last executing test programs: 16m33.729109909s ago: executing program 32 (id=1036): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0200001800dd8d0000000000000000020000000000000500000000060015000500000098021680ab0101"], 0x2bc}}, 0x0) 14m39.242601803s ago: executing program 33 (id=2168): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff05, 0x0) 14m28.837503198s ago: executing program 34 (id=2242): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0xffffffff00000000}, 0x38) 13m35.902453203s ago: executing program 35 (id=2535): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="1291b6000000", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) 12m42.251187317s ago: executing program 36 (id=3124): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) 9m19.42801303s ago: executing program 9 (id=4537): timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x1, 0x0, &(0x7f0000000440)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0xdb, 0x10000) 9m18.983789626s ago: executing program 9 (id=4540): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 9m18.57865338s ago: executing program 9 (id=4544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @private=0xa010100}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) 9m18.017780596s ago: executing program 9 (id=4549): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x2141, 0x2, 0x10}, 0x18) 9m17.665816147s ago: executing program 9 (id=4550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x472, 0x20}, &(0x7f00000003c0)=0xc) 9m16.929527396s ago: executing program 9 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005500e50128bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01010300000000000000000000dde315ef00000108"], 0x38}}, 0x404a024) 9m15.469766475s ago: executing program 37 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005500e50128bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01010300000000000000000000dde315ef00000108"], 0x38}}, 0x404a024) 8m27.686869761s ago: executing program 6 (id=4830): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYRES8], 0x21, 0x554e, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 8m23.63349313s ago: executing program 6 (id=4858): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000a40)={0x0, &(0x7f0000000a00), 0x40}) 8m21.467778804s ago: executing program 6 (id=4872): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xfffe, 0x0, 0x3, 0x5}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000500)=0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) 8m20.962875382s ago: executing program 6 (id=4877): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@numtail}, {@numtail}, {@numtail}]}, 0x0, 0x2bd, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13489, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8m20.432420498s ago: executing program 6 (id=4882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) 8m19.752020827s ago: executing program 6 (id=4886): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0xfff, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18}}], 0x1, 0x4000000) 8m18.455716545s ago: executing program 38 (id=4886): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0xfff, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18}}], 0x1, 0x4000000) 5m47.12099484s ago: executing program 2 (id=5857): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 5m46.745920119s ago: executing program 2 (id=5862): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xc97}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 5m46.297648622s ago: executing program 2 (id=5868): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 5m45.696628594s ago: executing program 2 (id=5876): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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") setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 5m45.162783938s ago: executing program 2 (id=5879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m44.47632755s ago: executing program 2 (id=5886): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "91b212db"}}, {@nls={'nls', 0x3d, 'cp857'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@gid}]}, 0x3, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x182) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000003300)={0x18, 0x0, 0x0, {0x9}}, 0x18) 5m43.37450943s ago: executing program 39 (id=5886): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "91b212db"}}, {@nls={'nls', 0x3d, 'cp857'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@gid}]}, 0x3, 0x5d9, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x182) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000003300)={0x18, 0x0, 0x0, {0x9}}, 0x18) 4m14.653424615s ago: executing program 8 (id=6469): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000000000000040000000000000000000004000000008700000000000008030000000000000061"], 0x0, 0x5a}, 0x28) timer_create(0x8, &(0x7f0000000080)={0x0, 0x10, 0x0, @thr={&(0x7f0000000180), 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 4m14.110952329s ago: executing program 8 (id=6471): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) 4m13.698361805s ago: executing program 8 (id=6474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f00000003c0)="00000000490219002505a0a4210b010000000127188d4bf3309095f13dc423", 0x1f) 4m13.179602889s ago: executing program 8 (id=6478): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000240)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 4m11.948087729s ago: executing program 8 (id=6488): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r1, 0x9}, &(0x7f00000000c0)=0x8) 4m9.94126016s ago: executing program 8 (id=6498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 4m8.762023934s ago: executing program 40 (id=6498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 38.217286506s ago: executing program 5 (id=7726): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/pid\x00') open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r1], 0x4000) 37.606276852s ago: executing program 5 (id=7730): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0xfffffffffffffd6f, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x101}, {0x9, 0x0, 0x2, 0xb}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) 35.363329194s ago: executing program 5 (id=7735): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 34.550041383s ago: executing program 5 (id=7738): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 33.986601887s ago: executing program 5 (id=7741): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) ptrace(0x4206, r0) waitid(0x0, 0x0, &(0x7f0000000000), 0x2100000c, 0x0) 32.965549791s ago: executing program 5 (id=7745): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xa24c68e5f41c431f, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28004}, 0x0) 31.932545906s ago: executing program 41 (id=7745): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xa24c68e5f41c431f, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28004}, 0x0) 12.438672765s ago: executing program 1 (id=7814): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r0, 0x1210}], 0x1, 0x1ff8) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 12.060871355s ago: executing program 3 (id=7815): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) 10.837973569s ago: executing program 1 (id=7819): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x1, 0x6184, &(0x7f000000c780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x84, 0x0, &(0x7f0000000480)) 7.072129504s ago: executing program 1 (id=7826): unshare(0x6020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3855f026cbf8c41ff5b565176b461e9327059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a06e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x120) readahead(r0, 0x0, 0x6) 6.892727497s ago: executing program 3 (id=7828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_4={0x3, 0x1, 0x1, "91b5a771"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x2, "01"}, @main=@item_012={0x2, 0x0, 0x9, 'F\x00'}, @global=@item_4={0x3, 0x1, 0x1, "c8b27fe1"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) 6.391502119s ago: executing program 4 (id=7829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.196740612s ago: executing program 7 (id=7830): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 5.897721838s ago: executing program 3 (id=7831): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.790158924s ago: executing program 1 (id=7832): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, &(0x7f0000000680)="50d01f4ed5c0", 0x6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.569488824s ago: executing program 4 (id=7833): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.338576966s ago: executing program 0 (id=7834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 5.279540904s ago: executing program 7 (id=7835): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}], 0x30}}], 0x402, 0x4001c00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40400c5) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @raw32}], 0x1c) 4.663235608s ago: executing program 3 (id=7836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000011000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.607630233s ago: executing program 0 (id=7837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.081629514s ago: executing program 1 (id=7838): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 4.002237923s ago: executing program 4 (id=7839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004800}, 0x4800) 3.446326228s ago: executing program 3 (id=7840): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000640)='.\x00', 0x80000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r1, 0x0, 0x8e14, 0x8ffff) preadv2(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/44, 0x2c}], 0x1, 0x203a, 0x8000, 0x1) 3.340980396s ago: executing program 4 (id=7841): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) 3.260769031s ago: executing program 0 (id=7842): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) 3.189640463s ago: executing program 7 (id=7843): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) io_setup(0x4c6, &(0x7f0000001440)) 2.535622918s ago: executing program 3 (id=7844): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e) lseek(r0, 0x2, 0x1) 2.114369456s ago: executing program 0 (id=7845): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="825b", 0x2}], 0x1, &(0x7f0000000440)=[@iv={0x28, 0x117, 0x2, 0x10, "159e95e98b4d1ed5411a98b279503760"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40, 0x1}], 0x1, 0x80001) 2.082031075s ago: executing program 4 (id=7846): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x5, 0x400}, &(0x7f00000000c0)=0x10) 1.969098782s ago: executing program 1 (id=7847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x16, 0x2, "e6d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB='\x0006'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.170470048s ago: executing program 7 (id=7848): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) 1.012443667s ago: executing program 4 (id=7849): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000480)={0x0, 0xf, 0x12, "17ee21cc76f86c9419021212b368ed032504"}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 909.57396ms ago: executing program 0 (id=7850): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_virt_wifi\x00', {0x2, 0x4e1f, @broadcast}}) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 598.69857ms ago: executing program 7 (id=7851): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 429.156379ms ago: executing program 0 (id=7852): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4d12, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 7 (id=7853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0xf, 0x10, 0x0, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x6}, 0x8) kernel console output (not intermixed with test programs): fs directory [ 953.046270][T19441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.217310][T24340] program syz.1.6594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.269171][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.828196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.913317][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.913499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.537461][T24328] loop4: detected capacity change from 0 to 32768 [ 954.612767][T24328] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 954.705866][T24328] XFS (loop4): Ending clean mount [ 955.530192][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 956.389142][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.389331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.857585][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 957.155659][T24403] loop5: detected capacity change from 0 to 128 [ 957.647609][ T31] audit: type=1400 audit(1789518237.854:377): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=24412 comm="syz.4.6620" name=":" offset=33 [ 959.032242][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.032431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.783511][T24471] vivid-003: disconnect [ 959.819777][T24464] vivid-003: reconnect [ 960.611604][T24089] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 960.675628][T24089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.702355][T24089] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 960.749593][T24488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 960.785306][T24089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.788988][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 960.811223][T24089] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 960.858240][T24089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.878118][T24089] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 960.916014][T24089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.454024][T24506] loop5: detected capacity change from 0 to 256 [ 961.520508][T24506] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 961.614210][T24089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.702741][T22540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.702923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.763933][T24089] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.814269][T22540] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.814354][T22540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.892176][T22540] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.892278][T22540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.005197][T24512] loop1: detected capacity change from 0 to 256 [ 962.206269][T24518] loop4: detected capacity change from 0 to 128 [ 962.267180][T24518] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 962.267210][T24518] hpfs: filesystem error: improperly stopped [ 962.267225][T24518] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 962.267239][T24518] hpfs: You really don't want any checks? You are crazy... [ 962.267251][T24518] hpfs: Code page index out of array [ 962.267258][T24518] hpfs: code page support is disabled [ 962.267343][T24518] hpfs: hpfs_map_4sectors(): unaligned read [ 962.267404][T24518] hpfs: hpfs_map_4sectors(): unaligned read [ 962.267413][T24518] hpfs: filesystem error: unable to find root dir [ 962.835338][T24521] loop5: detected capacity change from 0 to 4096 [ 962.878940][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.922467][T24529] loop1: detected capacity change from 0 to 512 [ 962.923454][T24529] EXT4-fs: Ignoring removed i_version option [ 962.996821][T24529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 963.075500][T24529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.075584][T24529] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.376126][T24538] netlink: 'syz.3.6660': attribute type 4 has an invalid length. [ 963.796773][T24521] ntfs3(loop5): failed