last executing test programs: 1m26.54388928s ago: executing program 2 (id=10): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000200)={[{@gid}, {@volume}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@gid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@lastblock={'lastblock', 0x3d, 0xfffffffffffffff7}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m26.388265287s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setresuid(0x0, 0xee00, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) 1m25.858701392s ago: executing program 2 (id=13): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1m25.67323413s ago: executing program 1 (id=14): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x10, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) accept4(r0, 0x0, 0x0, 0x80800) 1m25.605737743s ago: executing program 2 (id=15): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m24.858683697s ago: executing program 2 (id=22): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 1m24.703478785s ago: executing program 1 (id=24): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m24.256896416s ago: executing program 32 (id=24): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m24.046603635s ago: executing program 2 (id=28): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2ccc6e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1}) 1m22.535456165s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m21.978235401s ago: executing program 33 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.543297336s ago: executing program 5 (id=478): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x80049367, 0x0) 3.287001178s ago: executing program 5 (id=479): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.199497222s ago: executing program 0 (id=480): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="140b8c", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) 2.657771527s ago: executing program 0 (id=483): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) rmdir(0x0) 2.443441837s ago: executing program 4 (id=484): socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.369184551s ago: executing program 3 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.320441043s ago: executing program 4 (id=486): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x1, @pix={0x0, 0x0, 0x31364d4e, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x4, 0x1}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000480)=@sco={0x1f, @none}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x79a}}}, 0x0) 2.233609117s ago: executing program 5 (id=487): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080)={[{@usrjquota}, {@debug}, {@mblk_io_submit}, {@usrquota}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') llistxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 2.145960511s ago: executing program 4 (id=488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.032712916s ago: executing program 3 (id=489): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) 1.855475744s ago: executing program 4 (id=490): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) 1.818079876s ago: executing program 5 (id=491): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) 1.673833853s ago: executing program 3 (id=492): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) capset(&(0x7f0000000040)={0x19980330}, 0x0) 1.506126281s ago: executing program 0 (id=493): r0 = socket(0x10, 0x3, 0x0) unshare(0x400) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 1.312954639s ago: executing program 0 (id=494): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) dup3(r0, r1, 0x0) 1.034155123s ago: executing program 0 (id=495): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x2a, &(0x7f0000000ac0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300, 0x0, 0xb, 0x1, 0x0, @rand_addr=0x64010100, @local}, @echo={0x8, 0x0, 0x0, 0x7, 0x8}}}}}, 0x0) 1.033820683s ago: executing program 5 (id=496): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0xffff, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 886.433159ms ago: executing program 0 (id=497): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0473a, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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") r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 880.77164ms ago: executing program 4 (id=498): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50, 0x40}}], 0x1, 0x4054) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x8, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0xc000000, 0x2, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x0, 0x6, 0x5, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0xfffffffe, 0xe, 0x3, 0x8000, 0x0, 0xfff, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x80000001, 0x400, 0x2, 0x201, 0x1, 0x297, 0x5, 0x0, 0x6, 0x204, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0xe6, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x17, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x6, 0x5, 0xe8a, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x2, 0x11, 0x7, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x7, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0xe7c, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xfffffffe, 0x3ff, 0x3, 0x4, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0xa, 0x88, 0x0, 0x4000000, 0x3, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x7, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 549.908195ms ago: executing program 3 (id=499): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffff00", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080017000100000008"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 440.01014ms ago: executing program 4 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000009f0000009f00000007000000050000000000000b040000000600000000000012010000000d0000280100000e050000000000000007"], 0x0, 0xbf, 0x0, 0x1, 0x1, 0x10000}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000280)) 243.659109ms ago: executing program 5 (id=501): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x1, 0xfffffffd, 0xfff}) mount(0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1261, 0x0) 232.4281ms ago: executing program 3 (id=502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x400}}}}}}}, 0x0) 0s ago: executing program 3 (id=503): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r1, 0x1}}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2000, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x80}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x6, 0xfa00, {0x0, r1, r0}}, 0x18) kernel console output (not intermixed with test programs): from eth3 [ 81.846297][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.862755][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.919867][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.947773][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.962828][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.970389][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.005682][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.012914][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.023614][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.030753][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.086914][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.099041][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.131675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.138840][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.207725][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.276046][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.330550][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.337793][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.356744][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.381456][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.388670][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.479099][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.524734][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.532000][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.545471][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.552728][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.703474][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.745492][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.888836][ T5789] Bluetooth: hci0: command tx timeout [ 82.895087][ T5778] veth0_vlan: entered promiscuous mode [ 82.912941][ T5776] veth0_vlan: entered promiscuous mode [ 82.969395][ T5778] veth1_vlan: entered promiscuous mode [ 83.004161][ T5776] veth1_vlan: entered promiscuous mode [ 83.049374][ T5789] Bluetooth: hci2: command tx timeout [ 83.049434][ T5783] Bluetooth: hci3: command tx timeout [ 83.054822][ T5789] Bluetooth: hci1: command tx timeout [ 83.082862][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.140322][ T5776] veth0_macvtap: entered promiscuous mode [ 83.154971][ T5778] veth0_macvtap: entered promiscuous mode [ 83.180601][ T5778] veth1_macvtap: entered promiscuous mode [ 83.195426][ T5776] veth1_macvtap: entered promiscuous mode [ 83.226626][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.251017][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.264758][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.278164][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.295503][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.304789][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.315524][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.329441][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.352632][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361995][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.373109][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.382622][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395205][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.409326][ T5781] veth0_vlan: entered promiscuous mode [ 83.422709][ T5781] veth1_vlan: entered promiscuous mode [ 83.442300][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.456738][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.466157][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.475157][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.646928][ T5781] veth0_macvtap: entered promiscuous mode [ 83.661328][ T5781] veth1_macvtap: entered promiscuous mode [ 83.674510][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.683813][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.737100][ T5788] veth0_vlan: entered promiscuous mode [ 83.762278][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.775703][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.786002][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.799765][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.811794][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.826355][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.834742][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.855279][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.866088][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.876689][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.887452][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.899101][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.911121][ T5788] veth1_vlan: entered promiscuous mode [ 83.964688][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.974699][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.984060][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993216][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.004318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.027415][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.027956][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.035271][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.116316][ T5788] veth0_macvtap: entered promiscuous mode [ 84.139202][ T5788] veth1_macvtap: entered promiscuous mode [ 84.294569][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.330323][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.352788][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.365504][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.375870][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.386863][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.399266][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.418508][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.426130][ T5844] bridge_slave_0: left allmulticast mode [ 84.426374][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.435385][ T5844] bridge_slave_0: left promiscuous mode [ 84.456802][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.485417][ T5844] bridge_slave_1: left allmulticast mode [ 84.503613][ T5844] bridge_slave_1: left promiscuous mode [ 84.511059][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.527113][ T5844] bond0: (slave bond_slave_0): Releasing backup interface [ 84.552205][ T5844] bond0: (slave bond_slave_1): Releasing backup interface [ 84.629662][ T5844] team0: Port device team_slave_0 removed [ 84.660486][ T5844] team0: Port device team_slave_1 removed [ 84.674674][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.684230][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.700330][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.714443][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.761611][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.772833][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.803880][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.816561][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.831306][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.897920][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.906725][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.967271][ T5789] Bluetooth: hci0: command tx timeout [ 84.982425][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.016690][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040938][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.071039][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.103063][ T5857] UBIFS error (pid: 5857): cannot open "./file0", error -22 [ 85.127779][ T5789] Bluetooth: hci1: command tx timeout [ 85.128330][ T51] Bluetooth: hci2: command tx timeout [ 85.147222][ T5783] Bluetooth: hci3: command tx timeout [ 85.314897][ T5863] syz.2.10[5863]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.325280][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.334796][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.395981][ T5863] loop2: detected capacity change from 0 to 2048 [ 85.436828][ T5863] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 85.494245][ T5863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.519345][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.555110][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.595468][ T5865] loop1: detected capacity change from 0 to 1024 [ 