871.520400][T20916] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 871.623558][ T5632] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 871.632461][ T10] usb 10-1: USB disconnect, device number 17 [ 872.358335][T14708] ocfs2: Unmounting device (7,8) on (node local) [ 872.412140][T20949] loop5: detected capacity change from 0 to 64 [ 872.834248][T13408] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 873.034017][T13408] usb 2-1: Using ep0 maxpacket: 32 [ 873.076506][T13408] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 873.093912][T13408] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 873.115998][T13408] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 873.141517][T13408] usb 2-1: config 1 has no interface number 0 [ 873.162694][T13408] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.188196][T13408] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 873.233915][T13408] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 873.251349][T13408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.311894][T13408] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 873.351076][T20969] bad cache= option: none4 [ 873.351076][T20969] nr_mlock 0 [ 873.351076][T20969] nr_zspages 0 [ 873.351076][T20969] nr_free_cma 0 [ 873.351076][T20969] numa_hit 3552546 [ 873.351076][T20969] numa_miss 1 [ 873.351076][T20969] numa_foreign 1 [ 873.351076][T20969] numa_interleave 7792 [ 873.351076][T20969] numa_local 3548474 [ 873.351076][T20969] numa_other 4073 [ 873.351076][T20969] nr_inactive_anon 1 [ 873.351076][T20969] nr_active_anon 8699 [ 873.351076][T20969] nr_inactive_file 40742 [ 873.351076][T20969] nr_active_file 21802 [ 873.351076][T20969] nr_unevictable 768 [ 873.351076][T20969] nr_slab_reclaimable 10398 [ 873.351076][T20969] nr_slab_unreclaimable 149565 [ 873.351076][T20969] nr_isolated_anon 0 [ 873.351076][T20969] nr_isolated_file 0 [ 873.351076][T20969] workingset_nodes 0 [ 873.351076][T20969] workingset_refault_anon 1667 [ 873.351076][T20969] workingset_refault_file 22 [ 873.351076][T20969] workingset_activate_anon 48 [ 873.351076][T20969] workingset_activate_file 22 [ 873.351076][T20969] workingset_restore_anon 0 [ 873.351076][T20969] workingset_restore_file 21 [ 873.351076][T20969] workingset_nodereclaim 0 [ 873.351076][T20969] nr_anon_pages 8025 [ 873.351076][T20969] nr_mapped 35996 [ 873.351076][T20969] nr_file_pages 63889 [ 873.351076][T20969] nr_dirty 644 [ 873.351076][T20969] nr_writeback 0 [ 873.351076][T20969] nr_shmem 1473 [ 873.351076][T20969] nr_shmem_hugepages 0 [ 873.351076][T20969] nr_shmem_pmdmapped 0 [ 873.351076][T20969] nr_file_hugepages 0 [ 873.351076][T20969] nr_file_pmdmapped 0 [ 873.351076][T20969] nr_anon_transparent_hugepages 0 [ 873.351076][T20969] nr_vmscan_write 28777 [ 873.351076][T20969] nr_vmscan_immediate_reclaim 0 [ 873.351076][T20969] nr_dirtied 58122 [ 873.351076][T20969] nr_written 55602 [ 873.351076][T20969] nr_throttled_written 0 [ 873.351076][T20969] nr_kernel_misc_reclaimable 0 [ 873.351076][T20969] nr_foll_pin_acquired 31253 [ 873.351076][T20969] nr_foll_pin_released 31285 [ 873.351310][T20968] loop8: detected capacity change from 0 to 8 [ 873.570973][T13408] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 873.575541][T20969] CIFS: VFS: bad cache= option: none4 [ 873.575541][T20969] nr_mlock 0 [ 873.575541][T20969] nr_zspages 0 [ 873.575541][T20969] nr_free_cma 0 [ 873.575541][T20969] numa_hit 3552546 [ 873.575541][T20969] numa_miss 1 [ 873.575541][T20969] numa_foreign 1 [ 873.575541][T20969] numa_interleave 7792 [ 873.575541][T20969] numa_local 3548474 [ 873.575541][T20969] numa_other 4073 [ 873.575541][T20969] nr_inactive_anon 1 [ 873.575541][T20969] nr_active_anon 8699 [ 873.575541][T20969] nr_inactive_file 40742 [ 873.575541][T20969] nr_active_file 21802 [ 873.575541][T20969] nr_unevictable 768 [ 873.575541][T20969] nr_slab_reclaimable 10398 [ 873.575541][T20969] nr_slab_unreclaimable 149565 [ 873.575541][T20969] nr_isolated_anon 0 [ 873.575541][T20969] nr_isolated_file 0 [ 873.575541][T20969] workingset_nodes 0 [ 873.575541][T20969] workingset_refault_anon 1667 [ 873.575541][T20969] workingset_refault_file 22 [ 873.575541][T20969] workingset_activate_anon 48 [ 873.575541][T20969] workingset_activate_file 22 [ 873.575541][T20969] workingset_restore_anon 0 [ 873.575541][T20969] workingset_restore_file 21 [ 873.575541][T20969] workingset_nodereclaim 0 [ 873.575541][T20969] nr_anon_pages 8025 [ 873.575541][T20969] nr_mapped 35996 [ 873.575541][T20969] nr_file_pages 63889 [ 873.575541][T20969] nr_dirty 644 [ 873.575541][T20969] nr_writeback 0 [ 873.575541][T20969] nr_shmem 1473 [ 873.575541][T20969] nr_shmem_hugepages 0 [ 873.575541][T20969] nr_shmem_pmdmapped 0 [ 873.575541][T20969] nr_file_hugepages 0 [ 873.575541][T20969] nr_file_pmdmapped 0 [ 873.575541][T20969] nr_anon_transparent_hugepages 0 [ 873.575541][T20969] nr_vmscan_write 28777 [ 873.575541][T20969] nr_vmscan_immediate_reclaim 0 [ 873.575541][T20969] nr_dirtied 58122 [ 873.575541][T20969] nr_written 55602 [ 873.575541][T20969] nr_throttled_written 0 [ 873.575541][T20969] nr_kernel_misc_reclaimable 0 [ 873.575541][T20969] nr_foll_pin_acquired 31253 [ 873.575541][T20969] nr_foll_pin_released 31285 [ 873.777577][T20968] Dev loop8: unable to read RDB block 8 [ 873.784423][T20968] loop8: unable to read partition table [ 873.850645][T20968] loop8: partition table beyond EOD, truncated [ 873.857514][T20968] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 874.025004][T13415] usb 2-1: USB disconnect, device number 43 [ 874.059595][T13415] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 874.143313][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5392'. [ 874.216212][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5382'. [ 874.235913][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5382'. [ 874.913074][T20993] loop3: detected capacity change from 0 to 4096 [ 875.025509][T20993] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 875.122949][T21007] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 875.144034][T13415] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 875.173445][T20993] ntfs3(loop3): Failed to load $Extend (-22). [ 875.191341][T20993] ntfs3(loop3): Failed to initialize $Extend. [ 875.319578][T13415] usb 10-1: unable to get BOS descriptor or descriptor too short [ 875.358063][T13415] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.386016][T13415] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 875.415640][T13415] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 875.449568][T13415] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 875.449649][T13415] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 875.449700][T13415] usb 10-1: config 1 interface 1 has no altsetting 0 [ 875.457340][T13415] usb 10-1: string descriptor 0 read error: -22 [ 875.581943][T13415] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 875.618393][T13415] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.822411][T21016] bond0: (slave bond_slave_1): Releasing backup interface [ 875.845978][T21016] bond_slave_1: left allmulticast mode [ 876.230510][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5406'. [ 876.341222][T21000] loop9: detected capacity change from 0 to 256 [ 876.371175][T21000] exfat: Bad value for 'uid' [ 876.394936][T21000] exfat: Bad value for 'uid' [ 876.426213][T13415] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 876.468106][T21037] loop4: detected capacity change from 0 to 128 [ 876.574287][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 876.624188][T21037] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.680287][T21037] ext4 filesystem being mounted at /951/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 876.724411][T13415] usb 10-1: USB disconnect, device number 18 [ 876.808520][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.880689][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.971038][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 877.034223][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.303652][ T10] usb 2-1: usb_control_msg returned -32 [ 877.314939][ T5637] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.325414][ T10] usbtmc 2-1:16.0: can't read capabilities [ 877.593029][T21058] Invalid ELF header magic: != ELF [ 877.853604][T21063] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 878.273540][T21059] loop4: detected capacity change from 0 to 32768 [ 878.447610][T21059] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 879.142578][T21083] loop8: detected capacity change from 0 to 2048 [ 879.172358][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 879.187617][T21083] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 879.259270][T21083] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 879.330257][T21083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.467147][ T10] usb 2-1: USB disconnect, device number 44 [ 880.020036][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5425'. [ 880.663984][T21099] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5434'. [ 881.222443][T21111] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5439'. [ 881.259721][T21116] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5449'. [ 882.806927][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5447'. [ 882.927466][T21138] ipvlan3: entered allmulticast mode [ 882.951503][T21138] syz_tun: entered allmulticast mode [ 883.374685][T21145] Invalid ELF header magic: != ELF [ 883.787004][T21151] loop1: detected capacity change from 0 to 64 [ 883.962504][T21156] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 885.722321][T21182] seq_file: buggy .next function m_next did not update position index [ 885.921514][T21185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5467'. [ 886.055455][T21179] loop4: detected capacity change from 0 to 32768 [ 886.188154][T21179] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 886.361785][T21179] XFS (loop4): Ending clean mount [ 886.639319][ T30] audit: type=1800 audit(1780127007.353:498): pid=21179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5465" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 887.127788][ T5637] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 887.281545][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5484'. [ 887.730074][T21210] loop1: detected capacity change from 0 to 128 [ 887.957712][T21210] syz.1.5466: attempt to access beyond end of device [ 887.957712][T21210] loop1: rw=2049, sector=145, nr_sectors = 800 limit=128 [ 888.493042][ T1101] kworker/u8:7: attempt to access beyond end of device [ 888.493042][ T1101] loop1: rw=1, sector=945, nr_sectors = 96 limit=128 [ 888.978765][T21226] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 890.687791][T21268] loop4: detected capacity change from 0 to 128 [ 890.994006][T21268] syz.4.5489: attempt to access beyond end of device [ 890.994006][T21268] loop4: rw=2049, sector=145, nr_sectors = 352 limit=128 [ 891.219516][T21257] loop1: detected capacity change from 0 to 32768 [ 891.338107][T21257] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 891.667595][T21262] loop8: detected capacity change from 0 to 32768 [ 891.791178][T21262] btrfs: Deprecated parameter 'usebackuproot' [ 891.922457][T21262] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 892.122266][T21262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5496 (21262) [ 892.178389][T19703] kworker/u8:1: attempt to access beyond end of device [ 892.178389][T19703] loop4: rw=1, sector=497, nr_sectors = 480 limit=128 [ 892.609827][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 892.878582][T21262] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 892.986132][T21262] BTRFS info (device loop8): using crc32c checksum algorithm [ 893.213805][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 893.214190][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 893.366617][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 893.443808][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 893.493904][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 893.568898][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 893.570916][T21293] loop1: detected capacity change from 0 to 4096 [ 893.591285][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 893.598910][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 893.617446][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 893.634793][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 893.668904][T21262] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 893.818976][T21262] BTRFS error (device loop8): open_ctree failed: -12 [ 893.996692][T21293] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 894.223631][T21318] binder: 21314:21318 ioctl c0306201 2000000001c0 returned -14 [ 894.614798][T21325] loop4: detected capacity change from 0 to 1024 [ 894.683082][T21325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 894.699697][T21325] ext4 filesystem being mounted at /967/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.900831][T21325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.5514: bg 0: block 112: padding at end of block bitmap is not set [ 895.003549][T21325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 895.088446][T21325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 895.088446][T21325] [ 895.088738][T21325] EXT4-fs (loop4): Total free blocks count 0 [ 895.088770][T21325] EXT4-fs (loop4): Free/Dirty block details [ 895.088797][T21325] EXT4-fs (loop4): free_blocks=0 [ 895.088906][T21325] EXT4-fs (loop4): dirty_blocks=16 [ 895.088934][T21325] EXT4-fs (loop4): Block reservation details [ 895.088959][T21325] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 895.090084][T21341] loop3: detected capacity change from 0 to 128 [ 895.095847][T21341] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 895.100177][T21341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.224603][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 895.361821][ T5637] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 895.369006][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 895.666809][T21344] loop3: detected capacity change from 0 to 1024 [ 895.729395][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.481218][T21326] loop9: detected capacity change from 0 to 32768 [ 896.525434][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5527'. [ 896.590474][T21326] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 896.697269][ T30] audit: type=1800 audit(1780127017.413:499): pid=21326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5515" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 896.779278][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.823125][T21370] (syz.9.5515,21370,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 897.415258][T21383] netlink: 'syz.5.5535': attribute type 3 has an invalid length. [ 897.476656][T21383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5535'. [ 897.506468][T14960] ocfs2: Unmounting device (7,9) on (node local) [ 897.572464][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.804583][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.037863][T21395] netlink: 'syz.5.5540': attribute type 2 has an invalid length. [ 898.117334][T21395] netlink: 'syz.5.5540': attribute type 2 has an invalid length. [ 898.125112][T21395] netlink: 'syz.5.5540': attribute type 4 has an invalid length. [ 898.193596][T21395] netlink: 'syz.5.5540': attribute type 4 has an invalid length. [ 898.450026][T21397] loop8: detected capacity change from 0 to 32768 [ 898.457710][T21397] btrfs: Deprecated parameter 'usebackuproot' [ 898.463794][T21397] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 898.476294][T21397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5541 (21397) [ 898.502082][T21397] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 898.512262][T21397] BTRFS info (device loop8): using crc32c checksum algorithm [ 898.709229][ T48] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 898.869598][T21397] BTRFS error (device loop8): failed to load root extent [ 898.876972][T21397] BTRFS warning (device loop8): try to load backup roots slot 1 [ 898.893771][ T8989] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 899.008704][T21397] BTRFS warning (device loop8): couldn't read tree root [ 899.015811][T21397] BTRFS warning (device loop8): try to load backup roots slot 2 [ 899.029706][T16939] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 899.087219][T21397] BTRFS warning (device loop8): couldn't read tree root [ 899.094425][T21397] BTRFS warning (device loop8): try to load backup roots slot 3 [ 899.120760][T21397] BTRFS info (device loop8): rebuilding free space tree [ 899.188756][T21397] BTRFS info (device loop8): checking UUID tree [ 899.195761][T21397] BTRFS info (device loop8): enabling ssd optimizations [ 899.202872][T21397] BTRFS info (device loop8): turning on async discard [ 899.210531][T21397] BTRFS info (device loop8): enabling free space tree [ 899.217515][T21397] BTRFS info (device loop8): force clearing of disk cache [ 899.224793][T21397] BTRFS info (device loop8): enabling auto defrag [ 899.231254][T21397] BTRFS info (device loop8): trying to use backup root at mount time [ 899.239452][T21397] BTRFS info (device loop8): use zstd compression, level 3 [ 899.560068][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.062719][T21425] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 900.109960][T21397] BTRFS critical (device loop8 state E): emergency shutdown [ 900.318217][T14708] BTRFS info (device loop8 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 900.604736][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.632859][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.440488][T21447] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 901.644262][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.295399][T21458] bridge0: port 3(syz_tun) entered disabled state [ 902.684256][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.368658][T21475] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 903.653506][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.741551][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.749463][T21484] loop1: detected capacity change from 0 to 512 [ 903.917059][T21484] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 903.932234][T21484] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 903.944924][T21484] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.5583: Corrupt directory, running e2fsck is recommended [ 904.046777][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.132422][T21484] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 904.141025][T21484] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.5583: corrupted in-inode xattr: e_name out of bounds [ 904.220413][T21484] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 904.235134][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 904.250926][ C1] EXT4-fs (loop1): initial error at time 1780127024: ext4_iget_extra_inode:5127: inode 15 [ 904.278207][ C1] EXT4-fs (loop1): last error at time 1780127024: ext4_iget_extra_inode:5127: inode 15 [ 904.310220][T21484] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.5583: couldn't read orphan inode 15 (err -117) [ 904.322105][T21484] loop1: lost filesystem error report for type 5 error -117 [ 904.324827][T21484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.395776][T21484] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 904.413694][T21495] loop3: detected capacity change from 0 to 512 [ 904.455721][T21495] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.5587: invalid block [ 904.491678][T21495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 904.496807][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 904.512462][ C0] EXT4-fs (loop3): initial error at time 1780127025: ext4_get_branch:178: inode 11: block 4294967295 [ 904.523448][ C0] EXT4-fs (loop3): last error at time 1780127025: ext4_get_branch:178: inode 11: block 4294967295 [ 904.554183][T21495] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.5587: invalid indirect mapped block 4294967295 (level 1) [ 904.581776][T21495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 904.637548][T21484] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 904.643626][T21495] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.5587: invalid indirect mapped block 4294967295 (level 1) [ 904.701629][T21495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 904.718618][T21484] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.5583: Corrupt directory, running e2fsck is recommended [ 904.736291][T21495] EXT4-fs (loop3): 2 truncates cleaned up [ 904.761714][T21495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.774622][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.936497][T21498] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 904.949691][T21498] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 905.030991][T21498] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.5583: Corrupt directory, running e2fsck is recommended [ 905.134643][T21484] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 905.146226][T21484] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 905.156431][T21484] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.5583: Corrupt directory, running e2fsck is recommended [ 905.268753][T21484] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 905.312620][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.699891][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.806486][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.485120][T21529] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.5589'. [ 906.664923][T21517] seq_file: buggy .next function m_next did not update position index [ 907.007971][T21534] loop3: detected capacity change from 0 to 512 [ 907.085192][T13612] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 907.093787][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.098406][ T5644] Bluetooth: hci1: unexpected event for opcode 0x200a [ 907.109518][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.141851][T21534] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 907.226576][T21534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.328425][T21534] ext4 filesystem being mounted at /959/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 907.376717][T21536] loop9: detected capacity change from 0 to 2048 [ 907.400855][T21536] udf: Unknown parameter 'ÿÿ' [ 907.402937][T13612] usb 5-1: Using ep0 maxpacket: 32 [ 907.637626][T13612] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 907.645789][T13612] usb 5-1: config 0 has no interface number 0 [ 907.952489][T13612] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 907.961598][T13612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.969614][T13612] usb 5-1: Product: syz [ 907.973795][T13612] usb 5-1: Manufacturer: syz [ 908.078085][T21546] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5594'. [ 908.125403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.173359][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5595'. [ 908.258682][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5596'. [ 908.285843][T13612] usb 5-1: SerialNumber: syz [ 908.290781][T21523] loop8: detected capacity change from 0 to 131072 [ 908.322831][T13612] usb 5-1: config 0 descriptor?? [ 908.354759][T21523] F2FS-fs (loop8): invalid crc value [ 908.557366][T21523] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 908.582698][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.591581][T21523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 909.020351][ T30] audit: type=1800 audit(1780127029.713:500): pid=21523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5582" name="file1" dev="loop8" ino=7 res=0 errno=0 [ 909.182249][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.254567][T21570] loop9: detected capacity change from 0 to 128 [ 909.294809][T21570] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 909.306544][T21570] hpfs: filesystem error: improperly stopped [ 909.349701][T13610] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 909.359455][T21570] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 909.367237][T21570] hpfs: You really don't want any checks? You are crazy... [ 909.508959][T21570] hpfs: Code page index out of array [ 909.514313][T21570] hpfs: code page support is disabled [ 909.519812][T21570] hpfs: hpfs_map_4sectors(): unaligned read [ 909.525801][T21570] hpfs: hpfs_map_4sectors(): unaligned read [ 909.531794][T21570] hpfs: filesystem error: unable to find root dir [ 909.617076][T13612] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 909.693734][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5605'. [ 909.782094][T13610] usb 6-1: Using ep0 maxpacket: 8 [ 909.932111][T13612] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 909.943280][T13612] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 909.989118][T13612] usb 5-1: USB disconnect, device number 40 [ 910.099263][T13610] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 910.107535][T13610] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.117302][T13610] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.126363][T21578] loop9: detected capacity change from 0 to 4096 [ 910.152673][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.161021][T13610] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.171541][T13610] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.189184][T21578] EXT4-fs: Ignoring removed orlov option [ 910.231398][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.272122][T21578] EXT4-fs (loop9): Test dummy encryption mode enabled [ 910.332294][T21578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.434457][T13610] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 910.443571][T13610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.595184][T21583] loop3: detected capacity change from 0 to 2048 [ 910.602743][T21583] udf: Unknown parameter 'ÿÿ' [ 910.643400][T21585] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5609'. [ 910.998080][T14960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.244508][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.583716][T21595] usbtmc 6-1:16.0: simple control status returned b8 [ 911.786375][T13632] usb 6-1: USB disconnect, device number 21 [ 912.288553][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.519375][T21590] loop1: detected capacity change from 0 to 32768 [ 912.704407][T21590] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 912.810216][ T30] audit: type=1800 audit(1780127033.523:501): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5613" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 912.950286][T21618] (syz.1.5613,21618,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 913.181590][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.295862][T21590] workqueue: Failed to create a rescuer kthread for wq "dio/loop1": -EINTR [ 