to convert "0080" to koi8-ru [ 963.806366][T24521] ntfs3(loop5): failed to convert name for inode 1e. [ 963.820571][T24521] ntfs3(loop5): ino=1f, mi_enum_attr [ 963.820652][T24521] ntfs3(loop5): failed to convert "256c" to koi8-ru [ 963.826903][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.724217][T24553] bond0: option arp_interval: invalid value (0x0000000000000000) [ 964.724243][T24553] bond0: option arp_interval: allowed values 0 - 2147483647 [ 964.791037][T22540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.791269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.197100][T24574] input: syz1 as /devices/virtual/input/input65 [ 965.222803][T24573] netlink: 8628 bytes leftover after parsing attributes in process `syz.0.6669'. [ 965.225044][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 965.793250][T24089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.079986][T24614] loop1: detected capacity change from 0 to 1024 [ 967.181123][T24621] loop5: detected capacity change from 0 to 1024 [ 967.325282][T24614] hfsplus: request for non-existent node 131072 in B*Tree [ 967.325301][T24614] hfsplus: request for non-existent node 131072 in B*Tree [ 967.349460][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.349626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.056837][T24089] veth0_vlan: entered promiscuous mode [ 968.123314][T24089] veth1_vlan: entered promiscuous mode [ 968.347496][T24089] veth0_macvtap: entered promiscuous mode [ 968.403448][T24089] veth1_macvtap: entered promiscuous mode [ 968.525966][T24089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.595884][T24089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.624269][T24642] netlink: 'syz.5.6690': attribute type 8 has an invalid length. [ 968.659819][T24642] bridge0: entered allmulticast mode [ 968.827013][T24645] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 968.874412][T22533] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.874938][T22533] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.898897][T22550] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.918545][T22517] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.541291][T22533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.541311][T22533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.801894][T22517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.801914][T22517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.193094][T24666] loop5: detected capacity change from 0 to 512 [ 970.224263][T24666] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 970.506002][T24666] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.6700: bg 0: block 104: invalid block bitmap [ 970.506036][T24666] loop5: lost filesystem error report for type 5 error -117 [ 970.508937][ C0] EXT4-fs (loop5): initial error at time 1789518250: ext4_validate_block_bitmap:436 [ 970.508967][ C0] EXT4-fs (loop5): last error at time 1789518250: ext4_validate_block_bitmap:436 [ 970.558027][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.558361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.634055][T24666] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 970.634079][T24666] loop5: lost filesystem error report for type 5 error -117 [ 970.637403][T24666] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6700: invalid indirect mapped block 1 (level 1) [ 970.637434][T24666] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 970.697789][T24666] EXT4-fs (loop5): 1 truncate cleaned up [ 970.734274][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6702'. [ 970.752870][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6702'. [ 970.789249][T24666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.341144][T19441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.741542][T24690] loop4: detected capacity change from 0 to 1024 [ 971.758176][ T5758] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 971.777059][T24690] EXT4-fs: Ignoring removed bh option [ 971.817334][T24690] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 971.909875][ T5758] usb 8-1: Using ep0 maxpacket: 32 [ 971.912221][ T5758] usb 8-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 971.932807][ T5758] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 971.932842][ T5758] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 971.932872][ T5758] usb 8-1: config 0 interface 0 has no altsetting 0 [ 971.932906][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.022919][T24690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.045670][ T5758] usb 8-1: config 0 descriptor?? [ 972.468701][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.796139][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.974827][ T5758] hid-alps 0003:044E:120B.0044: failed read register (-71) [ 972.974907][ T5758] hid-alps 0003:044E:120B.0044: failed U1_DEV_CTRL_1 (-71) [ 973.005302][ T5758] hid-alps 0003:044E:120B.0044: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.7-1/input0 [ 973.043494][ T5758] usb 8-1: USB disconnect, device number 4 [ 973.115520][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.115679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.554590][T24722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.616304][T24717] fido_id[24717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 974.236511][T24699] loop1: detected capacity change from 0 to 32768 [ 974.282617][T24699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6708 (24699) [ 974.323743][T24699] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 974.323772][T24699] BTRFS info (device loop1): using crc32c checksum algorithm [ 974.573390][T24699] BTRFS info (device loop1): setting nodatasum [ 974.573414][T24699] BTRFS info (device loop1): enabling ssd optimizations [ 974.573429][T24699] BTRFS info (device loop1): disabling tree log [ 974.577172][T24699] BTRFS info (device loop1): turning on async discard [ 974.577197][T24699] BTRFS info (device loop1): enabling free space tree [ 974.577212][T24699] BTRFS info (device loop1): enabling auto defrag [ 974.788164][T24699] BTRFS critical (device loop1 state E): emergency shutdown [ 975.000468][T24764] loop7: detected capacity change from 0 to 256 [ 975.141103][T18409] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 975.363572][T24764] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 975.706338][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.706516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.330270][T22281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 976.330299][T22281] CPU: 0 UID: 0 PID: 22281 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.330332][T22281] Tainted: [L]=SOFTLOCKUP [ 976.330341][T22281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 976.330356][T22281] Workqueue: hci1 hci_rx_work [ 976.330397][T22281] Call Trace: [ 976.330406][T22281] [ 976.330417][T22281] dump_stack_lvl+0xe8/0x150 [ 976.330453][T22281] sysfs_create_dir_ns+0x271/0x2a0 [ 976.330487][T22281] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 976.330520][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330543][T22281] ? do_raw_spin_unlock+0xf5/0x200 [ 976.330577][T22281] kobject_add_internal+0x622/0xcd0 [ 976.330618][T22281] kobject_add+0x163/0x240 [ 976.330642][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330672][T22281] ? __pfx_kobject_add+0x10/0x10 [ 976.330696][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330721][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330748][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330771][T22281] ? get_device_parent+0x366/0x3a0 [ 976.330796][T22281] device_add+0x3fa/0xb80 [ 976.330821][T22281] hci_conn_add_sysfs+0xd5/0x210 [ 976.330855][T22281] le_conn_complete_evt+0xfe3/0x16d0 [ 976.330888][T22281] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 976.330915][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330937][T22281] ? __mutex_unlock_slowpath+0x731/0x900 [ 976.330964][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.330987][T22281] ? skb_pull_data+0xf0/0x200 [ 976.331022][T22281] hci_le_enh_conn_complete_evt+0x189/0x490 [ 976.331048][T22281] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 976.331077][T22281] hci_event_packet+0x67a/0xf10 [ 976.331116][T22281] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 976.331138][T22281] ? __pfx_hci_event_packet+0x10/0x10 [ 976.331175][T22281] ? audit_filter_rules+0x4f90/0x5d10 [ 976.331204][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331227][T22281] ? hci_send_to_monitor+0xe2/0x590 [ 976.331258][T22281] hci_rx_work+0x3ee/0x1020 [ 976.331297][T22281] ? process_scheduled_works+0x97a/0x1630 [ 976.331325][T22281] process_scheduled_works+0xc3d/0x1630 [ 976.331352][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331403][T22281] ? __pfx_process_scheduled_works+0x10/0x10 [ 976.331436][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331459][T22281] ? assign_work+0x3cf/0x5d0 [ 976.331490][T22281] worker_thread+0xa47/0xfb0 [ 976.331521][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331553][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331580][T22281] ? __kthread_parkme+0x71/0x1f0 [ 976.331623][T22281] kthread+0x38b/0x480 [ 976.331643][T22281] ? __pfx_worker_thread+0x10/0x10 [ 976.331669][T22281] ? __pfx_kthread+0x10/0x10 [ 976.331691][T22281] ret_from_fork+0x514/0xb70 [ 976.331713][T22281] ? __pfx_ret_from_fork+0x10/0x10 [ 976.331732][T22281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.331756][T22281] ? __switch_to+0xc89/0x1420 [ 976.331787][T22281] ? __pfx_kthread+0x10/0x10 [ 976.331808][T22281] ret_from_fork_asm+0x1a/0x30 [ 976.331855][T22281] [ 976.331906][T22281] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 976.331942][T22281] Bluetooth: hci1: failed to register connection device [ 977.067351][T24787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 977.067496][T24787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 977.067619][T24787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 977.067670][T24787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 977.113352][T24787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 977.143602][T24795] jffs2: jffs2_scan_eraseblock(): Node at 0x00000000 {0x1985, 0x2003, 0xba00000c) has invalid CRC 0xe41eb03b (calculated 0xcfaaea23) [ 977.143633][T24795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 977.143649][T24795] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb03b instead [ 977.144309][T24795] jffs2: notice: (24795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 977.410404][T24787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 978.229256][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.229433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.452339][T24828] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6744'. [ 979.108764][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 979.108826][ T5621] Bluetooth: hci0: command 0x0405 tx timeout [ 979.108852][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 979.744505][T24854] loop4: detected capacity change from 0 to 2048 [ 979.766781][T24854] EXT4-fs: Ignoring removed bh option [ 979.766805][T24854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 979.823350][T24854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 980.114837][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.460770][T24869] loop4: detected capacity change from 0 to 16 [ 980.477731][T24869] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 980.704734][T24873] loop5: detected capacity change from 0 to 2048 [ 980.859831][T24873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.897681][T24834] loop7: detected capacity change from 0 to 32768 [ 981.188604][T22281] Bluetooth: hci1: command 0x0c1a tx timeout [ 981.439168][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.439353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.656172][T24865] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 981.656212][T24865] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 981.656247][T24865] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 982.027851][T24865] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 982.076630][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.112655][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.113073][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.364412][T24865] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 982.467202][T24891] loop5: detected capacity change from 0 to 2048 [ 982.683016][T24895] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 982.810078][T24891] syz.5.6767: attempt to access beyond end of device [ 982.810078][T24891] loop5: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048 [ 982.810111][T24891] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 983.268832][T22281] Bluetooth: hci1: command 0x0c1a tx timeout [ 983.328924][T24902] loop5: detected capacity change from 0 to 256 [ 983.357002][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.357211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.443551][T24902] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 983.604742][T24880] loop1: detected capacity change from 0 to 32768 [ 983.642103][T24880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6763 (24880) [ 983.726662][T24880] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 983.726692][T24880] BTRFS info (device loop1): using crc32c checksum algorithm [ 984.654758][T24927] loop7: detected capacity change from 0 to 256 [ 984.674604][T24927] FAT-fs (loop7): Directory bread(block 1285) failed [ 984.674635][T24927] FAT-fs (loop7): Directory bread(block 1286) failed [ 984.674656][T24927] FAT-fs (loop7): Directory bread(block 1287) failed [ 984.674802][T24927] FAT-fs (loop7): Directory bread(block 1288) failed [ 984.785722][T24927] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 985.215995][ T5762] kernel read not supported for file /input/mice (pid: 5762 comm: kworker/0:5) [ 985.295134][T24880] BTRFS error (device loop1): open_ctree failed: -EINTR [ 985.350976][T22281] Bluetooth: hci1: command 0x0c1a tx timeout [ 986.114367][T24954] netlink: 'syz.5.6784': attribute type 1 has an invalid length. [ 986.114388][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6784'. [ 986.114404][T24954] netlink: 'syz.5.6784': attribute type 1 has an invalid length. [ 986.114417][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6784'. [ 986.247262][T24954] iwpm_send_hello: Unable to send a nlmsg [ 986.384371][T24958] overlayfs: upper fs does not support file handles, falling back to index=off. [ 986.384388][T24958] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 986.742633][T24968] loop5: detected capacity change from 0 to 64 [ 987.200704][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.200884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.342230][T24976] loop1: detected capacity change from 0 to 512 [ 987.368640][T24976] EXT4-fs: Ignoring removed nobh option [ 987.386757][T24976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 987.432775][T24976] EXT4-fs (loop1): 1 truncate cleaned up [ 987.454979][T24976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.604797][T24985] binder: 24981:24985 ioctl c018620c 200000000200 returned -1 [ 987.732015][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.309428][ T5874] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 988.423967][T24972] Trying to free block not in datazone [ 988.460171][ T5874] usb 8-1: Using ep0 maxpacket: 8 [ 988.462305][ T5874] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 988.464842][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 988.464893][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.529946][ T5874] usb 8-1: config 0 descriptor?? [ 988.829740][ T5874] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 989.052662][ T5874] usb 8-1: USB disconnect, device number 5 [ 