85.635238][ T5865] EXT4-fs: Ignoring removed bh option [ 85.684005][ T5865] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 85.781079][ T5865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.109850][ T5781] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 86.161522][ T5781] EXT4-fs (loop1): Remounting filesystem read-only [ 86.461298][ T5883] vlan0: entered promiscuous mode [ 86.482190][ T5882] vlan0: left promiscuous mode [ 86.715704][ T5889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 86.722564][ T5889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.755113][ T5891] vhci_hcd: xmit failed -107 [ 86.762186][ T5889] vhci_hcd vhci_hcd.0: Device attached [ 86.784520][ T12] vhci_hcd: stop threads [ 86.801133][ T12] vhci_hcd: release socket [ 86.814548][ T12] vhci_hcd: disconnect device [ 86.880910][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.969136][ T2985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.043650][ T5899] loop2: detected capacity change from 0 to 1024 [ 87.064661][ T51] Bluetooth: hci0: command tx timeout [ 87.117544][ T5899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.207552][ T51] Bluetooth: hci3: command tx timeout [ 87.207990][ T5783] Bluetooth: hci1: command tx timeout [ 87.245386][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.721283][ T2985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.755719][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.790206][ T28] audit: type=1326 audit(1790065450.078:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.0.26" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aecf9e159 code=0x0 [ 87.821890][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.859037][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.884736][ T2985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.904191][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.925975][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.944444][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 87.956198][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 88.006631][ T2985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.024151][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 88.045158][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 88.072457][ T5778] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 88.657813][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.667282][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.678176][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.697955][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.713366][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.726015][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.762941][ T5918] loop0: detected capacity change from 0 to 8 [ 88.770658][ T5918] squashfs: Unknown parameter './file1' [ 89.079123][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.173851][ T5778] syz-executor (5778) used greatest stack depth: 20936 bytes left [ 89.211088][ T5924] Zero length message leads to an empty skb [ 89.960719][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 90.125989][ T5939] loop3: detected capacity change from 0 to 4096 [ 90.306901][ T5939] ntfs3: loop3: ino=9, mi_enum_attr [ 90.354065][ T5939] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 90.450920][ T5939] ntfs3: loop3: ino=9, mi_enum_attr [ 90.461144][ T5939] ntfs3: loop3: ino=b, mi_enum_attr [ 90.466578][ T5939] ntfs3: loop3: Failed to load $Extend (-22). [ 90.482673][ T5939] ntfs3: loop3: Failed to initialize $Extend. [ 90.658024][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.725674][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.736567][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.745904][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.754828][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.764252][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.772589][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.809928][ T51] Bluetooth: hci1: command tx timeout [ 90.976903][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.005438][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.036325][ T5914] bridge_slave_0: entered allmulticast mode [ 91.061114][ T5914] bridge_slave_0: entered promiscuous mode [ 91.107762][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.114950][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.168385][ T5914] bridge_slave_1: entered allmulticast mode [ 91.176579][ T5914] bridge_slave_1: entered promiscuous mode [ 91.334964][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.436912][ T2985] hsr_slave_0: left promiscuous mode [ 91.454940][ T2985] hsr_slave_1: left promiscuous mode [ 91.473355][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.482242][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.492412][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.500379][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.511261][ T2985] bridge_slave_1: left allmulticast mode [ 91.516971][ T2985] bridge_slave_1: left promiscuous mode [ 91.544078][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.581226][ T2985] bridge_slave_0: left allmulticast mode [ 91.597364][ T2985] bridge_slave_0: left promiscuous mode [ 91.608509][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.681824][ T2985] veth1_macvtap: left promiscuous mode [ 91.696368][ T2985] veth0_macvtap: left promiscuous mode [ 91.706965][ T2985] veth1_vlan: left promiscuous mode [ 91.714653][ T2985] veth0_vlan: left promiscuous mode [ 92.028295][ T1207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.170813][ T968] cfg80211: failed to load regulatory.db [ 92.258024][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.269777][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.281173][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.294700][ T1207] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.306333][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.331759][ T1207] usb 4-1: config 0 descriptor?? [ 92.512799][ T2985] team0 (unregistering): Port device team_slave_1 removed [ 92.563570][ T2985] team0 (unregistering): Port device team_slave_0 removed [ 92.616632][ T2985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.664224][ T2985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.815649][ T51] Bluetooth: hci2: command tx timeout [ 92.826743][ T1207] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 92.867025][ T1207] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.888028][ T51] Bluetooth: hci1: command tx timeout [ 92.933837][ T1207] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.176945][ T5817] usb 4-1: USB disconnect, device number 2 [ 93.354529][ T2985] bond0 (unregistering): Released all slaves [ 93.546548][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.659601][ T5914] team0: Port device team_slave_0 added [ 93.698849][ T5914] team0: Port device team_slave_1 added [ 93.916214][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.925471][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.986119][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.011840][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.033768][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.071180][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.261841][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 94.293405][ T5914] hsr_slave_0: entered promiscuous mode [ 94.306055][ T5914] hsr_slave_1: entered promiscuous mode [ 94.313007][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.327654][ T5914] Cannot create hsr debugfs directory [ 94.397496][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.607366][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 94.615527][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.637387][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.656014][ T5817] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.673442][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.684129][ T5817] usb 1-1: Product: syz [ 94.695227][ T5817] usb 1-1: Manufacturer: syz [ 94.707648][ T5817] usb 1-1: SerialNumber: syz [ 94.755765][ T2985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.806120][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.818628][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.846556][ T5957] bridge_slave_0: entered allmulticast mode [ 94.864623][ T5957] bridge_slave_0: entered promiscuous mode [ 94.893632][ T51] Bluetooth: hci2: command tx timeout [ 94.933460][ T2985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.942091][ T5817] usb 1-1: 0:2 : does not exist [ 94.967537][ T51] Bluetooth: hci1: command tx timeout [ 94.976176][ T5817] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 94.988584][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.996615][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.017611][ T5957] bridge_slave_1: entered allmulticast mode [ 95.025167][ T5957] bridge_slave_1: entered promiscuous mode [ 95.037752][ T5817] usb 1-1: USB disconnect, device number 2 [ 95.209738][ T6008] loop3: detected capacity change from 0 to 32768 [ 95.221027][ T2985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.280247][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.299215][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.300748][ T6008] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 95.354892][ T2985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.418007][ T6008] XFS (loop3): Ending clean mount [ 95.436729][ T6008] XFS (loop3): Quotacheck needed: Please wait. [ 95.505170][ T5957] team0: Port device team_slave_0 added [ 95.525160][ T5957] team0: Port device team_slave_1 added [ 95.571494][ T6008] XFS (loop3): Quotacheck: Done. [ 95.720398][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.737419][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.772899][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.843433][ T5788] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 95.903229][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.921626][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.949508][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.121673][ T5914] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.181240][ T6037] loop0: detected capacity change from 0 to 256 [ 96.239576][ T5914] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.322164][ T5914] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.456159][ T5957] hsr_slave_0: entered promiscuous mode [ 96.493520][ T5957] hsr_slave_1: entered promiscuous mode [ 96.508973][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.516879][ T5957] Cannot create hsr debugfs directory [ 96.529222][ T5914] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.726175][ T6047] loop0: detected capacity change from 0 to 16 [ 96.770320][ T6047] erofs: (device loop0): mounted with root inode @ nid 36. [ 96.782495][ T6049] loop3: detected capacity change from 0 to 512 [ 96.816053][ T6049] ======================================================= [ 96.816053][ T6049] WARNING: The mand mount option has been deprecated and [ 96.816053][ T6049] and is ignored by this kernel. Remove the mand [ 96.816053][ T6049] option from the mount to silence this warning. [ 96.816053][ T6049] ======================================================= [ 96.976265][ T51] Bluetooth: hci2: command tx timeout [ 97.056178][ T51] Bluetooth: hci1: command tx timeout [ 97.434960][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.620973][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.660879][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.668260][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.786471][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.793773][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.966867][ T5957] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.982765][ T5957] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.085632][ T5957] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.308295][ T5957] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.704680][ T2985] hsr_slave_0: left promiscuous mode [ 98.719070][ T2985] hsr_slave_1: left promiscuous mode [ 98.779130][ T2985] veth1_macvtap: left promiscuous mode [ 98.786878][ T2985] veth0_macvtap: left promiscuous mode [ 98.794243][ T2985] veth1_vlan: left promiscuous mode [ 98.800010][ T2985] veth0_vlan: left promiscuous mode [ 99.063744][ T51] Bluetooth: hci2: command tx timeout [ 99.822115][ T6091] random: crng reseeded on system resumption [ 99.860886][ T6091] FAULT_INJECTION: forcing a failure. [ 99.860886][ T6091] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.880384][ T6091] CPU: 1 PID: 6091 Comm: syz.3.65 Not tainted syzkaller #0 [ 99.887674][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.897778][ T6091] Call Trace: [ 99.901107][ T6091] [ 99.904042][ T6091] dump_stack_lvl+0x18c/0x250 [ 99.908743][ T6091] ? show_regs_print_info+0x20/0x20 [ 99.913945][ T6091] ? load_image+0x420/0x420 [ 99.918453][ T6091] ? __lock_acquire+0x7d80/0x7d80 [ 99.923481][ T6091] should_fail_ex+0x394/0x4c0 [ 99.928169][ T6091] prepare_alloc_pages+0x1e1/0x5b0 [ 99.933303][ T6091] __alloc_pages+0x134/0x460 [ 99.937910][ T6091] ? zone_statistics+0x170/0x170 [ 99.942892][ T6091] ? alloc_pages+0x4e1/0x740 [ 99.947528][ T6091] get_zeroed_page+0x17/0x40 [ 99.952121][ T6091] get_image_page+0x41/0x310 [ 99.956713][ T6091] alloc_rtree_node+0xfb/0x180 [ 99.961575][ T6091] memory_bm_create+0x50b/0x990 [ 99.966433][ T6091] create_basic_memory_bitmaps+0x99/0x380 [ 99.972151][ T6091] snapshot_open+0x1b0/0x280 [ 99.976744][ T6091] ? snapshot_compat_ioctl+0x90/0x90 [ 99.982035][ T6091] misc_open+0x326/0x3a0 [ 99.986286][ T6091] chrdev_open+0x58c/0x600 [ 99.990713][ T6091] ? cd_forget+0x160/0x160 [ 99.995152][ T6091] ? fsnotify_perm+0x3ed/0x5e0 [ 99.999934][ T6091] do_dentry_open+0x880/0x14b0 [ 100.004714][ T6091] ? cd_forget+0x160/0x160 [ 100.009148][ T6091] path_openat+0x284f/0x3270 [ 100.013772][ T6091] ? do_sys_openat2+0xda/0x1d0 [ 100.019207][ T6091] ? __x64_sys_openat+0x139/0x160 [ 100.024279][ T6091] ? verify_lock_unused+0x140/0x140 [ 100.029824][ T6091] ? do_filp_open+0x430/0x430 [ 100.034667][ T6091] do_filp_open+0x1f2/0x430 [ 100.039209][ T6091] ? vfs_tmpfile+0x620/0x620 [ 100.043834][ T6091] ? _raw_spin_unlock+0x28/0x40 [ 100.048704][ T6091] ? alloc_fd+0x590/0x640 [ 100.053058][ T6091] do_sys_openat2+0x134/0x1d0 [ 100.057756][ T6091] ? do_sys_open+0xe0/0xe0 [ 100.062205][ T6091] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 100.068298][ T6091] ? lock_chain_count+0x20/0x20 [ 100.073271][ T6091] __x64_sys_openat+0x139/0x160 [ 100.078149][ T6091] do_syscall_64+0x55/0xb0 [ 100.082583][ T6091] ? clear_bhb_loop+0x40/0x90 [ 100.087291][ T6091] ? clear_bhb_loop+0x40/0x90 [ 100.092004][ T6091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.097915][ T6091] RIP: 0033:0x7f7db979e159 [ 100.102349][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.122054][ T6091] RSP: 002b:00007f7dba5c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.130481][ T6091] RAX: ffffffffffffffda RBX: 