913.348272][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.390310][T21590] (syz.1.5613,21590,1):ocfs2_dio_end_io:2414 ERROR: Direct IO failed, bytes = -12 [ 913.656977][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.792911][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 913.830056][T21638] syz_tun: entered promiscuous mode [ 914.367185][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.988902][T21660] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 915.166459][T21665] netlink: 'syz.4.5638': attribute type 29 has an invalid length. [ 915.288580][T21652] seq_file: buggy .next function m_next did not update position index [ 915.350367][T21669] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5638'. [ 915.363432][T21665] netlink: 'syz.4.5638': attribute type 29 has an invalid length. [ 915.404611][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.172565][T21691] netlink: 'syz.8.5647': attribute type 2 has an invalid length. [ 916.180370][T21691] netlink: 'syz.8.5647': attribute type 2 has an invalid length. [ 916.194996][ T5635] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 916.225391][T13610] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 916.278659][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.346534][ T5635] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 916.355475][ T5635] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 916.383644][ T5635] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 916.428821][ T5635] usb 4-1: config 220 has no interface number 2 [ 916.443430][ T5635] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 916.457124][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.504873][ T5635] usb 4-1: config 220 interface 0 has no altsetting 0 [ 916.530593][ T5635] usb 4-1: config 220 interface 76 has no altsetting 0 [ 916.553389][ T5635] usb 4-1: config 220 interface 1 has no altsetting 0 [ 916.596572][ T5635] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 916.610668][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.614419][T13610] usb 10-1: Using ep0 maxpacket: 8 [ 916.642830][ T5635] usb 4-1: Product: syz [ 916.655865][ T5635] usb 4-1: Manufacturer: syz [ 916.676675][ T5635] usb 4-1: SerialNumber: syz [ 916.944023][T13610] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 916.952439][T13610] usb 10-1: config 179 has no interface number 0 [ 916.958820][T13610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 916.969399][ T5635] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 916.969963][T13610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 917.000778][ T5635] uvcvideo 4-1:220.0: No valid video chain found. [ 917.000868][ T5635] usb 4-1: selecting invalid altsetting 0 [ 917.110598][T13610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 917.118400][ T5635] usb 4-1: selecting invalid altsetting 0 [ 917.121880][T13610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 917.139075][T13610] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 917.159923][ T5635] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 917.189318][ T5635] usb 4-1: USB disconnect, device number 45 [ 917.241328][T13610] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 917.250526][T13610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.344467][T21687] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 917.484419][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.899491][T21713] loop4: detected capacity change from 0 to 32768 [ 917.907623][T21713] btrfs: Deprecated parameter 'usebackuproot' [ 917.913728][T21713] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 917.961086][T21713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5659 (21713) [ 918.201846][T21711] loop8: detected capacity change from 0 to 32768 [ 918.222930][T21713] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 918.233513][T21713] BTRFS info (device loop4): using crc32c checksum algorithm [ 918.304655][T21711] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 918.312896][T21711] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 918.530040][T21711] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 918.538104][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.571688][T13612] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 918.578534][T13612] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 918.625108][T13610] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input43 [ 918.626448][T21725] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5661'. [ 918.746873][T13612] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 168ms [ 918.786973][T13612] gfs2: fsid=syz:syz.0: jid=0: Done [ 918.792296][T21711] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 918.815319][ T5635] usb 10-1: USB disconnect, device number 19 [ 918.832404][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 918.840884][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 918.868506][ T1101] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 918.940197][T21713] BTRFS error (device loop4): failed to load root extent [ 918.947576][T21713] BTRFS warning (device loop4): try to load backup roots slot 1 [ 918.968088][ T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 919.005593][T21711] gfs2: fsid=syz:syz.0: found 1 quota changes [ 919.017086][T21713] BTRFS warning (device loop4): couldn't read tree root [ 919.024263][T21713] BTRFS warning (device loop4): try to load backup roots slot 2 [ 919.040825][ T48] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 919.112630][T21713] BTRFS warning (device loop4): couldn't read tree root [ 919.119899][T21713] BTRFS warning (device loop4): try to load backup roots slot 3 [ 919.159069][T21713] BTRFS info (device loop4): rebuilding free space tree [ 919.159977][ T30] audit: type=1800 audit(1780127039.873:502): pid=21711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5658" name="file2" dev="loop8" ino=2341 res=0 errno=0 [ 919.327896][T21713] BTRFS info (device loop4): checking UUID tree [ 919.364088][T21713] BTRFS info (device loop4): enabling ssd optimizations [ 919.371185][T21713] BTRFS info (device loop4): turning on async discard [ 919.378134][T21713] BTRFS info (device loop4): enabling free space tree [ 919.385803][T21713] BTRFS info (device loop4): force clearing of disk cache [ 919.392950][T21713] BTRFS info (device loop4): enabling auto defrag [ 919.399680][T21713] BTRFS info (device loop4): trying to use backup root at mount time [ 919.408239][T21713] BTRFS info (device loop4): use zstd compression, level 3 [ 919.857148][T21713] BTRFS critical (device loop4 state E): emergency shutdown [ 919.902362][T21746] loop3: detected capacity change from 0 to 32768 [ 919.910541][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.918886][T21746] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5665 (21746) [ 919.962325][T14708] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 919.963270][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.978440][T14708] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 919.978541][T14708] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:14708 [syz-executor] gfs2_quota_sync+0x322/0x570 [ 920.039718][T14708] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 920.048053][T14708] CPU: 1 UID: 0 PID: 14708 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 920.048108][T14708] Tainted: [L]=SOFTLOCKUP [ 920.048122][T14708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.048146][T14708] Call Trace: [ 920.048158][T14708] [ 920.048171][T14708] dump_stack_lvl+0x100/0x190 [ 920.048217][T14708] gfs2_withdraw.cold+0xa/0xed [ 920.048278][T14708] inode_go_instantiate+0xd56/0x1560 [ 920.048332][T14708] ? __pfx_inode_go_instantiate+0x10/0x10 [ 920.048383][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 920.048440][T14708] gfs2_instantiate+0x16c/0x250 [ 920.048500][T14708] gfs2_glock_wait+0x214/0x330 [ 920.048562][T14708] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 920.048636][T14708] gfs2_glock_nq+0xa03/0x14f0 [ 920.048682][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 920.048735][T14708] do_sync+0x705/0xd60 [ 920.048794][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 920.048857][T14708] ? __pfx_do_sync+0x10/0x10 [ 920.048916][T14708] ? __pfx_bh_get+0x10/0x10 [ 920.048977][T14708] ? qd_grab_sync+0x415/0x560 [ 920.049045][T14708] ? gfs2_quota_sync+0x322/0x570 [ 920.049107][T14708] ? gfs2_quota_sync+0x278/0x570 [ 920.049167][T14708] ? gfs2_quota_sync+0x278/0x570 [ 920.049243][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 920.049302][T14708] gfs2_quota_sync+0x322/0x570 [ 920.049378][T14708] gfs2_sync_fs+0x44/0xb0 [ 920.049427][T14708] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 920.049475][T14708] sync_filesystem+0x111/0x290 [ 920.049529][T14708] generic_shutdown_super+0x86/0x360 [ 920.049587][T14708] kill_block_super+0x3b/0xa0 [ 920.049639][T14708] gfs2_kill_sb+0x4a9/0x590 [ 920.049696][T14708] deactivate_locked_super+0xc1/0x1b0 [ 920.049753][T14708] deactivate_super+0xe7/0x110 [ 920.049812][T14708] cleanup_mnt+0x21f/0x450 [ 920.049852][T14708] task_work_run+0x150/0x240 [ 920.049901][T14708] ? __pfx_task_work_run+0x10/0x10 [ 920.049951][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 920.049997][T14708] ? rcu_is_watching+0x12/0xc0 [ 920.050058][T14708] exit_to_user_mode_loop+0x157/0x670 [ 920.050105][T14708] ? rcu_is_watching+0x12/0xc0 [ 920.050165][T14708] do_syscall_64+0x666/0x870 [ 920.050239][T14708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.050279][T14708] RIP: 0033:0x7f623e99e097 [ 920.050309][T14708] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 920.050346][T14708] RSP: 002b:00007ffe237d7668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 920.050382][T14708] RAX: 0000000000000000 RBX: 00007f623ea321ca RCX: 00007f623e99e097 [ 920.050407][T14708] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe237d7720 [ 920.050431][T14708] RBP: 00007ffe237d7720 R08: 00007ffe237d8720 R09: 00000000ffffffff [ 920.050455][T14708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe237d87b0 [ 920.050480][T14708] R13: 00007f623ea321ca R14: 00000000000e069f R15: 00007ffe237d87f0 [ 920.050530][T14708] [ 920.051858][T14708] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 920.434785][T21750] loop9: detected capacity change from 0 to 512 [ 920.438470][T21750] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 920.631676][T21746] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 920.642602][T21746] BTRFS info (device loop3): using sha256 checksum algorithm [ 920.651549][ T5637] BTRFS info (device loop4 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 920.680662][T21750] EXT4-fs (loop9): 1 truncate cleaned up [ 920.879976][T21750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.004829][T21750] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 921.005021][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.541604][T21746] BTRFS info (device loop3): enabling ssd optimizations [ 921.548608][T21746] BTRFS info (device loop3): turning on async discard [ 921.555386][T21746] BTRFS info (device loop3): enabling free space tree [ 921.589253][T21746] BTRFS info (device loop3): enabling auto defrag [ 921.595727][T21746] BTRFS info (device loop3): max_inline set to 4096 [ 922.084546][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.433451][T14960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.592839][ T5633] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 922.705569][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5670'. [ 922.774255][ T30] audit: type=1326 audit(1780127043.483:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21788 comm="syz.5.5676" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8af999ce59 code=0x0 [ 922.948870][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.021798][T21780] loop1: detected capacity change from 0 to 32768 [ 923.166372][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.228646][ T8989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.279060][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.453570][T21780] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 923.757281][T21780] XFS (loop1): Ending clean mount [ 924.088023][ T5632] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 924.139217][T13602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.152149][T13602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.220237][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.229435][T13602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.275105][T13602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.349889][T13602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 924.766666][ T8989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.065320][T21818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.256227][T13632] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 925.270878][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.433940][T13632] usb 5-1: Using ep0 maxpacket: 8 [ 925.465552][T13632] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 925.507238][T13632] usb 5-1: config 179 has no interface number 0 [ 925.524565][T13632] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 925.540893][ T8989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.563221][T13632] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 925.615154][T13632] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 925.639867][T13632] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 925.689073][T13632] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 