last executing test programs: 4m2.559134497s ago: executing program 0 (id=322): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0xff4f}], 0x0, 0x1}, 0x20) 4m2.226412592s ago: executing program 0 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x59, 0x0, "cebd7ceedb7b0ad952e966b92b346b023df2cb59e32e10366456deac64d99f206bd4aea40b7161161a8b2749fe18aab0d08bd23f603d373fcc250c30136f9ef2ef8b00"}, 0xd8) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3f3, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008054) 4m2.050853265s ago: executing program 0 (id=317): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 4m0.66320463s ago: executing program 0 (id=328): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x76800) fsync(r0) 3m59.615177139s ago: executing program 0 (id=335): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0xa, 0x7}, 0xe) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0x8, @empty}}, 0x2a, 0x200}, 0x90) 3m58.964440478s ago: executing program 0 (id=343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xf, 0x7}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 3m58.375493593s ago: executing program 32 (id=343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xf, 0x7}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 3m40.966567097s ago: executing program 3 (id=470): get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3) io_setup(0x8, 0x0) r0 = syz_clone(0x100211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$cont(0x1f, r0, 0xf658, 0xf) move_pages(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 3m40.552568048s ago: executing program 3 (id=473): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}]}, 0x3, 0x27b, &(0x7f00000008c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3m39.974631022s ago: executing program 3 (id=479): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000700)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x4ca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 3m39.271993235s ago: executing program 3 (id=484): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x414, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) lremovexattr(&(0x7f0000000200)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000040)='./file1\x00', 0x0) 3m37.949391415s ago: executing program 3 (id=491): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x400) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x7a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3m37.288932685s ago: executing program 3 (id=496): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) 3m36.81912444s ago: executing program 33 (id=496): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) 14.896983082s ago: executing program 5 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 14.698302561s ago: executing program 5 (id=2017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) syz_fuse_handle_req(r0, &(0x7f00000067c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000100)={0x50, 0x0, 0x400000, {0x7, 0x29, 0x1ff, 0x100000, 0x0, 0xfff3, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.470300762s ago: executing program 5 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init1(0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000300), 0x8) 14.231132263s ago: executing program 5 (id=2021): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000029c0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@shortname_lower}, {@shortname_win95}, {@utf8no}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 13.888076099s ago: executing program 5 (id=2023): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) readv(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) 13.675688229s ago: executing program 5 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'sed\x00', 0x1f, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.295481497s ago: executing program 34 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'sed\x00', 0x1f, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.39454066s ago: executing program 7 (id=2065): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 6.275964336s ago: executing program 7 (id=2067): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 5.992348959s ago: executing program 7 (id=2073): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80, 0x0, 0x0, 0x400, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x3b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.504253122s ago: executing program 7 (id=2076): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 5.313172451s ago: executing program 7 (id=2078): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = io_uring_setup(0x46ec, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x2, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.197162794s ago: executing program 7 (id=2087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, 0x0) 2.813262638s ago: executing program 4 (id=2100): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@block_validity}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@block_validity}, {@orlov}, {@data_journal}, {@resgid}, {@errors_remount}, {@nobarrier}, {@data_err_abort}, {@block_validity}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x46a, &(0x7f00000003c0)="$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") syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) write$rfkill(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x1) 2.812205988s ago: executing program 6 (id=2101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.569566789s ago: executing program 1 (id=2102): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="0e002300000000001c001a80", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 2.427184806s ago: executing program 1 (id=2103): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='timerslack_ns\x00') exit(0x100000000000035) write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 2.068894063s ago: executing program 4 (id=2104): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1}, 0x20000000) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) 1.952065799s ago: executing program 6 (id=2105): socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x4, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xfffd, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000140)=[{0x2, 0xce9a, 0x800}, {0x3}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 1.880594362s ago: executing program 2 (id=2107): creat(&(0x7f00000000c0)='./file0\x00', 0x108) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYBLOB="4486fc42807c98", @ANYRES8=r0, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.780306956s ago: executing program 2 (id=2108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.676236901s ago: executing program 2 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r1, &(0x7f0000000280)='0', 0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) 1.50352454s ago: executing program 1 (id=2110): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYRES64], 0x16, 0xc56, &(0x7f0000000e80)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4087, 0xff7) 1.435914683s ago: executing program 4 (id=2111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 1.232104062s ago: executing program 4 (id=2112): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1.199783794s ago: executing program 1 (id=2113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800005, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) listen(r0, 0x0) 1.101552819s ago: executing program 4 (id=2114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20000885) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 1.06525219s ago: executing program 2 (id=2115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @link_local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}, 0x0) 992.166523ms ago: executing program 6 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff}, {0xb, 0x7}}}, 0x24}}, 0x4008000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) 969.670335ms ago: executing program 1 (id=2117): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9, 0x0, @opaque="ff"}}}}}, 0x0) 845.83674ms ago: executing program 4 (id=2118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 692.325957ms ago: executing program 6 (id=2119): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 566.463213ms ago: executing program 2 (id=2120): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 520.955006ms ago: executing program 6 (id=2121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x0, 0xf8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 260.094478ms ago: executing program 2 (id=2122): r0 = socket$inet_icmp(0x2, 0x2, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) 257.061368ms ago: executing program 1 (id=2123): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7001043500000a0001fd2000000000000000480003006465666c61746500"/225], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x41}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4, 0x6, 0x10002, 0x8251c, 0x2, 0xd}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 6 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): D: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.405478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.122491][ T7964] loop6: detected capacity change from 0 to 512 [ 205.219805][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.734994][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.048322][ T7957] loop1: detected capacity change from 0 to 32768 [ 206.246794][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.300123][ T7957] XFS (loop1): Mounting V5 Filesystem [ 206.357566][ T7971] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 206.376482][ T7957] XFS (loop1): Ending clean mount [ 206.449897][ T26] audit: type=1800 audit(43799.588:98): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.990" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 206.795621][ T4636] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 206.805921][ T4278] XFS (loop1): Unmounting Filesystem [ 206.870096][ T4636] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 207.078203][ T4631] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 207.199635][ T4631] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 207.303639][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.590304][ T8003] ceph: No mds server is up or the cluster is laggy [ 207.606683][ T4631] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 207.626638][ T8006] ceph: No mds server is up or the cluster is laggy [ 207.725602][ T4632] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 208.325454][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.397330][ T4293] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.468267][ T4293] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.805573][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.885542][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.375098][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.529600][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.415574][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.561546][ T8085] loop1: detected capacity change from 0 to 128 [ 210.683003][ T8085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 210.705154][ T8085] System zones: 1-3, 19-19, 35-36 [ 210.716352][ T8085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.725614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.335592][ T26] audit: type=1326 audit(43804.478:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.365378][ T8085] EXT4-fs warning (device loop1): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 211.445019][ T26] audit: type=1326 audit(43804.518:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.474950][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.540210][ T26] audit: type=1326 audit(43804.518:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.565012][ T26] audit: type=1326 audit(43804.518:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.603565][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 211.610237][ T26] audit: type=1326 audit(43804.518:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.679730][ T26] audit: type=1326 audit(43804.538:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.795178][ T26] audit: type=1326 audit(43804.538:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.845437][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.884286][ T26] audit: type=1326 audit(43804.538:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 211.960604][ T26] audit: type=1326 audit(43804.538:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 212.062920][ T26] audit: type=1326 audit(43804.548:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 212.162604][ T26] audit: type=1326 audit(43804.548:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 212.245471][ T26] audit: type=1326 audit(43804.548:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x7ffc0000 [ 212.485916][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.549916][ T8148] FAULT_INJECTION: forcing a failure. [ 212.549916][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 212.615465][ T8148] CPU: 0 PID: 8148 Comm: syz.1.1057 Not tainted syzkaller #0 [ 212.622914][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.633006][ T8148] Call Trace: [ 212.636326][ T8148] [ 212.639286][ T8148] dump_stack_lvl+0x188/0x24e [ 212.644010][ T8148] ? show_regs_print_info+0x12/0x12 [ 212.649263][ T8148] ? load_image+0x410/0x410 [ 212.653822][ T8148] ? __might_sleep+0xd0/0xd0 [ 212.658449][ T8148] ? __lock_acquire+0x7c40/0x7c40 [ 212.663523][ T8148] should_fail_ex+0x390/0x4c0 [ 212.668252][ T8148] should_failslab+0x5/0x20 [ 212.672793][ T8148] slab_pre_alloc_hook+0x59/0x300 [ 212.677847][ T8148] ? nf_tables_commit+0x6cf/0x77d0 [ 212.683065][ T8148] __kmem_cache_alloc_node+0x4f/0x270 [ 212.688452][ T8148] ? nf_tables_commit+0x6cf/0x77d0 [ 212.693586][ T8148] kmalloc_trace+0x26/0xe0 [ 212.698021][ T8148] nf_tables_commit+0x6cf/0x77d0 [ 212.702968][ T8148] ? nf_register_net_hook+0xc4/0x190 [ 212.708270][ T8148] ? nft_register_flowtable_net_hooks+0x695/0x6a0 [ 212.714698][ T8148] ? nf_tables_rule_release+0x360/0x360 [ 212.720266][ T8148] ? nf_tables_newflowtable+0x18df/0x2040 [ 212.726025][ T8148] ? nf_tables_getobj_reset+0x610/0x610 [ 212.731588][ T8148] ? nf_tables_newtable+0xd19/0x16c0 [ 212.736891][ T8148] ? __nla_parse+0x3c/0x50 [ 212.741333][ T8148] nfnetlink_rcv+0x1aae/0x2470 [ 212.746139][ T8148] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 