00007f7db9a25fa0 RCX: 00007f7db979e159 [ 100.138550][ T6091] RDX: 0000000000000081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 100.146542][ T6091] RBP: 00007f7db983506b R08: 0000000000000000 R09: 0000000000000000 [ 100.154531][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.162514][ T6091] R13: 00007f7db9a26038 R14: 00007f7db9a25fa0 R15: 00007ffedc8ae0a8 [ 100.170509][ T6091] [ 100.331629][ T6093] loop3: detected capacity change from 0 to 256 [ 100.339396][ T6093] exfat: Deprecated parameter 'utf8' [ 100.406083][ T6093] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 100.978791][ T2985] bond0 (unregistering): Released all slaves [ 101.086435][ T6086] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.217311][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.380361][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.395177][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.432868][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.455839][ T5817] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 101.485437][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.496133][ T5817] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 101.525741][ T5817] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.547410][ T5817] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 101.556783][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.568956][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.576169][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.593167][ T6098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.607097][ T6098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.650371][ T5817] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 101.680414][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.687768][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.693004][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 101.736592][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 101.784011][ T5817] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 101.826768][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 101.879820][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 101.916900][ T5817] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 102.297712][ T5817] usb 4-1: USB disconnect, device number 3 [ 102.375359][ T5817] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 102.465339][ T5817] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 102.499122][ T5817] keyspan 4-1:1.0: device disconnected [ 102.580366][ T5914] veth0_vlan: entered promiscuous mode [ 102.621857][ T5914] veth1_vlan: entered promiscuous mode [ 102.716083][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.779934][ T5914] veth0_macvtap: entered promiscuous mode [ 102.802747][ T5914] veth1_macvtap: entered promiscuous mode [ 102.870005][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.892743][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.927368][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.950981][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.978961][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.014350][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.054512][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.067857][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.097223][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.119219][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.138940][ T5914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.147856][ T5914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.156899][ T5914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.167015][ T5914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.227614][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.404679][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.440286][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.443637][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.458605][ T5817] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 103.512833][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.531242][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.547034][ T5957] veth0_vlan: entered promiscuous mode [ 103.564851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.594114][ T5957] veth1_vlan: entered promiscuous mode [ 103.601056][ T5817] as10x_usb: device has been detected [ 103.625409][ T5817] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 103.649436][ T6155] netlink: 'syz.3.74': attribute type 4 has an invalid length. [ 103.709515][ T5817] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 103.756006][ T6156] netlink: 'syz.3.74': attribute type 4 has an invalid length. [ 103.846707][ T5817] as10x_usb: error during firmware upload part1 [ 103.849075][ T5957] veth0_macvtap: entered promiscuous mode [ 103.880059][ T5817] Registered device Abilis Systems DVB-Titan [ 103.897956][ T5957] veth1_macvtap: entered promiscuous mode [ 103.973662][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.999750][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.028655][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.028720][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.028740][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.028754][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.030867][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.150538][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.178744][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.193166][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.204002][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.214701][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.227473][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.253160][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.281350][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.314223][ T5957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.344343][ T5957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.363528][ T5957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.377526][ T5957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.419619][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.438198][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.474871][ T5837] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.504054][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.558925][ T5837] usb 5-1: config 0 descriptor?? [ 104.638564][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.658898][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.732669][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.748649][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.004791][ T5837] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 105.030983][ T5837] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 105.058170][ T5837] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input6 [ 105.124245][ T5837] cm6533_jd 0003:0D8C:0022.0002: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 105.437931][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.477987][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.543749][ T5818] usb 5-1: USB disconnect, device number 2 [ 105.622165][ T5837] usb 1-1: USB disconnect, device number 3 [ 105.652975][ T6197] loop5: detected capacity change from 0 to 128 [ 105.705683][ T5837] Unregistered device Abilis Systems DVB-Titan [ 105.724118][ T5837] as10x_usb: device has been disconnected [ 106.338084][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.84'. [ 106.807835][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.007324][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 107.020403][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.038895][ T27] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 107.057958][ T27] usb 1-1: config 10 has no interface number 0 [ 107.071929][ T27] usb 1-1: config 10 interface 91 has no altsetting 0 [ 107.101939][ T27] usb 1-1: string descriptor 0 read error: -22 [ 107.122854][ T27] usb 1-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 107.137472][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.176572][ T27] usb 1-1: Found UVC 0.00 device (097b:61f6) [ 107.195079][ T27] usb 1-1: No valid video chain found. [ 107.418307][ T27] usb 1-1: USB disconnect, device number 4 [ 108.069508][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.297552][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 108.328572][ T27] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 108.357074][ T27] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.387234][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.407030][ T27] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 108.432717][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.486077][ T27] usb 5-1: config 0 descriptor?? [ 108.987879][ T27] input: HID 04e7:0030 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04E7:0030.0003/input/input7 [ 109.128714][ T27] elo 0003:04E7:0030.0003: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 109.130347][ T6289] loop5: detected capacity change from 0 to 2048 [ 109.245094][ T6289] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 109.289060][ T6289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.799535][ T6284] loop0: detected capacity change from 0 to 32768 [ 109.866560][ T6284] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.100 (6284) [ 109.887551][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.936075][ T5817] usb 5-1: USB disconnect, device number 3 [ 109.988577][ T6284] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.022777][ T6284] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.042860][ T6284] BTRFS info (device loop0): setting nodatacow, compression disabled [ 110.063408][ T6284] BTRFS info (device loop0): force clearing of disk cache [ 110.083476][ T6284] BTRFS info (device loop0): turning off barriers [ 110.109900][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 110.143934][ T6284] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.161235][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.181947][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.198588][ T6284] BTRFS info (device loop0): use lzo compression, level 0 [ 110.205828][ T6284] BTRFS info (device loop0): disabling free space tree [ 110.229873][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.244870][ T6284] BTRFS info (device loop0): enabling ssd optimizations [ 110.252412][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.268395][ T27] usb 4-1: Product: syz [ 110.272826][ T6284] BTRFS info (device loop0): using spread ssd allocation scheme [ 110.280823][ T27] usb 4-1: Manufacturer: syz [ 110.286300][ T27] usb 4-1: SerialNumber: syz [ 110.295922][ T6284] BTRFS info (device loop0): not using ssd optimizations [ 110.307258][ T6284] BTRFS info (device loop0): not using spread ssd allocation scheme [ 110.533267][ T6284] BTRFS info (device loop0): rebuilding free space tree [ 110.579018][ T27] usb 4-1: 0:2 : does not exist [ 110.621652][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 110.683694][ T6284] BTRFS info (device loop0): disabling free space tree [ 110.697377][ T6284] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.735635][ T27] usb 4-1: USB disconnect, device number 4 [ 110.759998][ T6284] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.805866][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.845657][ T6284] BTRFS info (device loop0): checking UUID tree [ 111.037807][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.126519][ T6335] loop5: detected capacity change from 0 to 8192 [ 111.257594][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 111.284666][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.308396][ T5817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.338134][ T5817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 111.356933][ T5817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 111.437791][ T5817] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.485142][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.520203][ T5817] hub 5-1:1.0: bad descriptor, ignoring hub [ 111.541014][ T5817] hub: probe of 5-1:1.0 failed with error -5 [ 111.562146][ T5817] cdc_wdm 5-1:1.0: skipping garbage [ 111.588504][ T5817] cdc_wdm 5-1:1.0: skipping garbage [ 111.627727][ T5817] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 111.633716][ T5817] cdc_wdm 5-1:1.0: Unknown control protocol [ 111.678060][ T5776] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.262592][ T6353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927064404 (2927064404 ns) > initial count (2702739069 ns). Using initial count to start timer. [ 112.735732][ T6345] loop3: detected capacity change from 0 to 40427 [ 112.797435][ T6345] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 112.827371][ T6345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.959249][ T6345] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.177673][ T6345] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.185105][ T6345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.674816][ T6359] loop0: detected capacity change from 0 to 40427 [ 113.708186][ T6359] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 113.715118][ T6359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.750969][ T5788] syz-executor: attempt to access beyond end of device [ 113.750969][ T5788] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 113.763382][ T6359] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 113.785540][ T27] usb 5-1: USB disconnect, device number 4 [ 113.805714][ T6359] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 113.837704][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 113.884298][ T6359] F2FS-fs (loop0): Image doesn't support compression [ 113.958169][ T6359] F2FS-fs (loop0): invalid crc value [ 113.991140][ T6359] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.183080][ T6359] F2FS-fs (loop0): Start checkpoint disabled! [ 114.247951][ T6359] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.255082][ T6359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 114.846764][ T59] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xc6b/0x1a70 [ 114.890199][ T59] kworker/u4:4: attempt to access beyond end of device [ 114.890199][ T59] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 114.953258][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 114.970823][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 114.997899][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 115.154982][ T6409] Bluetooth: MGMT ver 1.22 [ 115.265091][ T6413] loop5: detected capacity change from 0 to 512 [ 115.337419][ T6413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.369658][ T6413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.455201][ T6413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.562526][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 115.572053][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 115.599780][ T6413] EXT4-fs (loop5): 1 truncate cleaned up [ 115.609023][ T6413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.839472][ T6429] loop4: detected capacity change from 0 to 512 [ 115.879451][ T6429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.940663][ T6429] EXT4-fs (loop4): 1 truncate cleaned up [ 116.001678][ T6429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.192285][ T5957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.217566][ T6441] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.127'. [ 116.633055][ T5914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.689729][ T5837] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.703639][ T6454] loop5: detected capacity change from 0 to 512 [ 116.786448][ T6454] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.861959][ T6454] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.130: bad orphan inode 13 [ 116.895651][ T6454] ext4_test_bit(bit=12, block=18) = 1 [ 116.901262][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 116.914338][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.925578][ T6454] is_bad_inode(inode)=0 [ 116.932234][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.942256][ T6454] NEXT_ORPHAN(inode)=0 [ 116.946372][ T6454] max_ino=32 [ 116.950131][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.959648][ T6454] i_nlink=1 [ 116.964310][ T6454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 116.988735][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.000182][ T5837] usb 4-1: config 0 descriptor?? [ 117.011992][ T5837] hub 4-1:0.0: USB hub found [ 117.077330][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.149108][ T28] audit: type=1800 audit(1790065479.438:3): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.130" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 117.164595][ T6454] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 117.229764][ T6454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.130: bg 0: block 248: padding at end of block bitmap is not set [ 117.235015][ T5837] hub 4-1:0.0: 1 port detected [ 117.258955][ T6454] Quota error (device loop5): write_blk: dquota write failed [ 117.272016][ T6454] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 117.286327][ T6454] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.130: Failed to acquire dquot type 1 [ 117.287424][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 117.339578][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.364046][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.396723][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.413148][ T6467] loop0: detected capacity change from 0 to 8192 [ 117.428995][ T5957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 117.429845][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.499973][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.554233][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.598807][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.681221][ T28] audit: type=1804 audit(1790065479.968:4): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.132" name="/newroot/46/bus/bus" dev="loop0" ino=1048608 res=1 errno=0 [ 117.920207][ T27] usb 5-1: usb_control_msg returned -32 [ 117.947359][ T27] usbtmc 5-1:16.0: can't read capabilities [ 118.030510][ T5837] hub 4-1:0.0: activate --> -90 [ 118.450780][ T5837] usb 4-1-port1: config error [ 118.456029][ T23] usb 4-1: USB disconnect, device number 5 [ 118.850914][ T6498] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 119.053549][ T5837] usb 5-1: USB disconnect, device number 5 [ 119.733463][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.140'. [ 120.787271][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.820623][ T6551] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 120.997283][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 121.047430][ T5818] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 121.147230][ T5818] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.246648][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.280012][ T5818] usb 4-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00 [ 121.336129][ T6555] pim6reg: entered allmulticast mode [ 121.357171][ C1] sched: RT throttling activated [ 121.357361][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.370620][ T6555] team0: entered allmulticast mode [ 121.370643][ T6555] team_slave_0: entered allmulticast mode [ 121.370695][ T6555] team_slave_1: entered allmulticast mode [ 121.371367][ T6555] pim6reg: left allmulticast mode [ 121.470473][ T5818] usb 4-1: config 0 descriptor?? [ 121.644061][ T6544] loop0: detected capacity change from 0 to 131072 [ 121.711117][ T6544] F2FS-fs (loop0): invalid crc value [ 121.751660][ T6544] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.762939][ T6554] team0: left allmulticast mode [ 121.789075][ T6554] team_slave_0: left allmulticast mode [ 121.796277][ T6554] team_slave_1: left allmulticast mode [ 121.847310][ T6544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.963464][ T5818] apple 0003:05AC:021E.0004: unknown main item tag 0x0 [ 121.991133][ T5818] apple 0003:05AC:021E.0004: unknown main item tag 0x0 [ 122.022531][ T5818] apple 0003:05AC:021E.0004: unknown main item tag 0x0 [ 122.047894][ T5818] apple 0003:05AC:021E.0004: unknown main item tag 0x0 [ 122.051007][ T28] audit: type=1800 audit(1790065484.338:5): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 122.075363][ T5818] apple 0003:05AC:021E.0004: unknown main item tag 0x0 [ 122.097998][ T5818] apple 0003:05AC:021E.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:021e] on usb-dummy_hcd.3-1/input0 [ 122.825441][ T6580] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 122.934651][ T6584] bond1: invalid NS target :: specified for addition [ 122.941865][ T6584] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 122.959907][ T6584] bond1 (unregistering): Released all slaves [ 122.982788][ T5817] usb 4-1: USB disconnect, device number 6 [ 123.733886][ T6599] netlink: 67 bytes leftover after parsing attributes in process `syz.3.163'. [ 124.356830][ T6622] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 124.541363][ T6631] FAULT_INJECTION: forcing a failure. [ 124.541363][ T6631] name failslab, interval 1, probability 0, space 0, times 1 [ 124.557626][ T6631] CPU: 1 PID: 6631 Comm: syz.0.170 Not tainted syzkaller #0 [ 124.564997][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.575090][ T6631] Call Trace: [ 124.578386][ T6631] [ 124.581327][ T6631] dump_stack_lvl+0x18c/0x250 [ 124.586029][ T6631] ? show_regs_print_info+0x20/0x20 [ 124.591275][ T6631] ? load_image+0x420/0x420 [ 124.595808][ T6631] ? __might_sleep+0xe0/0xe0 [ 124.600427][ T6631] ? __lock_acquire+0x7d80/0x7d80 [ 124.605470][ T6631] ? __anon_vma_prepare+0x3a0/0x440 [ 124.610688][ T6631] should_fail_ex+0x394/0x4c0 [ 124.615397][ T6631] should_failslab+0x9/0x20 [ 124.619922][ T6631] slab_pre_alloc_hook+0x59/0x300 [ 124.625061][ T6631] kmem_cache_alloc+0x5a/0x2c0 [ 124.629840][ T6631] ? __khugepaged_enter+0xae/0x2d0 [ 124.634982][ T6631] __khugepaged_enter+0xae/0x2d0 [ 124.640039][ T6631] do_huge_pmd_anonymous_page+0x296/0x18b0 [ 124.645871][ T6631] ? vma_thp_gfp_mask+0x160/0x160 [ 124.651001][ T6631] ? hugepage_vma_check+0x47d/0x560 [ 124.656231][ T6631] handle_mm_fault+0x1184/0x4a50 [ 124.661194][ T6631] ? handle_mm_fault+0xe6/0x4a50 [ 124.666180][ T6631] ? numa_migrate_prep+0x350/0x350 [ 124.671363][ T6631] __get_user_pages+0x604/0x1580 [ 124.676361][ T6631] ? populate_vma_page_range+0x380/0x380 [ 124.682034][ T6631] populate_vma_page_range+0x2c1/0x380 [ 124.687524][ T6631] ? fixup_user_fault+0x750/0x750 [ 124.692570][ T6631] ? down_read+0x1ac/0x2e0 [ 124.697004][ T6631] __mm_populate+0x260/0x390 [ 124.701773][ T6631] ? faultin_page_range+0x8a0/0x8a0 [ 124.707017][ T6631] ? up_write+0x1be/0x410 [ 124.711364][ T6631] do_mlock+0x5d2/0x740 [ 124.715542][ T6631] ? lru_gen_add_folio+0xe00/0xe00 [ 124.719535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c530c00: rx timeout, send abort [ 124.720657][ T6631] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.735232][ T6631] ? lock_chain_count+0x20/0x20 [ 124.737254][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c530c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.740099][ T6631] ? syscall_enter_from_user_mode+0x25/0x80 [ 124.740129][ T6631] __x64_sys_mlock+0x60/0x70 [ 124.765116][ T6631] do_syscall_64+0x55/0xb0 [ 124.769697][ T6631] ? clear_bhb_loop+0x40/0x90 [ 124.774403][ T6631] ? clear_bhb_loop+0x40/0x90 [ 124.779185][ T6631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.785090][ T6631] RIP: 0033:0x7f9aecf9e159 [ 124.789517][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.809183][ T6631] RSP: 002b:00007f9aeddaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 124.817632][ T6631] RAX: ffffffffffffffda RBX: 00007f9aed225fa0 RCX: 00007f9aecf9e159 [ 124.825620][ T6631] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 124.833607][ T6631] RBP: 00007f9aed03506b R08: 0000000000000000 R09: 0000000000000000 [ 124.841594][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.849664][ T6631] R13: 00007f9aed226038 R14: 00007f9aed225fa0 R15: 00007ffca8adb788 [ 124.857675][ T6631] [ 125.617828][ T6660] loop0: detected capacity change from 0 to 512 [ 125.663408][ T6660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.735727][ T6660] EXT4-fs (loop0): 1 truncate cleaned up [ 125.750163][ T6660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.894791][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.929537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.963827][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.986090][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.997562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.027274][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c530800: rx timeout, send abort [ 126.036075][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c530800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.075192][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.088892][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.444767][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.727646][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.791276][ T6700] loop3: detected capacity change from 0 to 512 [ 126.828050][ T6700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.866437][ T6700] EXT4-fs (loop3): 1 truncate cleaned up [ 126.876782][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.968774][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.184428][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.514130][ T6723] loop3: detected capacity change from 0 to 128 [ 127.535964][ T6723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.550564][ T6723] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.581724][ T6723] fscrypt (loop3, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 127.623905][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.800007][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a1ac00: rx timeout, send abort [ 127.852739][ T6733] loop5: detected capacity change from 0 to 64 [ 128.017821][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.070614][ T6738] loop5: detected capacity change from 0 to 512 [ 128.083455][ T6738] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.131698][ T6738] EXT4-fs (loop5): 1 truncate cleaned up [ 128.179231][ T6738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.300753][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a3f800: rx timeout, send abort [ 128.310205][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a1ac00: abort rx timeout. Force session deactivation [ 128.470999][ T6749] syz.3.206 uses obsolete (PF_INET,SOCK_PACKET) [ 128.479180][ T6749] syzkaller1: entered allmulticast mode [ 128.487562][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.493713][ T5957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.676060][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.767622][ T6754] netlink: 32 bytes leftover after parsing attributes in process `syz.5.207'. [ 128.809090][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a3f800: abort rx timeout. Force session deactivation [ 128.945360][ T27] kernel write not supported for file /gssd/clntXX/gssd (pid: 27 comm: kworker/1:1) [ 129.347736][ T6776] FAULT_INJECTION: forcing a failure. [ 129.347736][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 129.361269][ T6776] CPU: 1 PID: 6776 Comm: syz.4.217 Not tainted syzkaller #0 [ 129.368639][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.378930][ T6776] Call Trace: [ 129.382265][ T6776] [ 129.385237][ T6776] dump_stack_lvl+0x18c/0x250 [ 129.389984][ T6776] ? show_regs_print_info+0x20/0x20 [ 129.395250][ T6776] ? load_image+0x420/0x420 [ 129.399902][ T6776] ? __might_fault+0xc6/0x120 [ 129.404710][ T6776] ? __might_fault+0xaa/0x120 [ 129.409431][ T6776] should_fail_ex+0x394/0x4c0 [ 129.414181][ T6776] should_failslab+0x9/0x20 [ 129.418747][ T6776] slab_pre_alloc_hook+0x59/0x300 [ 129.423835][ T6776] kmem_cache_alloc+0x5a/0x2c0 [ 129.428653][ T6776] ? build_skb+0x29/0x250 [ 129.433039][ T6776] build_skb+0x29/0x250 [ 129.437254][ T6776] __tun_build_skb+0x36/0x320 [ 129.442117][ T6776] tun_get_user+0x1cb8/0x3d30 [ 129.446848][ T6776] ? tun_get_user+0x667/0x3d30 [ 129.451681][ T6776] ? rcu_read_unlock+0xa0/0xa0 [ 129.456511][ T6776] ? tun_get+0x1c/0x2e0 [ 129.460727][ T6776] ? __lock_acquire+0x7d80/0x7d80 [ 129.465792][ T6776] ? tun_get+0x1c/0x2e0 [ 129.469996][ T6776] tun_chr_write_iter+0x119/0x200 [ 129.475069][ T6776] vfs_write+0x474/0x9a0 [ 129.479345][ T6776] ? file_end_write+0x250/0x250 [ 129.484224][ T6776] ? __fget_files+0x3fc/0x460 [ 129.488918][ T6776] ? __fdget_pos+0x1d8/0x330 [ 129.493533][ T6776] ? ksys_write+0x74/0x260 [ 129.498033][ T6776] ksys_write+0x151/0x260 [ 129.502390][ T6776] ? __ia32_sys_read+0x90/0x90 [ 129.507189][ T6776] ? lockdep_hardirqs_on+0x98/0x150 [ 129.512420][ T6776] do_syscall_64+0x55/0xb0 [ 129.516878][ T6776] ? clear_bhb_loop+0x40/0x90 [ 129.521589][ T6776] ? clear_bhb_loop+0x40/0x90 [ 129.526321][ T6776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.532234][ T6776] RIP: 0033:0x7f21e455e98e [ 129.536660][ T6776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.556388][ T6776] RSP: 002b:00007f21e5391fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.564815][ T6776] RAX: ffffffffffffffda RBX: 00007f21e53926c0 RCX: 00007f21e455e98e [ 129.572812][ T6776] RDX: 000000000000009a RSI: 0000200000002900 RDI: 00000000000000c8 [ 129.580818][ T6776] RBP: 00007f21e463506b R08: 0000000000000000 R09: 0000000000000000 [ 129.588822][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.596827][ T6776] R13: 00007f21e4826038 R14: 00007f21e4825fa0 R15: 00007ffdee7d6bc8 [ 129.604820][ T6776] [ 130.137306][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.332004][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.342254][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 130.343997][ T6789] loop5: detected capacity change from 0 to 32768 [ 130.352126][ T27] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 