925.714429][T13632] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 925.781781][T13632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.905893][T21816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.988409][T14708] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 926.005952][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.111895][T21837] overlayfs: failed to clone lowerpath [ 926.140495][ T8989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.141686][T14708] CPU: 1 UID: 0 PID: 14708 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 926.141741][T14708] Tainted: [L]=SOFTLOCKUP [ 926.141755][T14708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.141778][T14708] Call Trace: [ 926.141790][T14708] [ 926.141805][T14708] dump_stack_lvl+0x100/0x190 [ 926.141851][T14708] gfs2_assert_warn_i.cold+0x3a/0x118 [ 926.141908][T14708] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 926.141953][T14708] ? mark_held_locks+0x40/0x70 [ 926.141997][T14708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 926.142050][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.142104][T14708] gfs2_make_fs_ro+0x25e/0x370 [ 926.142160][T14708] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 926.142219][T14708] ? __pfx_autoremove_wake_function+0x10/0x10 [ 926.142267][T14708] ? __pfx___might_resched+0x10/0x10 [ 926.142316][T14708] ? gfs2_put_super+0x149/0x670 [ 926.142369][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.142427][T14708] gfs2_put_super+0x1a4/0x670 [ 926.142487][T14708] ? __pfx_gfs2_put_super+0x10/0x10 [ 926.142544][T14708] generic_shutdown_super+0x167/0x360 [ 926.142603][T14708] kill_block_super+0x3b/0xa0 [ 926.142653][T14708] gfs2_kill_sb+0x4a9/0x590 [ 926.142709][T14708] deactivate_locked_super+0xc1/0x1b0 [ 926.142770][T14708] deactivate_super+0xe7/0x110 [ 926.142830][T14708] cleanup_mnt+0x21f/0x450 [ 926.142871][T14708] task_work_run+0x150/0x240 [ 926.142919][T14708] ? __pfx_task_work_run+0x10/0x10 [ 926.142968][T14708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.143013][T14708] ? rcu_is_watching+0x12/0xc0 [ 926.143074][T14708] exit_to_user_mode_loop+0x157/0x670 [ 926.143119][T14708] ? rcu_is_watching+0x12/0xc0 [ 926.143178][T14708] do_syscall_64+0x666/0x870 [ 926.143250][T14708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.143289][T14708] RIP: 0033:0x7f623e99e097 [ 926.143320][T14708] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 926.143357][T14708] RSP: 002b:00007ffe237d7668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 926.143394][T14708] RAX: 0000000000000000 RBX: 00007f623ea321ca RCX: 00007f623e99e097 [ 926.143420][T14708] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe237d7720 [ 926.143443][T14708] RBP: 00007ffe237d7720 R08: 00007ffe237d8720 R09: 00000000ffffffff [ 926.143469][T14708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe237d87b0 [ 926.143493][T14708] R13: 00007f623ea321ca R14: 00000000000e069f R15: 00007ffe237d87f0 [ 926.143544][T14708] [ 926.151942][T21835] loop3: detected capacity change from 0 to 256 [ 926.424903][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.511719][ T149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.523966][ T5644] Bluetooth: hci1: command tx timeout [ 926.561404][T13632] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input44 [ 926.910983][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 926.919354][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 926.930194][T13632] usb 5-1: USB disconnect, device number 41 [ 927.205857][T21844] loop3: detected capacity change from 0 to 256 [ 927.260466][T21844] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 927.486135][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.404105][T13408] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 928.502049][T21861] loop4: detected capacity change from 0 to 512 [ 928.535316][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.554821][T21861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 928.596737][T13408] usb 4-1: Using ep0 maxpacket: 16 [ 928.628983][T21861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.654716][ T5644] Bluetooth: hci1: command tx timeout [ 928.656557][T13408] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 928.663624][T21861] ext4 filesystem being mounted at /1004/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.673077][T21857] loop8: detected capacity change from 0 to 4096 [ 928.705003][T13408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.716699][T13408] usb 4-1: config 0 descriptor?? [ 928.736803][T21857] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 928.738678][T13408] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 928.972846][T21857] ntfs3(loop8): ino=0, attr_set_size_ex [ 929.092004][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.104162][T21867] ntfs3(loop8): ino=0, attr_set_size_ex [ 929.127020][T21857] ntfs3(loop8): ino=0, attr_set_size_ex [ 929.238649][T21861] overlay: ./file0 is not a directory [ 929.417222][ T5637] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 929.594249][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.728459][ T5637] EXT4-fs (loop4): Remounting filesystem read-only [ 929.814595][T13408] gspca_sonixj: reg_w1 err -71 [ 929.854117][T13408] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 929.896514][T13408] usb 4-1: USB disconnect, device number 46 [ 930.250066][ T8989] bridge_slave_1: left promiscuous mode [ 930.256168][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.303440][ T8989] bridge_slave_0: left allmulticast mode [ 930.309139][ T8989] bridge_slave_0: left promiscuous mode [ 930.315159][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.432955][ T8989] bond0: left allmulticast mode [ 930.437883][ T8989] bond_slave_0: left allmulticast mode [ 930.443377][ T8989] bond_slave_1: left allmulticast mode [ 930.604135][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.742986][ T5644] Bluetooth: hci1: command tx timeout [ 930.869114][T13415] page_pool_release_retry() stalled pool shutdown: id 143, 1 inflight 60 sec [ 930.954987][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.967803][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.974231][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.934595][ T8989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.947182][ T8989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.958401][ T8989] bond0 (unregistering): Released all slaves [ 932.028773][ T8989] bond1 (unregistering): Released all slaves [ 932.123666][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.418229][T21906] loop3: detected capacity change from 0 to 131072 [ 932.444993][T21906] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 932.451814][T21906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 932.465800][T21906] F2FS-fs (loop3): invalid crc value [ 932.679463][T21906] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 932.701550][T21906] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 932.708949][T21906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 932.767467][ T5644] Bluetooth: hci1: command tx timeout [ 932.875685][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 932.899017][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.108719][T21508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.220650][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.500150][T21923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.581003][ T8989] IPVS: stopping backup sync thread 16809 ... [ 933.939356][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 934.012072][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.137169][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 934.206032][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 934.218848][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.247094][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.260065][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.332204][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.344013][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.390358][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 934.416151][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.678005][ T10] usb 9-1: usb_control_msg returned -32 [ 934.698819][ T10] usbtmc 9-1:16.0: can't read capabilities [ 934.789649][T21802] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.818508][T21802] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.835433][T21802] bridge_slave_0: entered allmulticast mode [ 934.860459][T21802] bridge_slave_0: entered promiscuous mode [ 934.940981][ T10] usb 9-1: USB disconnect, device number 23 [ 935.026905][T13602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 935.038759][T13602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 935.070744][T21802] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.100178][T21802] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.113690][T13602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 935.121845][T13602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 935.132392][T21802] bridge_slave_1: entered allmulticast mode [ 935.132810][T13602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.166072][T21802] bridge_slave_1: entered promiscuous mode [ 935.404797][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.890422][T21802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.185737][ T8989] hsr_slave_0: left promiscuous mode [ 936.226478][ T8989] hsr_slave_1: left promiscuous mode [ 936.232806][ T8989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.240283][ T8989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.248826][T21958] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5724'. [ 936.285735][ T8989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.293316][ T8989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.303598][T21959] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5724'. [ 936.430624][ T8989] veth1_macvtap: left promiscuous mode [ 936.436682][ T8989] veth0_macvtap: left promiscuous mode [ 936.445088][ T8989] veth1_vlan: left promiscuous mode [ 936.461643][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.476465][ T8989] veth0_vlan: left promiscuous mode [ 936.992215][ T8989] team0 (unregistering): Port device team_slave_1 removed [ 937.046598][ T8989] team0 (unregistering): Port device team_slave_0 removed [ 937.146506][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.223427][T21802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.244096][ T5644] Bluetooth: hci5: command tx timeout [ 937.276665][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.370555][T21802] team0: Port device team_slave_0 added [ 937.450798][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 937.526354][T21802] team0: Port device team_slave_1 added [ 937.555357][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.826188][T21972] loop8: detected capacity change from 0 to 128 [ 937.839058][T21802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.869877][T21972] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 937.874783][T13424] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 937.917646][T21802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.943617][T21802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.968826][T21972] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 938.012151][T21802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.048934][T21802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.116319][T13424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.128826][T13424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.140954][T21802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.185600][T13424] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 938.201420][T19703] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 938.250036][T13424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.333932][T13424] usb 2-1: config 0 descriptor?? [ 938.605796][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.769735][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 938.815605][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 938.817146][T21802] hsr_slave_0: entered promiscuous mode [ 938.830181][T21802] hsr_slave_1: entered promiscuous mode [ 938.869884][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 938.893959][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 938.903808][T21802] debugfs: 'hsr0' already exists in 'hsr' [ 938.909558][T21802] Cannot create hsr debugfs directory [ 938.926730][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 938.953457][ T8989] IPVS: stop unused estimator thread 0... [ 938.997033][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 939.032420][T13424] hid-thrustmaster 0003:044F:B65D.003D: unknown main item tag 0x0 [ 939.121873][T13424] hid-thrustmaster 0003:044F:B65D.003D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 939.152034][T13424] hid-thrustmaster 0003:044F:B65D.003D: Wrong number of endpoints? [ 939.251040][ C0] hid-thrustmaster 0003:044F:B65D.003D: Wheel with model id 0x200 is a Thrustmaster T300RS (Missing Attachment) [ 939.328812][ T5644] Bluetooth: hci5: command tx timeout [ 939.644416][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.674583][ C0] hid-thrustmaster 0003:044F:B65D.003D: Success?! The wheel should have been initialized! [ 939.685651][ T10] usb 2-1: USB disconnect, device number 45 [ 940.176183][T22025] loop8: detected capacity change from 0 to 512 [ 940.191650][T22025] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 