212.751704][ T8148] ? ref_tracker_free+0x682/0x830 [ 212.756777][ T8148] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.761989][ T8148] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 212.767467][ T8148] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.772675][ T8148] netlink_unicast+0x7ad/0x920 [ 212.777461][ T8148] netlink_sendmsg+0x8ad/0xbd0 [ 212.782244][ T8148] ? netlink_getsockopt+0x550/0x550 [ 212.787451][ T8148] ? apparmor_socket_sendmsg+0x8a/0x330 [ 212.793012][ T8148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.798308][ T8148] ? security_socket_sendmsg+0x7c/0xa0 [ 212.803775][ T8148] ? netlink_getsockopt+0x550/0x550 [ 212.808985][ T8148] ____sys_sendmsg+0x5ed/0x9a0 [ 212.813768][ T8148] ? __sys_sendmsg_sock+0x30/0x30 [ 212.818801][ T8148] ? __import_iovec+0x306/0x510 [ 212.823671][ T8148] ? import_iovec+0x6f/0xa0 [ 212.828193][ T8148] ___sys_sendmsg+0x2a2/0x360 [ 212.832882][ T8148] ? __sys_sendmsg+0x2a0/0x2a0 [ 212.837693][ T8148] __se_sys_sendmsg+0x1c3/0x2b0 [ 212.842560][ T8148] ? __x64_sys_sendmsg+0x80/0x80 [ 212.847522][ T8148] ? lockdep_hardirqs_on+0x94/0x140 [ 212.852731][ T8148] do_syscall_64+0x4c/0xa0 [ 212.857163][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 212.861846][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 212.866536][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.872444][ T8148] RIP: 0033:0x7ff29ef9e159 [ 212.876870][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.896488][ T8148] RSP: 002b:00007ff29fe14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.904935][ T8148] RAX: ffffffffffffffda RBX: 00007ff29f225fa0 RCX: 00007ff29ef9e159 [ 212.912931][ T8148] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000004 [ 212.920910][ T8148] RBP: 00007ff29f03506b R08: 0000000000000000 R09: 0000000000000000 [ 212.928883][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.936861][ T8148] R13: 00007ff29f226038 R14: 00007ff29f225fa0 R15: 00007ffede1775f8 [ 212.944855][ T8148] [ 213.531298][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.818426][ T8192] loop6: detected capacity change from 0 to 512 [ 213.935304][ T8192] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.162842][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 214.570938][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.885176][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.326428][ T8259] 9pnet: p9_errstr2errno: server reported unknown error VmI [ 215.608728][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.307595][ T8284] loop1: detected capacity change from 0 to 1024 [ 216.351491][ T8284] EXT4-fs: quotafile must be on filesystem root [ 216.645451][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.339119][ T8311] netlink: 'syz.1.1100': attribute type 22 has an invalid length. [ 217.389073][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 217.695088][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.990494][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.731285][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.168734][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.333100][ T8313] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.342626][ T8313] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.353823][ T8313] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.362976][ T8313] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.493510][ T8311] netlink: 'syz.1.1100': attribute type 22 has an invalid length. [ 219.509169][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 219.766569][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.716215][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'. [ 220.816140][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.046695][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.122983][ T8386] loop1: detected capacity change from 0 to 1024 [ 221.207124][ T5118] hfsplus: b-tree write err: -5, ino 25 [ 221.212993][ T5118] hfsplus: b-tree write err: -5, ino 4 [ 221.229124][ T5118] hfsplus: b-tree write err: -5, ino 2 [ 221.258867][ T8393] hfsplus: request for non-existent node 33423360 in B*Tree [ 221.284560][ T8393] hfsplus: request for non-existent node 33423360 in B*Tree [ 221.862126][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.269401][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 222.768011][ T8427] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1146'. [ 223.227153][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.852963][ T8450] loop6: detected capacity change from 0 to 512 [ 223.926554][ T8450] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1151: missing EA_INODE flag [ 223.987205][ T8450] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1151: error while reading EA inode 2 err=-117 [ 224.019683][ T8450] EXT4-fs (loop6): 1 orphan inode deleted [ 224.031719][ T8450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 224.086079][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.116348][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 224.245325][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.709580][ T8477] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 224.889085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.240733][ T8489] loop6: detected capacity change from 0 to 4096 [ 225.285142][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.345750][ T8489] EXT4-fs: Ignoring removed nobh option [ 225.364724][ T8489] EXT4-fs: Ignoring removed bh option [ 225.429469][ T8489] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.483035][ T8489] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 225.547299][ T8489] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 225.658114][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 226.325240][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.125152][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.147649][ T8544] FAULT_INJECTION: forcing a failure. [ 227.147649][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 227.166959][ T8544] CPU: 1 PID: 8544 Comm: syz.6.1181 Not tainted syzkaller #0 [ 227.174391][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.184481][ T8544] Call Trace: [ 227.187796][ T8544] [ 227.190766][ T8544] dump_stack_lvl+0x188/0x24e [ 227.195490][ T8544] ? show_regs_print_info+0x12/0x12 [ 227.200731][ T8544] ? load_image+0x410/0x410 [ 227.205286][ T8544] ? __might_sleep+0xd0/0xd0 [ 227.209920][ T8544] ? __lock_acquire+0x7c40/0x7c40 [ 227.215003][ T8544] should_fail_ex+0x390/0x4c0 [ 227.219725][ T8544] should_failslab+0x5/0x20 [ 227.224275][ T8544] slab_pre_alloc_hook+0x59/0x300 [ 227.229429][ T8544] ? v4l2_m2m_ctx_init+0x57/0x2a0 [ 227.234495][ T8544] __kmem_cache_alloc_node+0x4f/0x270 [ 227.240000][ T8544] ? v4l2_m2m_ctx_init+0x57/0x2a0 [ 227.245063][ T8544] kmalloc_trace+0x26/0xe0 [ 227.249521][ T8544] ? vicodec_release+0x110/0x110 [ 227.254503][ T8544] v4l2_m2m_ctx_init+0x57/0x2a0 [ 227.259401][ T8544] vicodec_open+0x7fe/0xc30 [ 227.264007][ T8544] v4l2_open+0x201/0x340 [ 227.268312][ T8544] chrdev_open+0x585/0x5f0 [ 227.272788][ T8544] ? cd_forget+0x160/0x160 [ 227.277251][ T8544] ? fsnotify_perm+0x39b/0x550 [ 227.282055][ T8544] ? cd_forget+0x160/0x160 [ 227.286508][ T8544] do_dentry_open+0x7dd/0x10b0 [ 227.291335][ T8544] path_openat+0x2674/0x2f10 [ 227.295986][ T8544] ? verify_lock_unused+0x140/0x140 [ 227.301238][ T8544] ? do_sys_openat2+0xdd/0x4f0 [ 227.306056][ T8544] ? do_filp_open+0x420/0x420 [ 227.310801][ T8544] do_filp_open+0x1ee/0x420 [ 227.315356][ T8544] ? vfs_tmpfile+0x470/0x470 [ 227.320010][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 227.324905][ T8544] ? alloc_fd+0x590/0x640 [ 227.329286][ T8544] do_sys_openat2+0x14b/0x4f0 [ 227.334011][ T8544] ? do_sys_open+0xe0/0xe0 [ 227.338475][ T8544] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.344512][ T8544] ? lock_chain_count+0x20/0x20 [ 227.349416][ T8544] __x64_sys_openat+0x135/0x160 [ 227.354320][ T8544] do_syscall_64+0x4c/0xa0 [ 227.358785][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 227.363499][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 227.368213][ T8544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.374153][ T8544] RIP: 0033:0x7effcf95e98e [ 227.378608][ T8544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.398346][ T8544] RSP: 002b:00007effd07f7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.406802][ T8544] RAX: ffffffffffffffda RBX: 00007effd07f86c0 RCX: 00007effcf95e98e [ 227.414816][ T8544] RDX: 0000000000000002 RSI: 00007effd07f7c00 RDI: ffffffffffffff9c [ 227.422823][ T8544] RBP: 00007effd07f7c00 R08: 0000000000000000 R09: 0000000000000000 [ 227.430832][ T8544] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 227.438839][ T8544] R13: 00007effcfc26038 R14: 00007effcfc25fa0 R15: 00007fff71241b18 [ 227.446863][ T8544] [ 227.464866][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.732891][ T8556] loop1: detected capacity change from 0 to 1024 [ 227.793374][ T8556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.842368][ T8556] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 227.866809][ T8556] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.873589][ T8556] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.1185: Freeing blocks not in datazone - block = 0, count = 4096 [ 228.019957][ T8556] EXT4-fs (loop1): 1 orphan inode deleted [ 228.037136][ T8556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.181003][ T8556] EXT4-fs error (device loop1): ext4_get_group_desc:277: comm syz.1.1185: block_group >= groups_count - block_group = 1, groups_count = 1 [ 228.284011][ T8556] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.1.1185: unable to read itable block [ 228.554644][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 228.792727][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.925578][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.017457][ T8560] loop6: detected capacity change from 0 to 131072 [ 229.026184][ T8560] F2FS-fs (loop6): invalid crc value [ 229.058640][ T8560] F2FS-fs (loop6): Found nat_bits in checkpoint [ 229.099490][ T8560] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 229.114233][ T8560] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 229.198580][ T8579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.184781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.204781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.214779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.224779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.234777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.244776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 230.254778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 230.264776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 230.274775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 230.284779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 230.915841][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.915467][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.935182][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.146257][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.568473][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 233.584405][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 233.584422][ T26] audit: type=1326 audit(43826.718:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 233.704112][ T26] audit: type=1326 audit(43826.718:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 233.822712][ T26] audit: type=1326 audit(43826.728:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 233.920688][ T26] audit: type=1326 audit(43826.728:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.012315][ T26] audit: type=1326 audit(43826.728:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.078243][ T26] audit: type=1326 audit(43826.728:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.165448][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.198389][ T26] audit: type=1326 audit(43826.728:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.234581][ T26] audit: type=1326 audit(43826.728:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.269024][ T26] audit: type=1326 audit(43826.728:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b7e59e159 code=0x7ffc0000 [ 234.494865][ T3600] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 234.686723][ T3600] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.701982][ T3600] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.712094][ T3600] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.734456][ T3600] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 234.754232][ T3600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.763473][ T3600] usb 7-1: Product: syz [ 234.773260][ T3600] usb 7-1: Manufacturer: syz [ 234.779418][ T3600] usb 7-1: SerialNumber: syz [ 234.965403][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.014952][ T3600] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 235.215415][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.246584][ T3600] usb 7-1: USB disconnect, device number 5 [ 235.264307][ T8627] usblp0: removed [ 235.621264][ T8658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.249358][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.805933][ T8693] loop5: detected capacity change from 0 to 512 [ 236.943858][ T8693] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 237.170782][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 237.215532][ T8699] overlayfs: failed to clone upperpath [ 237.285486][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.005112][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.201014][ T8734] loop1: detected capacity change from 0 to 512 [ 238.323266][ T8734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.342915][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.358337][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.677173][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 239.365382][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.000222][ T8783] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 240.069006][ T8787] input: syz1 as /devices/virtual/input/input7 [ 240.098424][ T4357] udevd[4357]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 240.139571][ T4357] udevd[4357]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 240.276654][ T8783] device bond2 entered promiscuous mode [ 240.278437][ T8804] loop6: detected capacity change from 0 to 512 [ 240.333660][ T8783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.364183][ T8804] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 240.429144][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.475208][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 240.628336][ T8800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.675510][ T8800] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 240.742784][ T8800] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 240.844797][ T8800] bond2: (slave gre1): making interface the new active one [ 240.891606][ T8800] device gre1 entered promiscuous mode [ 240.935713][ T8800] bond2: (slave gre1): Enslaving as an active interface with an up link [ 240.967246][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 241.003662][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 241.045636][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.206225][ T8825] xt_hashlimit: size too large, truncated to 1048576 [ 241.359466][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.402145][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.452191][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.497563][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.532751][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.540928][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.608705][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.632095][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.669797][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.687307][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.326051][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 244.149659][ T8890] loop1: detected capacity change from 0 to 512 [ 244.188264][ T8890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.305037][ T8890] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 244.326894][ T8890] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 244.350524][ T8890] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 244.407929][ T8890] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 244.488850][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 244.822535][ T8903] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 244.900163][ T8903] device bond5 entered promiscuous mode [ 244.924143][ T8903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.096494][ T8907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.129449][ T8907] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 245.176296][ T8907] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 245.203942][ T8907] bond5: (slave gre2): making interface the new active one [ 245.244914][ T8907] device gre2 entered promiscuous mode [ 245.264111][ T8907] bond5: (slave gre2): Enslaving as an active interface with an up link [ 245.307168][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 247.125106][ T3600] net_ratelimit: 742 callbacks suppressed [ 247.125126][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.438292][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.925012][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.165191][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.205025][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.786624][ T8932] loop6: detected capacity change from 0 to 40427 [ 249.814332][ T8932] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 249.838654][ T8932] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 249.864429][ T8932] F2FS-fs (loop6): invalid crc value [ 249.902333][ T8952] loop5: detected capacity change from 0 to 512 [ 249.932913][ T8932] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 249.961444][ T8952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.041869][ T8952] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1328: invalid indirect mapped block 9 (level 0) [ 250.086283][ T8952] EXT4-fs (loop5): 1 truncate cleaned up [ 250.092008][ T8952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 250.215496][ T8932] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 250.222604][ T8932] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 250.255177][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.332975][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 250.488147][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.571757][ T8932] syz.6.1306: attempt to access beyond end of device [ 250.571757][ T8932] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 250.584965][ T8969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.699625][ T6118] syz-executor: attempt to access beyond end of device [ 250.699625][ T6118] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.726120][ T8969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.898307][ T8969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.051470][ T8979] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1326'. [ 251.564918][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 251.765349][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 251.774391][ T14] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 251.836914][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.888627][ T14] usb 6-1: config 0 descriptor?? [ 251.936583][ T14] as10x_usb: device has been detected [ 251.965411][ T14] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 252.065506][ T14] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 252.141449][ T14] as10x_usb: error during firmware upload part1 [ 252.169777][ T14] Registered device nBox DVB-T Dongle [ 252.174568][ T14] usb 6-1: USB disconnect, device number 2 [ 252.335245][ T3600] net_ratelimit: 1403 callbacks suppressed [ 252.335263][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.369289][ T14] Unregistered device nBox DVB-T Dongle [ 252.370216][ T14] as10x_usb: device has been disconnected [ 252.507110][ T9003] xt_hashlimit: size too large, truncated to 1048576 [ 252.594646][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.189069][ T9017] loop6: detected capacity change from 0 to 1024 [ 253.365518][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.396391][ T5131] hfsplus: bad catalog file entry [ 253.527080][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.409743][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.453669][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.611443][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617860][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.638270][ T9076] overlayfs: failed to clone upperpath [ 255.680219][ T9077] tipc: Enabled bearer , priority 0 [ 255.732318][ T9077] tipc: Disabling bearer [ 256.013680][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 256.495198][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.584181][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.662013][ T9101] loop5: detected capacity change from 0 to 512 [ 256.768688][ T9101] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 256.939108][ T9094] loop6: detected capacity change from 0 to 32768 [ 257.001930][ T9094] loop6: p1 p3 < > [ 257.108989][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 257.403853][ T9118] loop1: detected capacity change from 0 to 512 [ 257.481331][ T9118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.523748][ T9118] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1380: invalid indirect mapped block 9 (level 0) [ 257.538011][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.551880][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.594331][ T9118] EXT4-fs (loop1): 1 truncate cleaned up [ 257.621689][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 257.623999][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 257.632198][ T9118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 257.961392][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 258.101891][ T9115] loop6: detected capacity change from 0 to 32768 [ 258.173125][ T9115] XFS (loop6): Mounting V5 Filesystem [ 258.207706][ T9115] XFS (loop6): Ending clean mount [ 258.223629][ T26] audit: type=1800 audit(43851.358:137): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1379" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 258.246117][ T9115] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 258.448043][ T9137] XFS (loop6): User initiated shutdown received. [ 258.464831][ T9137] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 258.493328][ T9137] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 258.552787][ T6118] XFS (loop6): Unmounting Filesystem [ 258.565513][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.830595][ T9113] loop5: detected capacity change from 0 to 40427 [ 258.870420][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.880349][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.889251][ T9113] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 258.908599][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.916969][ T9113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 258.936685][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.955325][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.969978][ T9113] F2FS-fs (loop5): invalid crc value [ 258.985821][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.995175][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.023046][ T9113] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 259.264625][ T9113] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 259.294950][ T9113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 259.583541][ T9113] syz.5.1378: attempt to access beyond end of device [ 259.583541][ T9113] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 259.755392][ T5493] syz-executor: attempt to access beyond end of device [ 259.755392][ T5493] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.893398][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.901462][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.555808][ T4280] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 260.612119][ T4280] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 260.658004][ T9163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.738158][ T9163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.508260][ T9163] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.523857][ T9163] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.536586][ T9163] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.553399][ T9163] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.421231][ C0] Unknown status report in ack skb [ 262.664861][ T4631] net_ratelimit: 15 callbacks suppressed [ 262.664878][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.725220][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.805211][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 263.631012][ T9205] loop5: detected capacity change from 0 to 32768 [ 263.738323][ T9205] XFS (loop5): Mounting V5 Filesystem [ 263.780219][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.785838][ T9205] XFS (loop5): Ending clean mount [ 263.844934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.880021][ T26] audit: type=1800 audit(43857.018:138): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1407" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 264.321214][ T5493] XFS (loop5): Unmounting Filesystem [ 264.805009][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.002670][ T9259] 9pnet: p9_errstr2errno: server reported unknown error VmI [ 265.237938][ T9264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.407463][ T9264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.577076][ T9264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.617749][ T9264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.653409][ T9264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.148928][ T9292] overlayfs: failed to clone upperpath [ 267.230258][ T9304] loop6: detected capacity change from 0 to 40427 [ 267.249405][ T9304] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 267.273723][ T9304] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 267.305288][ T9304] F2FS-fs (loop6): invalid crc value [ 267.336419][ T9304] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 267.412870][ T9304] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 267.426102][ T9304] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 267.488302][ T26] audit: type=1804 audit(43860.628:139): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1438" name="/newroot/194/file1/bus" dev="loop6" ino=10 res=1 errno=0 [ 267.791933][ T9318] syz.6.1438: attempt to access beyond end of device [ 267.791933][ T9318] loop6: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 268.006032][ T4327] net_ratelimit: 704 callbacks suppressed [ 268.006049][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.260272][ T9329] loop1: detected capacity change from 0 to 8 [ 268.651063][ T9337] capability: warning: `syz.1.1449' uses deprecated v2 capabilities in a way that may be insecure [ 268.725083][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.045217][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.099353][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.416693][ T9365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.745548][ T9367] overlayfs: missing 'lowerdir' [ 270.819547][ T9363] loop6: detected capacity change from 0 to 32768 [ 270.927827][ T9363] XFS (loop6): Mounting V5 Filesystem [ 270.973125][ T9363] XFS (loop6): Ending clean mount [ 271.005469][ T26] audit: type=1800 audit(43864.148:140): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1461" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 271.122462][ T9379] device bond3 entered promiscuous mode [ 271.135106][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.147398][ T5129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.157016][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.165941][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.332478][ T6118] XFS (loop6): Unmounting Filesystem [ 271.406288][ T9387] overlayfs: failed to clone upperpath [ 271.424506][ T9388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.333060][ T9398] loop5: detected capacity change from 0 to 32768 [ 272.598608][ T26] audit: type=1800 audit(43865.738:141): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1473" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 273.285399][ T3600] net_ratelimit: 5 callbacks suppressed [ 273.285417][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.300466][ T9429] [ 273.541988][ T9431] loop5: detected capacity change from 0 to 512 [ 274.163349][ T9439] input: syz1 as /devices/virtual/input/input8 [ 