989.112126][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.112318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.322802][T25038] ip_tables: iptables: counters copy to user failed while replacing table [ 991.179142][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.636670][T25029] loop5: detected capacity change from 0 to 32768 [ 991.669815][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.750195][T25029] JBD2: Ignoring recovery information on journal [ 991.947746][T25029] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 992.321085][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.515832][T19441] ocfs2: Unmounting device (7,5) on (node local) [ 992.951732][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.951912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.264529][T25107] loop4: detected capacity change from 0 to 256 [ 994.265941][T25107] exfat: Deprecated parameter 'utf8' [ 994.291976][T25107] exfat: Deprecated parameter 'namecase' [ 994.292032][T25107] exfat: Deprecated parameter 'namecase' [ 994.396035][T25107] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 994.768970][T25111] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 994.869704][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.869881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.168220][T25086] loop1: detected capacity change from 0 to 32768 [ 995.192224][T25086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6830 (25086) [ 995.228987][T25086] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 995.229019][T25086] BTRFS info (device loop1): using crc32c checksum algorithm [ 995.268418][T25119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.525653][T25086] BTRFS info (device loop1): enabling ssd optimizations [ 995.525679][T25086] BTRFS info (device loop1): turning on async discard [ 995.525694][T25086] BTRFS info (device loop1): enabling free space tree [ 995.585325][T25083] loop5: detected capacity change from 0 to 40427 [ 995.624159][T25083] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 995.624188][T25083] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 995.627585][T25083] F2FS-fs (loop5): invalid crc value [ 995.755627][T25083] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 996.133931][T18409] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 998.088649][ T31] audit: type=1400 audit(1789518278.294:378): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=25174 comm="syz.5.6854" name="unknown" offset=28 [ 998.671194][T25186] loop7: detected capacity change from 0 to 512 [ 998.729641][T25186] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 998.784278][T25186] EXT4-fs (loop7): 1 truncate cleaned up [ 998.812172][T25186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.210569][T24089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.991889][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.992079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.992924][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.993116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.513415][T25179] loop4: detected capacity change from 0 to 32768 [ 1000.658974][T25179] JBD2: Ignoring recovery information on journal [ 1000.845234][T25179] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1001.269189][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.591822][ T5874] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1001.779721][ T5874] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1001.780631][ T5874] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1001.780653][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.780671][ T5874] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1001.839873][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1001.839900][ T5874] usb 8-1: Product: syz [ 1001.839914][ T5874] usb 8-1: Manufacturer: syz [ 1001.839928][ T5874] usb 8-1: SerialNumber: syz [ 1001.878833][ T5874] usb 8-1: config 0 descriptor?? [ 1002.094272][T13735] usb 8-1: USB disconnect, device number 6 [ 1002.486439][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 1003.522788][T25262] loop7: detected capacity change from 0 to 4096 [ 1003.639137][T25268] bridge0: left allmulticast mode [ 1003.738979][T25271] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.782948][T25288] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1004.782970][T25288] syzkaller0: owner set to 0 [ 1004.934919][T25294] program syz.4.6894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.109164][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.109368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.459069][T25306] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1005.516146][T25305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.553802][T25306] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1005.752307][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.752501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.021985][T25341] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6910'. [ 1007.565634][T25353] loop4: detected capacity change from 0 to 256 [ 1007.643943][T25353] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 1008.213193][T25362] loop5: detected capacity change from 0 to 1024 [ 1008.247853][T25362] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1009.812379][T25395] nbd: socks must be embedded in a SOCK_ITEM attr [ 1009.966734][ T5646] udevd[5646]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 1010.701004][T25413] No such timeout policy "syz1" [ 1010.870595][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.871217][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.871401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.872299][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.872442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.792702][T25434] loop7: detected capacity change from 0 to 4096 [ 1011.901039][T25442] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1011.939366][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1011.983306][T25434] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1012.327388][T25434] Remounting filesystem read-only [ 1012.758020][ T5874] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1012.908150][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 1012.908783][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1012.910073][ T5874] usb 5-1: config 0 has no interfaces? [ 1012.946015][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.946038][ T5874] usb 5-1: Product: syz [ 1012.946053][ T5874] usb 5-1: Manufacturer: syz [ 1012.946067][ T5874] usb 5-1: SerialNumber: syz [ 1012.990306][ T5874] usb 5-1: config 0 descriptor?? [ 1013.273739][T13735] usb 5-1: USB disconnect, device number 28 [ 1013.401526][ T31] audit: type=1807 audit(1789518301.614:379): UNKNOWN=? res=0 [ 1013.401565][ T31] audit: type=1802 audit(1789518301.614:380): pid=25460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.6955" res=0 errno=0 [ 1013.448689][T25459] ima: policy update failed [ 1013.449005][ T31] audit: type=1802 audit(1789518301.664:381): pid=25459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.6955" res=0 errno=0 [ 1013.746578][T25431] loop1: detected capacity change from 0 to 32768 [ 1014.377285][T25473] loop4: detected capacity change from 0 to 256 [ 1014.822622][T25482] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6962'. [ 1014.822659][T25482] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6962'. [ 1015.111523][T25489] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6965'. [ 1015.762907][T25501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.763127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.211716][T25514] macvlan1: entered allmulticast mode [ 1016.370723][T25516] veth1_vlan: entered allmulticast mode [ 1016.370794][T25516] macvlan1: left allmulticast mode [ 1016.370807][T25516] veth1_vlan: left allmulticast mode [ 1016.629171][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.629361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.630394][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.630570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.246351][T25534] loop4: detected capacity change from 0 to 4096 [ 1017.265566][T25534] EXT4-fs: Ignoring removed nobh option [ 1017.265626][T25534] EXT4-fs: Ignoring removed bh option [ 1017.289174][T25534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1017.335914][T25534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.443635][T25490] loop1: detected capacity change from 0 to 32768 [ 1017.527230][T25544] ieee802154 phy1 wpan1: encryption failed: -22 [ 1018.183484][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.470758][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.239747][T25613] loop1: detected capacity change from 0 to 2048 [ 1021.327226][T25613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.413756][T25613] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.7013: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1021.689917][T25613] EXT4-fs (loop1): Remounting filesystem read-only [ 1021.775833][T25613] CacheFiles: Lookup cache failed with error -117 [ 1021.775892][T25613] CacheFiles: Failed to register: -117 [ 1022.068262][ T5874] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1022.219591][ T5874] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1022.223318][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.223340][ T5874] usb 6-1: Product: syz [ 1022.223354][ T5874] usb 6-1: Manufacturer: syz [ 1022.223368][ T5874] usb 6-1: SerialNumber: syz [ 1022.389942][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.390127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.390774][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.390938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.540794][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.672233][ T5874] rtl8150 6-1:1.0: couldn't reset the device [ 1022.672500][ T5874] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1022.717155][ T5874] usb 6-1: USB disconnect, device number 21 [ 1022.760755][ T31] audit: type=1326 audit(1789518310.974:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25636 comm="syz.7.7020" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f244079e159 code=0x0 [ 1024.153792][ T5762] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1024.207105][T25665] [ 1024.320127][ T5762] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1024.323174][ T5762] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1024.323198][ T5762] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1024.333367][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1024.333391][ T5762] usb 8-1: Product: syz [ 1024.333404][ T5762] usb 8-1: Manufacturer: syz [ 1024.425479][ T5762] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 1024.463705][ T5762] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 1024.705768][T25673] ip_tables: iptables: counters copy to user failed while replacing table [ 1026.237152][T25662] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 1026.256256][T13735] usb 8-1: USB disconnect, device number 7 [ 1026.301695][T13735] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1026.302257][T13735] iuu_phoenix 8-1:1.0: device disconnected [ 1028.003255][T25697] loop1: detected capacity change from 0 to 32768 [ 1028.122704][T25697] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1028.151622][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.151848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.152217][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.152371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.299587][T25697] XFS (loop1): Ending clean mount [ 1028.607280][T18409] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1029.812763][T25750] loop7: detected capacity change from 0 to 1024 [ 1030.069900][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.073641][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7060'. [ 1030.531041][T25767] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 1030.616593][T25770] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 1031.281968][T25786] batman_adv: batadv0: Adding interface: gretap1 [ 1031.281986][T25786] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.282012][T25786] batman_adv: batadv0: Interface activated: gretap1 [ 1032.579123][ T5762] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1032.730775][ T5762] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1032.736540][ T5762] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.766435][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1032.766459][ T5762] usb 8-1: Product: syz [ 1032.766473][ T5762] usb 8-1: Manufacturer: syz [ 1032.820216][ T5762] navman 8-1:1.0: navman converter detected [ 1032.943491][ T5762] usb 8-1: navman converter now attached to ttyUSB0 [ 1033.052070][ T5762] usb 8-1: USB disconnect, device number 8 [ 1033.082018][ T5762] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1033.082538][ T5762] navman 8-1:1.0: device disconnected [ 1033.271750][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.271925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.702888][T25842] netlink: 124 bytes leftover after parsing attributes in process `syz.5.7087'. [ 1033.915856][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.916034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.069275][T25846] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1034.180248][T25851] netlink: 'syz.5.7091': attribute type 83 has an invalid length. [ 1034.285439][T25854] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1034.311388][T25844] loop7: detected capacity change from 0 to 4096 [ 1034.333087][T25844] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1034.536690][T25844] ntfs3(loop7): ino=19, mi_enum_attr [ 1034.551025][T25844] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 1034.733219][T25864] sd 0:0:1:0: PR command failed: 1026 [ 1034.733269][T25864] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1034.733307][T25864] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1035.243757][T25871] ip6gretap1: entered allmulticast mode [ 1035.282648][T25871] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1035.282666][T25871] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.282695][T25871] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1035.414374][T25874] fuse: fd is not a fuse device [ 1035.834490][T25880] loop4: detected capacity change from 0 to 1024 [ 1036.785324][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1036.841064][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1036.841168][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1036.841257][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1036.841351][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1036.841439][T25898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1037.934472][T25913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7117'. [ 1038.066411][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7120'. [ 1038.311563][T22517] net_ratelimit: 891 callbacks suppressed [ 1038.311583][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.311763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.818312][ T5874] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1038.968573][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1038.970935][ T5874] usb 6-1: New USB device found, idVendor=0079, idProduct=1942, bcdDevice=28.1e [ 1038.974001][ T5874] usb 6-1: config 249 has an invalid interface number: 214 but max is 0 [ 1038.974025][ T5874] usb 6-1: config 249 has no interface number 0 [ 1038.974060][ T5874] usb 6-1: config 249 interface 214 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1038.974086][ T5874] usb 6-1: config 249 interface 214 has no altsetting 0 [ 1039.042834][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.042860][ T5874] usb 6-1: Product: syz [ 1039.042874][ T5874] usb 6-1: Manufacturer: syz [ 1039.042888][ T5874] usb 6-1: SerialNumber: syz [ 1039.453933][ T5874] usb 6-1: USB disconnect, device number 22 [ 1039.670033][T13735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.809888][T25959] loop1: detected capacity change from 0 to 512 [ 1039.828473][T25959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1039.876481][T25959] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.7139: bad orphan inode 131083 [ 1039.876509][T25959] loop1: lost filesystem error report for type 5 error -117 [ 1039.898815][T25959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.919995][ T5758] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1040.098454][ T5758] usb 8-1: Using ep0 maxpacket: 8 [ 1040.099218][ T5758] usb 8-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1040.101250][ T5758] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.101279][ T5758] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.101301][ T5758] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.101325][ T5758] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1040.101355][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.180691][ T5758] usb 8-1: config 0 descriptor?? [ 1040.704559][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704587][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704607][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704626][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704646][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704665][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704684][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704703][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704722][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.704741][ T5758] waltop 0003:172F:0034.0045: unknown main item tag 0x0 [ 1040.795233][T25973] input input67: cannot allocate more than FF_MAX_EFFECTS effects [ 1040.807475][ T5758] waltop 0003:172F:0034.0045: hidraw0: USB HID v0.00 Device [HID 172f:0034] on usb-dummy_hcd.7-1/input0 [ 1040.930334][ T5758] usb 8-1: USB disconnect, device number 9 [ 1041.238891][T25981] loop4: detected capacity change from 0 to 512 [ 1041.259778][T25975] fido_id[25975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1041.304064][T25981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.304156][T25981] ext4 filesystem being mounted at /1245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.654684][ T5758] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1041.809699][ T5758] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1041.810280][ T5758] usb 6-1: config 0 has no interfaces? [ 1041.810310][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.813514][ T5758] usb 6-1: config 0 descriptor?? [ 1042.088587][ T5874] usb 6-1: USB disconnect, device number 23 [ 1042.204816][T25997] xt_hashlimit: size too large, truncated to 1048576 [ 1042.297414][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.558982][T26002] loop7: detected capacity change from 0 to 512 [ 1042.559935][T26002] EXT4-fs: Ignoring removed nobh option [ 1042.659919][T26002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.660027][T26002] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.019640][T24089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.123870][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.427195][T26013] loop7: detected capacity change from 0 to 8 [ 1043.509881][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.510055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.069040][T26046] loop5: detected capacity change from 0 to 128 [ 1045.095248][T26046] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1045.408771][T26046] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1045.411860][T26046] ext2 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.671509][ T31] audit: type=1326 audit(1789518333.884:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.1.7181" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dfd79e159 code=0x0 [ 1045.782857][T19441] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1045.973222][T26064] program syz.0.7184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.889757][T26051] loop7: detected capacity change from 0 to 32768 [ 1046.913197][T26051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7177 (26051) [ 1047.184073][T26051] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1047.184104][T26051] BTRFS info (device loop7): using crc32c checksum algorithm [ 1047.402686][T26051] BTRFS info (device loop7): enabling ssd optimizations [ 1047.402712][T26051] BTRFS info (device loop7): turning on flush-on-commit [ 1047.402728][T26051] BTRFS info (device loop7): enabling free space tree [ 1047.402743][T26051] BTRFS info (device loop7): enabling auto defrag [ 1047.402760][T26051] BTRFS info (device loop7): use lzo compression, level 1 [ 1047.402778][T26051] BTRFS info (device loop7): max_inline set to 4096 [ 1047.989631][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.989803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.312186][T24089] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1049.271128][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.272139][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.272321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.323063][T26132] loop7: detected capacity change from 0 to 8192 [ 1049.754074][T26148] loop1: detected capacity change from 0 to 1024 [ 1049.821287][T26148] EXT4-fs: Ignoring removed oldalloc option [ 1049.872066][T26148] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1049.959804][T26148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7214'. [ 1050.055384][T26155] loop4: detected capacity change from 0 to 16 [ 1050.099866][T26155] erofs (device loop4): mounted with root inode @ nid 36. [ 1050.139294][ T5758] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1050.298079][ T5758] usb 6-1: Using ep0 maxpacket: 8 [ 1050.298674][ T5758] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1050.304656][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.304678][ T5758] usb 6-1: Product: syz [ 1050.304692][ T5758] usb 6-1: Manufacturer: syz [ 1050.304706][ T5758] usb 6-1: SerialNumber: syz [ 1050.358474][ T5758] usb 6-1: config 0 descriptor?? [ 1050.404175][ T5758] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1051.038555][T26165] loop1: detected capacity change from 0 to 1764 [ 1051.302356][ T5758] gspca_sonixj: reg_r err -71 [ 1051.302426][ T5758] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1051.324236][ T5758] usb 6-1: USB disconnect, device number 24 [ 1051.519041][T26171] loop4: detected capacity change from 0 to 8 [ 1052.478409][ T5874] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1052.517068][T26193] program syz.0.7236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.630164][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1052.899409][T26195] loop4: detected capacity change from 0 to 4096 [ 1053.156743][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1053.156789][ T5874] usb 6-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 1053.179653][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1053.179686][ T5874] usb 6-1: can't read configurations, error -71 [ 1053.422618][T26208] input: syz1 as /devices/virtual/input/input69 [ 1053.752228][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.752416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.754674][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.977437][T26213] loop4: detected capacity change from 0 to 128 [ 1054.342697][ T31] audit: type=1326 audit(1789518342.554:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26220 comm="syz.7.7249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244079e159 code=0x0 [ 1054.957513][T26234] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1055.008539][T26234] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1055.031472][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.031662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.062830][T26232] loop1: detected capacity change from 0 to 4096 [ 1055.341428][T26241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1055.688699][ T5758] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1055.759969][ T5874] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1055.838882][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 1055.840649][ T5758] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1055.844015][ T5758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.844046][ T5758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.844080][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.905559][ T5758] usb 5-1: config 0 descriptor?? [ 1055.916025][ T5874] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1055.927695][ T5874] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.927740][ T5874] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1055.927766][ T5874] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1055.927792][ T5874] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.927835][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.013239][ T5758] hub 5-1:0.0: USB hub found [ 1056.176614][ T5758] hub 5-1:0.0: 1 port detected [ 1056.484201][ T5874] gud 8-1:1.0: No supported pixel formats found [ 1056.484228][ T5874] gud 8-1:1.0: probe with driver gud failed with error -22 [ 1056.623182][T26256] loop1: detected capacity change from 0 to 1024 [ 1056.647209][ T5758] usb 5-1: USB disconnect, device number 29 [ 1056.789663][T26256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.951375][ T5874] usb 8-1: USB disconnect, device number 10 [ 1057.141713][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.744584][T26280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.744821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745065][T26280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745393][T26280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745736][T26280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.745876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.982154][T26286] loop7: detected capacity change from 0 to 256 [ 1058.064407][T26286] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 1059.698567][T26311] netlink: 'syz.0.7289': attribute type 3 has an invalid length. [ 1059.949194][T26313] loop5: detected capacity change from 0 to 4096 [ 1060.067745][T26318] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1060.439380][T26322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7294'. [ 1060.575505][T26324] loop1: detected capacity change from 0 to 128 [ 1060.658340][T26324] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1060.658368][T26324] FAT-fs (loop1): Filesystem has been set read-only [ 1060.837019][T22517] net_ratelimit: 2043 callbacks suppressed [ 1060.837041][T22517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.837227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.262450][T26332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1061.624557][T26337] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7300'. [ 1062.248136][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1062.451051][T26357] loop5: detected capacity change from 0 to 64 [ 1063.724406][T26372] loop5: detected capacity change from 0 to 256 [ 1064.337800][T26375] loop1: detected capacity change from 0 to 1764 [ 1064.884722][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.884906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.885138][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.885298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.885473][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.885668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.885832][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.846611][T26385] net_ratelimit: 617 callbacks suppressed [ 1065.846632][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.846843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.847082][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.847228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.847434][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.847594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.847754][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.848094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.926342][T26385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.926539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.966186][T26400] loop7: detected capacity change from 0 to 512 [ 1067.014697][T26400] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1067.014718][T26400] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1067.071394][T26400] EXT4-fs (loop7): 1 truncate cleaned up [ 1067.092119][T26400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.584660][T26400] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #12: comm syz.7.7329: bad extra_isize 62 (inode size 256) [ 1068.121144][T26389] loop4: detected capacity change from 0 to 32768 [ 1068.142078][T26389] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7324 (26389) [ 1068.197409][T26389] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1068.197440][T26389] BTRFS info (device loop4): using crc32c checksum algorithm [ 1068.392218][T24089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.877437][T26389] BTRFS error (device loop4): open_ctree failed: -EINTR [ 1068.927593][T26436] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7337'. [ 1069.200816][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7339'. [ 1069.200855][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7339'. [ 1069.413128][ T1105] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.415192][T22550] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.415229][T22550] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.415259][T22550] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.812745][T26468] loop4: detected capacity change from 0 to 512 [ 1071.272969][T26474] overlayfs: failed to clone upperpath [ 1071.322616][T26474] overlayfs: failed to clone lowerpath [ 1071.355789][T26469] loop7: detected capacity change from 0 to 4096 [ 1071.413469][T26469] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1071.824801][T26469] ntfs3(loop7): ino=19, mi_enum_attr [ 1072.124448][T26489] loop5: detected capacity change from 0 to 128 [ 1072.161388][T26489] FAT-fs (loop5): Directory bread(block 1048) failed [ 1072.161420][T26489] FAT-fs (loop5): Directory bread(block 1049) failed [ 1072.161441][T26489] FAT-fs (loop5): Directory bread(block 1050) failed [ 1072.161462][T26489] FAT-fs (loop5): Directory bread(block 1051) failed [ 1072.161484][T26489] FAT-fs (loop5): Directory bread(block 1052) failed [ 1072.161506][T26489] FAT-fs (loop5): Directory bread(block 1053) failed [ 1072.161527][T26489] FAT-fs (loop5): Directory bread(block 1054) failed [ 1072.161548][T26489] FAT-fs (loop5): Directory bread(block 1055) failed [ 1072.310954][ T1105] net_ratelimit: 1421 callbacks suppressed [ 1072.310973][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.311162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.237584][T26497] loop4: detected capacity change from 0 to 2048 [ 1073.321638][T26497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.321728][T26497] ext4 filesystem being mounted at /1284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.902023][T26497] fs-verity (loop4, inode 13): Error -4 building Merkle tree [ 1074.121024][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.433476][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.433649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.519361][ T5758] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1075.671780][ T5758] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1075.674622][ T5758] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.674648][ T5758] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.674683][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.039658][ T5758] usb 6-1: GET_CAPABILITIES returned 0 [ 1076.039701][ T5758] usbtmc 6-1:16.0: can't read capabilities [ 1076.324679][ T5762] usb 6-1: USB disconnect, device number 27 [ 1076.764843][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.904562][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.990090][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.148491][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.469674][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.530068][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.655408][T26553] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1078.415791][T26553] loop7: detected capacity change from 0 to 131072 [ 1078.449881][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.450043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.455237][T26553] F2FS-fs (loop7): invalid crc value [ 1078.556458][T26553] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1078.582298][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.587310][T26553] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1078.644758][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.664264][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.722762][T26555] input: syz1 as /devices/virtual/input/input75 [ 1080.112439][T26570] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1080.112583][T26570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1080.112703][T26570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1080.191782][T26576] gretap0: entered promiscuous mode [ 1081.070023][T26588] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1081.232768][T26592] loop1: detected capacity change from 0 to 64 [ 1081.271236][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.271527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.667885][T26598] xt_hashlimit: size too large, truncated to 1048576 [ 1081.982693][T26594] xt_hashlimit: size too large, truncated to 1048576 [ 1082.149527][T22281] Bluetooth: hci1: command 0x0c1a tx timeout [ 1082.153609][ T5621] Bluetooth: hci0: command 0x0405 tx timeout [ 1082.153642][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 1082.587640][T26611] loop1: detected capacity change from 0 to 1024 [ 1082.697112][T26611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.755927][T26611] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.896368][T26610] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.7406: lblock 0 mapped to illegal pblock 0 (length 1) [ 1082.989443][T26619] loop4: detected capacity change from 0 to 128 [ 1083.081544][T26611] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.7406: lblock 0 mapped to illegal pblock 0 (length 1) [ 1083.253458][T26619] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1083.253506][T26619] hpfs: filesystem error: improperly stopped [ 1083.253520][T26619] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1083.253534][T26619] hpfs: You really don't want any checks? You are crazy... [ 1083.332020][T26619] hpfs: hpfs_map_sector(): read error [ 1083.332037][T26619] hpfs: code page support is disabled [ 1083.332138][T26619] hpfs: hpfs_map_4sectors(): unaligned read [ 1083.332195][T26619] hpfs: hpfs_map_4sectors(): unaligned read [ 1083.332204][T26619] hpfs: filesystem error: unable to find root dir [ 1083.579559][T26611] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.7406: lblock 0 mapped to illegal pblock 0 (length 1) [ 1083.673323][T26624] loop5: detected capacity change from 0 to 512 [ 1083.722602][T26624] EXT4-fs: Ignoring removed orlov option [ 1083.741295][T26624] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1083.781349][T26624] EXT4-fs (loop5): 1 truncate cleaned up [ 1083.804357][T26624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.837211][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.837394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.966392][T26611] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.7406: lblock 0 mapped to illegal pblock 0 (length 1) [ 1083.995322][T26611] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.7406: lblock 0 mapped to illegal pblock 0 (length 1) [ 1084.228674][T26607] Bluetooth: hci1: command 0x0c1a tx timeout [ 1084.231667][T26615] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1084.301372][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1084.467521][T19441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.767527][T26639] macsec0: entered promiscuous mode [ 1084.823360][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1084.989122][T26639] veth1_macvtap: left promiscuous mode [ 1085.161772][T26639] macsec0 (unregistering): left promiscuous mode [ 1085.357187][T26645] loop4: detected capacity change from 0 to 4096 [ 1085.465350][T26645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.861197][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.405987][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.406173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.819868][ T5762] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1086.968997][ T5762] usb 8-1: Using ep0 maxpacket: 16 [ 1086.971670][ T5762] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1086.976259][ T5762] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1086.976280][ T5762] usb 8-1: config 0 has no interface number 0 [ 1086.976314][ T5762] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1086.976336][ T5762] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1087.069436][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.069462][ T5762] usb 8-1: Product: syz [ 1087.069475][ T5762] usb 8-1: Manufacturer: syz [ 1087.069489][ T5762] usb 8-1: SerialNumber: syz [ 1087.109750][ T5762] usb 8-1: config 0 descriptor?? [ 1087.111295][T26668] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1087.111413][T26668] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1087.171635][T26676] loop4: detected capacity change from 0 to 1024 [ 1087.200514][T26676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1087.281890][T26676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.397576][T26668] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1087.397694][T26668] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1087.625545][ T5762] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1087.669462][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.670088][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.670563][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.824130][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.317113][ T5762] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1088.317142][ T5762] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1088.329690][ T5762] asix 8-1:0.34: probe with driver asix failed with error -71 [ 1088.388539][ T5762] usb 8-1: USB disconnect, device number 11 [ 1088.954720][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.954900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.206789][T26721] bond1: option ad_user_port_key: invalid value (51586) [ 1090.206813][T26721] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1090.262593][T26721] bond1 (unregistering): Released all slaves [ 1091.414825][T26741] loop1: detected capacity change from 0 to 2048 [ 1091.581054][T26741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.017522][T26739] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1092.157394][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.157592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.773456][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.059439][T26762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.433199][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.438802][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.449426][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.071724][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.071882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.261710][T26780] bond0: option arp_interval: invalid value () [ 1094.261733][T26780] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1094.816279][T26793] loop5: detected capacity change from 0 to 256 [ 1094.853817][T26793] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1095.463296][T26803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1095.463326][T26803] FAT-fs (loop5): Filesystem has been set read-only [ 1095.463376][T26803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1096.932673][T26818] netlink: 'syz.3.7484': attribute type 39 has an invalid length. [ 1097.923913][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.924106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.579782][T26838] loop5: detected capacity change from 0 to 4096 [ 1098.768604][T26845] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1099.879136][T26859] jffs2: jffs2_scan_eraseblock(): Node at 0x00000000 {0x1985, 0x2003, 0xba00000c) has invalid CRC 0xe41eb03b (calculated 0xcfaaea23) [ 1099.879167][T26859] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 1099.879184][T26859] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb03b instead [ 1099.879819][T26859] jffs2: notice: (26859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1100.432608][ T5758] kernel read not supported for file /kmsg (pid: 5758 comm: kworker/0:4) [ 1101.066096][T26884] overlayfs: failed to clone upperpath [ 1101.138341][ T5758] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1101.165357][T26884] overlayfs: failed to clone upperpath [ 1101.290766][ T5758] usb 6-1: Using ep0 maxpacket: 32 [ 1101.291958][ T5758] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1101.295150][ T5758] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1101.295173][ T5758] usb 6-1: config 0 has no interface number 0 [ 1101.295207][ T5758] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1101.363344][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.363369][ T5758] usb 6-1: Product: syz [ 1101.363383][ T5758] usb 6-1: Manufacturer: syz [ 1101.363397][ T5758] usb 6-1: SerialNumber: syz [ 1101.399534][ T5758] usb 6-1: config 0 descriptor?? [ 1101.654563][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7515'. [ 1102.600816][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1102.600844][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1102.603673][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1102.603698][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1102.603715][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1102.603731][ T5758] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1102.603927][ T5758] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1102.722712][ T5758] usb 6-1: USB disconnect, device number 28 [ 1102.949866][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.950046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.416092][ T5874] hid_parser_main: 28 callbacks suppressed [ 1104.416115][ T5874] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1104.449425][ T5874] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1108.149290][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.149474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.109910][T26997] loop7: detected capacity change from 0 to 4096 [ 1109.152411][T26997] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1109.414999][T26997] ntfs3(loop7): ino=19, mi_enum_attr [ 1109.415027][T26997] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1109.459629][T26997] ntfs3(loop7): ino=1a, mi_enum_attr [ 1109.460079][T26997] ntfs3(loop7): ino=1a, mi_enum_attr [ 1109.460094][T26997] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1109.971027][T26992] loop4: detected capacity change from 0 to 32768 [ 1110.072388][T26992] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1110.129213][T26992] JBD2: Ignoring recovery information on journal [ 1110.363598][T26992] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1111.732411][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 1112.629037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.629249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.724597][T27045] loop7: detected capacity change from 0 to 128 [ 1112.749695][T27044] loop1: detected capacity change from 0 to 512 [ 1112.829415][T27044] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.7577: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 1112.831979][T27044] loop1: lost filesystem error report for type 5 error -117 [ 1112.835931][T27044] EXT4-fs (loop1): 1 orphan inode deleted [ 1112.885299][T27044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.970913][T27048] loop4: detected capacity change from 0 to 1024 [ 1113.030328][T27048] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1113.073040][T27048] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1113.121390][T27048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.226409][T27044] EXT4-fs error (device loop1): __ext4_iget:5592: inode #12: block 2: comm syz.1.7577: invalid block [ 1113.256834][T27056] FAULT_INJECTION: forcing a failure. [ 1113.256834][T27056] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1113.256864][T27056] CPU: 0 UID: 0 PID: 27056 Comm: syz.5.7580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.256890][T27056] Tainted: [L]=SOFTLOCKUP [ 1113.256899][T27056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1113.256911][T27056] Call Trace: [ 1113.256919][T27056] [ 1113.256928][T27056] dump_stack_lvl+0xe8/0x150 [ 1113.256961][T27056] should_fail_ex+0x410/0x560 [ 1113.256988][T27056] _copy_from_user+0x2d/0xb0 [ 1113.257015][T27056] __se_sys_prlimit64+0x12f/0xbc0 [ 1113.257040][T27056] ? __se_sys_futex+0x3a8/0x450 [ 1113.257067][T27056] ? __pfx___se_sys_prlimit64+0x10/0x10 [ 1113.257092][T27056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1113.257116][T27056] ? rcu_is_watching+0x16/0xb0 [ 1113.257147][T27056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1113.257174][T27056] do_syscall_64+0x166/0x520 [ 1113.257197][T27056] ? trace_irq_disable+0x3b/0x140 [ 1113.257217][T27056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.257242][T27056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.257263][T27056] RIP: 0033:0x7f73dcb9e159 [ 1113.257281][T27056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.257298][T27056] RSP: 002b:00007f73ddad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 1113.257319][T27056] RAX: ffffffffffffffda RBX: 00007f73dce25fa0 RCX: 00007f73dcb9e159 [ 1113.257334][T27056] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 1113.257347][T27056] RBP: 00007f73dcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 1113.257360][T27056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.257373][T27056] R13: 00007f73dce26038 R14: 00007f73dce25fa0 R15: 00007ffc9952a438 [ 1113.257410][T27056] [ 1113.288613][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.288786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.862930][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.126882][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.060151][ T5758] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1115.075163][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7590'. [ 1115.192320][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.229349][ T5758] usb 5-1: Using ep0 maxpacket: 8 [ 1115.230184][ T5758] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1115.242361][ T5758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.242406][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.288662][ T5758] usb 5-1: config 0 descriptor?? [ 1115.620106][ T5758] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1115.915676][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1115.915706][ T9] usb 5-1: USB disconnect, device number 30 [ 1116.045133][T27096] loop1: detected capacity change from 0 to 512 [ 1116.094765][T27096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1116.174217][T27096] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7597: invalid indirect mapped block 32768 (level 2) [ 1116.174251][T27096] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1116.177031][T27096] EXT4-fs (loop1): Remounting filesystem read-only [ 1116.177274][T27096] EXT4-fs (loop1): 1 orphan inode deleted [ 1116.177290][T27096] EXT4-fs (loop1): 1 truncate cleaned up [ 1116.251031][T27096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.369250][T27096] EXT4-fs (loop1): shut down requested (2) [ 1116.403928][T27096] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 1116.546112][T27103] 9p: Bad value for 'wfdno' [ 1116.610065][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.661707][T27082] loop7: detected capacity change from 0 to 256 [ 1117.703043][T27082] vfat: Unknown parameter 'nonultail' [ 1118.400331][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1118.624689][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1118.692748][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1118.713905][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1118.713998][ T9] usb 6-1: can't read configurations, error -71 [ 1119.030983][T22533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.031157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.037227][T27145] loop7: detected capacity change from 0 to 1024 [ 1119.151405][T27145] EXT4-fs (loop7): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.151489][T27145] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.616237][T27149] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.7615: bg 0: block 112: padding at end of block bitmap is not set [ 1119.728279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.775968][T27154] netlink: 'syz.5.7616': attribute type 39 has an invalid length. [ 1119.922456][T27149] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 1119.922486][T27149] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1119.922486][T27149] [ 1119.922501][T27149] EXT4-fs (loop7): Total free blocks count 0 [ 1119.922514][T27149] EXT4-fs (loop7): Free/Dirty block details [ 1119.922528][T27149] EXT4-fs (loop7): free_blocks=0 [ 1119.922584][T27149] EXT4-fs (loop7): dirty_blocks=0 [ 1119.922597][T27149] EXT4-fs (loop7): Block reservation details [ 1119.922608][T27149] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1120.387662][T24089] EXT4-fs (loop7): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 1120.548116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.653963][T27178] loop1: detected capacity change from 0 to 1024 [ 1121.765661][T27178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.205744][T22536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.205922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.233231][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.229690][T27208] FAULT_INJECTION: forcing a failure. [ 1123.229690][T27208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.229817][T27208] CPU: 0 UID: 0 PID: 27208 Comm: syz.5.7639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.229843][T27208] Tainted: [L]=SOFTLOCKUP [ 1123.229851][T27208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1123.229863][T27208] Call Trace: [ 1123.229872][T27208] [ 1123.229881][T27208] dump_stack_lvl+0xe8/0x150 [ 1123.229913][T27208] should_fail_ex+0x410/0x560 [ 1123.229941][T27208] _copy_from_user+0x2d/0xb0 [ 1123.229967][T27208] memdup_user+0x5e/0xd0 [ 1123.229990][T27208] strndup_user+0x68/0xd0 [ 1123.230012][T27208] __se_sys_fsopen+0x3d/0x2c0 [ 1123.230039][T27208] do_syscall_64+0x166/0x520 [ 1123.230061][T27208] ? trace_irq_disable+0x3b/0x140 [ 1123.230083][T27208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.230108][T27208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.230128][T27208] RIP: 0033:0x7f73dcb9e159 [ 1123.230147][T27208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.230163][T27208] RSP: 002b:00007f73ddad7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1123.230184][T27208] RAX: ffffffffffffffda RBX: 00007f73dce25fa0 RCX: 00007f73dcb9e159 [ 1123.230199][T27208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1123.230212][T27208] RBP: 00007f73dcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 1123.230226][T27208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.230238][T27208] R13: 00007f73dce26038 R14: 00007f73dce25fa0 R15: 00007ffc9952a438 [ 1123.230269][T27208] [ 1123.969216][T27213] syzkaller1: entered promiscuous mode [ 1123.969238][T27213] syzkaller1: entered allmulticast mode [ 1124.667142][T27199] loop7: detected capacity change from 0 to 32768 [ 1124.707592][T27199] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7636 (27199) [ 1124.757493][T27199] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1124.757523][T27199] BTRFS info (device loop7): using crc32c checksum algorithm [ 1124.792353][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.792534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.045700][T27199] BTRFS info (device loop7): enabling ssd optimizations [ 1125.045725][T27199] BTRFS info (device loop7): turning on async discard [ 1125.045741][T27199] BTRFS info (device loop7): enabling free space tree [ 1125.219847][T27199] BTRFS critical (device loop7 state E): emergency shutdown [ 1125.578825][T24089] BTRFS info (device loop7 state E): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1126.008659][ T5758] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1126.164038][ T5758] usb 5-1: not running at top speed; connect to a high speed hub [ 1126.164070][ T5758] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1126.167180][ T5758] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1126.167216][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.226532][ T5758] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1126.463684][T27252] FAULT_INJECTION: forcing a failure. [ 1126.463684][T27252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1126.463742][T27252] CPU: 0 UID: 0 PID: 27252 Comm: syz.7.7649 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.463768][T27252] Tainted: [L]=SOFTLOCKUP [ 1126.463776][T27252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1126.463788][T27252] Call Trace: [ 1126.463797][T27252] [ 1126.463806][T27252] dump_stack_lvl+0xe8/0x150 [ 1126.463840][T27252] should_fail_ex+0x410/0x560 [ 1126.463870][T27252] prepare_alloc_pages+0x223/0x600 [ 1126.463897][T27252] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1126.463923][T27252] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1126.463950][T27252] ? __pfx_policy_nodemask+0x10/0x10 [ 1126.463978][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464002][T27252] ? __lock_acquire+0x747/0x2de0 [ 1126.464026][T27252] alloc_pages_mpol+0x21e/0x390 [ 1126.464057][T27252] folio_alloc_mpol_noprof+0x39/0x160 [ 1126.464085][T27252] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1126.464114][T27252] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1126.464141][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464163][T27252] ? lock_acquire+0x115/0x350 [ 1126.464185][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464213][T27252] do_pte_missing+0x173a/0x34b0 [ 1126.464240][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464272][T27252] handle_mm_fault+0x1a53/0x3750 [ 1126.464310][T27252] ? handle_mm_fault+0xf1/0x3750 [ 1126.464347][T27252] ? __pfx_handle_mm_fault+0x10/0x10 [ 1126.464372][T27252] ? lock_vma_under_rcu+0x45a/0x500 [ 1126.464407][T27252] ? __pfx_do_futex+0x10/0x10 [ 1126.464454][T27252] do_user_addr_fault+0xa4f/0x1340 [ 1126.464481][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464507][T27252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1126.464529][T27252] ? trace_page_fault_user+0x84/0x1e0 [ 1126.464552][T27252] exc_page_fault+0x6a/0xc0 [ 1126.464576][T27252] asm_exc_page_fault+0x26/0x30 [ 1126.464595][T27252] RIP: 0033:0x7f244065f6cb [ 1126.464613][T27252] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1126.464630][T27252] RSP: 002b:00007f24415d6fa0 EFLAGS: 00010206 [ 1126.464648][T27252] RAX: 0000000000000000 RBX: 00007f2440a25fa0 RCX: 0000000000000000 [ 1126.464661][T27252] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 1126.464675][T27252] RBP: 00007f244083503b R08: 0000000000000000 R09: 0000000000000000 [ 1126.464688][T27252] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 1126.464701][T27252] R13: 00007f2440a26038 R14: 00007f2440a25fa0 R15: 00007ffc52ef53b8 [ 1126.464732][T27252] [ 1126.464945][T27252] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1126.546156][ T5758] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1127.203506][ T5758] usb 5-1: USB disconnect, device number 31 [ 1127.363378][T27257] loop5: detected capacity change from 0 to 16 [ 1127.395366][T27257] erofs (device loop5): mounted with root inode @ nid 36. [ 1127.410879][ T5758] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1127.411480][ T5758] cyberjack 5-1:1.0: device disconnected [ 1127.644368][T27259] trusted_key: syz.0.7654 sent an empty control message without MSG_MORE. [ 1128.683569][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1128.718993][ T5874] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1128.719981][T27269] jffs2: jffs2_scan_eraseblock(): Node at 0x00000000 {0x1985, 0x2003, 0xba00000c) has invalid CRC 0xe41eb03b (calculated 0xcfaaea23) [ 1128.720028][T27269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 1128.720044][T27269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb03b instead [ 1128.720761][T27269] jffs2: notice: (27269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1128.881221][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1128.885503][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.885530][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.885562][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.888463][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1128.935964][ T5874] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1128.958853][ T5874] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1128.958876][ T5874] usb 6-1: config 0 has no interface number 0 [ 1128.958908][ T5874] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1128.958930][ T5874] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1128.959914][ T9] usb 5-1: config 0 descriptor?? [ 1129.081081][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.081105][ T5874] usb 6-1: Product: syz [ 1129.081119][ T5874] usb 6-1: Manufacturer: syz [ 1129.081133][ T5874] usb 6-1: SerialNumber: syz [ 1129.143386][ T5874] usb 6-1: config 0 descriptor?? [ 1129.154923][T27267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1129.155042][T27267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1129.306966][T27269] jffs2: warning: (27269) jffs2_sum_write_data: Not enough space for summary, padsize = -2 [ 1129.416263][T27267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1129.416385][T27267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1129.448648][ T9] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1129.448671][ T9] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1129.448691][ T9] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1129.448710][ T9] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1129.448730][ T9] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1129.557431][ T9] playstation 0003:054C:0DF2.0047: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1129.649684][ T5874] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1129.684872][ T9] playstation 0003:054C:0DF2.0047: Failed to retrieve feature with reportID 9: -71 [ 1129.684895][ T9] playstation 0003:054C:0DF2.0047: Failed to retrieve DualSense pairing info: -71 [ 1129.684958][ T9] playstation 0003:054C:0DF2.0047: Failed to get MAC address from DualSense [ 1129.684972][ T9] playstation 0003:054C:0DF2.0047: Failed to create dualsense. [ 1129.721665][ T9] playstation 0003:054C:0DF2.0047: probe with driver playstation failed with error -71 [ 1129.786063][ T9] usb 5-1: USB disconnect, device number 32 [ 1130.183036][T27273] fido_id[27273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1130.325841][ T5874] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1130.325870][ T5874] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1130.339528][ T5874] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1130.389554][ T5874] usb 6-1: USB disconnect, device number 31 [ 1130.552714][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.552895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.093669][T27288] loop7: detected capacity change from 0 to 1024 [ 1131.123151][T27288] EXT4-fs: Ignoring removed bh option [ 1131.364642][T27288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.364731][T27288] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.403645][T27297] loop5: detected capacity change from 0 to 64 [ 1131.537061][T27288] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.7664: lblock 0 mapped to illegal pblock 0 (length 1) [ 1131.556816][T27288] EXT4-fs error (device loop7): ext4_ext_remove_space:2977: inode #15: comm syz.7.7664: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1131.597075][T27297] syz.5.7667: attempt to access beyond end of device [ 1131.597075][T27297] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1131.597103][T27297] Buffer I/O error on dev loop5, logical block 512, async page read [ 1131.597254][T27297] syz.5.7667: attempt to access beyond end of device [ 1131.597254][T27297] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1131.597277][T27297] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1131.724728][T27299] syz.5.7667: attempt to access beyond end of device [ 1131.724728][T27299] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1131.724758][T27299] Buffer I/O error on dev loop5, logical block 512, async page read [ 1131.724790][T27299] syz.5.7667: attempt to access beyond end of device [ 1131.724790][T27299] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1131.724811][T27299] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1131.729262][T27298] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.7664: lblock 3 mapped to illegal pblock 3 (length 3) [ 1131.831807][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.832102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.872112][T27297] syz.5.7667: attempt to access beyond end of device [ 1131.872112][T27297] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1131.872143][T27297] Buffer I/O error on dev loop5, logical block 512, async page read [ 1131.872176][T27297] syz.5.7667: attempt to access beyond end of device [ 1131.872176][T27297] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1131.872197][T27297] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1131.993640][T27298] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1131.993670][T27298] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1131.993670][T27298] [ 1132.187400][T22530] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:30: lblock 8 mapped to illegal pblock 8 (length 8) [ 1132.205918][T22530] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1132.205945][T22530] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1132.205945][T22530] [ 1132.339792][T24089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1133.424530][T27309] ceph: No mds server is up or the cluster is laggy [ 1133.873376][T27323] sg_write: data in/out 417756/136 bytes for SCSI command 0x0-- guessing data in; [ 1133.873376][T27323] program syz.7.7678 not setting count and/or reply_len properly [ 1134.275263][T27308] loop1: detected capacity change from 0 to 32768 [ 1134.548974][ T5874] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1134.606689][T27332] loop5: detected capacity change from 0 to 4096 [ 1134.700563][ T5874] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1134.701867][ T5874] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1134.701889][ T5874] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1134.701921][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.758736][T27332] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1134.809711][ T5874] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 1134.854332][ T5874] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 1135.065200][T27332] ntfs3(loop5): ino=19, mi_enum_attr [ 1135.065229][T27332] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1135.097604][T27332] ntfs3(loop5): ino=1a, mi_enum_attr [ 1135.097715][T27332] ntfs3(loop5): ino=1a, mi_enum_attr [ 1135.097731][T27332] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1135.418846][T27331] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1135.421290][T27331] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1135.421578][T27331] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1135.639813][T27329] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1135.647548][ T5874] usb 8-1: USB disconnect, device number 12 [ 1135.730795][ T5874] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1135.731308][ T5874] spcp8x5 8-1:1.0: device disconnected [ 1136.316974][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.317161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.010560][T27352] loop7: detected capacity change from 0 to 32768 [ 1137.068689][ T5874] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1137.078954][T27352] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1137.078971][T27352] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1137.201794][T27352] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1137.207499][ T5758] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1137.207514][ T5758] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1137.225381][ T5874] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1137.235434][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.264970][ T5874] usb 6-1: config 0 descriptor?? [ 1137.377377][T27356] input: syz0 as /devices/virtual/input/input77 [ 1137.539100][ T5874] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1137.936069][ T5758] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 728ms [ 1137.936262][ T5758] gfs2: fsid=syz:syz.0: jid=0: Done [ 1137.936332][T27352] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1139.072541][ T5874] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1139.072566][ T5874] [drm] Initialized udl on minor 1 [ 1139.368175][ T5874] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1139.381066][T27377] loop5: detected capacity change from 0 to 2048 [ 1139.477611][ T5874] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1139.570351][T27377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.917315][ T5874] usb 6-1: USB disconnect, device number 32 [ 1140.459590][T27396] loop1: detected capacity change from 0 to 2048 [ 1140.527172][T27396] NILFS (loop1): invalid segment: Magic number mismatch [ 1140.527197][T27396] NILFS (loop1): trying rollback from an earlier position [ 1140.675808][T27396] NILFS (loop1): recovery complete [ 1140.709794][T27400] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.763739][T19441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.973300][T27425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7708'. [ 1142.070020][T14610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.070205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.358821][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358858][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358881][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358903][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358926][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358948][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.358971][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.359021][T27428] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1142.991850][T27430] loop1: detected capacity change from 0 to 32768 [ 1143.064228][T27430] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1143.064247][T27430] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1143.189308][T27430] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1143.233883][ T5874] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1143.233903][ T5874] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1143.844043][ T5874] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 610ms [ 1143.865381][ T5874] gfs2: fsid=syz:syz.0: jid=0: Done [ 1143.865558][T27430] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1144.754044][T27445] loop4: detected capacity change from 0 to 32768 [ 1144.833893][T27445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1145.599488][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 1146.161003][T27461] netlink: 83 bytes leftover after parsing attributes in process `syz.7.7723'. [ 1147.696969][T27475] loop4: detected capacity change from 0 to 131072 [ 1147.727468][T22542] net_ratelimit: 760 callbacks suppressed [ 1147.727491][T22542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.727671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.753241][T27475] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 1147.753264][T27475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1147.781266][T27475] F2FS-fs (loop4): invalid crc value [ 1147.868218][T27475] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1147.897386][T27475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1147.897408][T27475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1149.031585][T27486] loop7: detected capacity change from 0 to 131072 [ 1149.066820][T27486] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 1149.066841][T27486] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1149.076976][T27486] F2FS-fs (loop7): invalid crc value [ 1149.197147][T27486] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1149.230160][T27486] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1149.230183][T27486] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1151.200231][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.200450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.007648][T27509] ptn5150 0-001d: probe with driver ptn5150 failed with error -22 [ 1152.127611][T27509] i2c i2c-0: new_device: Instantiated device ptn5150 at 0x1d [ 1153.378533][T26607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1153.409865][T26607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1153.415130][T26607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1153.443553][T26607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1153.447460][T26607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1153.594751][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.594938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.781829][T27530] fuse: fd is not a fuse device [ 1153.862482][T27531] xt_hashlimit: size too large, truncated to 1048576 [ 1155.262966][T27544] loop4: detected capacity change from 0 to 8192 [ 1155.345849][T27544] loop4: p1 p4 [ 1155.366666][T27544] loop4: p4 start 201326592 is beyond EOD, truncated [ 1155.588571][T26607] Bluetooth: hci0: command tx timeout [ 1156.287390][ T5646] udevd[5646]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1156.404031][T27570] FAULT_INJECTION: forcing a failure. [ 1156.404031][T27570] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1156.404065][T27570] CPU: 0 UID: 0 PID: 27570 Comm: syz.7.7764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.404090][T27570] Tainted: [L]=SOFTLOCKUP [ 1156.404098][T27570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1156.404110][T27570] Call Trace: [ 1156.404119][T27570] [ 1156.404128][T27570] dump_stack_lvl+0xe8/0x150 [ 1156.404164][T27570] should_fail_ex+0x410/0x560 [ 1156.404192][T27570] get_futex_key+0x1b4/0x1580 [ 1156.404219][T27570] ? __pfx_futex_wake_mark+0x10/0x10 [ 1156.404255][T27570] ? __pfx_get_futex_key+0x10/0x10 [ 1156.404290][T27570] futex_wake+0x119/0x5f0 [ 1156.404323][T27570] ? __pfx_futex_wait+0x10/0x10 [ 1156.404353][T27570] ? __pfx_futex_wake+0x10/0x10 [ 1156.404390][T27570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1156.404420][T27570] do_futex+0x458/0x4e0 [ 1156.404451][T27570] ? __pfx_do_futex+0x10/0x10 [ 1156.404476][T27570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1156.404507][T27570] __se_sys_futex+0x3a8/0x450 [ 1156.404539][T27570] ? __pfx___se_sys_futex+0x10/0x10 [ 1156.404565][T27570] ? rcu_is_watching+0x16/0xb0 [ 1156.404594][T27570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1156.404617][T27570] ? __x64_sys_futex+0x21/0xf0 [ 1156.404646][T27570] do_syscall_64+0x166/0x520 [ 1156.404668][T27570] ? trace_irq_disable+0x3b/0x140 [ 1156.404688][T27570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.404714][T27570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.404733][T27570] RIP: 0033:0x7f244079e159 [ 1156.404752][T27570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.404768][T27570] RSP: 002b:00007f24415d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1156.404789][T27570] RAX: ffffffffffffffda RBX: 00007f2440a25fa0 RCX: 00007f244079e159 [ 1156.404804][T27570] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 1156.404821][T27570] RBP: 00007f244083503b R08: 0000000000000000 R09: 0000000000000002 [ 1156.404834][T27570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.404846][T27570] R13: 00007f2440a26038 R14: 00007f2440a25fa0 R15: 00007ffc52ef53b8 [ 1156.404877][T27570] [ 1156.986222][T27573] ima: Unable to open file: / (-13) [ 1156.986494][T27572] ima: policy update failed [ 1156.986696][ T31] audit: type=1802 audit(1789518445.194:385): pid=27572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.7765" res=0 errno=0 [ 1157.818499][T27576] loop7: detected capacity change from 0 to 131072 [ 1157.820405][T26607] Bluetooth: hci0: command tx timeout [ 1157.871977][T27576] F2FS-fs (loop7): invalid crc value [ 1158.011591][T27576] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1158.032019][T27576] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1159.830464][T16673] Bluetooth: hci0: command tx timeout [ 1160.015320][T27525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.015407][T27525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.015539][T27525] bridge_slave_0: entered allmulticast mode [ 1160.059120][T27525] bridge_slave_0: entered promiscuous mode [ 1160.096298][T27525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.100221][T27525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.100368][T27525] bridge_slave_1: entered allmulticast mode [ 1160.141320][T27525] bridge_slave_1: entered promiscuous mode [ 1160.442128][T27525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.486281][T27525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.740178][T27525] team0: Port device team_slave_0 added [ 1160.761820][T27525] team0: Port device team_slave_1 added [ 1160.846338][T27605] FAULT_INJECTION: forcing a failure. [ 1160.846338][T27605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.846373][T27605] CPU: 0 UID: 0 PID: 27605 Comm: syz.0.7775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.846399][T27605] Tainted: [L]=SOFTLOCKUP [ 1160.846407][T27605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1160.846420][T27605] Call Trace: [ 1160.846428][T27605] [ 1160.846436][T27605] dump_stack_lvl+0xe8/0x150 [ 1160.846476][T27605] should_fail_ex+0x410/0x560 [ 1160.846503][T27605] strncpy_from_user+0x36/0x2c0 [ 1160.846528][T27605] do_getname+0x77/0x250 [ 1160.846557][T27605] __se_sys_unlink+0x1e/0x140 [ 1160.846583][T27605] do_syscall_64+0x166/0x520 [ 1160.846605][T27605] ? trace_irq_disable+0x3b/0x140 [ 1160.846626][T27605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.846651][T27605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.846671][T27605] RIP: 0033:0x7f0303b9e159 [ 1160.846689][T27605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.846705][T27605] RSP: 002b:00007f0304a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1160.846726][T27605] RAX: ffffffffffffffda RBX: 00007f0303e25fa0 RCX: 00007f0303b9e159 [ 1160.846741][T27605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.846753][T27605] RBP: 00007f0303c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1160.846769][T27605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.846781][T27605] R13: 00007f0303e26038 R14: 00007f0303e25fa0 R15: 00007ffcb2f14708 [ 1160.846812][T27605] [ 1161.130017][T27525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.130034][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.130059][T27525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.264108][T27525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.264129][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.264153][T27525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.638581][T27525] hsr_slave_0: entered promiscuous mode [ 1161.646771][T27525] hsr_slave_1: entered promiscuous mode [ 1161.666380][T27525] debugfs: 'hsr0' already exists in 'hsr' [ 1161.666401][T27525] Cannot create hsr debugfs directory [ 1161.908921][T16673] Bluetooth: hci0: command tx timeout [ 1162.544617][T27613] loop1: detected capacity change from 0 to 1024 [ 1162.841386][T27613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.006019][T27613] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1163.164484][T27613] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 5 with error 28 [ 1163.164514][T27613] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1163.164514][T27613] [ 1163.164529][T27613] EXT4-fs (loop1): Total free blocks count 0 [ 1163.164542][T27613] EXT4-fs (loop1): Free/Dirty block details [ 1163.164555][T27613] EXT4-fs (loop1): free_blocks=20480 [ 1163.164570][T27613] EXT4-fs (loop1): dirty_blocks=64 [ 1163.164583][T27613] EXT4-fs (loop1): Block reservation details [ 1163.164595][T27613] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1163.615110][T22514] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1163.871463][T27628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7783'. [ 1164.355181][T27635] loop7: detected capacity change from 0 to 2048 [ 1165.561186][ T5758] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1165.732777][ T5758] usb 8-1: Using ep0 maxpacket: 16 [ 1165.734963][ T5758] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1165.766151][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.789520][ T5758] usb 8-1: config 0 descriptor?? [ 1165.826616][ T5758] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1166.978154][ T5874] usb 8-1: USB disconnect, device number 13 [ 1167.371223][T27678] loop1: detected capacity change from 0 to 1024 [ 1167.669140][T22514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.669330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.713444][T27678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.373477][T27693] loop4: detected capacity change from 0 to 256 [ 1168.426811][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.001119][T27700] loop1: detected capacity change from 0 to 512 [ 1169.064310][T27701] binder: 27699:27701 ioctl c0306201 200000000100 returned -22 [ 1169.236889][T27700] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1169.236913][T27700] loop1: lost filesystem error report for type 5 error -12 [ 1169.243674][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1169.243696][ C0] EXT4-fs (loop1): initial error at time 1789518457: ext4_process_orphan:346 [ 1169.243719][ C0] EXT4-fs (loop1): last error at time 1789518457: ext4_process_orphan:346 [ 1169.312599][T27700] EXT4-fs (loop1): 2 truncates cleaned up [ 1169.387428][T27700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.831169][T18409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.229911][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.230109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.369058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.409999][T27719] netlink: 