940.219971][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.288664][T22025] EXT4-fs (loop8): 1 truncate cleaned up [ 940.296839][T22025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.409908][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 940.454940][T22025] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 940.693096][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.992432][T21915] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.171951][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.212300][T21940] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.221378][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.244253][T21940] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.252075][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.326489][T21940] bridge_slave_0: entered allmulticast mode [ 941.351770][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.370373][T21940] bridge_slave_0: entered promiscuous mode [ 941.378157][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.429841][T21940] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.431457][T13602] Bluetooth: hci5: command tx timeout [ 941.446263][T21940] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.489080][T21940] bridge_slave_1: entered allmulticast mode [ 941.540379][T21940] bridge_slave_1: entered promiscuous mode [ 941.730371][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.892432][T21940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.905640][T21940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.118244][T21940] team0: Port device team_slave_0 added [ 942.127641][T21940] team0: Port device team_slave_1 added [ 942.137756][T22064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5750'. [ 942.769939][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.926634][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.939058][T22076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5754'. [ 943.246667][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.293916][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.302765][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.312830][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.336882][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 943.499545][T13602] Bluetooth: hci5: command tx timeout [ 943.775129][T21940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.782446][T21940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.815410][T21940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.841683][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 943.882505][T21940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.932804][T21940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.053808][T21940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.385941][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.994627][T21940] hsr_slave_0: entered promiscuous mode [ 945.178804][T21940] hsr_slave_1: entered promiscuous mode [ 945.185490][T21940] debugfs: 'hsr0' already exists in 'hsr' [ 945.191264][T21940] Cannot create hsr debugfs directory [ 945.487404][ T10] net_ratelimit: 2 callbacks suppressed [ 945.487438][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.489856][T13602] Bluetooth: hci0: command tx timeout [ 945.762819][T22112] loop3: detected capacity change from 0 to 131072 [ 945.774324][T22112] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 945.782473][T22112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 945.803950][T22112] F2FS-fs (loop3): invalid crc value [ 945.941494][T22112] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 946.084312][T22112] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 946.091508][T22112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 946.373756][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.534181][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.738468][T13401] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 946.992692][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.002512][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.015049][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.023925][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.096117][T13401] usb 2-1: Using ep0 maxpacket: 8 [ 947.406649][T13401] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 947.414919][T13401] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.424783][T13401] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.434552][T13401] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.460952][T13401] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.474022][T13401] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.483095][T13401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.568410][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.614330][T13602] Bluetooth: hci0: command tx timeout [ 948.504606][ T57] bridge_slave_1: left promiscuous mode [ 948.510626][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.540334][ T57] bridge_slave_0: left allmulticast mode [ 948.546200][ T57] bridge_slave_0: left promiscuous mode [ 948.552288][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.604446][T13424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.738926][T22142] usbtmc 2-1:16.0: simple control status returned b8 [ 948.941260][T13424] usb 2-1: USB disconnect, device number 46 [ 949.139915][T22149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.172953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.447225][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.462197][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.501320][ T57] bond0 (unregistering): Released all slaves [ 949.551937][ T57] bond1 (unregistering): Released all slaves [ 949.644854][T13602] Bluetooth: hci0: command tx timeout [ 949.652731][T13423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.922011][T22080] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.929355][T22080] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.019683][T22080] bridge_slave_0: entered allmulticast mode [ 950.031083][T22080] bridge_slave_0: entered promiscuous mode [ 950.073465][T22080] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.080771][T22080] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.088166][T22080] bridge_slave_1: entered allmulticast mode [ 950.246036][T22080] bridge_slave_1: entered promiscuous mode [ 950.442567][T22164] loop1: detected capacity change from 0 to 40427 [ 950.451085][T22164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 950.459011][T22164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 950.493334][T22164] F2FS-fs (loop1): invalid crc value [ 950.587250][T22164] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 950.665846][T22164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 950.672979][T22164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 950.692112][T13408] net_ratelimit: 1 callbacks suppressed [ 950.692140][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.797220][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.221297][T22080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.234372][T22080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.267414][T13415] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 951.413613][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.424525][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.442835][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.466049][T22186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.576795][T22080] team0: Port device team_slave_0 added [ 951.587142][T22080] team0: Port device team_slave_1 added [ 951.652259][T22080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.663960][T22080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.677076][T13415] usb 4-1: Using ep0 maxpacket: 32 [ 951.712501][T22080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.732504][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.741767][T13602] Bluetooth: hci0: command tx timeout [ 951.758794][T22080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.773960][T22080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.810890][T22080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.905991][T22080] hsr_slave_0: entered promiscuous mode [ 951.912864][T22080] hsr_slave_1: entered promiscuous mode [ 951.920549][T22080] debugfs: 'hsr0' already exists in 'hsr' [ 951.926704][T22080] Cannot create hsr debugfs directory [ 952.041890][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.052895][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.062708][T13415] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 952.071829][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.157268][T13415] usb 4-1: config 0 descriptor?? [ 952.470471][ T5288] 8021q: adding VLAN 0 to HW filter on device eth17 [ 952.764614][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.769462][ T57] hsr_slave_0: left promiscuous mode [ 952.781974][T13415] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 952.795513][ T57] hsr_slave_1: left promiscuous mode [ 952.801755][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.856644][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.947243][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.957017][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.997332][ T57] veth1_macvtap: left promiscuous mode [ 953.002887][ T57] veth0_macvtap: left promiscuous mode [ 953.008681][ T57] veth1_vlan: left promiscuous mode [ 953.013997][ T57] veth0_vlan: left promiscuous mode [ 953.180348][T22204] loop1: detected capacity change from 0 to 512 [ 953.223187][T22204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 953.243640][T22204] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 953.271729][T13408] usb 4-1: USB disconnect, device number 47 [ 953.303984][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.314919][T22204] EXT4-fs warning (device loop1): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 953.361521][T22204] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 953.417016][T22204] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #14: comm syz.1.5780: invalid orphan symlink nlink 1 [ 953.434341][T22204] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 953.434920][T22204] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.5780: couldn't read orphan inode 14 (err -117) [ 953.444186][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 953.444225][ C0] EXT4-fs (loop1): last error at time 1780127074: ext4_orphan_get:1397: inode 14 [ 953.522682][T22204] loop1: lost filesystem error report for type 5 error -117 [ 953.566304][T22204] EXT4-fs (loop1): 1 truncate cleaned up [ 953.582980][T22204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 953.673276][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.804501][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.279549][ T57] team0 (unregistering): Port device team_slave_1 removed [ 954.307804][ T57] team0 (unregistering): Port device team_slave_0 removed [ 954.369665][T22217] loop1: detected capacity change from 0 to 4096 [ 954.395899][T22217] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 954.515820][T22217] ntfs3(loop1): ino=0, attr_set_size_ex [ 954.531166][T22217] ntfs3(loop1): ino=0, attr_set_size_ex [ 954.541040][T22217] ntfs3(loop1): ino=0, attr_set_size_ex [ 954.988736][T22224] netlink: 'syz.1.5788': attribute type 4 has an invalid length. [ 955.008515][T22224] netlink: 'syz.1.5788': attribute type 4 has an invalid length. [ 955.465136][T22236] loop3: detected capacity change from 0 to 512 [ 955.467412][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 955.581739][T22236] EXT4-fs (loop3): orphan cleanup on readonly fs [ 955.588766][T22236] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 955.632545][T22236] EXT4-fs warning (device loop3): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 955.678777][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 955.702112][T22237] net_ratelimit: 7 callbacks suppressed [ 955.702140][T22237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.719926][T22236] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 955.729481][T22236] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #14: comm syz.3.5791: invalid orphan symlink nlink 1 [ 955.741190][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 955.759658][ T10] usb 2-1: config 0 has no interface number 0 [ 955.766135][T22236] loop3: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 955.767132][T22236] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.5791: couldn't read orphan inode 14 (err -117) [ 955.774457][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 955.776290][T22236] loop3: lost filesystem error report for type 5 error -117 [ 955.809797][T22236] EXT4-fs (loop3): 1 truncate cleaned up [ 955.812186][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 955.829156][ C1] EXT4-fs (loop3): last error at time 1780127076: ext4_orphan_get:1400 [ 955.829312][T22236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 955.870721][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 955.886107][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.897150][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 955.909002][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 955.938856][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 955.990787][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.016938][ T10] usb 2-1: config 0 descriptor?? [ 