274.325120][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.439433][ T9444] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 274.853612][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.194625][ T9466] netlink: 'syz.2.1494': attribute type 22 has an invalid length. [ 275.239278][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 275.302797][ T9466] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.311711][ T9466] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.320687][ T9466] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.329729][ T9466] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.365243][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.426858][ T9466] netlink: 'syz.2.1494': attribute type 22 has an invalid length. [ 275.457151][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 275.673512][ T9457] loop5: detected capacity change from 0 to 40427 [ 275.715531][ T9457] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 275.728425][ T9457] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 275.750385][ T9457] F2FS-fs (loop5): invalid crc value [ 275.795168][ T9457] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 275.991809][ T9457] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 276.009595][ T9457] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 276.175216][ T26] audit: type=1804 audit(43869.318:142): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1490" name="/newroot/213/file1/bus" dev="loop5" ino=10 res=1 errno=0 [ 276.185102][ T9485] loop1: detected capacity change from 0 to 512 [ 276.405167][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.616764][ T5493] syz-executor: attempt to access beyond end of device [ 276.616764][ T5493] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.725239][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.733892][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.742803][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.751707][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.307815][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.625022][ T4632] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.816383][ T4632] usb 6-1: config index 0 descriptor too short (expected 25647, got 18) [ 277.830366][ T4632] usb 6-1: config 118 has too many interfaces: 101, using maximum allowed: 32 [ 277.859432][ T4632] usb 6-1: config 118 has an invalid descriptor of length 10, skipping remainder of the config [ 277.894407][ T4632] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 101 [ 277.927711][ T4632] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 277.956612][ T4632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.982200][ T4632] usb 6-1: Product: syz [ 277.995502][ T4632] usb 6-1: Manufacturer: syz [ 278.010462][ T4632] usb 6-1: SerialNumber: syz [ 278.043136][ T9520] overlayfs: failed to clone upperpath [ 278.092546][ T4636] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 278.101636][ T9497] ceph: No mds server is up or the cluster is laggy [ 278.333663][ T4632] usb 6-1: USB disconnect, device number 3 [ 278.510062][ T9531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.539709][ T9531] team0: Port device bond6 added [ 278.805078][ T3600] net_ratelimit: 9 callbacks suppressed [ 278.805096][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.998174][ T9538] overlayfs: failed to clone upperpath [ 279.254125][ T4293] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 279.669070][ T9551] loop6: detected capacity change from 0 to 1024 [ 279.700098][ T9551] EXT4-fs: inline encryption not supported [ 279.707531][ T9551] ext4: Unknown parameter 'fsuuid' [ 279.845220][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.082636][ T9563] overlayfs: failed to clone lowerpath [ 280.120513][ T9563] overlayfs: failed to clone lowerpath [ 280.148809][ T9567] netlink: 'syz.1.1528': attribute type 18 has an invalid length. [ 280.187059][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 280.236449][ T9567] netlink: 'syz.1.1528': attribute type 18 has an invalid length. [ 280.261234][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 280.424075][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.521804][ T9577] netlink: 'syz.1.1537': attribute type 39 has an invalid length. [ 282.684987][ T4632] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 282.793874][ T9633] loop1: detected capacity change from 0 to 164 [ 282.839867][ T4357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.885095][ T4632] usb 6-1: Using ep0 maxpacket: 8 [ 282.893668][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.945770][ T4632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.984839][ T4632] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 283.036693][ T4632] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 283.075533][ T4632] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.114949][ T4632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.176117][ T4632] hub 6-1:1.0: bad descriptor, ignoring hub [ 283.182096][ T4632] hub: probe of 6-1:1.0 failed with error -5 [ 283.229565][ T4632] cdc_wdm 6-1:1.0: skipping garbage [ 283.245754][ T4632] cdc_wdm 6-1:1.0: skipping garbage [ 283.256901][ T9641] 9pnet: p9_errstr2errno: server reported unknown error _batch_time=0x000000000000b656,block_validity, [ 283.287378][ T4293] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 283.296506][ T4293] Bluetooth: hci2: Injecting HCI hardware error event [ 283.306860][ T4293] Bluetooth: hci2: hardware error 0x00 [ 283.325518][ T4632] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 283.332638][ T4632] cdc_wdm 6-1:1.0: Unknown control protocol [ 283.917294][ T4636] usb 6-1: USB disconnect, device number 4 [ 284.318076][ T9679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.327659][ T9679] team0: Port device bond2 added [ 284.659237][ T9688] overlayfs: failed to clone upperpath [ 285.107735][ T9670] loop1: detected capacity change from 0 to 32768 [ 285.153733][ T9670] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1568 (9670) [ 285.223528][ T9670] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 285.241906][ T9701] 9pnet: p9_errstr2errno: server reported unknown error _batch_time=0x000000000000b656,block_validity, [ 285.273531][ T9670] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 285.315133][ T9670] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 285.357070][ T9670] BTRFS info (device loop1): use zstd compression, level 3 [ 285.364585][ T9670] BTRFS info (device loop1): using free space tree [ 285.372260][ T4293] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 285.645035][ T9718] netlink: 'syz.6.1585': attribute type 39 has an invalid length. [ 285.830560][ T9670] BTRFS info (device loop1): enabling ssd optimizations [ 285.875314][ T9731] overlayfs: failed to clone upperpath [ 286.041169][ T26] audit: type=1804 audit(43879.178:143): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1568" name="/newroot/276/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 286.251032][ T9737] overlayfs: failed to clone upperpath [ 286.296042][ T4632] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 286.309585][ T4278] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 286.325741][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.506320][ T4632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.524888][ T4632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.556719][ T4632] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.574912][ T4632] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 286.593149][ T4632] usb 6-1: Manufacturer: syz [ 286.625452][ T4632] usb 6-1: config 0 descriptor?? [ 286.965315][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.974248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.658862][ T4632] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0004/input/input9 [ 287.749312][ T4632] uclogic 0003:256C:006D.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 287.877713][ T4632] usb 6-1: USB disconnect, device number 5 [ 287.900347][ T9753] fido_id[9753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 289.318175][ T9760] ceph: No mds server is up or the cluster is laggy [ 289.325113][ T9748] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 289.649708][ T9779] netlink: 'syz.4.1601': attribute type 39 has an invalid length. [ 290.246567][ T9797] overlayfs: failed to clone upperpath [ 290.295245][ T9799] overlayfs: failed to clone upperpath [ 290.893112][ T9813] overlayfs: failed to clone upperpath [ 290.962613][ T9803] loop6: detected capacity change from 0 to 40427 [ 291.009052][ T9803] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 291.022677][ T9803] F2FS-fs (loop6): invalid crc value [ 291.031759][ T9803] F2FS-fs (loop6): invalid crc value [ 291.042742][ T9803] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 291.513496][ T9807] ceph: No mds server is up or the cluster is laggy [ 291.615130][ T9829] netlink: 'syz.5.1619': attribute type 39 has an invalid length. [ 292.670806][ T9865] sctp: [Deprecated]: syz.6.1633 (pid 9865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.670806][ T9865] Use struct sctp_sack_info instead [ 292.711034][ T9861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.787365][ T9861] team0: Port device bond3 added [ 293.104701][ T9879] loop6: detected capacity change from 0 to 128 [ 293.131789][ T9879] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 293.163487][ T9879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.653709][ T9894] overlayfs: failed to clone upperpath [ 294.018611][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.027181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.226676][ T9896] loop6: detected capacity change from 0 to 40427 [ 294.254666][ T9896] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff [ 294.263341][ T9896] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x30e4 [ 294.289875][ T9896] F2FS-fs (loop6): invalid crc value [ 294.317766][ T9896] F2FS-fs (loop6): Found nat_bits in checkpoint [ 294.416015][ T9896] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 294.482578][ T9896] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 294.534928][ T9896] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 294.645148][ T3600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.653603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.704201][ T9896] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10a/0xfc0 [ 294.726509][ T9896] F2FS-fs (loop6) : inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x447/0x530 [ 295.603389][ T4293] block nbd6: Receive control failed (result -32) [ 295.618989][ T9927] block nbd6: shutting down sockets [ 295.883754][ T9940] FAULT_INJECTION: forcing a failure. [ 295.883754][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 295.902342][ T9940] CPU: 1 PID: 9940 Comm: syz.6.1668 Not tainted syzkaller #0 [ 295.909766][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.919870][ T9940] Call Trace: [ 295.923183][ T9940] [ 295.925584][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.926126][ T9940] dump_stack_lvl+0x188/0x24e [ 295.938920][ T9940] ? show_regs_print_info+0x12/0x12 [ 295.944164][ T9940] ? load_image+0x410/0x410 [ 295.948720][ T9940] ? __might_sleep+0xd0/0xd0 [ 295.953342][ T9940] ? __lock_acquire+0x7c40/0x7c40 [ 295.958400][ T9940] ? __sys_sendmmsg+0x2c3/0x510 [ 295.963282][ T9940] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.969397][ T9940] should_fail_ex+0x390/0x4c0 [ 295.974122][ T9940] should_failslab+0x5/0x20 [ 295.978654][ T9940] slab_pre_alloc_hook+0x59/0x300 [ 295.983715][ T9940] ? sctp_datamsg_from_user+0x84/0xed0 [ 295.989219][ T9940] __kmem_cache_alloc_node+0x4f/0x270 [ 295.994633][ T9940] ? sctp_datamsg_from_user+0x84/0xed0 [ 296.000136][ T9940] kmalloc_trace+0x26/0xe0 [ 296.004590][ T9940] sctp_datamsg_from_user+0x84/0xed0 [ 296.010027][ T9940] ? __sk_mem_raise_allocated+0x992/0x1260 [ 296.015897][ T9940] ? sctp_primitive_ASSOCIATE+0x91/0xc0 [ 296.021542][ T9940] sctp_sendmsg_to_asoc+0xfd9/0x17e0 [ 296.026904][ T9940] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 296.032756][ T9940] ? __sctp_connect+0xd80/0xd80 [ 296.037645][ T9940] ? __local_bh_enable_ip+0x136/0x1c0 [ 296.043068][ T9940] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 296.048656][ T9940] ? security_sctp_bind_connect+0x85/0xb0 [ 296.054421][ T9940] sctp_sendmsg+0x1b8a/0x2940 [ 296.054843][ T4632] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.059134][ T9940] ? sctp_getsockopt+0x8a0/0x8a0 [ 296.059162][ T9940] ? __might_fault+0xa6/0x120 [ 296.076298][ T9940] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 296.082757][ T9940] ? aa_sock_msg_perm+0x94/0x150 [ 296.087753][ T9940] ? inet_sendmsg+0xca/0x2a0 [ 296.092387][ T9940] ? inet_send_prepare+0x250/0x250 [ 296.097543][ T9940] ____sys_sendmsg+0x5ed/0x9a0 [ 296.102353][ T9940] ? __sys_sendmsg_sock+0x30/0x30 [ 296.107408][ T9940] ? __import_iovec+0x306/0x510 [ 296.112319][ T9940] ? import_iovec+0x6f/0xa0 [ 296.116873][ T9940] ___sys_sendmsg+0x2a2/0x360 [ 296.121591][ T9940] ? preempt_schedule+0xbc/0xd0 [ 296.126490][ T9940] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.131345][ T9940] __sys_sendmmsg+0x2c3/0x510 [ 296.136072][ T9940] ? __ia32_sys_sendmsg+0x80/0x80 [ 296.141165][ T9940] ? __ia32_sys_get_robust_list+0x100/0x100 [ 296.147120][ T9940] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.153153][ T9940] ? lock_chain_count+0x20/0x20 [ 296.158058][ T9940] __x64_sys_sendmmsg+0x9c/0xb0 [ 296.162945][ T9940] do_syscall_64+0x4c/0xa0 [ 296.167400][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 296.172106][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 296.176818][ T9940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.182755][ T9940] RIP: 0033:0x7effcf99e159 [ 296.187207][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.206842][ T9940] RSP: 002b:00007effd07f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.215261][ T9940] RAX: ffffffffffffffda RBX: 00007effcfc25fa0 RCX: 00007effcf99e159 [ 296.223248][ T9940] RDX: 0000000000000001 RSI: 0000200000003040 RDI: 0000000000000004 [ 296.231328][ T9940] RBP: 00007effcfa3506b R08: 0000000000000000 R09: 0000000000000000 [ 296.239393][ T9940] R10: 00000000200488d4 R11: 0000000000000246 R12: 0000000000000000 [ 296.246351][ T4632] usb 2-1: config index 0 descriptor too short (expected 25647, got 18) [ 296.247389][ T9940] R13: 00007effcfc26038 R14: 00007effcfc25fa0 R15: 00007fff71241b18 [ 296.256751][ T4632] usb 2-1: config 118 has too many interfaces: 101, using maximum