'syz.3.7808': attribute type 4 has an invalid length. [ 1170.695663][T27722] loop4: detected capacity change from 0 to 512 [ 1170.796191][T27722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1170.870714][T27722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.870806][T27722] ext4 filesystem being mounted at /1357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.953812][T27742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1172.142449][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.955123][T27525] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1176.022262][T27525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.026746][T27525] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1176.116627][T27525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.136890][T27525] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1176.181512][T27525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.198810][T27525] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1176.252499][T27525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.258693][T27772] loop1: detected capacity change from 0 to 32768 [ 1176.632636][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.719136][ T5758] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1176.894121][ T5758] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1176.895271][ T5758] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.895298][ T5758] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.895322][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1176.895351][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.963260][ T5758] usb 5-1: config 0 descriptor?? [ 1177.092459][T27772] ialloc: diAlloc returned -5! [ 1177.248715][ T5758] usbhid 5-1:0.0: can't add hid device: -71 [ 1177.248822][ T5758] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1177.300256][ T5758] usb 5-1: USB disconnect, device number 33 [ 1177.381224][T27525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.552984][T27525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.597975][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.598066][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.658912][T14610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.658999][T14610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.953720][T27814] loop1: detected capacity change from 0 to 128 [ 1177.985504][T27814] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1178.032031][T27814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1180.234932][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7836'. [ 1180.234962][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7836'. [ 1181.627513][T27872] batadv_slave_1: entered promiscuous mode [ 1181.677206][T27867] batadv_slave_1: left promiscuous mode [ 1181.853149][T27879] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1182.795138][T27881] FAULT_INJECTION: forcing a failure. [ 1182.795138][T27881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.795175][T27881] CPU: 0 UID: 0 PID: 27881 Comm: syz.7.7843 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.795203][T27881] Tainted: [L]=SOFTLOCKUP [ 1182.795211][T27881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1182.795224][T27881] Call Trace: [ 1182.795233][T27881] [ 1182.795242][T27881] dump_stack_lvl+0xe8/0x150 [ 1182.795277][T27881] should_fail_ex+0x410/0x560 [ 1182.795305][T27881] prepare_alloc_pages+0x223/0x600 [ 1182.795334][T27881] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1182.795361][T27881] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1182.795388][T27881] ? __pfx_policy_nodemask+0x10/0x10 [ 1182.795414][T27881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1182.795447][T27881] alloc_pages_mpol+0x21e/0x390 [ 1182.795479][T27881] alloc_pages_noprof+0xb1/0x2b0 [ 1182.795513][T27881] folio_alloc_noprof+0x1e/0x30 [ 1182.795540][T27881] filemap_alloc_folio_noprof+0x111/0x460 [ 1182.795571][T27881] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1182.795596][T27881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1182.795619][T27881] ? rcu_is_watching+0x16/0xb0 [ 1182.795644][T27881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1182.795667][T27881] ? trace_kmalloc+0x2a/0xf0 [ 1182.795691][T27881] __filemap_get_folio_mpol+0x402/0x1000 [ 1182.795727][T27881] aio_setup_ring+0x3b1/0xe20 [ 1182.795760][T27881] ? __pfx_aio_setup_ring+0x10/0x10 [ 1182.795793][T27881] ioctx_alloc+0x313/0x830 [ 1182.795820][T27881] __se_sys_io_setup+0x7b/0x1d0 [ 1182.795853][T27881] do_syscall_64+0x166/0x520 [ 1182.795877][T27881] ? trace_irq_disable+0x3b/0x140 [ 1182.795898][T27881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.795924][T27881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.795944][T27881] RIP: 0033:0x7f244079e159 [ 1182.795963][T27881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.795981][T27881] RSP: 002b:00007f24415d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1182.796002][T27881] RAX: ffffffffffffffda RBX: 00007f2440a25fa0 RCX: 00007f244079e159 [ 1182.796018][T27881] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 00000000000004c6 [ 1182.796031][T27881] RBP: 00007f244083503b R08: 0000000000000000 R09: 0000000000000000 [ 1182.796045][T27881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.796057][T27881] R13: 00007f2440a26038 R14: 00007f2440a25fa0 R15: 00007ffc52ef53b8 [ 1182.796089][T27881] [ 1183.413034][T27525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.998914][ T188] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1184.171388][ T188] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1184.187699][ T188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.187750][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.289320][ T188] as10x_usb: device has been detected [ 1184.289952][ T188] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1184.596648][ T188] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1184.892085][T27930] ------------[ cut here ]------------ [ 1184.892099][T27930] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1184.892107][T27930] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12e2/0x1550, CPU#0: syz.4.7849/27930 [ 1184.915082][T27930] Modules linked in: [ 1184.919322][T27930] CPU: 0 UID: 0 PID: 27930 Comm: syz.4.7849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.930373][T27930] Tainted: [L]=SOFTLOCKUP [ 1184.934704][T27930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1184.945232][T27930] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 1184.952490][T27930] Code: 6f 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 8e 93 04 00 75 13 48 8d 3d de 8a 96 04 48 c7 c6 40 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 1184.972712][T27930] RSP: 0018:ffffc90005307680 EFLAGS: 00010246 [ 1184.979156][T27930] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1184.987128][T27930] RDX: ffffc9000ee93000 RSI: ffffffff8c0d1240 RDI: ffffffff907d6bc0 [ 1184.995243][T27930] RBP: ffffc90005307820 R08: ffffffff907a6f83 R09: 1ffffffff20f4df0 [ 1185.003803][T27930] R10: dffffc0000000000 R11: fffffbfff20f4df1 R12: ffff8880266be010 [ 1185.012190][T27930] R13: 0000000000000000 R14: 1ffff92000a60ee4 R15: 0000000000000000 [ 1185.020569][T27930] FS: 00007f5ed22166c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1185.030150][T27930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.036726][T27930] CR2: 00007f5ed2215ff8 CR3: 000000003dfe8000 CR4: 0000000000350ef0 [ 1185.045013][T27930] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1185.053046][T27930] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1185.061420][T27930] Call Trace: [ 1185.064686][T27930] [ 1185.067601][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.073280][T27930] ? __lock_acquire+0x747/0x2de0 [ 1185.078250][T27930] ? as102_stream_ctrl+0x27/0xc0 [ 1185.083183][T27930] ? trace_contention_end+0x3d/0x140 [ 1185.088838][T27930] ? __pfx___mutex_lock+0x10/0x10 [ 1185.093857][T27930] ? __mutex_lock+0x30b/0x1550 [ 1185.098663][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.104287][T27930] ? __mutex_unlock_slowpath+0x731/0x900 [ 1185.110307][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.116672][T27930] ? lock_acquire+0x115/0x350 [ 1185.121974][T27930] as102_stream_ctrl+0x27/0xc0 [ 1185.126747][T27930] __dvb_frontend_open+0x2e9/0xc40 [ 1185.131930][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.137556][T27930] ? down_read+0x2be/0x330 [ 1185.142014][T27930] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1185.147474][T27930] dvb_device_open+0x24f/0x340 [ 1185.152659][T27930] chrdev_open+0x4d9/0x600 [ 1185.157073][T27930] ? __pfx_chrdev_open+0x10/0x10 [ 1185.162091][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.167720][T27930] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1185.174115][T27930] ? __pfx_chrdev_open+0x10/0x10 [ 1185.179454][T27930] do_dentry_open+0x816/0x1380 [ 1185.184223][T27930] vfs_open+0x3b/0x340 [ 1185.188971][T27930] ? path_openat+0x1428/0x1d60 [ 1185.193730][T27930] path_openat+0x1443/0x1d60 [ 1185.199119][T27930] do_file_open+0x23e/0x4a0 [ 1185.203622][T27930] ? __pfx_do_file_open+0x10/0x10 [ 1185.208946][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.214567][T27930] ? _raw_spin_unlock+0x28/0x50 [ 1185.219779][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.225585][T27930] ? alloc_fd+0x651/0x6c0 [ 1185.230263][T27930] do_sys_openat2+0x115/0x200 [ 1185.234941][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.240970][T27930] ? __pfx_do_sys_openat2+0x10/0x10 [ 1185.246168][T27930] ? kfree+0x4d/0x650 [ 1185.250215][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.255851][T27930] __x64_sys_openat+0x138/0x170 [ 1185.260765][T27930] do_syscall_64+0x166/0x520 [ 1185.265353][T27930] ? trace_irq_disable+0x3b/0x140 [ 1185.271044][T27930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.277119][T27930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.283685][T27930] RIP: 0033:0x7f5ed135e98e [ 1185.288161][T27930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.308229][T27930] RSP: 002b:00007f5ed2215b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1185.316645][T27930] RAX: ffffffffffffffda RBX: 00007f5ed22166c0 RCX: 00007f5ed135e98e [ 1185.325035][T27930] RDX: 0000000000000802 RSI: 00007f5ed2215c00 RDI: ffffffffffffff9c [ 1185.333328][T27930] RBP: 00007f5ed2215c00 R08: 0000000000000000 R09: 0000000000000000 [ 1185.341712][T27930] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1185.350946][T27930] R13: 00007f5ed1626128 R14: 00007f5ed1626090 R15: 00007fff2a8fe0d8 [ 1185.359273][T27930] [ 1185.362328][T27930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1185.369612][T27930] CPU: 0 UID: 0 PID: 27930 Comm: syz.4.7849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.380585][T27930] Tainted: [L]=SOFTLOCKUP [ 1185.384918][T27930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1185.394968][T27930] Call Trace: [ 1185.398239][T27930] [ 1185.401156][T27930] vpanic+0x56d/0xa60 [ 1185.405194][T27930] ? __pfx__printk+0x10/0x10 [ 1185.409781][T27930] ? __pfx_vpanic+0x10/0x10 [ 1185.414292][T27930] ? is_bpf_text_address+0x292/0x2b0 [ 1185.419570][T27930] ? is_bpf_text_address+0x26/0x2b0 [ 1185.424769][T27930] panic+0xc5/0xd0 [ 1185.428494][T27930] ? __pfx_panic+0x10/0x10 [ 1185.432921][T27930] __warn+0x315/0x4c0 [ 1185.436902][T27930] ? __mutex_lock+0x12e2/0x1550 [ 1185.441748][T27930] ? __mutex_lock+0x12e2/0x1550 [ 1185.446613][T27930] __report_bug+0x276/0x570 [ 1185.451120][T27930] ? __mutex_lock+0x12e2/0x1550 [ 1185.455967][T27930] ? __pfx___report_bug+0x10/0x10 [ 1185.461009][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.466661][T27930] ? __lock_acquire+0x747/0x2de0 [ 1185.471593][T27930] report_bug_entry+0x19b/0x290 [ 1185.476436][T27930] ? __mutex_lock+0x12e9/0x1550 [ 1185.481280][T27930] ? __mutex_lock+0x12ee/0x1550 [ 1185.486121][T27930] handle_bug+0xce/0x200 [ 1185.490370][T27930] exc_invalid_op+0x1a/0x50 [ 1185.494870][T27930] asm_exc_invalid_op+0x1a/0x20 [ 1185.499715][T27930] RIP: 0010:__mutex_lock+0x12e9/0x1550 [ 1185.505166][T27930] Code: 6f 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d ab 8e 93 04 00 75 13 48 8d 3d de 8a 96 04 48 c7 c6 40 12 0d 8c <67> 48 0f b9 3a 90 e9 6b ee ff ff 90 0f 0b 90 e9 3e f2 ff ff 90 0f [ 1185.524781][T27930] RSP: 0018:ffffc90005307680 EFLAGS: 00010246 [ 1185.530840][T27930] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1185.538815][T27930] RDX: ffffc9000ee93000 RSI: ffffffff8c0d1240 RDI: ffffffff907d6bc0 [ 1185.546777][T27930] RBP: ffffc90005307820 R08: ffffffff907a6f83 R09: 1ffffffff20f4df0 [ 1185.554736][T27930] R10: dffffc0000000000 R11: fffffbfff20f4df1 R12: ffff8880266be010 [ 1185.562788][T27930] R13: 0000000000000000 R14: 1ffff92000a60ee4 R15: 0000000000000000 [ 1185.570770][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.576407][T27930] ? __lock_acquire+0x747/0x2de0 [ 1185.581338][T27930] ? as102_stream_ctrl+0x27/0xc0 [ 1185.586293][T27930] ? trace_contention_end+0x3d/0x140 [ 1185.591577][T27930] ? __pfx___mutex_lock+0x10/0x10 [ 1185.596594][T27930] ? __mutex_lock+0x30b/0x1550 [ 1185.601393][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.607026][T27930] ? __mutex_unlock_slowpath+0x731/0x900 [ 1185.612659][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.618282][T27930] ? lock_acquire+0x115/0x350 [ 1185.622958][T27930] as102_stream_ctrl+0x27/0xc0 [ 1185.627731][T27930] __dvb_frontend_open+0x2e9/0xc40 [ 1185.632847][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.638474][T27930] ? down_read+0x2be/0x330 [ 1185.642890][T27930] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1185.648346][T27930] dvb_device_open+0x24f/0x340 [ 1185.653123][T27930] chrdev_open+0x4d9/0x600 [ 1185.657538][T27930] ? __pfx_chrdev_open+0x10/0x10 [ 1185.662475][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.668109][T27930] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1185.674431][T27930] ? __pfx_chrdev_open+0x10/0x10 [ 1185.679369][T27930] do_dentry_open+0x816/0x1380 [ 1185.684145][T27930] vfs_open+0x3b/0x340 [ 1185.688208][T27930] ? path_openat+0x1428/0x1d60 [ 1185.692968][T27930] path_openat+0x1443/0x1d60 [ 1185.697562][T27930] do_file_open+0x23e/0x4a0 [ 1185.702064][T27930] ? __pfx_do_file_open+0x10/0x10 [ 1185.707093][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.712717][T27930] ? _raw_spin_unlock+0x28/0x50 [ 1185.717553][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.723263][T27930] ? alloc_fd+0x651/0x6c0 [ 1185.727597][T27930] do_sys_openat2+0x115/0x200 [ 1185.732269][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.737898][T27930] ? __pfx_do_sys_openat2+0x10/0x10 [ 1185.743090][T27930] ? kfree+0x4d/0x650 [ 1185.747095][T27930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.752729][T27930] __x64_sys_openat+0x138/0x170 [ 1185.757582][T27930] do_syscall_64+0x166/0x520 [ 1185.762202][T27930] ? trace_irq_disable+0x3b/0x140 [ 1185.767216][T27930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.773279][T27930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.779167][T27930] RIP: 0033:0x7f5ed135e98e [ 1185.783570][T27930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.803164][T27930] RSP: 002b:00007f5ed2215b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1185.811586][T27930] RAX: ffffffffffffffda RBX: 00007f5ed22166c0 RCX: 00007f5ed135e98e [ 1185.819577][T27930] RDX: 0000000000000802 RSI: 00007f5ed2215c00 RDI: ffffffffffffff9c [ 1185.827546][T27930] RBP: 00007f5ed2215c00 R08: 0000000000000000 R09: 0000000000000000 [ 1185.835507][T27930] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1185.843468][T27930] R13: 00007f5ed1626128 R14: 00007f5ed1626090 R15: 00007fff2a8fe0d8 [ 1185.851444][T27930] [ 1185.854496][T27930] Kernel Offset: disabled [ 1185.858808][T27930] Rebooting in 86400 seconds..