956.064511][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 956.229369][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.327240][T22250] syzkaller1: entered promiscuous mode [ 956.334013][T22250] syzkaller1: entered allmulticast mode [ 956.371747][ T10] usb 2-1: USB disconnect, device number 47 [ 956.377887][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 956.407360][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.414047][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 956.480521][ T57] IPVS: stop unused estimator thread 0... [ 956.593168][T22230] ldusb: No device or device unplugged -19 [ 956.747021][ T5288] 8021q: adding VLAN 0 to HW filter on device eth18 [ 956.848649][T22257] loop3: detected capacity change from 0 to 4096 [ 956.874026][T22257] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 956.924514][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.011554][T22257] ntfs3(loop3): ino=0, attr_set_size_ex [ 957.019697][T22257] ntfs3(loop3): ino=0, attr_set_size_ex [ 957.030328][T22257] ntfs3(loop3): ino=0, attr_set_size_ex [ 957.164561][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.173992][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.183272][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.632680][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 957.681829][T22268] loop3: detected capacity change from 0 to 40427 [ 957.690962][T22268] F2FS-fs (loop3): build fault injection rate: 174 [ 957.697654][T22268] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 957.705699][T22268] F2FS-fs (loop3): invalid crc value [ 957.810831][T22268] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 957.869800][T22268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 957.897801][T13401] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 957.965459][ T5633] syz-executor: attempt to access beyond end of device [ 957.965459][ T5633] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 957.998654][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 957.998716][ T5633] Tainted: [L]=SOFTLOCKUP [ 957.998731][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.998754][ T5633] Call Trace: [ 957.998767][ T5633] [ 957.998782][ T5633] dump_stack_lvl+0x100/0x190 [ 957.998829][ T5633] f2fs_stop_checkpoint+0x600/0x9b0 [ 957.998873][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.998922][ T5633] ? errseq_set+0xe3/0x150 [ 957.998979][ T5633] ? errseq_set+0xe3/0x150 [ 957.999035][ T5633] f2fs_write_end_io+0xf59/0x1340 [ 957.999088][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 957.999141][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.999202][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 957.999248][ T5633] bio_endio+0x78f/0x8f0 [ 957.999338][ T5633] submit_bio_noacct+0x64c/0x2000 [ 957.999412][ T5633] f2fs_submit_write_bio+0x135/0x340 [ 957.999457][ T5633] __submit_merged_bio+0x331/0x780 [ 957.999510][ T5633] __submit_merged_write_cond+0x3fe/0x510 [ 957.999567][ T5633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 957.999626][ T5633] ? __pfx___might_resched+0x10/0x10 [ 957.999679][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.999735][ T5633] f2fs_write_cache_pages+0x20e9/0x2630 [ 957.999816][ T5633] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 957.999876][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.999924][ T5633] ? bpf_ksym_find+0x124/0x1c0 [ 957.999980][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000027][ T5633] ? __lock_acquire+0x4a5/0x2630 [ 958.000117][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000164][ T5633] ? __lock_acquire+0x4a5/0x2630 [ 958.000206][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000306][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000351][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.000411][ T5633] f2fs_write_data_pages+0x799/0x16d0 [ 958.000481][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.000552][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000598][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.000658][ T5633] do_writepages+0x278/0x600 [ 958.000728][ T5633] ? __pfx_do_writepages+0x10/0x10 [ 958.000788][ T5633] ? do_raw_spin_unlock+0x145/0x1e0 [ 958.000842][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.000889][ T5633] ? _raw_spin_unlock+0x28/0x50 [ 958.000946][ T5633] filemap_writeback+0x22d/0x2e0 [ 958.001014][ T5633] ? __pfx_filemap_writeback+0x10/0x10 [ 958.001077][ T5633] ? check_noncircular+0x97/0x160 [ 958.001169][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.001215][ T5633] ? find_held_lock+0x2b/0x80 [ 958.001271][ T5633] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 958.001334][ T5633] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 958.001389][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.001448][ T5633] f2fs_sync_dirty_inodes+0x469/0x990 [ 958.001525][ T5633] block_operations+0x2a6/0xfc0 [ 958.001579][ T5633] ? __bfs+0x150/0x2a0 [ 958.001649][ T5633] ? __pfx_block_operations+0x10/0x10 [ 958.001707][ T5633] ? check_noncircular+0x97/0x160 [ 958.001797][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.001850][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.001898][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.001951][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002006][ T5633] f2fs_write_checkpoint+0x582/0x5550 [ 958.002073][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002117][ T5633] ? _raw_spin_unlock_irq+0x2e/0x50 [ 958.002166][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002210][ T5633] ? __wait_for_common+0x1f3/0x4c0 [ 958.002265][ T5633] ? __pfx_schedule_timeout+0x10/0x10 [ 958.002326][ T5633] ? __pfx___wait_for_common+0x10/0x10 [ 958.002384][ T5633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 958.002453][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002500][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.002553][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002601][ T5633] ? kthread_stop+0x280/0x640 [ 958.002646][ T5633] kill_f2fs_super+0x3f1/0x4a0 [ 958.002704][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 958.002783][ T5633] ? lockdep_hardirqs_on+0x78/0x100 [ 958.002837][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002884][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.002945][ T5633] deactivate_locked_super+0xc1/0x1b0 [ 958.003005][ T5633] deactivate_super+0xe7/0x110 [ 958.003062][ T5633] cleanup_mnt+0x21f/0x450 [ 958.003100][ T5633] task_work_run+0x150/0x240 [ 958.003148][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 958.003195][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.003240][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.003306][ T5633] exit_to_user_mode_loop+0x157/0x670 [ 958.003351][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.003409][ T5633] do_syscall_64+0x666/0x870 [ 958.003471][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.003510][ T5633] RIP: 0033:0x7f4acbf9e097 [ 958.003541][ T5633] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 958.003579][ T5633] RSP: 002b:00007ffc36d486e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 958.003617][ T5633] RAX: 0000000000000000 RBX: 00007f4acc0321ca RCX: 00007f4acbf9e097 [ 958.003642][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc36d487a0 [ 958.003666][ T5633] RBP: 00007ffc36d487a0 R08: 00007ffc36d497a0 R09: 00000000ffffffff [ 958.003692][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc36d49830 [ 958.003717][ T5633] R13: 00007f4acc0321ca R14: 00000000000e9de3 R15: 00007ffc36d49870 [ 958.003769][ T5633] [ 958.544238][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.608488][ T5633] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 958.615724][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 958.615783][ T5633] Tainted: [L]=SOFTLOCKUP [ 958.615798][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.615822][ T5633] Call Trace: [ 958.615835][ T5633] [ 958.615850][ T5633] dump_stack_lvl+0x100/0x190 [ 958.615900][ T5633] f2fs_stop_checkpoint+0x600/0x9b0 [ 958.615945][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.615995][ T5633] ? errseq_set+0xe3/0x150 [ 958.616053][ T5633] ? errseq_set+0xe3/0x150 [ 958.616112][ T5633] f2fs_write_end_io+0xf59/0x1340 [ 958.616166][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 958.616223][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.616284][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 958.616338][ T5633] bio_endio+0x78f/0x8f0 [ 958.616388][ T5633] submit_bio_noacct+0x64c/0x2000 [ 958.616463][ T5633] f2fs_submit_write_bio+0x135/0x340 [ 958.616511][ T5633] __submit_merged_bio+0x331/0x780 [ 958.616569][ T5633] __submit_merged_write_cond+0x3fe/0x510 [ 958.616631][ T5633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 958.616695][ T5633] ? __pfx___might_resched+0x10/0x10 [ 958.616748][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.616808][ T5633] f2fs_write_cache_pages+0x20e9/0x2630 [ 958.616896][ T5633] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 958.616957][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617006][ T5633] ? bpf_ksym_find+0x124/0x1c0 [ 958.617067][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617115][ T5633] ? __lock_acquire+0x4a5/0x2630 [ 958.617218][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617266][ T5633] ? __lock_acquire+0x4a5/0x2630 [ 958.617308][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617414][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617463][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.617528][ T5633] f2fs_write_data_pages+0x799/0x16d0 [ 958.617604][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.617679][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.617729][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.617792][ T5633] do_writepages+0x278/0x600 [ 958.617864][ T5633] ? __pfx_do_writepages+0x10/0x10 [ 958.617925][ T5633] ? do_raw_spin_unlock+0x145/0x1e0 [ 958.617981][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.618028][ T5633] ? _raw_spin_unlock+0x28/0x50 [ 958.618088][ T5633] filemap_writeback+0x22d/0x2e0 [ 958.618159][ T5633] ? __pfx_filemap_writeback+0x10/0x10 [ 958.618223][ T5633] ? check_noncircular+0x97/0x160 [ 958.618332][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.618380][ T5633] ? find_held_lock+0x2b/0x80 [ 958.618439][ T5633] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 958.618501][ T5633] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 958.618558][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.618621][ T5633] f2fs_sync_dirty_inodes+0x469/0x990 [ 958.618705][ T5633] block_operations+0x2a6/0xfc0 [ 958.618760][ T5633] ? __bfs+0x150/0x2a0 [ 958.618833][ T5633] ? __pfx_block_operations+0x10/0x10 [ 958.618892][ T5633] ? check_noncircular+0x97/0x160 [ 958.618995][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619050][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619098][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.619152][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619214][ T5633] f2fs_write_checkpoint+0x582/0x5550 [ 958.619283][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619337][ T5633] ? _raw_spin_unlock_irq+0x2e/0x50 [ 958.619388][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619435][ T5633] ? __wait_for_common+0x1f3/0x4c0 [ 958.619493][ T5633] ? __pfx_schedule_timeout+0x10/0x10 [ 958.619551][ T5633] ? __pfx___wait_for_common+0x10/0x10 [ 958.619612][ T5633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 958.619686][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619734][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.619788][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.619836][ T5633] ? kthread_stop+0x280/0x640 [ 958.619884][ T5633] kill_f2fs_super+0x3f1/0x4a0 [ 958.619943][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 958.620028][ T5633] ? lockdep_hardirqs_on+0x78/0x100 [ 958.620086][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.620136][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.620203][ T5633] deactivate_locked_super+0xc1/0x1b0 [ 958.620265][ T5633] deactivate_super+0xe7/0x110 [ 958.620331][ T5633] cleanup_mnt+0x21f/0x450 [ 958.620374][ T5633] task_work_run+0x150/0x240 [ 958.620425][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 958.620477][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.620525][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.620589][ T5633] exit_to_user_mode_loop+0x157/0x670 [ 958.620636][ T5633] ? rcu_is_watching+0x12/0xc0 [ 958.620699][ T5633] do_syscall_64+0x666/0x870 [ 958.620767][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.620808][ T5633] RIP: 0033:0x7f4acbf9e097 [ 958.620840][ T5633] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 958.620880][ T5633] RSP: 002b:00007ffc36d486e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 958.620918][ T5633] RAX: 0000000000000000 RBX: 00007f4acc0321ca RCX: 00007f4acbf9e097 [ 958.620943][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc36d487a0 [ 958.620968][ T5633] RBP: 00007ffc36d487a0 R08: 00007ffc36d497a0 R09: 00000000ffffffff [ 958.620994][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc36d49830 [ 958.621019][ T5633] R13: 00007f4acc0321ca R14: 00000000000e9de3 R15: 00007ffc36d49870 [ 958.621078][ T5633] [ 958.622642][ T5633] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 959.314773][T13401] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 959.323983][T13401] usb 2-1: config 0 has no interface number 0 [ 959.330363][T13401] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.341252][T13401] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.379551][T13401] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 959.392384][T13401] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 959.401516][T13401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.440386][T13401] usb 2-1: config 0 descriptor?? [ 959.531506][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.564707][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.605989][ T5288] 8021q: adding VLAN 0 to HW filter on device eth19 [ 960.317592][T13401] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.003F/input/input45 [ 960.495708][T13401] uclogic 0003:28BD:0042.003F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 960.581914][T13401] usb 2-1: USB disconnect, device number 48 [ 960.707279][T22327] loop3: detected capacity change from 0 to 128 [ 960.771901][T22327] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 960.964750][T22327] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 960.974129][T22323] fido_id[22323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 961.044181][T22327] ext2 filesystem being mounted at /1007/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.235283][ T5288] 8021q: adding VLAN 0 to HW filter on device eth20 [ 961.250497][ T5633] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 961.644960][ T5635] net_ratelimit: 1 callbacks suppressed [ 961.644990][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.672259][T22186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.685382][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.704549][T22369] input: syz0 as /devices/virtual/input/input46 [ 962.738240][T22371] loop3: detected capacity change from 0 to 64 [ 963.642121][T13401] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 963.725732][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.371909][T13401] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 964.380245][T13401] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 964.389184][T13401] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 964.399515][T13401] usb 6-1: config 220 has no interface number 2 [ 964.405884][T13401] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 964.491363][T13401] usb 6-1: config 220 interface 0 has no altsetting 0 [ 964.498211][T13401] usb 6-1: config 220 interface 76 has no altsetting 0 [ 964.505112][T13401] usb 6-1: config 220 interface 1 has no altsetting 0 [ 964.765033][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.909620][T13401] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 964.918730][T13401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.926755][T13401] usb 6-1: Product: syz [ 964.930932][T13401] usb 6-1: Manufacturer: syz [ 964.935540][T13401] usb 6-1: SerialNumber: syz [ 965.586345][T13401] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 965.593736][T13401] uvcvideo 6-1:220.0: No valid video chain found. [ 965.600245][T13401] usb 6-1: selecting invalid altsetting 0 [ 965.735273][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.786898][T13401] usb 6-1: selecting invalid altsetting 0 [ 965.792715][T13401] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 965.805251][T13632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.805643][T13401] usb 6-1: USB disconnect, device number 22 [ 965.836947][T22186] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 965.944017][ T134] kworker/u8:5: attempt to access beyond end of device [ 965.944017][ T134] loop3: rw=1, sector=161, nr_sectors = 1 limit=64 [ 965.957311][ T134] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 965.966001][ T134] kworker/u8:5: attempt to access beyond end of device [ 965.966001][ T134] loop3: rw=1, sector=162, nr_sectors = 1 limit=64 [ 966.008900][ T134] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 966.017579][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.017579][ T134] loop3: rw=1, sector=163, nr_sectors = 1 limit=64 [ 966.030820][ T134] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 966.067177][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.067177][ T134] loop3: rw=1, sector=167, nr_sectors = 1 limit=64 [ 966.080523][ T134] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 966.089256][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.089256][ T134] loop3: rw=1, sector=169, nr_sectors = 1 limit=64 [ 966.122347][ T134] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 966.134372][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.134372][ T134] loop3: rw=1, sector=171, nr_sectors = 1 limit=64 [ 966.147664][ T134] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 966.226893][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.226893][ T134] loop3: rw=1, sector=172, nr_sectors = 1 limit=64 [ 966.240171][ T134] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 966.248815][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.248815][ T134] loop3: rw=1, sector=173, nr_sectors = 1 limit=64 [ 966.292033][ T134] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 966.312639][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.312639][ T134] loop3: rw=1, sector=174, nr_sectors = 1 limit=64 [ 966.359032][ T134] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 966.367860][ T134] kworker/u8:5: attempt to access beyond end of device [ 966.367860][ T134] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 966.381428][ T134] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 966.624697][T22186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.635648][T22186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.645420][T22186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.706496][T22186] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.732649][T22186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.745890][T22186] usb 2-1: config 0 descriptor?? [ 966.785145][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.851408][T13408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.347030][T22432] netlink: 'syz.5.5840': attribute type 4 has an invalid length. [ 967.387111][T22186] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 967.416970][T22433] netlink: 'syz.5.5840': attribute type 4 has an invalid length. [ 967.604362][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.890314][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.135626][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.637454][T22454] binder: 22453:22454 ioctl c0306201 200000000080 returned -14 [ 968.815220][T13401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.845760][T22459] bridge: RTM_NEWNEIGH with invalid ether address [ 968.873121][T22459] bridge: RTM_NEWNEIGH with invalid ether address [ 968.927854][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.417896][T22475] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5852'. [ 969.784346][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.826352][T13630] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 969.841500][ T5635] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 969.877077][ T5635] usb 2-1: device reset changed ep0 maxpacket size! [ 969.900324][T22186] usb 2-1: USB disconnect, device number 49 [ 969.968868][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.006556][T13630] usb 4-1: Using ep0 maxpacket: 8 [ 970.015418][T13630] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 970.036797][T13630] usb 4-1: config 179 has no interface number 0 [ 970.046221][T13630] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 970.067779][T13630] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 970.099663][T13630] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 970.122248][T13630] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 970.144802][T13630] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 970.149222][T22186] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 970.189435][T13630] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 970.211682][T13630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.243051][T22482] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 970.550357][T22186] usb 2-1: Using ep0 maxpacket: 16 [ 970.596601][T13630] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input47 [ 970.769390][T13415] usb 4-1: USB disconnect, device number 48 [ 970.769395][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 970.769584][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 970.966438][T22186] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.021620][T13630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.158865][T22186] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 971.167030][T22186] usb 2-1: config 9 has no interface number 0 [ 971.173201][T22186] usb 2-1: config 9 interface 57 has no altsetting 0 [ 971.576357][T22524] loop3: detected capacity change from 0 to 1024 [ 971.677261][T22524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 971.689640][T22524] ext4 filesystem being mounted at /1015/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.766609][T22186] usb 2-1: string descriptor 0 read error: -22 [ 971.773013][T22186] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 971.778916][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 971.782080][T22186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.188921][T22186] video4linux radio48: keene_cmd_set failed (-71) [ 973.196655][T22186] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 973.207161][T22186] usb 2-1: USB disconnect, device number 50 [ 973.951866][T22552] Bluetooth: MGMT ver 1.23 [ 974.502090][T22186] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 974.908465][T22186] usb 4-1: Using ep0 maxpacket: 32 [ 975.217446][T22186] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 975.225619][T22186] usb 4-1: config 0 has no interface number 0 [ 975.284109][T22587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.585247][T22592] loop1: detected capacity change from 0 to 512 [ 975.593719][T22592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 975.680140][T22186] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 975.689300][T22186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.697344][T22186] usb 4-1: Product: syz [ 975.701535][T22186] usb 4-1: Manufacturer: syz [ 975.706207][T22186] usb 4-1: SerialNumber: syz [ 975.742296][T22186] usb 4-1: config 0 descriptor?? [ 975.747695][T22592] EXT4-fs (loop1): 1 truncate cleaned up [ 975.755575][T22592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.843364][T22186] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 975.995961][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.113363][T22186] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 976.166072][T22186] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 976.455757][ T5635] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 976.616724][ T5635] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 976.657283][ T5635] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 976.676069][T13630] usb 4-1: USB disconnect, device number 49 [ 976.706401][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 976.711149][ T5635] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.725348][T13630] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 976.740079][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.781642][T13630] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 976.800759][T22602] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 976.835913][T13630] quatech2 4-1:0.51: device disconnected [ 976.843208][ T5635] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 977.945060][ T5904] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 978.644664][ T5904] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 978.652887][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.663790][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.673554][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 978.705477][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 978.714635][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.752748][ T5904] usb 4-1: config 0 descriptor?? [ 979.413426][ T5904] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 979.430878][ T5904] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 979.518882][T13424] usb 2-1: USB disconnect, device number 51 [ 979.761442][ T5635] usb 4-1: USB disconnect, device number 50 [ 981.533415][T22710] loop1: detected capacity change from 0 to 512 [ 981.544413][T22710] EXT4-fs: Ignoring removed nobh option [ 981.593201][T22710] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 981.638362][T22710] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 981.676588][T22710] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.5919: inode has both inline data and extents flags [ 981.740107][T22710] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 981.740751][T22710] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.5919: couldn't read orphan inode 13 (err -117) [ 981.750073][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 981.750113][ C0] EXT4-fs (loop1): initial error at time 1780127102: ext4_orphan_get:1397: inode 13 [ 981.750201][ C0] EXT4-fs (loop1): last error at time 1780127102: ext4_orphan_get:1397: inode 13 [ 981.843281][T22710] loop1: lost filesystem error report for type 5 error -117 [ 981.847190][T22710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.952111][T22710] EXT4-fs (loop1): shut down requested (1) [ 982.073328][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.253976][ T5635] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 982.416324][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.439489][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.462810][ T5635] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 982.485296][ T5635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.499171][ T5635] usb 6-1: config 0 descriptor?? [ 982.943084][ T5635] cp2112 0003:10C4:EA90.0042: item fetching failed at offset 5/7 [ 982.957296][ T5635] cp2112 0003:10C4:EA90.0042: parse failed [ 982.963590][ T5635] cp2112 0003:10C4:EA90.0042: probe with driver cp2112 failed with error -22 [ 983.039541][T22741] loop1: detected capacity change from 0 to 4096 [ 983.048150][T22741] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 983.093777][T22741] ntfs3(loop1): ino=19, mi_enum_attr [ 983.171706][T13415] usb 6-1: USB disconnect, device number 23 [ 983.482437][T22747] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5935'. [ 983.981310][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 983.995783][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 984.008223][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 984.035433][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 984.051048][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 984.066035][T13632] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 984.254209][T13632] usb 4-1: Using ep0 maxpacket: 8 [ 984.295244][T13632] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 984.314262][T13632] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.339528][T13632] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.364525][T13632] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.390725][T13632] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.423405][T13632] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 984.457130][T13632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.767503][T13632] usb 4-1: usb_control_msg returned -32 [ 984.784334][T13632] usbtmc 4-1:16.0: can't read capabilities [ 985.342704][T22787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5947'. [ 985.540284][T22790] netlink: 'syz.1.5948': attribute type 1 has an invalid length. [ 985.549207][T22790] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5948'. [ 985.756861][T22755] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.766064][T22755] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.793565][T22755] bridge_slave_0: entered allmulticast mode [ 985.801883][T22755] bridge_slave_0: entered promiscuous mode [ 985.811409][T22755] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.818663][T22755] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.839483][T22755] bridge_slave_1: entered allmulticast mode [ 985.848075][T22755] bridge_slave_1: entered promiscuous mode [ 985.907581][T22755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.923027][T22755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.005319][T22755] team0: Port device team_slave_0 added [ 986.015686][T22755] team0: Port device team_slave_1 added [ 986.076137][T22755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.083138][T22755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.130062][ T5644] Bluetooth: hci6: command tx timeout [ 986.138137][T22755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.151675][T22755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.158647][T22755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.287462][T22755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.420165][T22755] hsr_slave_0: entered promiscuous mode [ 986.427405][T22755] hsr_slave_1: entered promiscuous mode [ 986.434073][T22755] debugfs: 'hsr0' already exists in 'hsr' [ 986.439834][T22755] Cannot create hsr debugfs directory [ 986.564128][T13424] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 986.729033][T13424] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 986.741840][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5957'. [ 986.746558][T13424] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 986.764105][T13424] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 986.773221][T13424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.802782][T22808] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 986.826043][T13424] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 986.915038][T13415] usb 4-1: USB disconnect, device number 51 [ 987.179208][T13424] usb 2-1: USB disconnect, device number 52 [ 987.744027][T13632] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 987.897033][T13632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.908463][T13632] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 987.918783][T13632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.936735][T13632] usb 6-1: config 0 descriptor?? [ 988.174663][T13632] usbhid 6-1:0.0: can't add hid device: -71 [ 988.184992][T13632] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 988.198540][T22832] netlink: 'syz.1.5965': attribute type 11 has an invalid length. [ 988.205771][ T5644] Bluetooth: hci6: command tx timeout [ 988.220647][T13632] usb 6-1: USB disconnect, device number 24 [ 988.501494][T22838] loop1: detected capacity change from 0 to 64 [ 988.665391][T13632] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 988.835185][T13632] usb 6-1: Using ep0 maxpacket: 16 [ 988.848482][T13632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.865677][T13632] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 988.885218][T13632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.925294][T13632] usb 6-1: config 0 descriptor?? [ 989.141622][T13632] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 989.167500][T13632] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input49 [ 989.547564][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 989.589638][ C0] powermate: config urb returned -71 [ 989.600308][ C0] powermate: config urb returned -71 [ 989.605993][ C0] powermate: config urb returned -71 [ 989.611484][ C0] powermate: config urb returned -71 [ 989.620979][T13632] usb 6-1: USB disconnect, device number 25 [ 989.627039][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 990.136179][T22859] loop3: detected capacity change from 0 to 1024 [ 990.179738][T22859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.284258][ T5644] Bluetooth: hci6: command tx timeout [ 990.477401][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.134203][T22838] [ 991.136580][T22838] ============================================ [ 991.142728][T22838] WARNING: possible recursive locking detected [ 991.148873][T22838] syzkaller #0 Tainted: G L [ 991.154845][T22838] -------------------------------------------- [ 991.160989][T22838] syz.1.5968/22838 is trying to acquire lock: [ 991.167044][T22838] ffff8880386980a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 991.176579][T22838] [ 991.176579][T22838] but task is already holding lock: [ 991.183937][T22838] ffff8880386980a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 991.193513][T22838] [ 991.193513][T22838] other info that might help us debug this: [ 991.201574][T22838] Possible unsafe locking scenario: [ 991.201574][T22838] [ 991.209056][T22838] CPU0 [ 991.212345][T22838] ---- [ 991.215633][T22838] lock(&tree->tree_lock#2/1); [ 991.220532][T22838] lock(&tree->tree_lock#2/1); [ 991.225413][T22838] [ 991.225413][T22838] *** DEADLOCK *** [ 991.225413][T22838] [ 991.233564][T22838] May be due to missing lock nesting notation [ 991.233564][T22838] [ 991.241877][T22838] 5 locks held by syz.1.5968/22838: [ 991.247080][T22838] #0: ffff88802e6ca410 (sb_writers#23){.+.+}-{0:0}, at: vfs_truncate+0x336/0x720 [ 991.256402][T22838] #1: ffff888077f0ae50 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: do_truncate+0x14e/0x240 [ 991.267018][T22838] #2: ffff888077f0acb0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 991.277721][T22838] #3: ffff8880386980a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 991.287770][T22838] #4: ffff888077f0c5b0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 991.298999][T22838] [ 991.298999][T22838] stack backtrace: [ 991.304891][T22838] CPU: 1 UID: 0 PID: 22838 Comm: syz.1.5968 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.304943][T22838] Tainted: [L]=SOFTLOCKUP [ 991.304957][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 991.304979][T22838] Call Trace: [ 991.304991][T22838] [ 991.305006][T22838] dump_stack_lvl+0x100/0x190 [ 991.305047][T22838] print_deadlock_bug.cold+0xbd/0xca [ 991.305107][T22838] __lock_acquire+0x12bb/0x2630 [ 991.305152][T22838] ? hfs_bmap_reserve+0x2ab/0x3a0 [ 991.305202][T22838] ? __hfs_ext_write_extent+0x3c4/0x510 [ 991.305262][T22838] lock_acquire+0x1b1/0x370 [ 991.305300][T22838] ? hfs_find_init+0x273/0x330 [ 991.305348][T22838] ? __pfx___might_resched+0x10/0x10 [ 991.305394][T22838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.305436][T22838] __mutex_lock+0x1a4/0x1b10 [ 991.305492][T22838] ? hfs_find_init+0x273/0x330 [ 991.305533][T22838] ? hfs_find_init+0x273/0x330 [ 991.305579][T22838] ? __pfx___mutex_lock+0x10/0x10 [ 991.305638][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.305684][T22838] ? __kasan_kmalloc+0xaa/0xb0 [ 991.305733][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.305776][T22838] ? __kmalloc_noprof+0x320/0x850 [ 991.305825][T22838] ? hfs_find_init+0x273/0x330 [ 991.305865][T22838] hfs_find_init+0x273/0x330 [ 991.305909][T22838] hfs_ext_read_extent+0x19d/0x9d0 [ 991.305965][T22838] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 991.306021][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.306077][T22838] hfs_extend_file+0x4ff/0xcf0 [ 991.306134][T22838] ? __pfx_hfs_extend_file+0x10/0x10 [ 991.306189][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.306240][T22838] hfs_bmap_reserve+0x2ab/0x3a0 [ 991.306296][T22838] __hfs_ext_write_extent+0x3c4/0x510 [ 991.306355][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.306402][T22838] hfs_ext_read_extent+0x805/0x9d0 [ 991.306459][T22838] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 991.306527][T22838] hfs_extend_file+0x4ff/0xcf0 [ 991.306584][T22838] ? __pfx_hfs_extend_file+0x10/0x10 [ 991.306647][T22838] hfs_get_block+0x17f/0x830 [ 991.306705][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.306761][T22838] __block_write_begin_int+0x57a/0x19c0 [ 991.306826][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.306884][T22838] ? __pfx___block_write_begin_int+0x10/0x10 [ 991.306942][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.306992][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.307047][T22838] block_write_begin+0x9d/0x1d0 [ 991.307102][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.307148][T22838] cont_write_begin+0x573/0xa10 [ 991.307205][T22838] ? __mark_inode_dirty+0x55c/0x1720 [ 991.307259][T22838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 991.307308][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.307360][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.307415][T22838] ? __pfx_cont_write_begin+0x10/0x10 [ 991.307472][T22838] ? block_commit_write+0x1f6/0x2d0 [ 991.307532][T22838] hfs_write_begin+0x64/0x120 [ 991.307563][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.307621][T22838] cont_write_begin+0x2b9/0xa10 [ 991.307685][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.307741][T22838] ? __pfx_cont_write_begin+0x10/0x10 [ 991.307807][T22838] hfs_write_begin+0x64/0x120 [ 991.307838][T22838] ? __pfx_hfs_get_block+0x10/0x10 [ 991.307897][T22838] hfs_file_truncate+0xd2c/0x10f0 [ 991.307972][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.308017][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.308062][T22838] ? __pfx___up_read+0x10/0x10 [ 991.308108][T22838] ? unmap_mapping_pages+0x102/0x170 [ 991.308165][T22838] ? __pfx_hfs_file_truncate+0x10/0x10 [ 991.308232][T22838] ? setattr_prepare+0x1d4/0xa40 [ 991.308290][T22838] hfs_inode_setattr+0x499/0x5e0 [ 991.308355][T22838] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 991.308413][T22838] notify_change+0xb25/0x1330 [ 991.308478][T22838] do_truncate+0x1df/0x240 [ 991.308534][T22838] ? __pfx_do_truncate+0x10/0x10 [ 991.308600][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.308643][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.308686][T22838] ? mnt_get_write_access+0x1e9/0x2f0 [ 991.308739][T22838] vfs_truncate+0x538/0x720 [ 991.308796][T22838] ? __pfx_vfs_truncate+0x10/0x10 [ 991.308854][T22838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.308902][T22838] ksys_truncate+0xee/0x190 [ 991.308957][T22838] ? __pfx_ksys_truncate+0x10/0x10 [ 991.309021][T22838] __x64_sys_truncate+0x54/0x80 [ 991.309078][T22838] do_syscall_64+0x115/0x870 [ 991.309134][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.309172][T22838] RIP: 0033:0x7f4fffb9ce59 [ 991.309204][T22838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.309239][T22838] RSP: 002b:00007f50009fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 991.309273][T22838] RAX: ffffffffffffffda RBX: 00007f4fffe15fa0 RCX: 00007f4fffb9ce59 [ 991.309297][T22838] RDX: 0000000000000000 RSI: 0000000002fffffd RDI: 0000200000000940 [ 991.309325][T22838] RBP: 00007f4fffc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 991.309347][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.309370][T22838] R13: 00007f4fffe16038 R14: 00007f4fffe15fa0 R15: 00007ffc729ec7e8 [ 991.309407][T22838] [ 992.364236][ T5644] Bluetooth: hci6: command tx timeout [ 992.402350][ T1309] ieee802154 phy1 wpan1: encryption failed: -22