allowed: 32 [ 296.263712][ T9940] [ 296.318285][ T4632] usb 2-1: config 118 has an invalid descriptor of length 10, skipping remainder of the config [ 296.343034][ T4632] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 101 [ 296.385701][ T4632] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 296.424826][ T4632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.440378][ T9952] loop6: detected capacity change from 0 to 128 [ 296.453222][ T9952] EXT4-fs: Ignoring removed orlov option [ 296.460041][ T4632] usb 2-1: Product: syz [ 296.490252][ T4632] usb 2-1: Manufacturer: syz [ 296.502519][ T9952] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 296.515409][ T4632] usb 2-1: SerialNumber: syz [ 296.556802][ T9952] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.1664: No space for directory leaf checksum. Please run e2fsck -D. [ 296.614314][ T9952] EXT4-fs error (device loop6): __ext4_find_entry:1698: inode #2: comm syz.6.1664: checksumming directory block 0 [ 296.669652][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 296.674490][ T9958] xt_connbytes: Forcing CT accounting to be enabled [ 296.683199][ T9958] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 297.051979][ T4632] usb 2-1: USB disconnect, device number 6 [ 298.072256][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 298.121150][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 298.145440][ T9990] FAULT_INJECTION: forcing a failure. [ 298.145440][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 298.215049][ T9990] CPU: 0 PID: 9990 Comm: syz.1.1681 Not tainted syzkaller #0 [ 298.222521][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.232587][ T9990] Call Trace: [ 298.235887][ T9990] [ 298.238832][ T9990] dump_stack_lvl+0x188/0x24e [ 298.243531][ T9990] ? show_regs_print_info+0x12/0x12 [ 298.248823][ T9990] ? load_image+0x410/0x410 [ 298.253348][ T9990] ? __might_sleep+0xd0/0xd0 [ 298.258040][ T9990] ? __lock_acquire+0x7c40/0x7c40 [ 298.263082][ T9990] should_fail_ex+0x390/0x4c0 [ 298.267781][ T9990] should_failslab+0x5/0x20 [ 298.272290][ T9990] slab_pre_alloc_hook+0x59/0x300 [ 298.277325][ T9990] ? memset+0x1e/0x40 [ 298.281310][ T9990] ? device_create+0x13a/0x300 [ 298.286092][ T9990] __kmem_cache_alloc_node+0x4f/0x270 [ 298.291476][ T9990] ? device_create+0x13a/0x300 [ 298.296254][ T9990] kmalloc_trace+0x26/0xe0 [ 298.300676][ T9990] device_create+0x13a/0x300 [ 298.305282][ T9990] ? format_decode+0xb67/0x1330 [ 298.310149][ T9990] ? root_device_unregister+0xf0/0xf0 [ 298.315556][ T9990] bdi_register_va+0xa0/0x750 [ 298.320252][ T9990] super_setup_bdi_name+0xf5/0x200 [ 298.325370][ T9990] ? __rwlock_init+0x140/0x140 [ 298.330146][ T9990] ? vfs_get_tree+0x270/0x270 [ 298.334830][ T9990] ? up_write+0x1b6/0x410 [ 298.339181][ T9990] afs_get_tree+0x9d1/0x1170 [ 298.343783][ T9990] ? bpf_lsm_capable+0x5/0x10 [ 298.348486][ T9990] vfs_get_tree+0x88/0x270 [ 298.352932][ T9990] do_new_mount+0x247/0xa40 [ 298.357472][ T9990] __se_sys_mount+0x2e3/0x3d0 [ 298.362171][ T9990] ? __x64_sys_mount+0xc0/0xc0 [ 298.366967][ T9990] ? lockdep_hardirqs_on+0x94/0x140 [ 298.372205][ T9990] ? __x64_sys_mount+0x1c/0xc0 [ 298.377072][ T9990] do_syscall_64+0x4c/0xa0 [ 298.381503][ T9990] ? clear_bhb_loop+0x60/0xb0 [ 298.386188][ T9990] ? clear_bhb_loop+0x60/0xb0 [ 298.390876][ T9990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.396783][ T9990] RIP: 0033:0x7ff29ef9e159 [ 298.401209][ T9990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.420822][ T9990] RSP: 002b:00007ff29fe14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.429241][ T9990] RAX: ffffffffffffffda RBX: 00007ff29f225fa0 RCX: 00007ff29ef9e159 [ 298.437223][ T9990] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 298.445199][ T9990] RBP: 00007ff29f03506b R08: 0000200000000200 R09: 0000000000000000 [ 298.453264][ T9990] R10: 0000000002000400 R11: 0000000000000246 R12: 0000000000000000 [ 298.461243][ T9990] R13: 00007ff29f226038 R14: 00007ff29f225fa0 R15: 00007ffede1775f8 [ 298.469239][ T9990] [ 299.626262][ T9853] Set syz1 is full, maxelem 65536 reached [ 299.764109][T10019] FAULT_INJECTION: forcing a failure. [ 299.764109][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 299.805480][T10019] CPU: 0 PID: 10019 Comm: syz.1.1691 Not tainted syzkaller #0 [ 299.813020][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.823203][T10019] Call Trace: [ 299.826516][T10019] [ 299.829501][T10019] dump_stack_lvl+0x188/0x24e [ 299.834232][T10019] ? show_regs_print_info+0x12/0x12 [ 299.839472][T10019] ? load_image+0x410/0x410 [ 299.844020][T10019] ? __might_sleep+0xd0/0xd0 [ 299.848644][T10019] ? __lock_acquire+0x7c40/0x7c40 [ 299.853713][T10019] should_fail_ex+0x390/0x4c0 [ 299.858442][T10019] should_failslab+0x5/0x20 [ 299.862990][T10019] slab_pre_alloc_hook+0x59/0x300 [ 299.868059][T10019] kmem_cache_alloc+0x56/0x2f0 [ 299.872850][T10019] ? create_new_namespaces+0x34/0x700 [ 299.878258][T10019] create_new_namespaces+0x34/0x700 [ 299.883481][T10019] ? apparmor_capable+0x12c/0x190 [ 299.888523][T10019] ? bpf_lsm_capable+0x5/0x10 [ 299.893234][T10019] ? security_capable+0x85/0xb0 [ 299.898097][T10019] unshare_nsproxy_namespaces+0x116/0x160 [ 299.903825][T10019] ksys_unshare+0x4f6/0x8e0 [ 299.908340][T10019] ? sighand_ctor+0x40/0x40 [ 299.912851][T10019] ? lock_chain_count+0x20/0x20 [ 299.917723][T10019] ? syscall_enter_from_user_mode+0x21/0x80 [ 299.923637][T10019] __x64_sys_unshare+0x34/0x40 [ 299.928405][T10019] do_syscall_64+0x4c/0xa0 [ 299.932828][T10019] ? clear_bhb_loop+0x60/0xb0 [ 299.937510][T10019] ? clear_bhb_loop+0x60/0xb0 [ 299.942198][T10019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.948102][T10019] RIP: 0033:0x7ff29ef9e159 [ 299.952533][T10019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.972155][T10019] RSP: 002b:00007ff29fe14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 299.980839][T10019] RAX: ffffffffffffffda RBX: 00007ff29f225fa0 RCX: 00007ff29ef9e159 [ 299.988819][T10019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 299.996800][T10019] RBP: 00007ff29f03506b R08: 0000000000000000 R09: 0000000000000000 [ 300.004778][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.012758][T10019] R13: 00007ff29f226038 R14: 00007ff29f225fa0 R15: 00007ffede1775f8 [ 300.020752][T10019] [ 300.694908][ T3600] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 300.894963][ T3600] usb 7-1: Using ep0 maxpacket: 16 [ 300.906550][ T3600] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.917553][T10034] loop5: detected capacity change from 0 to 32768 [ 300.922937][ T3600] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.990898][ T3600] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.014622][ T3600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.038175][ T3600] usb 7-1: Product: syz [ 301.042407][ T3600] usb 7-1: Manufacturer: syz [ 301.043538][T10034] JBD2: Ignoring recovery information on journal [ 301.047776][ T3600] usb 7-1: SerialNumber: syz [ 301.076333][ T125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.084758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.235024][ T9748] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 301.287671][T10034] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 301.302494][ T3600] usb 7-1: 0:2 : does not exist [ 301.317399][ T3600] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 301.370465][ T3600] usb 7-1: USB disconnect, device number 6 [ 301.429133][ T9748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.447353][ T9748] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.494469][ T9748] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 301.522449][ T9748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.549194][ T26] audit: type=1804 audit(43894.688:144): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1697" name="/newroot/235/file1/bus" dev="loop5" ino=17059 res=1 errno=0 [ 301.615363][T10034] (syz.5.1697,10034,0):ocfs2_get_clusters:606 ERROR: status = -34 [ 301.640992][T10034] (syz.5.1697,10034,0):ocfs2_reflink_remap_extent:4558 ERROR: status = -34 [ 301.656869][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.666305][T10034] (syz.5.1697,10034,0):ocfs2_reflink_remap_blocks:4717 ERROR: status = -34 [ 301.701371][T10034] (syz.5.1697,10034,0):ocfs2_remap_file_range:2710 ERROR: status = -34 [ 301.984178][ T9748] dvb_ttusb_budget: ttusb_init_controller: error [ 301.995665][ T9748] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 302.011401][ T5493] ocfs2: Unmounting device (7,5) on (node local) [ 302.283755][ T9748] DVB: Unable to find symbol stv0299_attach() [ 302.538835][ T9748] DVB: Unable to find symbol tda8083_attach() [ 302.552287][ T9748] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 302.594993][ T9748] usb 2-1: USB disconnect, device number 7 [ 302.796725][T10070] loop5: detected capacity change from 0 to 164 [ 302.830700][T10070] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 304.138321][T10105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.146840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.196394][T10105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.235701][T10106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.244002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.295215][T10106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.342619][T10104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.413954][T10086] syz.5.1714 (10086): drop_caches: 2 [ 304.685602][ T26] audit: type=1326 audit(43897.818:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 304.779450][ T26] audit: type=1326 audit(43897.818:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 304.848928][ T26] audit: type=1326 audit(43897.818:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 304.930771][ T26] audit: type=1326 audit(43897.818:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 304.970628][ T26] audit: type=1326 audit(43897.818:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 305.003440][ T26] audit: type=1326 audit(43897.818:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 305.065097][ T26] audit: type=1326 audit(43897.818:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 305.096569][ T26] audit: type=1326 audit(43897.828:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 305.127318][ T26] audit: type=1326 audit(43897.828:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.5.1725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546359e159 code=0x7ffc0000 [ 305.529899][ T9748] net_ratelimit: 2 callbacks suppressed [ 305.529918][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.120560][T10160] loop1: detected capacity change from 0 to 2048 [ 306.227320][T10160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.265012][T10160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.314063][T10160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.342782][T10169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.376796][T10169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.411598][T10157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.710756][T10180] loop1: detected capacity change from 0 to 1024 [ 307.038078][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 307.038094][ T26] audit: type=1326 audit(43900.178:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.6.1749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effcf99e159 code=0x0 [ 307.111094][ T26] audit: type=1800 audit(43900.178:170): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1746" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=9 res=0 errno=0 [ 308.085679][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.094018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.100243][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 308.156452][T10233] loop5: detected capacity change from 0 to 1024 [ 308.484077][T10245] loop1: detected capacity change from 0 to 128 [ 308.511125][T10245] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 308.726225][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.860317][T10247] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 308.901176][T10250] loop5: detected capacity change from 0 to 512 [ 308.956141][T10250] EXT4-fs: Ignoring removed nobh option [ 308.966967][T10250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.985294][T10247] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 309.053781][T10250] EXT4-fs (loop5): 1 truncate cleaned up [ 309.062179][T10250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 309.085239][T10235] loop6: detected capacity change from 0 to 32768 [ 309.131078][T10235] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1760 (10235) [ 309.178548][T10235] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 309.216454][T10235] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 309.262120][T10235] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 309.293535][T10235] BTRFS info (device loop6): use zstd compression, level 3 [ 309.321004][T10235] BTRFS info (device loop6): using free space tree [ 309.372042][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 309.741643][T10235] BTRFS info (device loop6): enabling ssd optimizations [ 309.862181][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 310.036094][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1772'. [ 310.062512][ T6118] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 310.078530][T10296] bond2: (slave syz_tun): Removing an active aggregator [ 310.125985][T10296] bond2: (slave syz_tun): Releasing backup interface [ 310.147578][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1772'. [ 310.810022][T10324] loop6: detected capacity change from 0 to 16 [ 310.824931][T10324] erofs: (device loop6): mounted with root inode @ nid 36. [ 311.027827][T10332] loop6: detected capacity change from 0 to 512 [ 311.059762][T10332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 311.067996][T10332] System zones: 1-12 [ 311.073756][T10332] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1779: missing EA_INODE flag [ 311.092009][T10332] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1779: error while reading EA inode 12 err=-117 [ 311.116472][T10332] EXT4-fs (loop6): 1 orphan inode deleted [ 311.130421][T10332] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 311.552858][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 312.822919][T10381] net_ratelimit: 1 callbacks suppressed [ 312.822938][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.837940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.845160][T10383] loop6: detected