130.352157][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.385008][ T27] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 130.925535][ T6177] nvmet: connect request for invalid subsystem t! [ 130.945003][ T6806] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 131.132317][ T6815] loop3: detected capacity change from 0 to 128 [ 131.206979][ T6177] net_ratelimit: 4 callbacks suppressed [ 131.206996][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.249480][ T6815] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.282141][ T6815] hpfs: filesystem error: improperly stopped [ 131.288971][ T6815] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.298201][ T6815] hpfs: You really don't want any checks? You are crazy... [ 131.305462][ T6815] hpfs: Code page index out of array [ 131.311117][ T6815] hpfs: code page support is disabled [ 131.324050][ T6815] hpfs: hpfs_map_4sectors(): unaligned read [ 131.359085][ T6815] hpfs: hpfs_map_4sectors(): unaligned read [ 131.365107][ T6815] hpfs: filesystem error: unable to find root dir [ 132.176173][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.247775][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.487742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.500137][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.639363][ T6860] sg_write: data in/out 2143289310/14 bytes for SCSI command 0x0-- guessing data in; [ 132.639363][ T6860] program syz.3.238 not setting count and/or reply_len properly [ 132.673691][ T5818] usb 5-1: USB disconnect, device number 6 [ 132.698332][ T5818] idmouse 5-1:1.0: disconnected [ 133.133285][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141340][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.296697][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.293942][ T6909] loop4: detected capacity change from 0 to 2048 [ 134.328035][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.462733][ T6916] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.556463][ T28] audit: type=1800 audit(1790065496.838:6): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.251" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 134.619788][ T6916] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 134.689259][ T6916] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 134.750650][ T6916] Remounting filesystem read-only [ 134.818855][ T6909] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 134.847498][ T6909] NILFS (loop4): discard dirty block: blocknr=22, size=1024 [ 134.888271][ T6909] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 134.916353][ T6909] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 134.945089][ T6909] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 135.049723][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.058760][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.097470][ T5914] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 135.129033][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 135.149884][ T5914] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 135.150155][ T6926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.257'. [ 135.167651][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.187087][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.204931][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.239848][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 135.253596][ T5914] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 135.281819][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.313780][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.347999][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.377312][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.378277][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 135.433424][ T5914] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 135.467251][ T5914] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 135.471163][ T6911] loop3: detected capacity change from 0 to 32768 [ 135.481876][ T5914] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 135.512159][ T5914] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 135.557671][ T5914] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 135.587641][ T5914] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 135.600004][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.623472][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.667294][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.705832][ T5914] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 135.750285][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 135.757055][ T5914] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 135.802980][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.843623][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.866083][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.905377][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 135.922752][ T5914] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 135.942452][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.967392][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.976326][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.030147][ T5914] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 136.037028][ T5914] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 136.073061][ T5914] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 136.095635][ T5914] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 136.115172][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.145532][ T5914] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 136.169704][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.196198][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.222150][ T5914] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 136.254768][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.307436][ T5914] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 136.323602][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.362932][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.388233][ T5914] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 136.395607][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.408715][ T27] net_ratelimit: 1 callbacks suppressed [ 136.408731][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.453915][ T5914] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 136.459857][ T6955] process 'syz.3.262' launched '/dev/fd/4' with NULL argv: empty string added [ 136.507207][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.516156][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.557268][ T5914] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 136.564650][ T5914] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.738919][ T6961] loop4: detected capacity change from 0 to 128 [ 136.902090][ T6966] syz.4.259: attempt to access beyond end of device [ 136.902090][ T6966] loop4: rw=2049, sector=145, nr_sectors = 248 limit=128 [ 137.184045][ T6973] loop5: detected capacity change from 0 to 2048 [ 137.215800][ T6973] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 137.241109][ T6973] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 137.315075][ T6973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.345445][ T12] kworker/u4:1: attempt to access beyond end of device [ 137.345445][ T12] loop4: rw=1, sector=393, nr_sectors = 648 limit=128 [ 137.454422][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.910817][ T6998] FAULT_INJECTION: forcing a failure. [ 137.910817][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 137.948894][ T6998] CPU: 0 PID: 6998 Comm: syz.5.274 Not tainted syzkaller #0 [ 137.956287][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.966421][ T6998] Call Trace: [ 137.969767][ T6998] [ 137.972744][ T6998] dump_stack_lvl+0x18c/0x250 [ 137.977481][ T6998] ? show_regs_print_info+0x20/0x20 [ 137.982735][ T6998] ? load_image+0x420/0x420 [ 137.987286][ T6998] ? __lock_acquire+0x7d80/0x7d80 [ 137.992431][ T6998] should_fail_ex+0x394/0x4c0 [ 137.997141][ T6998] should_failslab+0x9/0x20 [ 138.001673][ T6998] slab_pre_alloc_hook+0x59/0x300 [ 138.006716][ T6998] ? __se_sys_modify_ldt+0x6c/0x2f0 [ 138.011935][ T6998] ? do_syscall_64+0x55/0xb0 [ 138.016539][ T6998] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.022635][ T6998] kmem_cache_alloc_node+0x5e/0x310 [ 138.027855][ T6998] ? alloc_vmap_area+0x1b4/0x1e50 [ 138.032899][ T6998] alloc_vmap_area+0x1b4/0x1e50 [ 138.037787][ T6998] ? vm_map_ram+0xcf0/0xcf0 [ 138.042310][ T6998] ? rcu_is_watching+0x15/0xb0 [ 138.047103][ T6998] __get_vm_area_node+0x162/0x370 [ 138.052203][ T6998] ? __kasan_kmalloc+0x8f/0xa0 [ 138.057003][ T6998] __vmalloc_node_range+0x36f/0x1320 [ 138.062311][ T6998] ? write_ldt+0x4d4/0x750 [ 138.066770][ T6998] ? free_vm_area+0x50/0x50 [ 138.071296][ T6998] ? write_ldt+0x4d4/0x750 [ 138.075729][ T6998] __vmalloc+0x7a/0x90 [ 138.079924][ T6998] ? write_ldt+0x4d4/0x750 [ 138.084448][ T6998] write_ldt+0x4d4/0x750 [ 138.088714][ T6998] ? native_write_gdt_entry+0x30/0x30 [ 138.094102][ T6998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.100370][ T6998] ? lock_chain_count+0x20/0x20 [ 138.105327][ T6998] __se_sys_modify_ldt+0x6c/0x2f0 [ 138.110371][ T6998] do_syscall_64+0x55/0xb0 [ 138.114809][ T6998] ? clear_bhb_loop+0x40/0x90 [ 138.119503][ T6998] ? clear_bhb_loop+0x40/0x90 [ 138.124198][ T6998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.130131][ T6998] RIP: 0033:0x7f4f20b9e159 [ 138.134560][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.154361][ T6998] RSP: 002b:00007f4f21a2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 138.162790][ T6998] RAX: ffffffffffffffda RBX: 00007f4f20e25fa0 RCX: 00007f4f20b9e159 [ 138.170863][ T6998] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 138.178931][ T6998] RBP: 00007f4f20c3506b R08: 0000000000000000 R09: 0000000000000000 [ 138.187025][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.195011][ T6998] R13: 00007f4f20e26038 R14: 00007f4f20e25fa0 R15: 00007ffc92269f78 [ 138.203104][ T6998] [ 138.210705][ T6998] syz.5.274: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 138.227171][ T6998] CPU: 0 PID: 6998 Comm: syz.5.274 Not tainted syzkaller #0 [ 138.234500][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.244753][ T6998] Call Trace: [ 138.248198][ T6998] [ 138.251174][ T6998] dump_stack_lvl+0x18c/0x250 [ 138.256017][ T6998] ? show_regs_print_info+0x20/0x20 [ 138.261484][ T6998] ? load_image+0x420/0x420 [ 138.266050][ T6998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 138.272537][ T6998] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 138.279108][ T6998] warn_alloc+0x246/0x340 [ 138.283492][ T6998] ? slab_free_freelist_hook+0x130/0x1a0 [ 138.289176][ T6998] ? zone_watermark_ok_safe+0x230/0x230 [ 138.294776][ T6998] ? __get_vm_area_node+0x17b/0x370 [ 138.300044][ T6998] ? __get_vm_area_node+0x17b/0x370 [ 138.305314][ T6998] ? __kasan_kmalloc+0x8f/0xa0 [ 138.310136][ T6998] __vmalloc_node_range+0x394/0x1320 [ 138.315508][ T6998] ? free_vm_area+0x50/0x50 [ 138.320087][ T6998] ? write_ldt+0x4d4/0x750 [ 138.324564][ T6998] __vmalloc+0x7a/0x90 [ 138.328857][ T6998] ? write_ldt+0x4d4/0x750 [ 138.333342][ T6998] write_ldt+0x4d4/0x750 [ 138.337769][ T6998] ? native_write_gdt_entry+0x30/0x30 [ 138.343196][ T6998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.349235][ T6998] ? lock_chain_count+0x20/0x20 [ 138.354144][ T6998] __se_sys_modify_ldt+0x6c/0x2f0 [ 138.359237][ T6998] do_syscall_64+0x55/0xb0 [ 138.363711][ T6998] ? clear_bhb_loop+0x40/0x90 [ 138.368448][ T6998] ? clear_bhb_loop+0x40/0x90 [ 138.373191][ T6998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.379140][ T6998] RIP: 0033:0x7f4f20b9e159 [ 138.383685][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.403916][ T6998] RSP: 002b:00007f4f21a2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 138.412437][ T6998] RAX: ffffffffffffffda RBX: 00007f4f20e25fa0 RCX: 00007f4f20b9e159 [ 138.420590][ T6998] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 138.428610][ T6998] RBP: 00007f4f20c3506b R08: 0000000000000000 R09: 0000000000000000 [ 138.436628][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.444655][ T6998] R13: 00007f4f20e26038 R14: 00007f4f20e25fa0 R15: 00007ffc92269f78 [ 138.452699][ T6998] [ 138.461098][ T6998] Mem-Info: [ 138.464269][ T6998] active_anon:6616 inactive_anon:0 isolated_anon:0 [ 138.464269][ T6998] active_file:1371 inactive_file:40034 isolated_file:0 [ 138.464269][ T6998] unevictable:768 dirty:434 writeback:0 [ 138.464269][ T6998] slab_reclaimable:10563 slab_unreclaimable:94622 [ 138.464269][ T6998] mapped:25198 shmem:1387 pagetables:825 [ 138.464269][ T6998] sec_pagetables:0 bounce:0 [ 138.464269][ T6998] kernel_misc_reclaimable:0 [ 138.464269][ T6998] free:1355888 free_pcp:14302 free_cma:0 [ 138.510947][ T6998] Node 0 active_anon:26464kB inactive_anon:0kB active_file:5484kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99592kB dirty:1736kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11236kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no [ 138.513155][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.543220][ T6998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 138.591881][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.600828][ T6998] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.628521][ T6998] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 138.634451][ T6998] Node 0 DMA32 free:1522144kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26028kB inactive_anon:0kB active_file:5484kB inactive_file:159112kB unevictable:1536kB writepending:1736kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:31436kB local_pcp:17260kB free_cma:0kB [ 138.667478][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 138.718474][ T6998] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 138.815404][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 138.825562][ T7010] FAULT_INJECTION: forcing a failure. [ 138.825562][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 138.878293][ T6998] Node 1 Normal free:3893572kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:8320kB free_cma:0kB [ 138.927507][ T7010] CPU: 1 PID: 7010 Comm: syz.0.277 Not tainted syzkaller #0 [ 138.935000][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.945193][ T7010] Call Trace: [ 138.948517][ T7010] [ 138.951490][ T7010] dump_stack_lvl+0x18c/0x250 [ 138.956271][ T7010] ? show_regs_print_info+0x20/0x20 [ 138.961542][ T7010] ? load_image+0x420/0x420 [ 138.966107][ T7010] ? __lock_acquire+0x7d80/0x7d80 [ 138.971195][ T7010] should_fail_ex+0x394/0x4c0 [ 138.975939][ T7010] should_failslab+0x9/0x20 [ 138.980497][ T7010] slab_pre_alloc_hook+0x59/0x300 [ 138.985183][ T7015] syzkaller1: entered allmulticast mode [ 138.985560][ T7010] ? __se_sys_modify_ldt+0x6c/0x2f0 [ 138.996364][ T7010] ? do_syscall_64+0x55/0xb0 [ 139.001017][ T7010] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.007145][ T7010] kmem_cache_alloc_node+0x5e/0x310 [ 139.012406][ T7010] ? alloc_vmap_area+0x1b4/0x1e50 [ 139.017586][ T7010] alloc_vmap_area+0x1b4/0x1e50 [ 