capacity change from 0 to 16 [ 312.848509][ T9748] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 312.865424][T10383] erofs: (device loop6): mounted with root inode @ nid 36. [ 312.887337][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.903565][T10383] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 312.932427][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.943354][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.952886][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 312.962055][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.971760][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 312.980867][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.990347][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 313.000267][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 313.009567][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 313.019041][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 313.028260][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 313.037641][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 313.046980][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 313.056203][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 313.056569][ T9748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.065397][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 313.085791][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 313.094878][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 313.104386][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 313.116159][T10383] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 313.125818][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 313.135151][T10383] syz.6.1800: attempt to access beyond end of device [ 313.135151][T10383] loop6: rw=524288, sector=16392, nr_sectors = 16 limit=16 [ 313.149046][T10383] syz.6.1800: attempt to access beyond end of device [ 313.149046][T10383] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 313.163090][T10383] syz.6.1800: attempt to access beyond end of device [ 313.163090][T10383] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 313.169037][ T9748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.176668][T10383] syz.6.1800: attempt to access beyond end of device [ 313.176668][T10383] loop6: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 313.200203][T10383] syz.6.1800: attempt to access beyond end of device [ 313.200203][T10383] loop6: rw=524288, sector=13478624032, nr_sectors = 128 limit=16 [ 313.215079][T10383] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[4055] [ 313.229440][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.238834][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 313.249445][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.258829][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 313.268009][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 313.277150][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 313.286284][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.295659][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 313.296112][ T9748] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.304745][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.304771][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 313.304829][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 313.304865][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 313.304883][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 313.357410][ T9748] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 313.359573][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 313.376901][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 313.386073][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 313.395214][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.404546][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 313.413681][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.418493][ T9748] usb 6-1: Manufacturer: syz [ 313.423015][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 313.423069][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 313.445931][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 313.453103][T10390] overlayfs: failed to clone upperpath [ 313.455092][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 313.469728][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.479116][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 313.488234][T10383] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.500154][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 313.509445][T10383] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 313.512449][ T9748] usb 6-1: config 0 descriptor?? [ 313.518669][T10383] syz.6.1800: attempt to access beyond end of device [ 313.518669][T10383] loop6: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 313.518794][T10383] syz.6.1800: attempt to access beyond end of device [ 313.518794][T10383] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 313.555164][T10383] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[5297] [ 314.135419][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 314.163603][T10411] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1811'. [ 314.397089][ T9748] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 314.499254][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1816'. [ 314.515625][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1816'. [ 314.640273][ T9748] usb 6-1: USB disconnect, device number 6 [ 314.981028][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.996259][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.044922][T10319] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 315.129925][T10318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.138417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.266611][T10319] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 315.282631][T10319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.406273][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.435136][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.485092][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.506888][T10319] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 315.508653][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.050279][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.056756][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.180627][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 317.265792][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 317.765069][ T4632] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 317.985699][ T4632] usb 6-1: too many configurations: 168, using maximum allowed: 8 [ 317.994831][ T9749] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 318.022737][ T4632] usb 6-1: config index 0 descriptor too short (expected 65016, got 133) [ 318.054857][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.125506][ T4632] usb 6-1: config index 1 descriptor too short (expected 65016, got 133) [ 318.165042][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.202653][ T4632] usb 6-1: config index 2 descriptor too short (expected 65016, got 133) [ 318.221939][ T9749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.249241][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 318.258809][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.269083][ T9749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.291240][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 318.315571][ T4632] usb 6-1: config index 3 descriptor too short (expected 65016, got 133) [ 318.335733][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.347074][ T9749] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.374778][ T9749] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 318.394295][ T4632] usb 6-1: config index 4 descriptor too short (expected 65016, got 133) [ 318.410241][ T9749] usb 2-1: Manufacturer: syz [ 318.421764][ T9749] usb 2-1: config 0 descriptor?? [ 318.428065][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.480735][ T4632] usb 6-1: config index 5 descriptor too short (expected 65016, got 133) [ 318.511526][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.565660][ T4632] usb 6-1: config index 6 descriptor too short (expected 65016, got 133) [ 318.574207][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.656914][ T4632] usb 6-1: config index 7 descriptor too short (expected 65016, got 133) [ 318.696532][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.749908][ T4632] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.794942][ T4632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.831887][ T4632] usb 6-1: Product: syz [ 318.840606][T10504] overlayfs: failed to clone upperpath [ 318.854996][ T4632] usb 6-1: Manufacturer: syz [ 318.869924][ T4632] usb 6-1: SerialNumber: syz [ 319.046801][ T4632] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.550847][ T9748] usb 6-1: USB disconnect, device number 7 [ 319.582014][ T9749] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input10 [ 319.691990][ T9749] uclogic 0003:256C:006D.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 319.907119][ T9749] usb 2-1: USB disconnect, device number 8 [ 320.054545][T10516] fido_id[10516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 320.164839][ T4632] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 320.191844][ T4632] ath9k_htc: Failed to initialize the device [ 320.227071][ T9748] usb 6-1: ath9k_htc: USB layer deinitialized [ 321.067085][T10318] usb 7-1: USB disconnect, device number 7 [ 321.159251][T10533] netlink: 'syz.5.1861': attribute type 1 has an invalid length. [ 321.194904][T10533] netlink: 'syz.5.1861': attribute type 4 has an invalid length. [ 321.253004][T10533] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1861'. [ 323.029853][T10548] syz.6.1868 (10548): drop_caches: 2 [ 325.004815][ T4632] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 325.197227][ T4632] usb 2-1: Using ep0 maxpacket: 8 [ 325.204512][ T4632] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 325.234390][ T4632] usb 2-1: config 179 has no interface number 0 [ 325.264435][ T4632] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 325.309746][ T4632] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 325.354188][ T4632] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 325.394830][ T4632] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 325.439459][ T4632] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 325.471576][ T4632] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 325.490783][ T4632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.519090][T10629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 325.808924][ T4632] usb 2-1: USB disconnect, device number 9 [ 325.814949][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 325.819230][ T9793] Bluetooth: hci5: Frame reassembly failed (-84) [ 325.823245][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 326.716452][T10667] FAULT_INJECTION: forcing a failure. [ 326.716452][T10667] name failslab, interval 1, probability 0, space 0, times 0 [ 326.759747][T10667] CPU: 0 PID: 10667 Comm: syz.5.1910 Not tainted syzkaller #0 [ 326.767275][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.777331][T10667] Call Trace: [ 326.780609][T10667] [ 326.783541][T10667] dump_stack_lvl+0x188/0x24e [ 326.788222][T10667] ? show_regs_print_info+0x12/0x12 [ 326.793507][T10667] ? load_image+0x410/0x410 [ 326.798016][T10667] ? __might_sleep+0xd0/0xd0 [ 326.802602][T10667] ? __lock_acquire+0x7c40/0x7c40 [ 326.807662][T10667] should_fail_ex+0x390/0x4c0 [ 326.812389][T10667] should_failslab+0x5/0x20 [ 326.816914][T10667] slab_pre_alloc_hook+0x59/0x300 [ 326.821945][T10667] kmem_cache_alloc+0x56/0x2f0 [ 326.826733][T10667] ? create_new_namespaces+0x34/0x700 [ 326.832105][T10667] create_new_namespaces+0x34/0x700 [ 326.837302][T10667] ? apparmor_capable+0x12c/0x190 [ 326.842329][T10667] ? bpf_lsm_capable+0x5/0x10 [ 326.847004][T10667] ? security_capable+0x85/0xb0 [ 326.851851][T10667] unshare_nsproxy_namespaces+0x116/0x160 [ 326.857578][T10667] ksys_unshare+0x4f6/0x8e0 [ 326.862096][T10667] ? sighand_ctor+0x40/0x40 [ 326.866595][T10667] ? lock_chain_count+0x20/0x20 [ 326.871453][T10667] ? syscall_enter_from_user_mode+0x21/0x80 [ 326.877358][T10667] __x64_sys_unshare+0x34/0x40 [ 326.882134][T10667] do_syscall_64+0x4c/0xa0 [ 326.886561][T10667] ? clear_bhb_loop+0x60/0xb0 [ 326.891255][T10667] ? clear_bhb_loop+0x60/0xb0 [ 326.895944][T10667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.901852][T10667] RIP: 0033:0x7f546359e159 [ 326.906278][T10667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.925983][T10667] RSP: 002b:00007f5464384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 326.934408][T10667] RAX: ffffffffffffffda RBX: 00007f5463825fa0 RCX: 00007f546359e159 [ 326.942389][T10667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 326.950367][T10667] RBP: 00007f546363506b R08: 0000000000000000 R09: 0000000000000000 [ 326.958348][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.966328][T10667] R13: 00007f5463826038 R14: 00007f5463825fa0 R15: 00007ffd8b808058 [ 326.974320][T10667] [ 327.046378][ T4632] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 327.235052][ T4632] usb 2-1: Using ep0 maxpacket: 8 [ 327.242576][ T4632] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.282580][ T4632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 327.327207][ T4632] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 327.361913][ T4632] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 327.404039][ T4632] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 327.429288][ T4632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.475044][ T4632] hub 2-1:1.0: bad descriptor, ignoring hub [ 327.501449][ T4632] hub: probe of 2-1:1.0 failed with error -5 [ 327.517232][ T4632] cdc_wdm 2-1:1.0: skipping garbage [ 327.538275][ T4632] cdc_wdm 2-1:1.0: skipping garbage [ 327.586726][ T4632] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 327.592689][ T4632] cdc_wdm 2-1:1.0: Unknown control protocol [ 327.845029][ T4280] Bluetooth: hci5: command 0x1003 tx timeout [ 327.854323][ T4293] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.315107][T10319] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 328.506668][T10319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.508163][T10694] loop5: detected capacity change from 0 to 32768 [ 328.522609][T10319] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 328.534137][T10319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.583156][T10319] usb 7-1: config 0 descriptor?? [ 328.595886][T10694] JBD2: Ignoring recovery information on journal [ 328.679923][T10694] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 328.817750][T10319] usbhid 7-1:0.0: can't add hid device: -71 [ 328.823822][T10319] usbhid: probe of 7-1:0.0 failed with error -71 [ 328.854524][ T5493] ocfs2: Unmounting device (7,5) on (node local) [ 328.869538][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 328.884888][T10319] usb 7-1: USB disconnect, device number 8 [ 329.425084][T10319] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 329.566654][ T9749] usb 2-1: USB disconnect, device number 10 [ 329.605490][T10319] usb 7-1: Using ep0 maxpacket: 32 [ 329.617575][T10319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.660792][T10319] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 329.671890][T10319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.703280][T10319] usb 7-1: config 0 descriptor?? [ 329.721557][T10319] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 329.723472][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 329.756864][T10319] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 330.145965][T10732] netlink: 'syz.1.1939': attribute type 39 has an invalid length. [ 331.450097][T10762] loop5: detected capacity change from 0 to 512 [ 331.547078][T10762] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 331.614812][T10762] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1950: corrupted in-inode xattr [ 331.647868][T10319] usb 7-1: USB disconnect, device number 9 [ 331.665142][T10762] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1950: couldn't read orphan inode 15 (err -117) [ 331.676225][T10319] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 331.766714][T10762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 331.855813][T10775] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 332.038191][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 332.654480][T10797] loop6: detected capacity change from 0 to 4096 [ 332.752615][T10798] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.397151][T10807] netlink: 'syz.4.1968': attribute type 4 has an invalid length. [ 333.439643][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 333.893983][T10800] loop1: detected capacity change from 0 to 32768 [ 334.014833][ T4631] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 334.058932][T10800] XFS (loop1): Mounting V5 Filesystem [ 334.187471][T10800] XFS (loop1): Ending clean mount [ 334.200505][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1975'. [ 334.272324][ T4631] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.320007][ T4631] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.413667][ T4631] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.460746][ T26] audit: type=1800 audit(43927.598:171): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1964" name="file1" dev="loop1" ino=4427 res=0 errno=0 [ 334.505038][ T4631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.545922][ T4631] usb 6-1: SerialNumber: syz [ 334.699949][ T4278] XFS (loop1): Unmounting Filesystem [ 334.809369][ T4631] usb 6-1: 0:2 : does not exist [ 334.826049][ T4631] usb 6-1: unit 4 not found! [ 334.889548][ T4631] usb 6-1: USB disconnect, device number 8 [ 335.047348][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.377400][T10850] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1982'. [ 335.392887][T10850] net_ratelimit: 1020 callbacks suppressed [ 335.392904][T10850] netlink: zone id is out of range [ 335.411594][T10850] netlink: zone id is out of range [ 335.417274][T10850] netlink: zone id is out of range [ 335.422441][T10850] netlink: zone id is out of range [ 335.434900][T10850] netlink: zone id is out of range [ 335.442254][T10850] netlink: zone id is out of range [ 335.452557][T10850] netlink: zone id is out of range [ 335.462964][T10850] netlink: zone id is out of range [ 335.472419][T10850] netlink: zone id is out of range [ 335.480299][T10850] netlink: zone id is out of range [ 335.749376][ T26] audit: type=1800 audit(43928.888:172): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1979" name="streaming_maxpacket" dev="configfs" ino=54851 res=0 errno=0 [ 335.969819][T10871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.022547][T10873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.399029][T10857] loop5: detected capacity change from 0 to 32768 [ 336.459421][T10857] JBD2: Ignoring recovery information on journal [ 336.551597][T10857] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 337.008120][ T5493] ocfs2: Unmounting device (7,5) on (node local) [ 337.238939][T10897] netlink: 'syz.5.1997': attribute type 4 has an invalid length. [ 337.474907][T10318] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 337.686814][T10318] usb 7-1: config index 0 descriptor too short (expected 25647, got 18) [ 337.698660][T10318] usb 7-1: config 118 has too many interfaces: 101, using maximum allowed: 32 [ 337.713809][T10318] usb 7-1: config 118 has an invalid descriptor of length 10, skipping remainder of the config [ 337.727717][T10318] usb 7-1: config 118 has 0 interfaces, different from the descriptor's value: 101 [ 337.744771][T10318] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 337.753974][T10318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.768880][T10318] usb 7-1: Product: syz [ 337.773564][T10318] usb 7-1: Manufacturer: syz [ 337.783246][T10318] usb 7-1: SerialNumber: syz [ 338.191464][T10905] loop5: detected capacity change from 0 to 512 [ 338.205017][T10318] usb 7-1: USB disconnect, device number 10 [ 338.231059][T10905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 338.274983][T10905] System zones: 1-12 [ 338.308452][T10905] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.2003: missing EA_INODE flag [ 338.336563][T10905] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2003: error while reading EA inode 12 err=-117 [ 338.361194][T10905] EXT4-fs (loop5): 1 orphan inode deleted [ 338.375036][T10905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 338.412289][T10905] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 338.444254][T10905] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 338.522994][ T5493] EXT4-fs (loop5): unmounting filesystem. [ 339.801961][T10919] loop1: detected capacity change from 0 to 32768 [ 339.862384][T10919] JBD2: Ignoring recovery information on journal [ 339.970901][T10919] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 340.392210][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 340.864465][ T26] audit: type=1326 audit(43933.998:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.6.2018" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effcf99e159 code=0x0 [ 341.112095][T10959] loop5: detected capacity change from 0 to 128 [ 341.315680][ T5493] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 341.349021][ T5493] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 341.383981][ T26] audit: type=1326 audit(43934.518:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.422740][ T26] audit: type=1326 audit(43934.528:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.456928][ T26] audit: type=1326 audit(43934.528:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.572506][ T26] audit: type=1326 audit(43934.528:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.637626][ T26] audit: type=1326 audit(43934.528:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.702087][ T26] audit: type=1326 audit(43934.528:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.764413][ T26] audit: type=1326 audit(43934.528:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.810963][ T26] audit: type=1326 audit(43934.528:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 341.852548][ T26] audit: type=1326 audit(43934.528:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff29ef9e159 code=0x7ffc0000 [ 342.049970][T10968] loop6: detected capacity change from 0 to 1024 [ 342.142109][T10968] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 342.215142][T10968] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.2028: lblock 0 mapped to illegal pblock 0 (length 5) [ 342.274874][T10968] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 342.355479][T10968] EXT4-fs (loop6): This should not happen!! Data will be lost [ 342.355479][T10968] [ 342.440311][T10968] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.2028: lblock 0 mapped to illegal pblock 0 (length 4) [ 342.520913][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.531909][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.541370][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.565482][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.582113][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.583389][ T6118] EXT4-fs (loop6): unmounting filesystem. [ 342.595719][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.897237][T10974] chnl_net:caif_netlink_parms(): no params data found [ 343.218933][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.226348][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.234653][T10974] device bridge_slave_0 entered promiscuous mode [ 343.245625][T10974] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.252913][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.261690][T10974] device bridge_slave_1 entered promiscuous mode [ 343.290584][T10974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.305141][T10974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.379030][T10974] team0: Port device team_slave_0 added [ 343.409106][T10974] team0: Port device team_slave_1 added [ 343.518232][T10974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.555855][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.633783][T10974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.700849][T10974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.723421][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.761948][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.874912][T10974] device hsr_slave_0 entered promiscuous mode [ 343.913514][T10974] device hsr_slave_1 entered promiscuous mode [ 343.941495][T10974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.957697][T10974] Cannot create hsr debugfs directory [ 344.194802][ T9749] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 344.250198][T10974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 344.270768][T10974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 344.290664][T10974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 344.314112][T10974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.397019][ T9749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.412939][ T9749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.431921][ T9749] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 344.448392][ T9749] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 344.459686][ T9749] usb 2-1: Manufacturer: syz [ 344.483626][ T9749] usb 2-1: config 0 descriptor?? [ 344.553756][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.588509][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.600390][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.619513][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.633672][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.645758][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.654483][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.661677][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.669656][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 344.695435][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.704270][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.716473][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.725368][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.732506][ T9793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.745773][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.755335][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.767515][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.786666][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.825758][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.838491][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.858209][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.896306][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.915522][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.939389][T10974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.957445][T10974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.968739][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.982333][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.309188][ T9749] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input11 [ 345.392199][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.404460][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.407179][ T9749] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input12 [ 345.439565][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.482002][ T9749] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input13 [ 345.550567][ T9749] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0007/input/input14 [ 345.618778][ T9749] uclogic 0003:256C:006D.0007: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 345.878785][ T9749] usb 2-1: USB disconnect, device number 11 [ 346.106885][T11037] net_ratelimit: 301 callbacks suppressed [ 346.106905][T11037] ip_tables: iptables: counters copy to user failed while replacing table [ 346.144428][T11029] fido_id[11029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 346.193945][T11037] tipc: Started in network mode [ 346.232952][T11037] tipc: Node identity ac1414aa, cluster identity 4711 [ 346.256452][T11037] tipc: Enabled bearer , priority 10 [ 346.418429][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.439860][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.557628][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.580875][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.604555][T10974] device veth0_vlan entered promiscuous mode [ 346.613948][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.628940][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.671781][T10974] device veth1_vlan entered promiscuous mode [ 346.715944][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.725213][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 346.739501][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.750836][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.766033][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.778166][T10974] device veth0_macvtap entered promiscuous mode [ 346.792475][T10974] device veth1_macvtap entered promiscuous mode [ 346.828870][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.840046][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.850511][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.862024][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.872410][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.888443][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.909037][T10974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.923366][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.934246][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.949773][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.980741][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.023459][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.054254][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.090049][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.122587][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.163251][T10974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.194530][T10974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.233221][T10974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.261929][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.276520][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.321255][T10974] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.344754][T10974] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.353617][T10974] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.402268][T10974] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.434175][ T9749] tipc: Node number set to 2886997162 [ 347.568048][T11056] loop6: detected capacity change from 0 to 32768 [ 347.617978][T11056] JBD2: Ignoring recovery information on journal [ 347.677883][ T9795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.692339][ T9795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.710863][T11056] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 347.815048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.894552][ T9793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.912503][ T9793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.949400][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.093235][ T6118] ocfs2: Unmounting device (7,6) on (node local) [ 348.282857][T11082] device macvlan0 entered promiscuous mode [ 348.751061][T11095] VFS: file-max limit 0 reached [ 348.793864][T11098] netlink: 'syz.6.2064': attribute type 4 has an invalid length. [ 348.802217][T11098] netlink: 'syz.6.2064': attribute type 7 has an invalid length. [ 348.813115][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 348.834888][T11098] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.2064'. [ 349.351953][T11118] loop2: detected capacity change from 0 to 7 [ 349.385278][T11120] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 349.386365][T11035] loop2: [POWERTEC] p1 [ 349.425148][T11035] loop2: p1 start 536870912 is beyond EOD, truncated [ 349.433720][T11120] device bond4 entered promiscuous mode [ 349.453979][T11120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.482972][T11118] loop2: [POWERTEC] p1 [ 349.507553][T11118] loop2: p1 start 536870912 is beyond EOD, truncated [ 349.508818][T11123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.560876][T11123] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 349.588681][T11123] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 349.625066][T11123] bond4: (slave gre1): making interface the new active one [ 349.642192][T11123] device gre1 entered promiscuous mode [ 349.662773][T11123] bond4: (slave gre1): Enslaving as an active interface with an up link [ 349.707793][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 349.715547][ T4631] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.911224][ T4631] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 349.959033][ T4631] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 349.997474][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.049412][ T4631] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 350.076285][T11133] IPv4: Oversized IP packet from 127.202.26.0 [ 350.099594][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.138513][ T4631] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 350.165812][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.197168][ T4631] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 350.225146][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.259154][ T4631] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 350.298554][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.348581][ T4631] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 350.384849][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.432355][ T4631] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 350.482738][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.522672][ T4631] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 350.561170][ T4631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.617083][ T4631] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.643257][ T4631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.661762][ T4631] usb 2-1: Product: syz [ 350.666207][ T4631] usb 2-1: Manufacturer: syz [ 350.681118][ T4631] usb 2-1: SerialNumber: syz [ 350.723955][ T9748] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 350.886795][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 351.163424][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2088'. [ 351.278827][T11158] overlayfs: failed to clone upperpath [ 351.422437][T10318] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 351.521469][ T9749] usb 2-1: USB disconnect, device number 12 [ 351.625609][T10318] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 351.652719][T10318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.764866][ T9748] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 351.772001][ T9748] ath9k_htc: Failed to initialize the device [ 351.800438][ T9749] usb 2-1: ath9k_htc: USB layer deinitialized [ 351.801232][T11160] loop6: detected capacity change from 0 to 32768 [ 351.898100][T10318] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 351.906334][T11160] JBD2: Ignoring recovery information on journal [ 351.962880][T11160] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 352.463787][ T6118] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 352.489066][ T6118] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 352.504154][ T6118] OCFS2: File system is now read-only. [ 352.517292][ T6118] (syz-executor,6118,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 352.532776][ T6118] (syz-executor,6118,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 352.549045][ T6118] (syz-executor,6118,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 352.566010][ T6118] (syz-executor,6118,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 352.574625][ T6118] (syz-executor,6118,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 352.605137][ T6118] ocfs2: Unmounting device (7,6) on (node local) [ 353.347233][T11204] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 353.347233][T11204] The task syz.6.2105 (11204) triggered the difference, watch for misbehavior. [ 353.403316][T11206] 9pnet: p9_errstr2errno: server reported unknown error @cDB| [ 353.545737][T11209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.821505][T11212] loop1: detected capacity change from 0 to 2048 [ 353.842153][T11212] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 353.885888][T11212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.394508][T11228] loop1: detected capacity change from 0 to 512 [ 354.469936][T11228] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2117: invalid indirect mapped block 4294967295 (level 1) [ 354.607563][T11228] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2117: invalid indirect mapped block 4294967295 (level 1) [ 354.676268][T11228] EXT4-fs (loop1): 2 truncates cleaned up [ 354.682102][T11228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 355.064543][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 355.269850][T11244] [ 355.272245][T11244] ====================================================== [ 355.279463][T11244] WARNING: possible circular locking dependency detected [ 355.286483][T11244] syzkaller #0 Not tainted [ 355.290900][T11244] ------------------------------------------------------ [ 355.297923][T11244] syz.2.2122/11244 is trying to acquire lock: [ 355.303985][T11244] ffff88801eb82220 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 355.314817][T11244] [ 355.314817][T11244] but task is already holding lock: [ 355.322187][T11244] ffff888079ee17d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 355.332257][T11244] [ 355.332257][T11244] which lock already depends on the new lock. [ 355.332257][T11244] [ 355.342924][T11244] [ 355.342924][T11244] the existing dependency chain (in reverse order) is: [ 355.351937][T11244] [ 355.351937][T11244] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 355.359497][T11244] down_read_killable+0x4c/0x340 [ 355.365013][T11244] mmap_read_lock_killable+0x1d/0x60 [ 355.370824][T11244] lock_mm_and_find_vma+0x2b1/0x2f0 [ 355.376644][T11244] do_user_addr_fault+0x2e8/0xb20 [ 355.382269][T11244] exc_page_fault+0x60/0x100 [ 355.387407][T11244] asm_exc_page_fault+0x22/0x30 [ 355.392826][T11244] fault_in_readable+0x13e/0x1f0 [ 355.398327][T11244] fault_in_iov_iter_readable+0xbf/0x2f0 [ 355.404521][T11244] generic_perform_write+0x1f1/0x5c0 [ 355.410358][T11244] __generic_file_write_iter+0x148/0x2a0 [ 355.416518][T11244] generic_file_write_iter+0xab/0x2e0 [ 355.422425][T11244] vfs_write+0x482/0x9a0 [ 355.427278][T11244] ksys_write+0x14d/0x260 [ 355.432135][T11244] do_syscall_64+0x4c/0xa0 [ 355.437079][T11244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.443505][T11244] [ 355.443505][T11244] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 355.452208][T11244] __lock_acquire+0x2d18/0x7c40 [ 355.457626][T11244] lock_acquire+0x1bb/0x4a0 [ 355.462658][T11244] down_write+0x36/0x60 [ 355.467340][T11244] process_measurement+0x3af/0x1c40 [ 355.473070][T11244] ima_file_mmap+0xe9/0x140 [ 355.478103][T11244] __se_sys_remap_file_pages+0x55a/0x7b0 [ 355.484262][T11244] do_syscall_64+0x4c/0xa0 [ 355.489208][T11244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.495635][T11244] [ 355.495635][T11244] other info that might help us debug this: [ 355.495635][T11244] [ 355.505860][T11244] Possible unsafe locking scenario: [ 355.505860][T11244] [ 355.513312][T11244] CPU0 CPU1 [ 355.518673][T11244] ---- ---- [ 355.524036][T11244] lock(&mm->mmap_lock); [ 355.528369][T11244] lock(&sb->s_type->i_mutex_key#13); [ 355.536361][T11244] lock(&mm->mmap_lock); [ 355.543209][T11244] lock(&sb->s_type->i_mutex_key#13); [ 355.548676][T11244] [ 355.548676][T11244] *** DEADLOCK *** [ 355.548676][T11244] [ 355.556818][T11244] 1 lock held by syz.2.2122/11244: [ 355.561924][T11244] #0: ffff888079ee17d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 355.572396][T11244] [ 355.572396][T11244] stack backtrace: [ 355.578289][T11244] CPU: 0 PID: 11244 Comm: syz.2.2122 Not tainted syzkaller #0 [ 355.585754][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.595836][T11244] Call Trace: [ 355.599177][T11244] [ 355.602162][T11244] dump_stack_lvl+0x188/0x24e [ 355.606896][T11244] ? load_image+0x410/0x410 [ 355.611443][T11244] ? show_regs_print_info+0x12/0x12 [ 355.616653][T11244] ? print_circular_bug+0x12b/0x1a0 [ 355.621873][T11244] check_noncircular+0x296/0x330 [ 355.626826][T11244] ? look_up_lock_class+0x75/0x140 [ 355.631945][T11244] ? add_chain_block+0x9b0/0x9b0 [ 355.636914][T11244] ? lockdep_lock+0xf1/0x1f0 [ 355.641513][T11244] ? _find_first_zero_bit+0xd2/0x100 [ 355.646810][T11244] __lock_acquire+0x2d18/0x7c40 [ 355.651682][T11244] ? ima_match_policy+0x10d/0x21b0 [ 355.656798][T11244] ? __lock_acquire+0x7c40/0x7c40 [ 355.661831][T11244] ? verify_lock_unused+0x140/0x140 [ 355.667037][T11244] ? ima_match_policy+0x10d/0x21b0 [ 355.672150][T11244] ? ima_match_policy+0x211c/0x21b0 [ 355.677352][T11244] lock_acquire+0x1bb/0x4a0 [ 355.681890][T11244] ? process_measurement+0x3af/0x1c40 [ 355.687295][T11244] ? __might_sleep+0xd0/0xd0 [ 355.691951][T11244] ? read_lock_is_recursive+0x10/0x10 [ 355.697341][T11244] ? ima_get_action+0x71/0xa0 [ 355.702044][T11244] down_write+0x36/0x60 [ 355.706238][T11244] ? process_measurement+0x3af/0x1c40 [ 355.711619][T11244] process_measurement+0x3af/0x1c40 [ 355.716835][T11244] ? ima_file_mmap+0x140/0x140 [ 355.721610][T11244] ? aa_file_perm+0x112/0xf00 [ 355.726386][T11244] ? mtree_load+0x100/0xa70 [ 355.730922][T11244] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 355.737121][T11244] ima_file_mmap+0xe9/0x140 [ 355.741636][T11244] ? ima_file_free+0x3e0/0x3e0 [ 355.746413][T11244] ? common_file_perm+0x171/0x1c0 [ 355.751448][T11244] ? bpf_lsm_mmap_file+0x5/0x10 [ 355.756352][T11244] ? security_mmap_file+0x11b/0x180 [ 355.761582][T11244] __se_sys_remap_file_pages+0x55a/0x7b0 [ 355.767225][T11244] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 355.772953][T11244] ? lock_chain_count+0x20/0x20 [ 355.777816][T11244] ? lockdep_hardirqs_on+0x94/0x140 [ 355.783020][T11244] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 355.788746][T11244] do_syscall_64+0x4c/0xa0 [ 355.793171][T11244] ? clear_bhb_loop+0x60/0xb0 [ 355.797852][T11244] ? clear_bhb_loop+0x60/0xb0 [ 355.802533][T11244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.808437][T11244] RIP: 0033:0x7f1b7e59e159 [ 355.812889][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.832525][T11244] RSP: 002b:00007f1b7f428028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 355.841118][T11244] RAX: ffffffffffffffda RBX: 00007f1b7e825fa0 RCX: 00007f1b7e59e159 [ 355.849092][T11244] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 355.857068][T11244] RBP: 00007f1b7e63506b R08: 0000000000000000 R09: 0000000000000000 [ 355.865040][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.873011][T11244] R13: 00007f1b7e826038 R14: 00007f1b7e825fa0 R15: 00007ffd178c3328 [ 355.880989][T11244] [ 355.926298][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2123'. [ 357.449506][ T9749] usb 8-1: USB disconnect, device number 2