139.022516][ T7010] ? vm_map_ram+0xcf0/0xcf0 [ 139.027077][ T7010] ? rcu_is_watching+0x15/0xb0 [ 139.031904][ T7010] __get_vm_area_node+0x162/0x370 [ 139.036993][ T7010] ? __kasan_kmalloc+0x8f/0xa0 [ 139.041812][ T7010] __vmalloc_node_range+0x36f/0x1320 [ 139.047120][ T7010] ? write_ldt+0x4d4/0x750 [ 139.051605][ T7010] ? free_vm_area+0x50/0x50 [ 139.056131][ T7010] ? write_ldt+0x4d4/0x750 [ 139.060559][ T7010] __vmalloc+0x7a/0x90 [ 139.064643][ T7010] ? write_ldt+0x4d4/0x750 [ 139.069076][ T7010] write_ldt+0x4d4/0x750 [ 139.073340][ T7010] ? native_write_gdt_entry+0x30/0x30 [ 139.078727][ T7010] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.084741][ T7010] ? lock_chain_count+0x20/0x20 [ 139.089610][ T7010] __se_sys_modify_ldt+0x6c/0x2f0 [ 139.094653][ T7010] do_syscall_64+0x55/0xb0 [ 139.099092][ T7010] ? clear_bhb_loop+0x40/0x90 [ 139.103802][ T7010] ? clear_bhb_loop+0x40/0x90 [ 139.108494][ T7010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.114401][ T7010] RIP: 0033:0x7f9aecf9e159 [ 139.118835][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.138454][ T7010] RSP: 002b:00007f9aeddaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 139.146879][ T7010] RAX: ffffffffffffffda RBX: 00007f9aed225fa0 RCX: 00007f9aecf9e159 [ 139.154857][ T7010] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 139.162838][ T7010] RBP: 00007f9aed03506b R08: 0000000000000000 R09: 0000000000000000 [ 139.170905][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.178883][ T7010] R13: 00007f9aed226038 R14: 00007f9aed225fa0 R15: 00007ffca8adb788 [ 139.186882][ T7010] [ 139.204087][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 139.257255][ T6998] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.277445][ T6998] Node 0 DMA32: 417*4kB (UME) 440*8kB (UME) 141*16kB (M) 228*32kB (UME) 106*64kB (UME) 45*128kB (UM) 40*256kB (UM) 25*512kB (UME) 5*1024kB (ME) 4*2048kB (UM) 359*4096kB (UM) = 1534100kB [ 139.307327][ T6998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 139.367561][ T6998] Node 1 Normal: 245*4kB (UME) 62*8kB (UME) 30*16kB (UME) 61*32kB (UME) 22*64kB (UME) 5*128kB (UME) 2*256kB (UM) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893572kB [ 139.407526][ T6998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.424460][ T6998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.459527][ T6998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.516991][ T6998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.530918][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.550849][ T6998] 42769 total pagecache pages [ 139.555600][ T6998] 0 pages in swap cache [ 139.587286][ T6998] Free swap = 124472kB [ 139.591522][ T6998] Total swap = 124996kB [ 139.595804][ T6998] 2097051 pages RAM [ 139.628347][ T6998] 0 pages HighMem/MovableOnly [ 139.643526][ T6998] 416965 pages reserved [ 139.652212][ T6998] 0 pages cma reserved [ 139.855212][ T7032] loop3: detected capacity change from 0 to 4096 [ 139.902464][ T7032] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 140.094701][ T7032] ntfs3: loop3: ino=19, mi_enum_attr [ 140.125043][ T7032] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.183447][ T7032] ntfs3: loop3: ino=1a, mi_enum_attr [ 140.207800][ T7032] ntfs3: loop3: ino=1a, mi_enum_attr [ 140.228137][ T7032] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 140.572507][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.302508][ T7038] loop4: detected capacity change from 0 to 32768 [ 141.419588][ T7038] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.608847][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.617685][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.684916][ T7038] XFS (loop4): Ending clean mount [ 141.709563][ T7038] XFS (loop4): Quotacheck needed: Please wait. [ 141.773196][ T7038] XFS (loop4): Quotacheck: Done. [ 141.998477][ T7088] FAULT_INJECTION: forcing a failure. [ 141.998477][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 142.026643][ T7088] CPU: 0 PID: 7088 Comm: syz.0.297 Not tainted syzkaller #0 [ 142.034018][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.044125][ T7088] Call Trace: [ 142.047457][ T7088] [ 142.050427][ T7088] dump_stack_lvl+0x18c/0x250 [ 142.055173][ T7088] ? show_regs_print_info+0x20/0x20 [ 142.060493][ T7088] ? load_image+0x420/0x420 [ 142.065135][ T7088] ? __might_sleep+0xe0/0xe0 [ 142.069781][ T7088] ? __lock_acquire+0x7d80/0x7d80 [ 142.074866][ T7088] should_fail_ex+0x394/0x4c0 [ 142.079604][ T7088] should_failslab+0x9/0x20 [ 142.084163][ T7088] slab_pre_alloc_hook+0x59/0x300 [ 142.089246][ T7088] ? x509_cert_parse+0x9b/0x7b0 [ 142.094162][ T7088] __kmem_cache_alloc_node+0x53/0x250 [ 142.099595][ T7088] ? x509_cert_parse+0x9b/0x7b0 [ 142.104502][ T7088] kmalloc_trace+0x2a/0xe0 [ 142.108980][ T7088] x509_cert_parse+0x9b/0x7b0 [ 142.113714][ T7088] x509_key_preparse+0x64/0x6c0 [ 142.118621][ T7088] ? down_read+0x1ac/0x2e0 [ 142.123084][ T7088] asymmetric_key_preparse+0xa9/0x140 [ 142.128528][ T7088] __key_create_or_update+0x3a6/0xa60 [ 142.133992][ T7088] ? key_create_or_update+0x60/0x60 [ 142.139225][ T7088] ? bpf_lsm_key_permission+0x9/0x10 [ 142.144577][ T7088] ? lookup_user_key+0xb66/0x1140 [ 142.149670][ T7088] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 142.155715][ T7088] key_create_or_update+0x42/0x60 [ 142.160804][ T7088] __se_sys_add_key+0x34f/0x410 [ 142.165716][ T7088] ? __x64_sys_add_key+0xc0/0xc0 [ 142.170721][ T7088] ? lockdep_hardirqs_on+0x98/0x150 [ 142.176060][ T7088] ? __x64_sys_add_key+0x20/0xc0 [ 142.181063][ T7088] do_syscall_64+0x55/0xb0 [ 142.185548][ T7088] ? clear_bhb_loop+0x40/0x90 [ 142.190286][ T7088] ? clear_bhb_loop+0x40/0x90 [ 142.195023][ T7088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.200973][ T7088] RIP: 0033:0x7f9aecf9e159 [ 142.205450][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.225207][ T7088] RSP: 002b:00007f9aeddaa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 142.233693][ T7088] RAX: ffffffffffffffda RBX: 00007f9aed225fa0 RCX: 00007f9aecf9e159 [ 142.241712][ T7088] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 142.249731][ T7088] RBP: 00007f9aed03506b R08: fffffffffffffffe R09: 0000000000000000 [ 142.257737][ T7088] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 142.265718][ T7088] R13: 00007f9aed226038 R14: 00007f9aed225fa0 R15: 00007ffca8adb788 [ 142.273716][ T7088] [ 142.297547][ T5914] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.428081][ T7097] loop3: detected capacity change from 0 to 256 [ 142.452246][ T7097] exfat: Deprecated parameter 'utf8' [ 142.513125][ T7097] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 142.657330][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.739253][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.214782][ T7101] loop5: detected capacity change from 0 to 32768 [ 143.254687][ T7101] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.301 (7101) [ 143.266576][ T7116] loop3: detected capacity change from 0 to 512 [ 143.297898][ T7116] EXT4-fs: Ignoring removed bh option [ 143.312948][ T7116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.332261][ T7101] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.355652][ T7101] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 143.371500][ T7101] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 143.403629][ T7101] BTRFS info (device loop5): use zstd compression, level 3 [ 143.409708][ T7116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.425837][ T7101] BTRFS info (device loop5): using free space tree [ 143.428053][ T7116] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.687421][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.747021][ T7101] BTRFS info (device loop5): enabling ssd optimizations [ 143.754342][ T7101] BTRFS info (device loop5): auto enabling async discard [ 143.885725][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.992246][ T28] audit: type=1800 audit(1790065506.278:7): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.301" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 144.051104][ T7146] loop4: detected capacity change from 0 to 512 [ 144.185581][ T7146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.207717][ T5957] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.227661][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 144.263767][ T7146] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.319908][ T5914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.535331][ T7158] loop0: detected capacity change from 0 to 128 [ 144.560341][ T7158] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ" or missing value [ 144.619964][ T5782] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop5 scanned by udevd (5782) [ 144.659661][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.730309][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.761474][ T7165] Illegal XDP return value 32768 on prog (id 17) dev syz_tun, expect packet loss! [ 145.295580][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.767565][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.777818][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.524893][ T7182] loop5: detected capacity change from 0 to 40427 [ 146.573353][ T7182] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x7ffff [ 146.610179][ T7182] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x30e4 [ 146.691300][ T7182] F2FS-fs (loop5): invalid crc value [ 146.718651][ T7182] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.807421][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.859991][ T7182] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 146.963244][ T7182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.180962][ T7226] loop4: detected capacity change from 0 to 512 [ 147.226707][ T7229] loop3: detected capacity change from 0 to 1024 [ 147.238126][ T7182] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 147.268454][ T7229] EXT4-fs: Ignoring removed i_version option [ 147.291883][ T7226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.299986][ T7182] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 147.345660][ T7229] EXT4-fs: Ignoring removed bh option [ 147.360974][ T7226] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.386812][ T7182] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030 [ 147.418705][ T7229] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 147.488497][ T7235] loop0: detected capacity change from 0 to 2048 [ 147.514947][ T5914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.553348][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.581113][ T7235] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 147.618984][ T7229] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.632910][ T5957] syz-executor: attempt to access beyond end of device [ 147.632910][ T5957] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 147.650127][ T5957] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 147.659447][ T5957] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 147.739552][ T28] audit: type=1800 audit(1790065510.028:8): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 147.849779][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.951363][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.387825][ T7260] loop0: detected capacity change from 0 to 256 [ 148.402068][ T7260] FAT-fs (loop0): Unrecognized mount option "uni_plate=1" or missing value [ 148.454192][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.821293][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.903490][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.100323][ T7277] loop4: detected capacity change from 0 to 1024 [ 149.128116][ T7277] EXT4-fs: Ignoring removed nobh option [ 149.154913][ T7277] EXT4-fs: Ignoring removed orlov option [ 149.186027][ T7277] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 149.274363][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.902172][ T7277] syz.4.342 (7277) used greatest stack depth: 20328 bytes left [ 149.924443][ T7290] loop3: detected capacity change from 0 to 512 [ 149.931513][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.949422][ T7290] EXT4-fs: Ignoring removed nobh option [ 149.957552][ T7292] FAULT_INJECTION: forcing a failure. [ 149.957552][ T7292] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.027573][ T7292] CPU: 1 PID: 7292 Comm: syz.5.344 Not tainted syzkaller #0 [ 150.034946][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.045213][ T7292] Call Trace: [ 150.048522][ T7292] [ 150.051572][ T7292] dump_stack_lvl+0x18c/0x250 [ 150.056316][ T7292] ? show_regs_print_info+0x20/0x20 [ 150.061559][ T7292] ? load_image+0x420/0x420 [ 150.066103][ T7292] ? __lock_acquire+0x7d80/0x7d80 [ 150.071164][ T7292] ? __virt_addr_valid+0x10c/0x380 [ 150.076317][ T7292] should_fail_ex+0x394/0x4c0 [ 150.081042][ T7292] _copy_from_user+0x2f/0xe0 [ 150.085680][ T7292] load_msg+0x28a/0x380 [ 150.089878][ T7292] do_msgrcv+0x279/0x13d0 [ 150.094238][ T7292] ? do_msgrcv+0x13d0/0x13d0 [ 150.098862][ T7292] ? ksys_msgrcv+0x40/0x40 [ 150.103292][ T7292] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 150.109302][ T7292] ? lock_chain_count+0x20/0x20 [ 150.114171][ T7292] ? lockdep_hardirqs_on+0x98/0x150 [ 150.119381][ T7292] ? __x64_sys_msgrcv+0x20/0xd0 [ 150.124246][ T7292] do_syscall_64+0x55/0xb0 [ 150.128677][ T7292] ? clear_bhb_loop+0x40/0x90 [ 150.133367][ T7292] ? clear_bhb_loop+0x40/0x90 [ 150.138067][ T7292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.143977][ T7292] RIP: 0033:0x7f4f20b9e159 [ 150.148410][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.168219][ T7292] RSP: 002b:00007f4f21a2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 150.176648][ T7292] RAX: ffffffffffffffda RBX: 00007f4f20e25fa0 RCX: 00007f4f20b9e159 [ 150.184637][ T7292] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 150.192618][ T7292] RBP: 00007f4f20c3506b R08: 0000000000004800 R09: 0000000000000000 [ 150.200625][ T7292] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 150.208606][ T7292] R13: 00007f4f20e26038 R14: 00007f4f20e25fa0 R15: 00007ffc92269f78 [ 150.216614][ T7292] [ 150.282258][ T5914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.361150][ T7290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.387438][ T7290] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.489120][ T7298] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.343: corrupted inode contents [ 150.506363][ T7298] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.343: mark_inode_dirty error [ 150.531882][ T7298] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.343: corrupted inode contents [ 150.548758][ T7298] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.343: mark_inode_dirty error [ 150.586876][ T7290] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.343: corrupted inode contents [ 150.694236][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.694697][ T7302] input: syz0 as /devices/virtual/input/input8 [ 150.972221][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.728092][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.849315][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.930620][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.949506][ T5817] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.970265][ T5817] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.001175][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 152.010906][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.034000][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.060173][ T5817] usb 4-1: Product: syz [ 152.074478][ T5817] usb 4-1: Manufacturer: syz [ 152.098205][ T5817] usb 4-1: SerialNumber: syz [ 152.135904][ T5817] hub 4-1:1.0: bad descriptor, ignoring hub [ 152.158734][ T5817] hub: probe of 4-1:1.0 failed with error -5 [ 152.394754][ T5817] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.944147][ T7334] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 152.978165][ T7334] usb 4-1: device reset changed ep0 maxpacket size! [ 153.010812][ T5817] usb 4-1: USB disconnect, device number 7 [ 153.038825][ T5817] usblp0: removed [ 153.050545][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.227700][ T5817] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.445903][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 153.487262][ T5817] usb 4-1: config 0 has no interfaces? [ 153.505544][ T5817] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 153.529989][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.552454][ T5817] usb 4-1: Product: syz [ 153.567003][ T5817] usb 4-1: Manufacturer: syz [ 153.585143][ T5817] usb 4-1: SerialNumber: syz [ 153.606902][ T5817] usb 4-1: config 0 descriptor?? [ 153.982773][ T5817] usb 4-1: USB disconnect, device number 8 [ 154.090112][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.569482][ T7425] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 154.704191][ T7399] loop4: detected capacity change from 0 to 32768 [ 154.791750][ T7399] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 154.889356][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.897956][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.045131][ T7399] XFS (loop4): Ending clean mount [ 155.130665][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.198708][ T6177] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.433983][ T6177] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 155.450168][ T6177] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.459610][ T6177] usb 1-1: Product: syz [ 155.464031][ T6177] usb 1-1: SerialNumber: syz [ 155.477997][ T6177] usb 1-1: config 0 descriptor?? [ 155.618922][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'. [ 155.653087][ T28] audit: type=1800 audit(1790065517.938:9): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="addr_adrfam" dev="configfs" ino=13722 res=0 errno=0 [ 155.746478][ T5914] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 155.749293][ T7460] netlink: 'syz.5.381': attribute type 1 has an invalid length. [ 155.777585][ T6177] hso 1-1:0.0: Can't find BULK IN endpoint [ 155.782284][ T7460] netlink: 'syz.5.381': attribute type 2 has an invalid length. [ 156.010113][ T27] usb 1-1: USB disconnect, device number 5 [ 156.168353][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.387281][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.597477][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 156.604216][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.617319][ T23] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.626553][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.640972][ T23] usb 6-1: config 0 descriptor?? [ 156.879145][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.902832][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.954519][ T23] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.173544][ T27] usb 6-1: USB disconnect, device number 2 [ 157.207861][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.559717][ T7520] sctp: [Deprecated]: syz.0.398 (pid 7520) Use of int in max_burst socket option deprecated. [ 157.559717][ T7520] Use struct sctp_assoc_value instead [ 157.752948][ T7523] FAULT_INJECTION: forcing a failure. [ 157.752948][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 157.766486][ T7523] CPU: 1 PID: 7523 Comm: syz.4.401 Not tainted syzkaller #0 [ 157.773841][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.783942][ T7523] Call Trace: [ 157.787271][ T7523] [ 157.790256][ T7523] dump_stack_lvl+0x18c/0x250 [ 157.795010][ T7523] ? show_regs_print_info+0x20/0x20 [ 157.800259][ T7523] ? load_image+0x420/0x420 [ 157.804808][ T7523] ? mark_lock+0x94/0x320 [ 157.809192][ T7523] ? __lock_acquire+0x1336/0x7d80 [ 157.814273][ T7523] should_fail_ex+0x394/0x4c0 [ 157.819024][ T7523] should_failslab+0x9/0x20 [ 157.823584][ T7523] slab_pre_alloc_hook+0x59/0x300 [ 157.828637][ T7523] kmem_cache_alloc+0x5a/0x2c0 [ 157.833430][ T7523] ? radix_tree_node_alloc+0x7e/0x3a0 [ 157.838834][ T7523] radix_tree_node_alloc+0x7e/0x3a0 [ 157.844060][ T7523] idr_get_free+0x28f/0xa10 [ 157.848603][ T7523] idr_alloc_cyclic+0x28a/0x610 [ 157.853472][ T7523] ? idr_alloc+0x2e0/0x2e0 [ 157.857899][ T7523] ? do_raw_spin_lock+0x11f/0x2b0 [ 157.862973][ T7523] ? bpf_prog_alloc_id+0x23/0xf0 [ 157.867955][ T7523] bpf_prog_alloc_id+0x42/0xf0 [ 157.872838][ T7523] bpf_prog_load+0x114f/0x1610 [ 157.877646][ T7523] ? map_freeze+0x420/0x420 [ 157.882177][ T7523] ? __might_fault+0xaa/0x120 [ 157.886972][ T7523] ? __might_fault+0xc6/0x120 [ 157.891660][ T7523] ? __might_fault+0xaa/0x120 [ 157.896350][ T7523] ? bpf_lsm_bpf+0x9/0x10 [ 157.900798][ T7523] ? security_bpf+0x7e/0xa0 [ 157.905328][ T7523] __sys_bpf+0x5ba/0x890 [ 157.909589][ T7523] ? bpf_link_show_fdinfo+0x560/0x560 [ 157.914988][ T7523] ? lock_chain_count+0x20/0x20 [ 157.919862][ T7523] __x64_sys_bpf+0x7c/0x90 [ 157.924301][ T7523] do_syscall_64+0x55/0xb0 [ 157.928735][ T7523] ? clear_bhb_loop+0x40/0x90 [ 157.933435][ T7523] ? clear_bhb_loop+0x40/0x90 [ 157.938144][ T7523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.944059][ T7523] RIP: 0033:0x7f21e459e159 [ 157.948498][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.968127][ T7523] RSP: 002b:00007f21e5392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.976556][ T7523] RAX: ffffffffffffffda RBX: 00007f21e4825fa0 RCX: 00007f21e459e159 [ 157.984713][ T7523] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 157.992704][ T7523] RBP: 00007f21e463506b R08: 0000000000000000 R09: 0000000000000000 [ 158.000687][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.008756][ T7523] R13: 00007f21e4826038 R14: 00007f21e4825fa0 R15: 00007ffdee7d6bc8 [ 158.016755][ T7523] [ 158.047384][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.140011][ T5817] kernel write not supported for file /dummy_udc (pid: 5817 comm: kworker/0:4) [ 158.171643][ T7524] gadgetfs: bound to dummy_udc driver [ 158.247769][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.360810][ T7539] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 158.416145][ T7539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.511269][ T7542] bond1: (slave geneve2): making interface the new active one [ 158.523690][ T7542] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 158.598776][ T7542] syz.3.405 (7542) used greatest stack depth: 20056 bytes left [ 158.764559][ T7549] loop4: detected capacity change from 0 to 256 [ 158.794396][ T7549] exfat: Deprecated parameter 'namecase' [ 158.841734][ T7546] loop3: detected capacity change from 0 to 4096 [ 158.863562][ T7549] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 159.144498][ T28] audit: type=1800 audit(1790065521.428:10): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.408" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 159.293044][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.387603][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.597559][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.610065][ T5817] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 159.620516][ T5817] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 159.649977][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.699154][ T5817] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 159.713006][ T7576] loop0: detected capacity change from 0 to 128 [ 159.726566][ T5817] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 159.769409][ T7576] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.809950][ T7576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 159.827703][ T7576] System zones: 1-3, 19-19, 35-36 [ 159.842141][ T7576] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.855464][ T7576] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.877077][ T7576] syz.0.419 (pid 7576) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 160.021039][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.067671][ T7557] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 160.087512][ T7557] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 160.127901][ T7557] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 160.293749][ T7556] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 160.305643][ T5817] usb 6-1: USB disconnect, device number 3 [ 160.323361][ T5817] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 160.351871][ T5817] spcp8x5 6-1:1.0: device disconnected [ 160.365727][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.552261][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.561174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.888213][ T5783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.894923][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.957034][ T7605] bond2: entered allmulticast mode [ 161.004441][ T7608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.093586][ T7605] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 161.108235][ T7605] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 161.127899][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.370102][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.787111][ T7632] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.438'. [ 161.821491][ T7632] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 162.228006][ T968] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 162.246317][ T7625] loop5: detected capacity change from 0 to 32768 [ 162.356717][ T7625] JBD2: Ignoring recovery information on journal [ 162.414766][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.430879][ T968] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 162.450768][ T968] usb 4-1: config 0 has no interface number 0 [ 162.456984][ T968] usb 4-1: config 0 interface 41 has no altsetting 0 [ 162.487700][ T968] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 162.497250][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.505391][ T968] usb 4-1: Product: syz [ 162.509712][ T968] usb 4-1: Manufacturer: syz [ 162.517232][ T968] usb 4-1: SerialNumber: syz [ 162.528519][ T968] usb 4-1: config 0 descriptor?? [ 162.552062][ T7648] loop0: detected capacity change from 0 to 256 [ 162.597019][ T7625] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 162.655216][ T7648] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 162.781921][ T968] CoreChips: probe of 4-1:0.41 failed with error -71 [ 162.840527][ T968] usb 4-1: USB disconnect, device number 9 [ 163.194619][ T5957] ocfs2: Unmounting device (7,5) on (node local) [ 163.215293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.374087][ T28] audit: type=1800 audit(1790065525.658:11): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.449" name="addr_adrfam" dev="configfs" ino=14351 res=0 errno=0 [ 163.447766][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.487518][ T968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.677386][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 163.691737][ T968] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 163.722067][ T968] usb 4-1: config 0 has no interface number 0 [ 163.745424][ T968] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 163.777284][ T968] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.803834][ T968] usb 4-1: config 0 interface 41 has no altsetting 0 [ 163.834291][ T968] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 163.852569][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.895055][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.909965][ T968] usb 4-1: Product: syz [ 163.914219][ T968] usb 4-1: Manufacturer: syz [ 163.924367][ T968] usb 4-1: SerialNumber: syz [ 163.932530][ T968] usb 4-1: config 0 descriptor?? [ 163.945036][ T7634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.962964][ T7634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.184435][ T7634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.195373][ T7634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.197457][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.399307][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.417427][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.437642][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.473452][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.489153][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.497380][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.502451][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.525024][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.550017][ T23] usb 1-1: Product: syz [ 164.557278][ T23] usb 1-1: Manufacturer: syz [ 164.587092][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 164.597253][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 164.615473][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 164.631812][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 164.843076][ T968] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 164.872473][ T968] CoreChips: probe of 4-1:0.41 failed with error -71 [ 164.896323][ T7681] loop4: detected capacity change from 0 to 40427 [ 164.902427][ T968] usb 4-1: USB disconnect, device number 10 [ 164.956144][ T7681] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 164.986772][ T7681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.027562][ T7681] F2FS-fs (loop4): Image doesn't support compression [ 165.035666][ T7681] F2FS-fs (loop4): Image doesn't support compression [ 165.060611][ T7681] F2FS-fs (loop4): invalid crc value [ 165.172449][ T23] usb 1-1: USB disconnect, device number 6 [ 165.242163][ T7681] F2FS-fs (loop4): Start checkpoint disabled! [ 165.265915][ T7681] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.275629][ T7681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 165.529635][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.676907][ T2985] kworker/u4:9: attempt to access beyond end of device [ 165.676907][ T2985] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.705336][ T2985] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 166.279826][ T7701] ip_tables: iptables: counters copy to user failed while replacing table [ 166.296441][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 166.577364][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.990821][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.422573][ T7723] tipc: Started in network mode [ 167.440882][ T7709] loop0: detected capacity change from 0 to 32768 [ 167.452750][ T7723] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.482234][ T7709] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.467 (7709) [ 167.506648][ T7723] tipc: New replicast peer: 172.20.20.187 [ 167.515816][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.530156][ T7709] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.545829][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.548609][ T7709] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 167.556101][ T7723] tipc: Enabled bearer , priority 10 [ 167.572819][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.584532][ T7709] BTRFS info (device loop0): force clearing of disk cache [ 167.585224][ T7727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.603717][ T7727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.612291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.623634][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.632287][ T7709] BTRFS info (device loop0): enabling auto defrag [ 167.646150][ T7727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.655286][ T7709] BTRFS info (device loop0): force zlib compression, level 3 [ 167.677249][ T7709] BTRFS info (device loop0): disabling auto defrag [ 167.683882][ T7709] BTRFS info (device loop0): enabling auto defrag [ 167.687466][ T7727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.727418][ T7709] BTRFS info (device loop0): metadata ratio 257 [ 167.752887][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.777265][ T7709] BTRFS info (device loop0): turning on flush-on-commit [ 167.784333][ T7709] BTRFS info (device loop0): using free space tree [ 168.014560][ T7709] BTRFS info (device loop0): enabling ssd optimizations [ 168.052883][ T7709] BTRFS info (device loop0): auto enabling async discard [ 168.088174][ T7709] BTRFS info (device loop0): rebuilding free space tree [ 168.235733][ T28] audit: type=1800 audit(1790065530.518:12): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 168.248236][ T7709] fs-verity: sha256 using implementation "sha256-avx2" [ 168.385441][ T7709] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 168.540304][ T5818] tipc: Node number set to 2886997162 [ 168.616446][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.652389][ T7775] loop5: detected capacity change from 0 to 128 [ 169.679345][ T7775] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.729480][ T7775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 169.744387][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 169.765066][ T7775] System zones: 1-3, 19-19, 35-36 [ 169.803324][ T7775] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.849366][ T7775] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.955457][ T5957] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.931206][ T7798] loop5: detected capacity change from 0 to 4096 [ 171.065033][ T7803] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.090011][ T7801] input: syz0 as /devices/virtual/input/input9 [ 171.120903][ T7802] loop0: detected capacity change from 0 to 512 [ 171.217928][ T6333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.290453][ T7802] xt_hashlimit: size too large, truncated to 1048576 [ 171.747412][ T7814] capability: warning: `syz.5.501' uses deprecated v2 capabilities in a way that may be insecure [ 171.818393][ T7814] [ 171.820808][ T7814] ====================================================== [ 171.827858][ T7814] WARNING: possible circular locking dependency detected [ 171.834910][ T7814] syzkaller #0 Not tainted [ 171.839704][ T7814] ------------------------------------------------------ [ 171.846746][ T7814] syz.5.501/7814 is trying to acquire lock: [ 171.852679][ T7814] ffff888031a480e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390 [ 171.862144][ T7814] [ 171.862144][ T7814] but task is already holding lock: [ 171.869542][ T7814] ffff888148d81888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 171.879798][ T7814] [ 171.879798][ T7814] which lock already depends on the new lock. [ 171.879798][ T7814] [ 171.890322][ T7814] [ 171.890322][ T7814] the existing dependency chain (in reverse order) is: [ 171.899457][ T7814] [ 171.899457][ T7814] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 171.908103][ T7814] __mutex_lock+0x135/0xc80 [ 171.913178][ T7814] bd_finish_claiming+0x229/0x3f0 [ 171.915765][ T7820] FAULT_INJECTION: forcing a failure. [ 171.915765][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 171.918932][ T7814] blkdev_get_by_dev+0x469/0x610 [ 171.918960][ T7814] bdev_open_by_dev+0x77/0x100 [ 171.918977][ T7814] setup_bdev_super+0x59/0x660 [ 171.918996][ T7814] mount_bdev+0x1ce/0x2c0 [ 171.919012][ T7814] legacy_get_tree+0xea/0x180 [ 171.919033][ T7814] vfs_get_tree+0x8c/0x280 [ 171.919049][ T7814] do_new_mount+0x24a/0xa40 [ 171.919067][ T7814] init_mount+0xde/0x130 [ 171.919088][ T7814] do_mount_root+0x97/0x230 [ 171.919108][ T7814] mount_root_generic+0x1a6/0x3e0 [ 171.919126][ T7814] prepare_namespace+0xc2/0x100 [ 171.919146][ T7814] kernel_init_freeable+0x41a/0x560 [ 171.919164][ T7814] kernel_init+0x1d/0x1c0 [ 171.919182][ T7814] ret_from_fork+0x48/0x80 [ 171.919201][ T7814] ret_from_fork_asm+0x11/0x20 [ 171.919226][ T7814] [ 171.919226][ T7814] -> #3 (bdev_lock){+.+.}-{3:3}: [ 171.919395][ T7814] __mutex_lock+0x135/0xc80 [ 171.919415][ T7814] bd_prepare_to_claim+0x1d9/0x4a0 [ 171.919434][ T7814] truncate_bdev_range+0x4e/0x260 [ 171.919452][ T7814] blkdev_common_ioctl+0x1c7a/0x2580 [ 171.919473][ T7814] blkdev_ioctl+0x512/0x730 [ 171.919492][ T7814] __se_sys_ioctl+0xfd/0x170 [ 171.919513][ T7814] do_syscall_64+0x55/0xb0 [ 172.054704][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.061151][ T7814] [ 172.061151][ T7814] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 172.069503][ T7814] down_write+0x97/0x200 [ 172.074273][ T7814] set_blocksize+0x247/0x4b0 [ 172.079396][ T7814] sb_min_blocksize+0xbe/0x190 [ 172.084695][ T7814] ext4_fill_super+0x6e7/0x6870 [ 172.090075][ T7814] get_tree_bdev+0x3e5/0x520 [ 172.095188][ T7814] vfs_get_tree+0x8c/0x280 [ 172.100140][ T7814] do_new_mount+0x24a/0xa40 [ 172.105166][ T7814] init_mount+0xde/0x130 [ 172.110026][ T7814] do_mount_root+0x97/0x230 [ 172.115054][ T7814] mount_root_generic+0x1a6/0x3e0 [ 172.120625][ T7814] prepare_namespace+0xc2/0x100 [ 172.126009][ T7814] kernel_init_freeable+0x41a/0x560 [ 172.131733][ T7814] kernel_init+0x1d/0x1c0 [ 172.136604][ T7814] ret_from_fork+0x48/0x80 [ 172.141548][ T7814] ret_from_fork_asm+0x11/0x20 [ 172.146851][ T7814] [ 172.146851][ T7814] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 172.155738][ T7814] down_write+0x97/0x200 [ 172.160517][ T7814] set_blocksize+0x1ff/0x4b0 [ 172.165636][ T7814] sb_min_blocksize+0xbe/0x190 [ 172.170941][ T7814] ext4_fill_super+0x6e7/0x6870 [ 172.176420][ T7814] get_tree_bdev+0x3e5/0x520 [ 172.181541][ T7814] vfs_get_tree+0x8c/0x280 [ 172.186484][ T7814] do_new_mount+0x24a/0xa40 [ 172.191531][ T7814] init_mount+0xde/0x130 [ 172.196300][ T7814] do_mount_root+0x97/0x230 [ 172.201351][ T7814] mount_root_generic+0x1a6/0x3e0 [ 172.206904][ T7814] prepare_namespace+0xc2/0x100 [ 172.212378][ T7814] kernel_init_freeable+0x41a/0x560 [ 172.218104][ T7814] kernel_init+0x1d/0x1c0 [ 172.222957][ T7814] ret_from_fork+0x48/0x80 [ 172.227906][ T7814] ret_from_fork_asm+0x11/0x20 [ 172.233287][ T7814] [ 172.233287][ T7814] -> #0 (&type->s_umount_key#32){++++}-{3:3}: [ 172.242366][ T7814] __lock_acquire+0x37ef/0x7d80 [ 172.247855][ T7814] lock_acquire+0x19e/0x420 [ 172.252890][ T7814] down_read+0x46/0x2e0 [ 172.257573][ T7814] super_lock+0x189/0x390 [ 172.262519][ T7814] fs_bdev_sync+0xa4/0x170 [ 172.267547][ T7814] blkdev_common_ioctl+0x8a9/0x2580 [ 172.273378][ T7814] blkdev_ioctl+0x512/0x730 [ 172.278418][ T7814] __se_sys_ioctl+0xfd/0x170 [ 172.283538][ T7814] do_syscall_64+0x55/0xb0 [ 172.288483][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.294905][ T7814] [ 172.294905][ T7814] other info that might help us debug this: [ 172.294905][ T7814] [ 172.305135][ T7814] Chain exists of: [ 172.305135][ T7814] &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock [ 172.305135][ T7814] [ 172.318884][ T7814] Possible unsafe locking scenario: [ 172.318884][ T7814] [ 172.326365][ T7814] CPU0 CPU1 [ 172.331739][ T7814] ---- ---- [ 172.337105][ T7814] lock(&bdev->bd_holder_lock); [ 172.342083][ T7814] lock(bdev_lock); [ 172.348629][ T7814] lock(&bdev->bd_holder_lock); [ 172.356180][ T7814] rlock(&type->s_umount_key#32); [ 172.361396][ T7814] [ 172.361396][ T7814] *** DEADLOCK *** [ 172.361396][ T7814] [ 172.369541][ T7814] 1 lock held by syz.5.501/7814: [ 172.374567][ T7814] #0: ffff888148d81888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580 [ 172.385210][ T7814] [ 172.385210][ T7814] stack backtrace: [ 172.391101][ T7814] CPU: 1 PID: 7814 Comm: syz.5.501 Not tainted syzkaller #0 [ 172.398394][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.408556][ T7814] Call Trace: [ 172.412107][ T7814] [ 172.415155][ T7814] dump_stack_lvl+0x18c/0x250 [ 172.419866][ T7814] ? load_image+0x420/0x420 [ 172.424561][ T7814] ? show_regs_print_info+0x20/0x20 [ 172.429867][ T7814] ? print_circular_bug+0x12b/0x1a0 [ 172.435084][ T7814] check_noncircular+0x2fc/0x400 [ 172.440210][ T7814] ? print_deadlock_bug+0x5d0/0x5d0 [ 172.445503][ T7814] ? lockdep_lock+0xf5/0x230 [ 172.450120][ T7814] ? _find_first_zero_bit+0xd6/0x100 [ 172.455433][ T7814] __lock_acquire+0x37ef/0x7d80 [ 172.460294][ T7814] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.466465][ T7814] ? arch_stack_walk+0x160/0x190 [ 172.471413][ T7814] ? verify_lock_unused+0x140/0x140 [ 172.476708][ T7814] ? verify_lock_unused+0x140/0x140 [ 172.481916][ T7814] ? stack_trace_save+0xaa/0x100 [ 172.486882][ T7814] ? stack_trace_snprint+0xf0/0xf0 [ 172.492004][ T7814] ? __stack_depot_save+0x1f/0x660 [ 172.497124][ T7814] ? do_syscall_64+0x55/0xb0 [ 172.501730][ T7814] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.507812][ T7814] lock_acquire+0x19e/0x420 [ 172.512327][ T7814] ? super_lock+0x189/0x390 [ 172.516924][ T7814] ? __might_sleep+0xe0/0xe0 [ 172.521524][ T7814] ? read_lock_is_recursive+0x20/0x20 [ 172.526904][ T7814] ? __mutex_trylock_common+0x160/0x270 [ 172.532545][ T7814] ? trace_raw_output_contention_end+0xd0/0xd0 [ 172.538802][ T7814] down_read+0x46/0x2e0 [ 172.542964][ T7814] ? super_lock+0x189/0x390 [ 172.547473][ T7814] super_lock+0x189/0x390 [ 172.551806][ T7814] ? end_current_label_crit_section+0x170/0x170 [ 172.558054][ T7814] ? user_get_super+0x180/0x180 [ 172.562994][ T7814] ? mutex_lock_nested+0x20/0x20 [ 172.567945][ T7814] fs_bdev_sync+0xa4/0x170 [ 172.572370][ T7814] ? fs_bdev_mark_dead+0x1f0/0x1f0 [ 172.577500][ T7814] blkdev_common_ioctl+0x8a9/0x2580 [ 172.582717][ T7814] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 172.588367][ T7814] ? blkdev_bszset+0x1f0/0x1f0 [ 172.593146][ T7814] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 172.598628][ T7814] blkdev_ioctl+0x512/0x730 [ 172.603163][ T7814] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 172.608660][ T7814] ? bpf_lsm_file_ioctl+0x9/0x10 [ 172.613613][ T7814] ? security_file_ioctl+0x80/0xa0 [ 172.618766][ T7814] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 172.624299][ T7814] __se_sys_ioctl+0xfd/0x170 [ 172.629005][ T7814] do_syscall_64+0x55/0xb0 [ 172.633440][ T7814] ? clear_bhb_loop+0x40/0x90 [ 172.638130][ T7814] ? clear_bhb_loop+0x40/0x90 [ 172.642820][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.648829][ T7814] RIP: 0033:0x7f4f20b9e159 [ 172.653264][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.673144][ T7814] RSP: 002b:00007f4f21a2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.681571][ T7814] RAX: ffffffffffffffda RBX: 00007f4f20e25fa0 RCX: 00007f4f20b9e159 [ 172.689725][ T7814] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004 [ 172.697701][ T7814] RBP: 00007f4f20c3506b R08: 0000000000000000 R09: 0000000000000000 [ 172.705702][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.713849][ T7814] R13: 00007f4f20e26038 R14: 00007f4f20e25fa0 R15: 00007ffc92269f78 [ 172.721842][ T7814] [ 172.730550][ T7820] CPU: 1 PID: 7820 Comm: syz.4.505 Not tainted syzkaller #0 [ 172.737921][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.748021][ T7820] Call Trace: [ 172.751328][ T7820] [ 172.754278][ T7820] dump_stack_lvl+0x18c/0x250 [ 172.759082][ T7820] ? show_regs_print_info+0x20/0x20 [ 172.764312][ T7820] ? load_image+0x420/0x420 [ 172.768845][ T7820] ? __might_sleep+0xe0/0xe0 [ 172.773554][ T7820] ? __lock_acquire+0x7d80/0x7d80 [ 172.778610][ T7820] should_fail_ex+0x394/0x4c0 [ 172.783321][ T7820] should_failslab+0x9/0x20 [ 172.787873][ T7820] slab_pre_alloc_hook+0x59/0x300 [ 172.792941][ T7820] ? read_lock_is_recursive+0x20/0x20 [ 172.798340][ T7820] ? do_signalfd4+0x134/0x320 [ 172.803042][ T7820] __kmem_cache_alloc_node+0x53/0x250 [ 172.808452][ T7820] ? __lock_acquire+0x7d80/0x7d80 [ 172.813503][ T7820] ? do_signalfd4+0x134/0x320 [ 172.818293][ T7820] kmalloc_trace+0x2a/0xe0 [ 172.822922][ T7820] do_signalfd4+0x134/0x320 [ 172.827451][ T7820] __x64_sys_signalfd+0x132/0x170 [ 172.832498][ T7820] ? __ia32_sys_signalfd4+0x1a0/0x1a0 [ 172.837897][ T7820] do_syscall_64+0x55/0xb0 [ 172.842355][ T7820] ? clear_bhb_loop+0x40/0x90 [ 172.847067][ T7820] ? clear_bhb_loop+0x40/0x90 [ 172.851772][ T7820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.857699][ T7820] RIP: 0033:0x7f21e459e159 [ 172.862156][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.882069][ T7820] RSP: 002b:00007f21e5392028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 172.890525][ T7820] RAX: ffffffffffffffda RBX: 00007f21e4825fa0 RCX: 00007f21e459e159 [ 172.898705][ T7820] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 172.906758][ T7820] RBP: 00007f21e463506b R08: 0000000000000000 R09: 0000000000000000 [ 172.914752][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.922831][ T7820] R13: 00007f21e4826038 R14: 00007f21e4825fa0 R15: 00007ffdee7d6bc8 [ 172.930837][ T7820] [ 172.951837][ T5837] net_ratelimit: 8 callbacks suppressed [ 172.951854][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.063217][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.008118][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.087462][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.057406][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.087349][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.127463][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.135771][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.177586][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.207477][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.847884][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.167371][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.247350][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.487516][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.288368][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog