last executing test programs: 5m23.047954734s ago: executing program 32 (id=163): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd) 4m52.11428191s ago: executing program 33 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 4m26.02960495s ago: executing program 34 (id=448): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) 3m47.854279324s ago: executing program 2 (id=626): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m47.462018334s ago: executing program 2 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ff}]]}, 0x24}, 0x1, 0x0, 0x0, 0x10008040}, 0x4000000) 3m47.198871391s ago: executing program 2 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x1a, 0x1, 0x5b}) 3m46.719436334s ago: executing program 2 (id=635): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m46.204700897s ago: executing program 2 (id=639): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x80) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x11, r0, 0x83000000) 3m45.060366757s ago: executing program 2 (id=640): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/184) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)) 3m44.380507764s ago: executing program 35 (id=640): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/184) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)) 3m38.127686548s ago: executing program 5 (id=675): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x82, 0xfffffff9, 0xaf, 0x3ff, 0x7ff, 0x91}) 3m35.652470632s ago: executing program 5 (id=686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x1) 3m35.240791533s ago: executing program 5 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ip_forward\x00', 0x103281, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 3m35.030311268s ago: executing program 5 (id=688): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@noquota}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45a, &(0x7f00000005c0)="$eJzs3M9vFFUcAPDvzHYLCNiK+IMfKorGxh8tBVQOHtRo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1szsDu8vuUra7Xe1+PsmQ9/a94b1v37zdN/O6DWBk7cv+SSK2RcQfETFRz95SqlfK6l2/en7+xtXz80lUq+/8ndTqXbt6fr6oWpy3Nc9MpRHp50nsadPu8tlzJ+cqlcUzeX5m5dSHM8tnzz1/4tTc8cXji6cPHjly+NDsSy8efKEvcWZ9urb7k6W9u958/+u3jn7ZFH9LHH2yr1vhU9Vqn5sbru0N6WSsW82uhayzUj4i5dr8n4hSw/hMxBufDbVzwEBVq9Xq1s7FF6rABpZEc96Uh1FRfNBn97/F0boIeGVwy4+hu/Jq/QYoi/t6ftRLxiLN65Rb7m/7aV9EvHfhn2+zIwbzHAIAoMmP2frnuXbrvzQebKh3b743NBkR90XEjoi4PyJ2RsQDEbW6D0XEw3fZfusmye3rn/RyT4GtUrb+eznf22pe/xWrv5gs5bnttfjLybETlcUD+c9kKsqbsvxslzZ+ev33rzqVNa7/siNrv1gL5v24PLap+ZyFuZW5tcTc6MrFiN1j7eJPbu4EJBGxKyJ299jGiWe+39up7M7xd9GHraTqdxFP18f/QhTxp811ku77kzObo7J4YKa4Km7362+X3u7U/pri74Ns/O8prv/xxpKbu8CTSeN+7fLdt3Hpzy863tP0ev2PJ+/W0kWXP55bWTkzGzGeHK13uvH1g7fOLfJF/Sz+qf3t5/+Ohp/EnojILuJHIuLRiHgs7/vjEfFEROzvEv8vrz35Qe/xD1YW/0Lb979O438rMR6tr7RPlE7+/ENTo5O3xX+j+/gfrqWm8ldW8/63mn71djUDAADA/08aEdsiSadvptN0err++/I7I9LK0vLKs8eWPjq9UP+OwGSU0+JJ10TD89DZ/La+nr8YEfVfLSjKD+XPjb8pbanlp+eXKgvDDh5G3NYO8z/zV2nYvQMGzleyYHSZ/zC6zH8YXeY/jK4283/LMPoBrL92n/+fdq6+eZB9AdZXy/y37QcjxP0/jK6O838j/+UfoMbnP4yk5S1x5y/Jd00U/1OPp2/YRJT/E91Ye6KatB3cSIfdMYlBJob7vgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAv/wYAAP//4tjbrg==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3m34.218515169s ago: executing program 5 (id=690): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x801ff, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000800)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9365}]}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 3m33.647920444s ago: executing program 5 (id=693): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3m33.077838139s ago: executing program 36 (id=693): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3m31.772420193s ago: executing program 0 (id=702): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@nolazytime}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000100)="f87d", 0x2, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 3m30.856482667s ago: executing program 7 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf253700000008000300", @ANYRES32=r3, @ANYBLOB="08002600711600030800570043"], 0x2c}, 0x1, 0x0, 0x0, 0x40024}, 0x4000004) 3m30.803922088s ago: executing program 0 (id=703): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="10000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m30.399415839s ago: executing program 7 (id=704): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m30.147948745s ago: executing program 0 (id=706): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x201, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x7, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xfffffff8, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x4000, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x19], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x401, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m29.642235308s ago: executing program 0 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 3m29.394450635s ago: executing program 0 (id=708): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) r1 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3m28.930665017s ago: executing program 0 (id=709): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000003900)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000080)='B', 0x1, 0x4}]) 3m28.303226374s ago: executing program 37 (id=709): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000003900)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f0000000080)='B', 0x1, 0x4}]) 3m26.844881281s ago: executing program 7 (id=711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@noquota}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45a, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3m26.215145768s ago: executing program 7 (id=712): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a0, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000200)='dir .', 0x5) write(r0, &(0x7f0000000300)='bind', 0x4) 3m24.937840411s ago: executing program 7 (id=715): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000240)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) 3m24.525304462s ago: executing program 38 (id=715): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000240)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) 2m26.409628356s ago: executing program 9 (id=1009): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') 2m26.150721262s ago: executing program 9 (id=1011): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000001100)=@ethtool_perm_addr={0x20, 0x6, "e132f6298cad"}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 2m25.819238931s ago: executing program 9 (id=1014): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000009, 0xd18135cf551e1a3d) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x20007, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) 2m25.511299519s ago: executing program 9 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 2m25.173590508s ago: executing program 9 (id=1020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r2, 0x8c}, 0x8) 2m23.307660967s ago: executing program 9 (id=1027): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x4, 0x80000002, 0x0, 0x0, 0x5, 0x3, 0x200400, 0x31e}) 2m22.561999496s ago: executing program 39 (id=1027): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x4, 0x80000002, 0x0, 0x0, 0x5, 0x3, 0x200400, 0x31e}) 28.945458216s ago: executing program 3 (id=1612): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x80) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 28.631940024s ago: executing program 3 (id=1614): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 28.152013697s ago: executing program 3 (id=1617): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0x7fffffffffffffff, 0x1) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) 27.903630153s ago: executing program 3 (id=1618): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 26.793500742s ago: executing program 3 (id=1619): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 25.759827529s ago: executing program 3 (id=1623): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xd, 0x13, r1, 0x81000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) 24.797108164s ago: executing program 40 (id=1623): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xd, 0x13, r1, 0x81000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) 6.588702218s ago: executing program 8 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250100000008000300070000000800040004000000050005"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 6.080462362s ago: executing program 8 (id=1691): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x6fecb1) 5.652918493s ago: executing program 4 (id=1624): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 5.011728819s ago: executing program 4 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 4.539928881s ago: executing program 4 (id=1697): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000f40)=ANY=[@ANYBLOB="401d02"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.335162167s ago: executing program 1 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newneigh={0x24, 0x1c, 0x1, 0x3, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x40, 0x8, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @multicast2}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8c0) 4.274509799s ago: executing program 8 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004045}, 0x20004804) 3.955991377s ago: executing program 1 (id=1700): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 3.636604835s ago: executing program 8 (id=1701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.628355886s ago: executing program 1 (id=1702): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@errors_remount}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) truncate(&(0x7f0000000040)='./file1\x00', 0xc3f) 3.145428808s ago: executing program 6 (id=1703): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb787b14416c6952f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.990431622s ago: executing program 8 (id=1704): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 2.525332054s ago: executing program 6 (id=1705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"209e76702c5eaa2ec089efa6c4206fba4d1e37b16ce3b193210df2442260ec00d37e9d338b55b943390ecee0c30dc6b7de5c7194f9af55b89def2eedf221749a8fa655e3bc34c30014d8dc98c35630bc0c07942df5dfda020ba00cc267a5bff280a52050c0bc35957a3c96dc408cca2e5f47b488aa3b94011bd688213c35dd9bbd1539711b2b4ebddcb189fa295441a1c4221acd757640f3fcfdf6c6a494c103be02dcf3ef56301d6648bf29f935137ee1e86d43dfed5a48e6ee5fff8099e6d7e89db7ddcbc6148d07a702e9fa46c0a7ec6893021d81c100c1b9ecba4f4a0eec3206ef91f3f70492fd8b9f757926a66ee04b6358f69a9c1d3038fac28e7e61440b5c8eb5fa0e8111a551a743abf29973ceefa82dc6862ebb70f896a01efb6b543b41cff82338ab64ad3f6733db73394d5dcb4f81a746e9786c8d481d612c7c50cb56b1b2fe0d9909598d2488a722675b4729d5cf8849ee3f87f9d3d0c7fcf7bed3eb1f797c93dab840583e42e01aa8cc5a22863dc6df81bd4437ec9cb05423aed58e84039b69cef3189adb74f613d863063795f8dc9e2210cedeb78c13c1dd76490d73ca4b9394e33c2894ee65808a9b3501f8e6681099dd89cb926f61c6e04a068fa95eeab5f5a5ca6f100eac3920f92ac37473d2e4b9af3247655af1b283671dfa4c6a6c572756398b5b606ebbc5a49ef2f01c47b986c10ca5253268ac7e6eb9f00f49bc1484970bc881a9440c5c8b1a61c31443abd076275ce8af8f6185a2e06a9afb7c62ad5ecd4affcc9e91d41d7b373242d0fe2fae6a17473cf5e248523c7a7f7cb40106a5f9e0fb4ca4734622ff21567bf205132b0ccb2c264b6f9c88fabe9a012e3378aec8779f97f137b645dc0a9c8c5d2d26fcc6339c61a2cc1b7c4af85512928022bbcb1318afa9770b020b46227eb3f0216be24687cd956aad67095c1a512ca09e36e8ab777be3447de97edd3a69aa26959f8449eafc9324720a415651b8a29da6131920a7d2fb2cf53f92bb1853997fb7117c52914d438ad4dd0f6334909e20a29560bc418faf3254488a37c7c1e1ad4a23542f52fff42fbe84a77be5df7377d7ec0acccf1e687b2a5f562734ee37165c6b866bc802432ae44429d13f8eda5838d81e2945e3f65009720a736db77d3d626e18ba054f16ad7e07236bc9263ad4912d390a8cc0629b50289e9fd27517511f37ddf4a38acb06b8517e8dd7518a7417b87cb40ed718e5e26b77a2eb60875ceee8a65f18be935d8bf287ac03c0c40992d43b2d6678d4dc1a79489979fd587cf98e48133079dc26c8d758bcf8218b4cfa7bf907cf2ff0fdc6f591de2ba39b1adf262fbb7b3f77da0251d49d57b7fc84dfd5f7c38bcb163cf0cd2dc7931797245bea4b06bc58261edacace16bfb3bd6772cfab57c787601ceddb14a45c112ec0307074184855508ca89d"}) 2.274079961s ago: executing program 8 (id=1706): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x15}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 2.175816113s ago: executing program 1 (id=1707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x946, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.823959932s ago: executing program 6 (id=1708): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000040), 0xffff) fcntl$addseals(r1, 0x409, 0x8) 1.756866094s ago: executing program 4 (id=1709): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 1.392009833s ago: executing program 4 (id=1710): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.296689126s ago: executing program 6 (id=1711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.050109673s ago: executing program 1 (id=1712): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x24481, 0x50) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff7, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4e, 0xffffffff9673e35d]}}) 660.008272ms ago: executing program 6 (id=1713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c0000000d0a010800000000000000000a000001090002007379aa120b5f00000900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 152.573526ms ago: executing program 1 (id=1714): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) 129.535007ms ago: executing program 6 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 4 (id=1716): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) kernel console output (not intermixed with test programs): 297.718840][ T5790] Bluetooth: hci1: command tx timeout [ 297.719353][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.741638][ T9833] bridge_slave_1: entered allmulticast mode [ 297.755737][ T9833] bridge_slave_1: entered promiscuous mode [ 297.887815][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.964594][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.050408][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 298.120936][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.158423][ T9833] team0: Port device team_slave_0 added [ 298.209411][ T9833] team0: Port device team_slave_1 added [ 298.337519][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.361088][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.424193][ T9833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.505034][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.513148][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.654352][ T9833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.831240][ T9833] hsr_slave_0: entered promiscuous mode [ 298.864404][ T9833] hsr_slave_1: entered promiscuous mode [ 298.885171][ T9833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.903059][ T9833] Cannot create hsr debugfs directory [ 299.033527][ T9914] loop8: detected capacity change from 0 to 32768 [ 299.055498][ T9914] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 299.349021][ T5793] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 299.794258][ T5790] Bluetooth: hci1: command tx timeout [ 300.248924][ T9963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 300.755384][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 300.974984][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 300.985647][ T23] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 301.017072][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.059527][ T23] usb 7-1: Product: syz [ 301.063799][ T23] usb 7-1: Manufacturer: syz [ 301.094410][ T23] usb 7-1: SerialNumber: syz [ 301.132702][ T23] usb 7-1: config 0 descriptor?? [ 301.156651][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 301.227301][ T9833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.263001][ T9833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.286850][ T9833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.303183][ T9833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.529725][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.568263][ T9833] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.589592][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.596900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.622104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.629401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.212075][ T23] gspca_ov534_9: reg_w failed -71 [ 302.253400][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.364486][ T9833] veth0_vlan: entered promiscuous mode [ 302.379427][ T9833] veth1_vlan: entered promiscuous mode [ 302.497193][ T9833] veth0_macvtap: entered promiscuous mode [ 302.529842][ T9833] veth1_macvtap: entered promiscuous mode [ 302.591503][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.611302][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.621654][ T23] gspca_ov534_9: Unknown sensor 0000 [ 302.621747][ T23] ov534_9: probe of 7-1:0.0 failed with error -22 [ 302.647647][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.665006][ T23] usb 7-1: USB disconnect, device number 10 [ 302.673404][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.714247][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.736521][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.774402][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.794405][T10002] loop1: detected capacity change from 0 to 32768 [ 302.810915][T10002] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 302.819241][T10002] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 302.856626][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.867451][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.877803][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.888502][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.898956][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.909710][T10002] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 302.920030][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.930172][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 302.938994][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.946383][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 302.979053][ T9833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.995948][ T9833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.024480][ T9833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.033867][ T9833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.109003][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 162ms [ 303.146540][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 303.179081][T10002] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 303.439125][ T4758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.487067][ T4758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.609391][ T7539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.620998][T10002] gfs2: fsid=syz:syz.0: found 1 quota changes [ 303.650734][ T7539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.822544][T10002] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 303.832891][T10002] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 303.842393][T10002] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 303.851665][T10002] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 303.862392][T10002] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 304.084273][ T8585] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 304.129332][ T8585] CPU: 0 PID: 8585 Comm: syz-executor Not tainted syzkaller #0 [ 304.136979][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.147100][ T8585] Call Trace: [ 304.150461][ T8585] [ 304.153460][ T8585] dump_stack_lvl+0x18c/0x250 [ 304.158194][ T8585] ? show_regs_print_info+0x20/0x20 [ 304.163442][ T8585] ? load_image+0x420/0x420 [ 304.168016][ T8585] ? do_raw_spin_unlock+0x121/0x230 [ 304.173309][ T8585] gfs2_assert_warn_i+0x18b/0x2c0 [ 304.178403][ T8585] gfs2_qd_dispose+0x488/0x580 [ 304.183239][ T8585] gfs2_quota_cleanup+0x40d/0x720 [ 304.188322][ T8585] ? gfs2_make_fs_ro+0x17e/0x320 [ 304.193314][ T8585] ? spin_lock_bucket+0x150/0x150 [ 304.198379][ T8585] ? __might_sleep+0xe0/0xe0 [ 304.203018][ T8585] ? down_write+0x16e/0x200 [ 304.207563][ T8585] ? down_read_killable+0x340/0x340 [ 304.212798][ T8585] ? gfs2_quota_sync+0x595/0x5a0 [ 304.217784][ T8585] gfs2_make_fs_ro+0x2aa/0x320 [ 304.222577][ T8585] ? gfs2_put_super+0x1db/0x930 [ 304.227478][ T8585] ? gfs2_dinode_out+0xb10/0xb10 [ 304.232438][ T8585] ? do_raw_spin_lock+0x11f/0x2b0 [ 304.237507][ T8585] ? __rwlock_init+0x150/0x150 [ 304.242312][ T8585] ? do_raw_spin_unlock+0x121/0x230 [ 304.247560][ T8585] gfs2_put_super+0x224/0x930 [ 304.252278][ T8585] ? gfs2_evict_inode+0x13c0/0x13c0 [ 304.257500][ T8585] generic_shutdown_super+0x134/0x2b0 [ 304.262898][ T8585] kill_block_super+0x44/0x90 [ 304.267601][ T8585] deactivate_locked_super+0x97/0x100 [ 304.273008][ T8585] cleanup_mnt+0x3d7/0x460 [ 304.277464][ T8585] task_work_run+0x1d4/0x260 [ 304.282086][ T8585] ? task_work_cancel+0x220/0x220 [ 304.287149][ T8585] ? exit_to_user_mode_loop+0x3b/0x110 [ 304.292646][ T8585] exit_to_user_mode_loop+0xe6/0x110 [ 304.297973][ T8585] exit_to_user_mode_prepare+0xee/0x180 [ 304.303557][ T8585] syscall_exit_to_user_mode+0x1a/0x50 [ 304.309050][ T8585] do_syscall_64+0x61/0xb0 [ 304.313492][ T8585] ? clear_bhb_loop+0x40/0x90 [ 304.318197][ T8585] ? clear_bhb_loop+0x40/0x90 [ 304.322905][ T8585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.328833][ T8585] RIP: 0033:0x7ffadad9f317 [ 304.333277][ T8585] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 304.352937][ T8585] RSP: 002b:00007ffebe1766b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 304.361403][ T8585] RAX: 0000000000000000 RBX: 00007ffadae34474 RCX: 00007ffadad9f317 [ 304.369421][ T8585] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe176770 [ 304.377430][ T8585] RBP: 00007ffebe176770 R08: 00007ffebe177770 R09: 00000000ffffffff [ 304.385429][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebe177800 [ 304.393430][ T8585] R13: 00007ffadae34474 R14: 000000000004a2ea R15: 00007ffebe177840 [ 304.401454][ T8585] [ 304.561864][T10017] loop8: detected capacity change from 0 to 4096 [ 304.616305][T10017] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 304.669856][T10017] ntfs3: loop8: Failed to initialize $Extend/$ObjId. [ 304.816273][ T28] audit: type=1800 audit(1785965263.506:108): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1081" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 305.504509][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 305.728306][ T5819] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 305.750004][ T5819] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 305.779753][ T5819] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.814865][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 305.822947][ T5819] usb 2-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 305.841938][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.885122][ T5819] usb 2-1: config 0 descriptor?? [ 305.891364][T10028] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.951623][T10048] loop8: detected capacity change from 0 to 128 [ 306.338286][ T5819] wacom 0003:056A:00CE.0011: unknown main item tag 0x2 [ 306.357544][ T5819] wacom 0003:056A:00CE.0011: unknown main item tag 0x7 [ 306.393460][ T5819] wacom 0003:056A:00CE.0011: hidraw0: USB HID v0.08 Device [HID 056a:00ce] on usb-dummy_hcd.1-1/input0 [ 306.542651][ T5819] usb 2-1: USB disconnect, device number 10 [ 306.887868][T10076] program syz.3.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.170780][T10082] loop3: detected capacity change from 0 to 2048 [ 307.181903][ T28] audit: type=1800 audit(1785965265.866:109): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1096" name="host_addr" dev="configfs" ino=26277 res=0 errno=0 [ 307.253112][T10082] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 307.339221][T10082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.822383][T10100] loop3: detected capacity change from 0 to 1024 [ 307.884202][T10100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.958656][T10100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.013319][T10100] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 308.077051][ T28] audit: type=1804 audit(1785965266.776:110): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1102" name="/newroot/3/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 308.165796][ T9833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.668193][T10123] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 308.751005][ T27] kernel write not supported for file /stat (pid: 27 comm: kworker/1:1) [ 309.314293][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 309.392221][T10143] Bluetooth: MGMT ver 1.22 [ 309.525128][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 309.556822][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.589376][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.674216][ T789] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 309.874306][ T789] usb 9-1: Using ep0 maxpacket: 8 [ 309.908521][ T789] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.944423][ T789] usb 9-1: config 179 has no interface number 0 [ 309.984174][ T789] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 310.020395][ T789] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 310.079747][ T789] usb 9-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 19 [ 310.129269][ T789] usb 9-1: config 179 interface 65 has no altsetting 0 [ 310.146749][ T789] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 310.173462][ T789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.205841][T10146] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 310.514686][T10146] Bluetooth: MGMT ver 1.22 [ 310.544527][ T23] usb 9-1: USB disconnect, device number 5 [ 310.607355][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.585097][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 311.594434][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.064544][ T28] audit: type=1800 audit(1785965270.666:111): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1123" name="power" dev="configfs" ino=26450 res=0 errno=0 [ 312.230992][T10185] null_blk: disk my_nullb created [ 313.474510][ T9] usb 4-1: config 0 descriptor?? [ 313.517898][ T9] usb 4-1: can't set config #0, error -71 [ 313.565639][ T9] usb 4-1: USB disconnect, device number 7 [ 313.721165][T10202] nvme nvme0: rdma_resolve_addr failed (-19). [ 314.924599][T10239] loop3: detected capacity change from 0 to 32768 [ 315.012247][T10239] read_mapping_page failed! [ 315.031627][T10239] ERROR: (device loop3): txCommit: [ 315.031627][T10239] [ 315.061053][T10239] ERROR: (device loop3): remounting filesystem as read-only [ 315.457195][T10262] loop8: detected capacity change from 0 to 64 [ 315.756719][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de53c00: rx timeout, send abort [ 315.769708][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805de53c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 315.795412][T10268] syzkaller1: entered promiscuous mode [ 315.801087][T10268] syzkaller1: entered allmulticast mode [ 315.950703][T10274] sock: sock_timestamping_bind_phc: sock not bind to device [ 316.020126][ T8519] hfs: node 4:3 still has 1 user(s)! [ 316.511540][T10294] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1151'. [ 316.785008][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.065097][T10283] loop8: detected capacity change from 0 to 32768 [ 317.091458][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.111575][T10283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1147 (10283) [ 317.217681][T10283] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.255928][T10283] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 317.349279][T10283] BTRFS info (device loop8): enabling auto defrag [ 317.392794][T10283] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 317.425066][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431496][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.438138][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.485597][T10283] BTRFS info (device loop8): use zstd compression, level 3 [ 317.524263][T10283] BTRFS info (device loop8): turning on async discard [ 317.550804][T10283] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 317.574843][T10283] BTRFS info (device loop8): trying to use backup root at mount time [ 317.583030][T10283] BTRFS info (device loop8): enabling ssd optimizations [ 317.630919][T10283] BTRFS info (device loop8): using spread ssd allocation scheme [ 317.668922][T10283] BTRFS info (device loop8): setting nodatacow, compression disabled [ 317.727394][T10283] BTRFS info (device loop8): using free space tree [ 317.820896][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.984010][ T4758] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 318.046874][T10283] BTRFS error (device loop8): failed to load root extent [ 318.073460][T10283] BTRFS warning (device loop8): try to load backup roots slot 1 [ 318.095594][ T7539] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 318.127256][T10283] BTRFS warning (device loop8): couldn't read tree root [ 318.157353][T10283] BTRFS warning (device loop8): try to load backup roots slot 2 [ 318.200015][ T7540] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 318.247506][T10283] BTRFS warning (device loop8): couldn't read tree root [ 318.275918][T10283] BTRFS warning (device loop8): try to load backup roots slot 3 [ 318.338838][T10283] BTRFS info (device loop8): rebuilding free space tree [ 318.418436][T10283] BTRFS info (device loop8): checking UUID tree [ 318.835327][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.958932][T10357] loop3: detected capacity change from 0 to 4096 [ 318.968610][ T8519] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.984418][T10357] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 319.012407][T10314] loop1: detected capacity change from 0 to 40427 [ 319.056437][T10314] F2FS-fs (loop1): invalid crc value [ 319.108868][T10357] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 319.128764][T10314] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.284283][ T28] audit: type=1800 audit(1785965277.966:112): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 319.411862][T10314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 319.840049][ T8585] syz-executor: attempt to access beyond end of device [ 319.840049][ T8585] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.877733][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.938238][ T8585] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 320.114512][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.840256][T10395] Invalid ELF header magic: != ELF [ 320.914675][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.308530][T10400] nvme nvme0: rdma_resolve_addr failed (-19). [ 321.973611][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.091720][ T28] audit: type=1800 audit(1785965280.786:113): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1182" name="power" dev="configfs" ino=27761 res=0 errno=0 [ 322.701148][T10445] loop3: detected capacity change from 0 to 256 [ 322.995622][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.062453][T10451] loop3: detected capacity change from 0 to 256 [ 323.157536][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.045565][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.524432][T10491] loop1: detected capacity change from 0 to 4096 [ 324.564066][T10491] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 324.771336][T10491] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 324.875557][ T28] audit: type=1800 audit(1785965283.576:114): pid=10491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1196" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 325.093150][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.634687][ T23] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 325.743680][T10524] IPv6: A: Disabled Multicast RS [ 325.844702][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 325.955865][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 325.988778][ T23] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 326.026594][ T23] usb 7-1: can't read configurations, error -71 [ 326.114762][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.198104][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.289764][T10509] loop3: detected capacity change from 0 to 32768 [ 326.384852][T10509] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 326.609089][T10509] XFS (loop3): Ending clean mount [ 326.624756][ T789] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 326.752031][T10509] XFS (loop3): User initiated shutdown received. [ 326.812386][T10509] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 326.834312][ T789] usb 9-1: Using ep0 maxpacket: 32 [ 326.857000][ T789] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 326.868181][T10509] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 326.895645][ T789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.949637][ T789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.985948][ T789] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 326.995252][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.020080][ T9833] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 327.031451][ T789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.069961][ T789] usb 9-1: config 0 descriptor?? [ 327.070723][T10555] input: syz1 as /devices/virtual/input/input21 [ 327.121146][T10555] input: failed to attach handler leds to device input21, error: -6 [ 327.160070][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.413158][ T23] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 327.567305][ T789] logitech 0003:046D:C29C.0012: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 327.624439][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 327.635972][ T23] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.654722][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.709480][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.747779][ T789] logitech 0003:046D:C29C.0012: no inputs found [ 327.774199][ T23] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.838806][ T789] usb 9-1: USB disconnect, device number 6 [ 327.874306][ T23] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.910882][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.922177][T10562] fido_id[10562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 328.195067][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.212494][ T23] usb 7-1: GET_CAPABILITIES returned 0 [ 328.224242][ T23] usbtmc 7-1:16.0: can't read capabilities [ 328.470946][ T23] usb 7-1: USB disconnect, device number 13 [ 328.747848][T10560] loop1: detected capacity change from 0 to 32768 [ 328.832772][T10560] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 329.074208][T10560] XFS (loop1): Ending clean mount [ 329.234513][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.245902][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.551641][ T8585] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 330.280410][ T5156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.289315][ T5819] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 330.506114][ T5819] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.540336][ T5819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.571783][ T5819] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.651022][ T5819] usb 9-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 330.681457][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.698765][ T5819] usb 9-1: Product: syz [ 330.711911][ T5819] usb 9-1: Manufacturer: syz [ 330.729523][ T5819] usb 9-1: SerialNumber: syz [ 331.023109][ T28] audit: type=1326 audit(1785965289.716:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.3.1230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x0 [ 331.206730][T10613] ushc: probe of 9-1:1.0 failed with error -110 [ 331.265283][ T27] usb 9-1: USB disconnect, device number 7 [ 331.315839][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.579305][T10628] loop1: detected capacity change from 0 to 32768 [ 331.661340][T10628] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 332.364893][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.515117][T10653] loop3: detected capacity change from 0 to 32768 [ 332.523781][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.544833][T10653] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 332.553178][T10653] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 332.590616][T10653] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 332.626454][ T5837] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 332.653695][ T5837] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 332.691852][ T5819] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 332.746137][ T8585] ocfs2: Unmounting device (7,1) on (node local) [ 332.836688][ T5837] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms [ 332.894043][ T5837] gfs2: fsid=syz:syz.0: jid=0: Done [ 332.899473][T10653] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 332.975964][ T5819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.002635][ T5819] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 333.064454][ T5819] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.114490][ T5819] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 333.144304][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 333.190424][ T5819] usb 9-1: Product: syz [ 333.204173][ T5819] usb 9-1: Manufacturer: syz [ 333.234228][ T5819] usb 9-1: SerialNumber: syz [ 333.240342][T10653] gfs2: fsid=syz:syz.0: found 1 quota changes [ 333.424403][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.515358][ T9833] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 333.515358][ T9833] inode = 11 2339 [ 333.515358][ T9833] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 333.564610][ T5819] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 333.612424][ T5790] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 333.664273][ T9833] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 333.673604][ T9833] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9833 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 333.734372][ T9833] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 333.742738][ T9833] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 333.867820][ T9833] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 333.914167][ T9833] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 333.948653][ T9833] gfs2: fsid=syz:syz.0: File system withdrawn [ 333.984288][ T9833] CPU: 0 PID: 9833 Comm: syz-executor Not tainted syzkaller #0 [ 333.991950][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.002077][ T9833] Call Trace: [ 334.005585][ T9833] [ 334.008573][ T9833] dump_stack_lvl+0x18c/0x250 [ 334.013327][ T9833] ? show_regs_print_info+0x20/0x20 [ 334.018598][ T9833] ? load_image+0x420/0x420 [ 334.023189][ T9833] ? kobject_uevent_env+0x368/0x890 [ 334.028473][ T9833] gfs2_withdraw+0xe16/0x1400 [ 334.033274][ T9833] ? gfs2_lm+0x240/0x240 [ 334.037585][ T9833] ? mark_lock+0x94/0x320 [ 334.041997][ T9833] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 334.048059][ T9833] ? gfs2_consist_inode_i+0xf5/0x110 [ 334.053424][ T9833] gfs2_inode_refresh+0xb3c/0x11a0 [ 334.058615][ T9833] ? lockdep_hardirqs_on+0x98/0x150 [ 334.063905][ T9833] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.070129][ T9833] ? gfs2_inode_metasync+0xf0/0xf0 [ 334.075367][ T9833] ? inode_go_instantiate+0x40/0x60 [ 334.080665][ T9833] gfs2_instantiate+0x162/0x220 [ 334.085584][ T9833] gfs2_glock_wait+0x1d4/0x2a0 [ 334.090422][ T9833] do_sync+0x4b8/0xd90 [ 334.094563][ T9833] ? gfs2_quota_sync+0x411/0x5a0 [ 334.099573][ T9833] ? bh_get+0x760/0x760 [ 334.103779][ T9833] ? gfs2_quota_sync+0x318/0x5a0 [ 334.108768][ T9833] ? gfs2_quota_sync+0x411/0x5a0 [ 334.113756][ T9833] ? do_raw_spin_unlock+0x121/0x230 [ 334.119012][ T9833] ? do_raw_spin_unlock+0x121/0x230 [ 334.124258][ T9833] gfs2_quota_sync+0x411/0x5a0 [ 334.129075][ T9833] gfs2_sync_fs+0x4c/0xb0 [ 334.133441][ T9833] sync_filesystem+0xea/0x220 [ 334.138162][ T9833] generic_shutdown_super+0x6f/0x2b0 [ 334.143488][ T9833] kill_block_super+0x44/0x90 [ 334.148208][ T9833] deactivate_locked_super+0x97/0x100 [ 334.153627][ T9833] cleanup_mnt+0x3d7/0x460 [ 334.158083][ T9833] task_work_run+0x1d4/0x260 [ 334.162732][ T9833] ? task_work_cancel+0x220/0x220 [ 334.167805][ T9833] ? exit_to_user_mode_loop+0x3b/0x110 [ 334.173508][ T9833] exit_to_user_mode_loop+0xe6/0x110 [ 334.178845][ T9833] exit_to_user_mode_prepare+0xee/0x180 [ 334.184447][ T9833] syscall_exit_to_user_mode+0x1a/0x50 [ 334.189953][ T9833] do_syscall_64+0x61/0xb0 [ 334.194414][ T9833] ? clear_bhb_loop+0x40/0x90 [ 334.199141][ T9833] ? clear_bhb_loop+0x40/0x90 [ 334.203960][ T9833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.209923][ T9833] RIP: 0033:0x7f1af4d9f317 [ 334.214376][ T9833] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 334.234066][ T9833] RSP: 002b:00007ffe72d24e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 334.242550][ T9833] RAX: 0000000000000000 RBX: 00007f1af4e34474 RCX: 00007f1af4d9f317 [ 334.250591][ T9833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72d24ed0 [ 334.258606][ T9833] RBP: 00007ffe72d24ed0 R08: 00007ffe72d25ed0 R09: 00000000ffffffff [ 334.266656][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72d25f60 [ 334.274753][ T9833] R13: 00007f1af4e34474 R14: 0000000000051630 R15: 00007ffe72d25fa0 [ 334.282904][ T9833] [ 334.449824][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.698952][T10679] loop1: detected capacity change from 0 to 4096 [ 334.981367][ T28] audit: type=1800 audit(1785965293.676:116): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1238" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 335.021473][ T5842] usb 9-1: USB disconnect, device number 8 [ 335.095984][ T5842] usblp0: removed [ 335.124199][ T28] audit: type=1800 audit(1785965293.716:117): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1238" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 335.475671][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.500690][T10696] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 335.500690][T10696] The task syz.3.1235 (10696) triggered the difference, watch for misbehavior. [ 335.558234][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.152591][T10713] syzkaller1: entered promiscuous mode [ 336.158781][T10713] syzkaller1: entered allmulticast mode [ 336.520832][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.600870][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.136701][T10741] loop3: detected capacity change from 0 to 64 [ 337.258361][T10741] syz.3.1257: attempt to access beyond end of device [ 337.258361][T10741] loop3: rw=34817, sector=39, nr_sectors = 26 limit=64 [ 337.386652][T10738] loop8: detected capacity change from 0 to 8192 [ 337.554464][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.913176][T10751] loop8: detected capacity change from 0 to 256 [ 338.023306][T10753] rt1711h 0-0004: check vid/pid fail [ 338.078747][T10753] rt1711h: probe of 0-0004 failed with error -5 [ 338.119068][T10753] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 338.561556][T10769] batadv_slave_0: entered promiscuous mode [ 338.590180][T10768] batadv_slave_0: left promiscuous mode [ 338.596265][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.604914][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.944682][ T27] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 339.144539][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 339.152190][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.182918][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.203198][ T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.241281][ T27] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.274346][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.307301][ T27] usb 7-1: config 0 descriptor?? [ 339.634834][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.785755][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0013/input/input22 [ 339.905788][ T27] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 339.992647][ T27] usb 7-1: USB disconnect, device number 14 [ 340.076468][T10778] loop3: detected capacity change from 0 to 40427 [ 340.171576][T10778] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.230100][T10794] fido_id[10794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 340.436301][T10778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.590018][T10778] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 340.674696][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.842926][T10789] loop1: detected capacity change from 0 to 40427 [ 340.912670][T10789] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 340.941318][T10789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 341.020454][T10789] F2FS-fs (loop1): invalid crc value [ 341.058636][T10789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 341.379368][T10789] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 341.405463][T10789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 341.636476][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.716544][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.735649][T10834] loop8: detected capacity change from 0 to 512 [ 341.870602][T10834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.960344][T10834] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.172527][ T28] audit: type=1800 audit(1785965300.866:118): pid=10843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1278" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 342.363762][ T8519] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.755322][T10852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.763511][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.771905][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 342.779389][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 342.786717][T10852] IPv6: NLM_F_CREATE should be set when creating new route [ 343.246980][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 343.303957][ T5781] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 343.400188][T10866] loop1: detected capacity change from 0 to 256 [ 343.428827][T10866] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.515539][T10866] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.532238][ T5781] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 343.564914][ T5781] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 343.594774][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 343.602536][ T5781] usb 9-1: config 0 interface 0 has no altsetting 0 [ 343.639825][ T5781] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 3.00 [ 343.714634][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.759332][ T5781] usb 9-1: config 0 descriptor?? [ 343.789600][T10858] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 343.797434][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.039098][T10874] loop3: detected capacity change from 0 to 4096 [ 344.162705][T10874] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 344.252840][ T5781] ntrig 0003:1B96:0009.0014: unknown main item tag 0x0 [ 344.290787][ T5781] ntrig 0003:1B96:0009.0014: unknown main item tag 0x6 [ 344.319020][ T5781] ntrig 0003:1B96:0009.0014: unknown main item tag 0x3 [ 344.388815][ T5781] ntrig 0003:1B96:0009.0014: hidraw0: USB HID v0.08 Device [HID 1b96:0009] on usb-dummy_hcd.8-1/input0 [ 344.508389][ T5781] usb 9-1: USB disconnect, device number 9 [ 344.648907][T10888] fido_id[10888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 344.684528][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.844829][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.883819][T10897] C: renamed from team_slave_0 (while UP) [ 344.936882][T10897] netlink: 'syz.3.1293': attribute type 2 has an invalid length. [ 344.955211][T10897] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1293'. [ 344.988586][T10897] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.080672][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 345.105477][ T8629] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 345.295560][ T8629] usb 2-1: not running at top speed; connect to a high speed hub [ 345.335705][ T8629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 345.360772][ T8629] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 345.392588][ T8629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.430603][ T8629] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 345.475154][ T8629] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 345.774969][T10912] hsr0: entered promiscuous mode [ 345.788736][ T8629] usb 2-1: USB disconnect, device number 11 [ 345.810471][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1297'. [ 345.821546][ T8629] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 345.842469][ T8629] garmin_gps 2-1:1.0: device disconnected [ 345.854285][T10912] hsr_slave_0: left promiscuous mode [ 345.863097][T10912] hsr_slave_1: left promiscuous mode [ 345.874568][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.056267][T10916] loop5: detected capacity change from 0 to 7 [ 346.091628][T10916] Dev loop5: unable to read RDB block 7 [ 346.113773][T10916] loop5: unable to read partition table [ 346.142559][T10912] hsr0 (unregistering): left promiscuous mode [ 346.149515][T10916] loop5: partition table beyond EOD, truncated [ 346.159420][T10916] loop_reread_partitions: partition scan of loop5 (þè¢) failed (rc=-5) [ 346.194965][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.621120][T10925] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 346.915392][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.685569][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 347.716067][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.760337][T10927] loop8: detected capacity change from 0 to 32768 [ 347.778177][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.791499][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.800904][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.810328][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.837508][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.851218][T10927] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 347.924523][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.944799][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.954919][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.977689][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.994835][T10957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.056870][T10927] XFS (loop8): Ending clean mount [ 348.335483][ T8519] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 350.325844][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 350.822994][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1339'. [ 351.544423][ T5914] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 351.769537][ T5914] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 351.807636][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.824472][ T5914] usb 7-1: Product: syz [ 351.828757][ T5914] usb 7-1: Manufacturer: syz [ 351.843096][ T5914] usb 7-1: SerialNumber: syz [ 351.879072][ T5914] usb 7-1: config 0 descriptor?? [ 351.898886][ T5914] hub 7-1:0.0: bad descriptor, ignoring hub [ 351.914641][ T5914] hub: probe of 7-1:0.0 failed with error -5 [ 352.175071][ T5914] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 352.252416][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.275473][ T5914] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 352.304265][ T5914] usb 7-1: media controller created [ 352.399372][T11097] loop3: detected capacity change from 0 to 64 [ 352.411647][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.505795][ T28] audit: type=1800 audit(1785965311.206:119): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1354" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 352.584676][ T5819] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 352.651544][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 352.670801][ T5914] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 352.759557][ T9833] hfs: node 4:3 still has 1 user(s)! [ 352.817709][ T5819] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 352.849831][ T5819] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.896714][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 352.924395][ T5914] rc_core: IR keymap rc-dib0700-rc5 not found [ 352.928413][ T5819] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 352.948940][ T5914] Registered IR keymap rc-empty [ 352.973617][ T5914] dvb-usb: could not initialize remote control. [ 352.974469][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.012050][ T5914] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 353.041259][ T5819] usb 2-1: config 0 descriptor?? [ 353.070326][T11094] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.135570][ T5914] usb 7-1: USB disconnect, device number 15 [ 353.185002][ T5781] net_ratelimit: 1027 callbacks suppressed [ 353.185020][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.234782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.251553][ T5837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 353.281913][ T5914] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 353.351872][T11094] loop1: detected capacity change from 0 to 256 [ 353.380823][T11094] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.412338][T11094] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 353.467149][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 353.483400][ T5837] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 353.503171][T11094] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 353.515722][ T5837] usb 4-1: config 0 has no interface number 0 [ 353.528355][ T5837] usb 4-1: config 0 interface 184 has no altsetting 0 [ 353.541118][T11094] exFAT-fs (loop1): failed to load alloc-bitmap [ 353.561616][ T5837] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 353.576105][T11094] exFAT-fs (loop1): failed to recognize exfat type [ 353.587740][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.623989][ T5837] usb 4-1: Product: syz [ 353.648940][ T5837] usb 4-1: Manufacturer: syz [ 353.653677][ T5837] usb 4-1: SerialNumber: syz [ 353.677973][ T5837] usb 4-1: config 0 descriptor?? [ 353.706650][ T5837] smsc75xx v1.0.0 [ 353.794809][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.850558][ T5819] logitech 0003:046D:C101.0015: unknown main item tag 0x0 [ 353.868112][ T5819] logitech 0003:046D:C101.0015: unknown main item tag 0x0 [ 353.884624][ T5819] logitech 0003:046D:C101.0015: unknown main item tag 0x1 [ 353.922468][ T5819] logitech 0003:046D:C101.0015: unknown main item tag 0x5 [ 353.940935][ T5819] logitech 0003:046D:C101.0015: hidraw0: USB HID vf9.af Device [HID 046d:c101] on usb-dummy_hcd.1-1/input0 [ 354.155413][ T5819] usb 2-1: USB disconnect, device number 12 [ 354.195353][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.213990][T11121] fido_id[11121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 354.527659][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 354.550617][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 354.563486][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 354.578670][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 354.600080][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 354.619123][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 354.633696][ T5837] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 354.646275][ T5837] usb 4-1: USB disconnect, device number 8 [ 355.027894][T11142] loop1: detected capacity change from 0 to 512 [ 355.056950][T11142] EXT4-fs: Ignoring removed i_version option [ 355.109331][T11142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.122301][T11148] loop8: detected capacity change from 0 to 64 [ 355.144318][T11142] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.226871][T11150] loop3: detected capacity change from 0 to 512 [ 355.234705][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.235540][T11150] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.328294][ T28] audit: type=1800 audit(1785965314.026:120): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1365" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 355.391615][T11150] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 355.457181][T11150] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 355.491486][ T8585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.584616][ T8519] hfs: node 4:3 still has 1 user(s)! [ 355.797429][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.840777][T11159] loop5: detected capacity change from 0 to 7 [ 355.870561][T11159] Dev loop5: unable to read RDB block 7 [ 355.904272][T11159] loop5: AHDI p2 [ 355.908075][T11159] loop5: partition table partially beyond EOD, truncated [ 356.124351][T11166] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1371'. [ 356.274931][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.318135][T11173] loop3: detected capacity change from 0 to 512 [ 356.340834][T11173] EXT4-fs: Ignoring removed orlov option [ 356.411299][T11173] EXT4-fs (loop3): 1 truncate cleaned up [ 356.429103][T11173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.479730][T11173] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1374: invalid indirect mapped block 234881024 (level 0) [ 356.496509][T11173] EXT4-fs (loop3): Remounting filesystem read-only [ 356.570646][ T9833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.837782][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.004355][ T5819] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 357.212361][ T5819] usb 4-1: not running at top speed; connect to a high speed hub [ 357.247016][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 357.284220][ T5819] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 357.314652][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.320585][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.391016][ T5819] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 357.430533][T11202] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 357.454684][ T5819] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 357.735120][ T5819] usb 4-1: USB disconnect, device number 9 [ 357.764516][ T5781] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 357.793372][ T5819] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 357.861331][ T5819] garmin_gps 4-1:1.0: device disconnected [ 357.990418][ T5781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.022588][ T5781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.042973][ T5781] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 358.063256][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.087701][ T5781] usb 7-1: config 0 descriptor?? [ 358.104502][ T5837] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 358.222103][T11225] input: syz0 as /devices/virtual/input/input24 [ 358.328128][ T5837] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.353931][ T5837] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.380270][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.397289][ T5837] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.434419][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.499452][T11214] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 358.511766][ T5781] hid-led 0003:27B8:01ED.0016: item fetching failed at offset 2/5 [ 358.528681][ T5837] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 358.561877][ T5781] hid-led: probe of 0003:27B8:01ED.0016 failed with error -22 [ 358.609128][ T5819] smpboot: CPU 1 is now offline [ 358.890962][ T5837] usb 7-1: USB disconnect, device number 16 [ 359.046222][ T5818] usb 9-1: USB disconnect, device number 10 [ 359.418256][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.584269][ T8629] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 359.756866][T11246] loop8: detected capacity change from 0 to 7 [ 359.791134][T11246] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 359.804433][ T8629] usb 2-1: Using ep0 maxpacket: 32 [ 359.853910][ T8629] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.868249][T11246] loop8: partition table partially beyond EOD, truncated [ 359.901788][ T8629] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.915795][T11246] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 359.933117][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.965697][T11246] loop8: p2 start 121280928 is beyond EOD, truncated [ 359.976696][ T8629] usb 2-1: config 0 interface 0 has no altsetting 0 [ 360.029078][ T8629] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 360.042445][ T5140] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 360.077160][ T8629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.094213][ T5140] loop8: partition table partially beyond EOD, truncated [ 360.134751][ T8629] usb 2-1: Product: syz [ 360.142687][ T5140] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 360.163573][ T8629] usb 2-1: Manufacturer: syz [ 360.200136][ T8629] usb 2-1: SerialNumber: syz [ 360.214888][ T5140] loop8: p2 start 121280928 is beyond EOD, truncated [ 360.233108][ T8629] usb 2-1: config 0 descriptor?? [ 360.298239][T11253] ip_tables: iptables: counters copy to user failed while replacing table [ 360.394688][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 360.455223][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.647412][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 360.734331][ T8629] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 360.778451][T11260] netlink: 'syz.3.1401': attribute type 11 has an invalid length. [ 360.840495][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 361.154445][ T5819] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 361.381997][ T8629] usb 2-1: USB disconnect, device number 13 [ 361.404738][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 361.429715][ T5819] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 361.480196][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.490061][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.567622][ T5819] usb 7-1: config 0 descriptor?? [ 361.845608][ T5819] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 361.900450][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.971240][ T5819] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 362.008963][ T5819] usb 7-1: media controller created [ 362.020059][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1407'. [ 362.159577][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.350039][ T5819] az6027: usb out operation failed. (-71) [ 362.410448][ T5819] az6027: usb out operation failed. (-71) [ 362.462405][ T5819] stb0899_attach: Driver disabled by Kconfig [ 362.496470][T11287] netlink: 'syz.8.1410': attribute type 1 has an invalid length. [ 362.514515][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.536002][ T5819] az6027: no front-end attached [ 362.536002][ T5819] [ 362.568260][T11287] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1410'. [ 362.594661][ T5819] az6027: usb out operation failed. (-71) [ 362.640903][ T5819] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 362.705361][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 362.829351][ T5819] dvb-usb: schedule remote query interval to 400 msecs. [ 362.938297][ T5819] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 363.050914][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.068073][ T5819] usb 7-1: USB disconnect, device number 17 [ 363.556805][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.973144][ T5819] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 364.594694][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.044225][ T5818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 365.185239][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1420'. [ 365.209804][T11331] tipc: Started in network mode [ 365.240068][T11331] tipc: Node identity 2ddfafccc9d436ad002e, cluster identity 4711 [ 365.284432][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 365.303799][ T5818] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 365.355024][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.397090][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.426118][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.525019][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.607535][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.634437][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.710417][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.774207][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.115335][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.139655][ T5818] usb 2-1: GET_CAPABILITIES returned 0 [ 366.182310][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 366.337236][T11350] loop8: detected capacity change from 0 to 128 [ 366.406097][T11350] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 366.435844][ T5818] usb 2-1: USB disconnect, device number 14 [ 366.452277][T11324] usbtmc 2-1:16.0: usb_control_msg returned -19 [ 366.511404][T11350] hpfs: filesystem error: improperly stopped [ 366.557386][T11350] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 366.611291][T11350] hpfs: You really don't want any checks? You are crazy... [ 366.663931][T11350] hpfs: hpfs_map_sector(): read error [ 366.675508][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.700920][T11350] hpfs: code page support is disabled [ 366.728140][T11350] hpfs: hpfs_map_4sectors(): unaligned read [ 366.756879][T11350] hpfs: hpfs_map_4sectors(): unaligned read [ 366.784603][T11350] hpfs: filesystem error: unable to find root dir [ 366.901643][T11350] hpfs: hpfs_map_4sectors(): unaligned read [ 367.716054][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.674449][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.734741][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.754928][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.823716][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.834594][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.862770][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.979058][T11384] loop3: detected capacity change from 0 to 4096 [ 369.085835][T11384] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 369.798482][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.718077][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 370.834857][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.946814][ T8] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 370.985360][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.051442][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.110088][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.197992][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.256906][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.327301][ T8] usb 4-1: config 0 descriptor?? [ 371.719941][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.752174][ T8] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd [ 371.819208][ T8] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 371.878360][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.933571][ T8] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 372.081948][ T8] usb 4-1: USB disconnect, device number 10 [ 372.341318][T11444] fido_id[11444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 373.454297][ T5818] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 373.694994][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 373.753284][ T5818] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.821736][ T5818] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.873742][ T5818] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.925799][ T5818] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 373.964491][ T9] net_ratelimit: 1 callbacks suppressed [ 373.964506][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.989397][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.054189][ T5818] usb 7-1: Product: syz [ 374.095005][ T5818] usb 7-1: Manufacturer: syz [ 374.099668][ T5818] usb 7-1: SerialNumber: syz [ 374.179031][ T5818] usb 7-1: config 0 descriptor?? [ 374.356867][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.365909][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.374768][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.494357][ T5819] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 374.560151][T11490] loop5: detected capacity change from 0 to 4095 [ 374.646133][ C0] blk_print_req_error: 11 callbacks suppressed [ 374.646153][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 374.665064][ C0] I/O error, dev loop5, sector 1056 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 374.675320][ C0] I/O error, dev loop5, sector 2080 op 0x0:(READ) flags 0x80700 phys_seg 60 prio class 2 [ 374.690626][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.699970][ C0] buffer_io_error: 10 callbacks suppressed [ 374.700013][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 374.724288][ T5818] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 374.754871][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.765089][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.781663][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.791207][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 374.799948][ T5819] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.847473][ T5819] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.913523][ T5819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 374.999203][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.016263][ T5819] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 375.059525][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.120454][T11484] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 375.150920][ T5819] hub 9-1:1.0: bad descriptor, ignoring hub [ 375.202212][ T5819] hub: probe of 9-1:1.0 failed with error -5 [ 375.239399][ T5819] cdc_wdm 9-1:1.0: skipping garbage [ 375.277082][ T5819] cdc_wdm 9-1:1.0: skipping garbage [ 375.324674][ T5819] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 375.333895][ T5818] usb 7-1: USB disconnect, device number 18 [ 375.371523][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 375.384067][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.390931][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.399084][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.405719][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.415021][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.421678][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.428088][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.434708][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.441048][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.447659][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.453965][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.460664][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.467013][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.473644][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.480240][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.486859][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.493708][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.500364][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.506800][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 375.513424][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 375.532296][ T5819] cdc_wdm 9-1:1.0: Unknown control protocol [ 375.640138][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.790423][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.849458][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 375.860606][ T5819] usb 9-1: USB disconnect, device number 11 [ 375.932513][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.996426][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.036476][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.060478][T11495] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 376.132681][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 376.244685][ T5819] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 376.511574][ T5819] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.567648][ T5819] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 376.585539][ T5837] usb 4-1: USB disconnect, device number 11 [ 376.649590][ T5819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 376.729756][ T5819] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 376.776041][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.814916][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 376.837419][T11484] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 376.867993][ T5819] hub 9-1:1.0: bad descriptor, ignoring hub [ 376.873995][ T5819] hub: probe of 9-1:1.0 failed with error -5 [ 376.935432][ T5819] cdc_wdm 9-1:1.0: skipping garbage [ 376.940710][ T5819] cdc_wdm 9-1:1.0: skipping garbage [ 376.984502][ T5819] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 377.027955][ T5819] cdc_wdm 9-1:1.0: Unknown control protocol [ 377.054269][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 377.079750][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.097402][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.139686][ T5819] usb 9-1: USB disconnect, device number 12 [ 377.151093][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 377.221193][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.267365][ T8] usb 7-1: config 0 descriptor?? [ 377.296418][ T8] hub 7-1:0.0: USB hub found [ 377.548078][ T8] hub 7-1:0.0: 1 port detected [ 377.569925][T11518] loop3: detected capacity change from 0 to 128 [ 377.636008][T11506] loop1: detected capacity change from 0 to 32768 [ 377.675641][T11518] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.794554][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.864309][T11518] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.210369][ T28] audit: type=1800 audit(1785965336.886:121): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1474" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 378.464448][ T8] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 378.654209][ T5819] usb 7-1: USB disconnect, device number 19 [ 378.740216][ T9833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.765750][T11531] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1477'. [ 378.844606][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854129][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.982599][ T5818] net_ratelimit: 1 callbacks suppressed [ 378.982613][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.138188][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.165419][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.184278][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.207369][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.261111][T11534] mtrr: base(0x34393234000) is not aligned on a size(0x32373639000) boundary [ 379.698289][T11545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.708921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.892180][T11543] sp0: Synchronizing with TNC [ 380.045663][T11542] [U] è [ 380.120713][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.129525][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.144663][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.630867][T11568] netlink: 'syz.8.1486': attribute type 3 has an invalid length. [ 380.748722][T11568] netlink: 'syz.8.1486': attribute type 7 has an invalid length. [ 380.812074][T11568] netlink: 198368 bytes leftover after parsing attributes in process `syz.8.1486'. [ 380.882811][T11572] loop1: detected capacity change from 0 to 2048 [ 381.017303][T11579] loop3: detected capacity change from 0 to 2048 [ 381.075576][T11572] loop1: p2 p3 < > p4 < p5 > [ 381.114710][T11572] loop1: partition table partially beyond EOD, truncated [ 381.153162][T11579] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 381.203066][T11572] loop1: p3 start 4284289 is beyond EOD, truncated [ 381.388585][ T28] audit: type=1800 audit(1785965340.086:122): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1488" name=420C5664B27921B14DC1DB8892FD32D0AD7BC946813591AD8DEFF4B05F60CEA0DA7710A8 dev="loop3" ino=1368 res=0 errno=0 [ 381.514390][T11586] netlink: 'syz.6.1491': attribute type 4 has an invalid length. [ 381.833431][T11588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 383.062888][T11611] syz_tun: entered allmulticast mode [ 383.157945][T11611] dvmrp8: entered allmulticast mode [ 383.210618][T11610] syz_tun: left allmulticast mode [ 384.354733][ T8] net_ratelimit: 5 callbacks suppressed [ 384.354746][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.607217][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.639065][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.647789][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.672487][ T5818] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 384.732382][T11647] loop3: detected capacity change from 0 to 512 [ 384.815410][T11647] FAT-fs (loop3): Directory bread(block 199916) failed [ 384.887576][T11647] FAT-fs (loop3): Directory bread(block 199917) failed [ 384.918962][ T5818] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 225, changing to 7 [ 384.960798][T11647] FAT-fs (loop3): Directory bread(block 199918) failed [ 384.991126][ T5818] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 385.010661][T11647] FAT-fs (loop3): Directory bread(block 199919) failed [ 385.058317][T11647] FAT-fs (loop3): Directory bread(block 199920) failed [ 385.084681][ T5818] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.124292][T11647] FAT-fs (loop3): Directory bread(block 199921) failed [ 385.134218][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.207354][T11647] FAT-fs (loop3): Directory bread(block 199922) failed [ 385.224430][ T5818] usb 9-1: Product: syz [ 385.238881][ T5818] usb 9-1: Manufacturer: syz [ 385.249317][T11647] FAT-fs (loop3): Directory bread(block 199923) failed [ 385.294219][ T5818] usb 9-1: SerialNumber: syz [ 385.389491][T11647] FAT-fs (loop3): Directory bread(block 199916) failed [ 385.399281][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.476880][T11647] FAT-fs (loop3): Directory bread(block 199917) failed [ 385.654331][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 385.833997][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1517'. [ 385.881449][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.890408][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.909060][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.919777][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.931391][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1517'. [ 386.002370][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.087583][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.115220][ T7536] wlan1: Trigger new scan to find an IBSS to join [ 386.220782][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.292763][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.353813][ T9] usb 2-1: config 0 descriptor?? [ 386.434421][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.445102][ T5818] cdc_ncm 9-1:1.0: bind() failure [ 386.499408][ T5818] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 386.563143][ T5818] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 386.639949][ T5818] usbtest: probe of 9-1:1.1 failed with error -71 [ 386.708590][ T5818] usb 9-1: USB disconnect, device number 13 [ 386.861783][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 386.953852][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 387.476916][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.825774][ T5818] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 388.047496][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 388.130793][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 388.200740][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 388.297847][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 388.400493][ T5818] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 388.462851][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.533497][ T5818] usb 9-1: Product: syz [ 388.555166][ T8629] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 388.577058][ T5818] usb 9-1: Manufacturer: syz [ 388.607918][ T5818] usb 9-1: SerialNumber: syz [ 388.647880][ T5818] usb 9-1: config 0 descriptor?? [ 388.896997][ T5818] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 389.047008][T11684] loop3: detected capacity change from 0 to 40427 [ 389.136408][ T5818] usb 9-1: USB disconnect, device number 14 [ 389.152566][T11684] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (262145, 24) [ 389.212055][T11684] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 389.300555][T11684] F2FS-fs (loop3): invalid crc value [ 389.341688][T11684] F2FS-fs (loop3): invalid crc value [ 389.380801][T11684] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 389.589152][ T5837] usb 2-1: USB disconnect, device number 15 [ 389.704929][ T9] net_ratelimit: 2 callbacks suppressed [ 389.704943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.805914][T11716] loop1: detected capacity change from 0 to 512 [ 390.384611][ T7540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.405065][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.540349][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.754764][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.155712][ T12] wlan1: Trigger new scan to find an IBSS to join [ 391.344694][T11742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 391.634852][ T7540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.643574][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.652482][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.728211][T11751] syz.1.1544: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 391.744981][T11751] CPU: 0 PID: 11751 Comm: syz.1.1544 Not tainted syzkaller #0 [ 391.752472][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.762637][T11751] Call Trace: [ 391.765935][T11751] [ 391.768904][T11751] dump_stack_lvl+0x18c/0x250 [ 391.773608][T11751] ? show_regs_print_info+0x20/0x20 [ 391.778834][T11751] ? load_image+0x420/0x420 [ 391.783368][T11751] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 391.789801][T11751] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 391.796340][T11751] warn_alloc+0x246/0x340 [ 391.800689][T11751] ? zone_watermark_ok_safe+0x230/0x230 [ 391.806266][T11751] ? __mutex_trylock_common+0x160/0x270 [ 391.811833][T11751] __vmalloc_node_range+0x129/0x1320 [ 391.817238][T11751] ? tomoyo_path_number_perm+0x217/0x5e0 [ 391.822964][T11751] ? rcu_is_watching+0x15/0xb0 [ 391.827766][T11751] ? trace_contention_end+0x39/0xe0 [ 391.832984][T11751] ? __mutex_lock+0x30d/0xc80 [ 391.837688][T11751] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 391.843343][T11751] ? tomoyo_path_number_perm+0x217/0x5e0 [ 391.849009][T11751] ? free_vm_area+0x50/0x50 [ 391.853546][T11751] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 391.858594][T11751] vmalloc+0x79/0x90 [ 391.862520][T11751] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 391.867628][T11751] dvb_dvr_do_ioctl+0x12e/0x220 [ 391.872786][T11751] dvb_usercopy+0x195/0x2b0 [ 391.877326][T11751] ? dvb_dvr_release+0x3e0/0x3e0 [ 391.882323][T11751] ? dvb_generic_ioctl+0xb0/0xb0 [ 391.887308][T11751] ? dvb_dvr_poll+0x230/0x230 [ 391.892014][T11751] dvb_dvr_ioctl+0x29/0x30 [ 391.896484][T11751] __se_sys_ioctl+0xfd/0x170 [ 391.901105][T11751] do_syscall_64+0x55/0xb0 [ 391.905535][T11751] ? clear_bhb_loop+0x40/0x90 [ 391.910255][T11751] ? clear_bhb_loop+0x40/0x90 [ 391.914972][T11751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.920921][T11751] RIP: 0033:0x7ffadad9e0d9 [ 391.925366][T11751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.945000][T11751] RSP: 002b:00007ffadbc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.953442][T11751] RAX: ffffffffffffffda RBX: 00007ffadb025fa0 RCX: 00007ffadad9e0d9 [ 391.961431][T11751] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 391.969432][T11751] RBP: 00007ffadae35024 R08: 0000000000000000 R09: 0000000000000000 [ 391.977421][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.985411][T11751] R13: 00007ffadb026038 R14: 00007ffadb025fa0 R15: 00007ffebe177448 [ 391.993418][T11751] [ 391.997755][T11751] Mem-Info: [ 392.001596][T11751] active_anon:39910 inactive_anon:0 isolated_anon:0 [ 392.001596][T11751] active_file:18320 inactive_file:40551 isolated_file:0 [ 392.001596][T11751] unevictable:768 dirty:81 writeback:0 [ 392.001596][T11751] slab_reclaimable:11460 slab_unreclaimable:97375 [ 392.001596][T11751] mapped:25146 shmem:33792 pagetables:804 [ 392.001596][T11751] sec_pagetables:0 bounce:0 [ 392.001596][T11751] kernel_misc_reclaimable:0 [ 392.001596][T11751] free:1299080 free_pcp:14177 free_cma:0 [ 392.047279][T11751] Node 0 active_anon:159640kB inactive_anon:0kB active_file:73280kB inactive_file:162004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100584kB dirty:324kB writeback:0kB shmem:133632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:3216kB sec_pagetables:0kB all_unreclaimable? no [ 392.080205][T11751] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 392.111381][T11751] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.138830][T11751] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 392.145055][T11751] Node 0 DMA32 free:1284148kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:159604kB inactive_anon:0kB active_file:73280kB inactive_file:161180kB unevictable:1536kB writepending:324kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:40696kB local_pcp:40696kB free_cma:0kB [ 392.176026][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 392.180767][T11751] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 392.208603][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 392.213341][T11751] Node 1 Normal free:3896812kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16000kB local_pcp:16000kB free_cma:0kB [ 392.243112][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 392.247906][T11751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.260705][T11751] Node 0 DMA32: 9*4kB (ME) 364*8kB (UE) 253*16kB (UME) 155*32kB (UME) 210*64kB (UME) 112*128kB (UME) 55*256kB (ME) 21*512kB (UM) 9*1024kB (M) 3*2048kB (UME) 294*4096kB (M) = 1284148kB [ 392.279236][T11751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 392.290794][T11751] Node 1 Normal: 181*4kB (UME) 67*8kB (UME) 48*16kB (UME) 206*32kB (UME) 57*64kB (UME) 12*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3896812kB [ 392.309467][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.319448][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 392.328858][T11751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.338479][T11751] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 392.348221][T11751] 92636 total pagecache pages [ 392.353942][T11751] 0 pages in swap cache [ 392.358356][T11751] Free swap = 124724kB [ 392.362559][T11751] Total swap = 124996kB [ 392.366816][T11751] 2097051 pages RAM [ 392.370664][T11751] 0 pages HighMem/MovableOnly [ 392.375392][T11751] 416955 pages reserved [ 392.379648][T11751] 0 pages cma reserved [ 392.390920][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.948991][ T7536] wlan1: Creating new IBSS network, BSSID 2e:81:e5:7c:51:10 [ 393.394724][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.304827][T11796] netlink: 'syz.1.1557': attribute type 12 has an invalid length. [ 394.468234][T11799] netlink: 'syz.1.1557': attribute type 12 has an invalid length. [ 395.627912][ T5819] net_ratelimit: 2 callbacks suppressed [ 395.627927][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.497410][ T28] audit: type=1326 audit(1785965355.196:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 396.521549][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.532839][ T5850] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 396.637202][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.727222][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.756105][ T5850] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 396.774222][ T28] audit: type=1326 audit(1785965355.196:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 396.815693][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.895526][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.992639][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.007068][ T28] audit: type=1326 audit(1785965355.196:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 397.093607][ T5850] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.157435][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.186862][ T28] audit: type=1326 audit(1785965355.246:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 397.211078][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.262462][ T5850] usb 2-1: config 0 descriptor?? [ 397.456995][ T28] audit: type=1326 audit(1785965355.246:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 397.663710][ T28] audit: type=1326 audit(1785965355.246:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 397.687906][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.775291][ T5850] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 397.794792][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.856812][ T5850] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 397.946695][ T28] audit: type=1326 audit(1785965355.246:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 397.970896][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.000503][ T5850] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 398.056814][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.094297][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.103298][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.155783][ T5850] usb 2-1: USB disconnect, device number 16 [ 398.272841][ T28] audit: type=1326 audit(1785965355.246:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 398.493618][T11871] fido_id[11871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 398.514171][ T28] audit: type=1326 audit(1785965355.246:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 398.538304][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.802227][ T28] audit: type=1326 audit(1785965355.246:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1af4d9e0d9 code=0x7ffc0000 [ 398.826407][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.835134][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.405734][T11897] fat__get_entry: 410 callbacks suppressed [ 399.426679][ T5850] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 399.437527][T11897] FAT-fs (loop6): Directory bread(block 64) failed [ 399.461580][T11897] FAT-fs (loop6): Directory bread(block 65) failed [ 399.511611][T11897] FAT-fs (loop6): Directory bread(block 66) failed [ 399.581983][T11897] FAT-fs (loop6): Directory bread(block 67) failed [ 399.621458][T11897] FAT-fs (loop6): Directory bread(block 68) failed [ 399.634606][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 399.671323][T11897] FAT-fs (loop6): Directory bread(block 69) failed [ 399.682620][ T5850] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 399.734294][ T5850] usb 4-1: config 0 has no interface number 0 [ 399.740751][T11897] FAT-fs (loop6): Directory bread(block 70) failed [ 399.766987][ T5850] usb 4-1: config 0 interface 184 has no altsetting 0 [ 399.787075][T11897] FAT-fs (loop6): Directory bread(block 71) failed [ 399.813702][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.833305][T11897] FAT-fs (loop6): Directory bread(block 72) failed [ 399.843509][ T5850] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 399.872643][T11897] FAT-fs (loop6): Directory bread(block 73) failed [ 399.901261][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.913814][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.964937][ T5850] usb 4-1: Product: syz [ 399.969180][ T5850] usb 4-1: Manufacturer: syz [ 400.024470][ T5850] usb 4-1: SerialNumber: syz [ 400.060607][ T5850] usb 4-1: config 0 descriptor?? [ 400.120145][ T5850] smsc75xx v1.0.0 [ 400.714729][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 400.782122][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.915754][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.041033][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 401.080079][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 401.122365][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 401.132960][ T5837] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 401.183917][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 401.225807][ T5850] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 401.270078][ T5850] usb 4-1: USB disconnect, device number 12 [ 401.337142][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 401.355058][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.410642][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.442233][ T5837] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 401.493488][ T5837] usb 2-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 401.526219][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.550903][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1593'. [ 401.604718][ T5837] usb 2-1: Product: syz [ 401.608941][ T5837] usb 2-1: Manufacturer: syz [ 401.649763][ T5837] usb 2-1: SerialNumber: syz [ 401.955963][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.966947][ T5850] usb 2-1: USB disconnect, device number 17 [ 402.563573][T11951] CIFS: Attempting to mount //127.0.0.1/share [ 402.836117][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.981974][T11962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1605'. [ 403.001821][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.377062][T11970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input30 [ 403.388380][T11951] CIFS: VFS: Error connecting to socket. Aborting operation. [ 403.437840][T11951] CIFS: VFS: cifs_mount failed w/return code = -4 [ 403.795847][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.848024][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.856772][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.037358][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.118119][ T5850] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 404.344282][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 404.371473][ T5850] usb 2-1: config 6 has an invalid interface number: 221 but max is 0 [ 404.424628][ T5850] usb 2-1: config 6 has no interface number 0 [ 404.430816][ T5850] usb 2-1: config 6 interface 221 has no altsetting 0 [ 404.548949][ T5850] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 404.610601][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.674447][ T5850] usb 2-1: Product: syz [ 404.713556][ T5850] usb 2-1: Manufacturer: syz [ 404.740103][ T5850] usb 2-1: SerialNumber: syz [ 405.075266][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.182876][T12003] loop3: detected capacity change from 0 to 512 [ 405.254888][T12003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 405.365634][T12003] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1618: bad orphan inode 131083 [ 405.459542][T12003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.783820][T12003] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.1618: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 405.884100][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.911067][ T173] usb 2-1: USB disconnect, device number 18 [ 405.943832][ T173] f81534a_ctrl 2-1:6.221: failed to enable ports: -19 [ 406.075233][ T9833] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 406.124351][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.957788][ T9833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.155361][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.165654][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.175294][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.183967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.973269][T12016] loop8: detected capacity change from 0 to 40427 [ 408.065523][T12016] F2FS-fs (loop8): invalid crc value [ 408.114472][T12016] F2FS-fs (loop8): Found nat_bits in checkpoint [ 408.274801][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.465726][T12016] F2FS-fs (loop8): Start checkpoint disabled! [ 408.622397][T12016] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 408.682835][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 408.695098][T12054] dlm: non-version read from control device 4096 [ 408.928148][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.314416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.364403][ T49] kworker/u4:3: attempt to access beyond end of device [ 409.364403][ T49] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 409.394704][ T5850] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 409.461584][ T49] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 409.519830][ T49] kworker/u4:3: attempt to access beyond end of device [ 409.519830][ T49] loop8: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 409.557996][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.598381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.607520][ T5850] usb 7-1: Using ep0 maxpacket: 32 [ 409.631420][ T49] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 409.643947][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.714775][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.758538][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.771937][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.782065][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.803907][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.813606][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.821933][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.867496][ T5850] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 409.902397][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.972741][ T5850] usb 7-1: config 0 descriptor?? [ 410.003816][ T5850] hub 7-1:0.0: USB hub found [ 410.224693][ T5850] hub 7-1:0.0: 1 port detected [ 410.657180][ T5850] usb 7-1: USB disconnect, device number 20 [ 410.796541][T12078] loop1: detected capacity change from 0 to 128 [ 410.816532][T12068] chnl_net:caif_netlink_parms(): no params data found [ 410.842248][T12078] EXT4-fs: inline encryption not supported [ 410.923574][T12078] EXT4-fs (loop1): Test dummy encryption mode enabled [ 411.053671][T12078] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.125178][T12078] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.327559][T12068] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.394432][ T5837] net_ratelimit: 2 callbacks suppressed [ 411.394456][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.423582][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.490792][T12068] bridge_slave_0: entered allmulticast mode [ 411.539760][T12068] bridge_slave_0: entered promiscuous mode [ 411.639242][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.677892][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.739366][T12068] bridge_slave_1: entered allmulticast mode [ 411.819115][T12068] bridge_slave_1: entered promiscuous mode [ 411.874588][ T5085] Bluetooth: hci1: command tx timeout [ 411.949307][ T8585] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.958744][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.987704][T12068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.062933][T12068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.353875][T12068] team0: Port device team_slave_0 added [ 412.423929][T12068] team0: Port device team_slave_1 added [ 412.434543][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.599050][T12068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.670168][T12068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.755342][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.763996][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.777207][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.894982][T12068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.975645][T12068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.982652][T12068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.213565][T12068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.445760][T12101] loop8: detected capacity change from 0 to 32768 [ 413.568524][T12101] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.821311][T12101] XFS (loop8): Ending clean mount [ 413.865705][T12068] hsr_slave_0: entered promiscuous mode [ 413.878046][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.947508][T12068] hsr_slave_1: entered promiscuous mode [ 413.963644][ T5085] Bluetooth: hci1: command tx timeout [ 414.050850][T12068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.130434][T12068] Cannot create hsr debugfs directory [ 414.248112][ T8519] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 414.944507][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.994825][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.319322][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.040802][ T5085] Bluetooth: hci1: command tx timeout [ 416.994628][ T8629] net_ratelimit: 4 callbacks suppressed [ 416.994640][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.661255][T12193] loop1: detected capacity change from 0 to 128 [ 418.113339][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.121896][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.130710][ T5085] Bluetooth: hci1: command tx timeout [ 418.243045][T12198] loop1: detected capacity change from 0 to 1024 [ 418.518875][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.530721][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.539574][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.858283][T12068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.938490][T12068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.103797][T12068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.184772][T12068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.387437][T12217] loop1: detected capacity change from 0 to 256 [ 419.458443][T12217] exfat: Deprecated parameter 'utf8' [ 419.529222][T12217] exfat: Deprecated parameter 'namecase' [ 419.574197][T12217] exfat: Deprecated parameter 'utf8' [ 419.737647][T12217] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 419.750864][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.818063][T12068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.992453][T12068] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.150497][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.157738][ T7535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.295840][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.303018][ T7535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.756525][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.965171][ T5944] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 421.083596][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.107464][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.176318][ T5944] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 421.214016][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.279813][T12068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.289885][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.337042][ T5944] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 421.446938][ T5944] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 421.490399][ T5944] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 421.548833][ T5944] usb 7-1: Manufacturer: syz [ 421.603952][ T5944] usb 7-1: config 0 descriptor?? [ 421.989246][T12258] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 422.074642][ T5944] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 422.106768][T12258] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 422.132326][ T5944] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 422.189802][ T5944] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 422.355760][ T5944] usb 7-1: USB disconnect, device number 21 [ 422.735262][T12268] fido_id[12268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 422.835028][ T5818] net_ratelimit: 3 callbacks suppressed [ 422.835041][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.923491][T12068] veth0_vlan: entered promiscuous mode [ 422.990033][T12068] veth1_vlan: entered promiscuous mode [ 423.266732][T12068] veth0_macvtap: entered promiscuous mode [ 423.377892][T12068] veth1_macvtap: entered promiscuous mode [ 423.517996][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.596991][T12284] loop1: detected capacity change from 0 to 2048 [ 423.607559][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.689511][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.705727][T12287] loop8: detected capacity change from 0 to 8 [ 423.749786][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.764279][T12287] Dev loop8: unable to read RDB block 8 [ 423.790546][T12287] loop8: unable to read partition table [ 423.814975][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.835275][T12284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.854393][T12287] loop8: partition table beyond EOD, truncated [ 423.874367][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.886321][T12287] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 423.902479][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.964143][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.064688][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.138279][T12068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.157090][ T8585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.251259][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.268068][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.278183][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.286997][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.295705][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.396983][T12295] fat__get_entry: 200 callbacks suppressed [ 424.396998][T12295] FAT-fs (loop6): Directory bread(block 64) failed [ 424.414180][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.493306][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.507223][T12297] loop8: detected capacity change from 0 to 128 [ 424.533880][T12295] FAT-fs (loop6): Directory bread(block 65) failed [ 424.574227][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.603455][T12295] FAT-fs (loop6): Directory bread(block 66) failed [ 424.642917][T12297] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.668995][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.684030][T12295] FAT-fs (loop6): Directory bread(block 67) failed [ 424.723654][T12295] FAT-fs (loop6): Directory bread(block 68) failed [ 424.744236][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.760162][T12297] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 424.803999][T12295] FAT-fs (loop6): Directory bread(block 69) failed [ 424.824627][T12068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.840973][T12295] FAT-fs (loop6): Directory bread(block 70) failed [ 424.858188][T12295] FAT-fs (loop6): Directory bread(block 71) failed [ 424.867124][T12068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.889004][T12295] FAT-fs (loop6): Directory bread(block 72) failed [ 424.954392][T12295] FAT-fs (loop6): Directory bread(block 73) failed [ 424.963329][T12068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.058632][T12068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.151411][T12068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.226680][T12307] loop1: detected capacity change from 0 to 128 [ 425.241814][T12068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.298318][T12068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.344364][T12307] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 425.395446][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.443109][ T8519] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.556317][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.903237][T12313] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 425.943973][T12318] ipvlan2: entered promiscuous mode [ 425.968427][T12318] ipvlan2: entered allmulticast mode [ 426.031186][T12318] gretap0: entered allmulticast mode [ 426.102899][T12318] team0: Device ipvlan2 failed to register rx_handler [ 426.434859][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.546534][T12328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.622769][ T7536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.702767][ T7536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.835830][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.928446][ T7536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.029390][ T7536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.358928][T12334] loop8: detected capacity change from 0 to 8192 [ 427.486734][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 427.509912][T12334] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 427.571363][T12343] netlink: 'syz.4.1624': attribute type 30 has an invalid length. [ 427.609923][T12334] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 427.645971][T12343] netlink: 'syz.4.1624': attribute type 29 has an invalid length. [ 427.678852][T12334] REISERFS (device loop8): using ordered data mode [ 427.696771][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 427.720436][T12334] reiserfs: using flush barriers [ 427.774515][T12334] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.804180][ T8629] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 427.898164][T12334] REISERFS (device loop8): checking transaction log (loop8) [ 428.002426][T12334] REISERFS (device loop8): Using r5 hash to sort names [ 428.050539][ T8629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.094611][T12334] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 428.136550][ T8629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.229470][ T8629] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 428.291849][ T8629] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.398690][ T8629] usb 7-1: config 0 descriptor?? [ 428.514537][ T5850] net_ratelimit: 4 callbacks suppressed [ 428.514560][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.825988][ T5818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 428.856043][ T8629] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 428.919862][ T8629] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 428.974979][ T8629] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 429.028527][ T8629] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 429.078538][ T8629] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 429.101446][ T5818] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 429.126389][ T8629] cm6533_jd 0003:0D8C:0022.001B: No inputs registered, leaving [ 429.144024][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.152663][ T5818] usb 5-1: Product: syz [ 429.228154][ T8629] cm6533_jd 0003:0D8C:0022.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 429.241527][ T5818] usb 5-1: Manufacturer: syz [ 429.286503][ T5818] usb 5-1: SerialNumber: syz [ 429.343327][ T5818] usb 5-1: config 0 descriptor?? [ 429.375152][ T8629] usb 7-1: USB disconnect, device number 22 [ 429.415349][ T5818] ch341 5-1:0.0: ch341-uart converter detected [ 429.522167][T12377] loop1: detected capacity change from 0 to 1024 [ 429.573104][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.706655][T12377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 429.727947][T12374] fido_id[12374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 429.817249][T12377] System zones: 0-1, 3-8 [ 429.878366][T12377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.050984][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.059888][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.069070][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.093072][T12377] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.233656][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 430.233669][ T28] audit: type=1800 audit(1785965388.926:146): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1702" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 430.273135][T12388] loop8: detected capacity change from 0 to 512 [ 430.293080][T12377] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.1702: Freeing blocks not in datazone - block = 0, count = 16 [ 430.354525][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.465273][T12377] EXT4-fs (loop1): Remounting filesystem read-only [ 430.489009][ T5818] ch341-uart ttyUSB0: failed to read break control: -71 [ 430.525982][ T5818] ch341-uart: probe of ttyUSB0 failed with error -71 [ 430.621850][ T5818] usb 5-1: USB disconnect, device number 4 [ 430.719645][ T5818] ch341 5-1:0.0: device disconnected [ 430.729905][ T8585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.234394][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.338947][T12400] syzkaller1: entered promiscuous mode [ 431.357880][T12400] syzkaller1: entered allmulticast mode [ 431.876991][T12413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1711'. [ 432.039021][T12415] loop1: detected capacity change from 0 to 256 [ 432.149495][T12415] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.276907][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.527709][T12421] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1713'. [ 433.224721][ T5818] ------------[ cut here ]------------ [ 433.231032][ T5818] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 433.241902][ T5818] WARNING: CPU: 0 PID: 5818 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 433.252095][ T5818] Modules linked in: [ 433.256042][ T5818] CPU: 0 PID: 5818 Comm: kworker/0:3 Not tainted syzkaller #0 [ 433.263523][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.273726][ T5818] Workqueue: mld mld_ifc_work [ 433.278481][ T5818] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 433.284801][ T5818] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 00 ba df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 ce 7f 4e f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 433.304472][ T5818] RSP: 0018:ffffc90004aa6700 EFLAGS: 00010246 [ 433.310572][ T5818] RAX: b44ab446d934e900 RBX: 0000000000000008 RCX: ffff88805eba1e00 [ 433.318607][ T5818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 433.326719][ T5818] RBP: 0000000000000054 R08: ffffc90004aa6307 R09: 1ffff92000954c60 [ 433.334746][ T5818] R10: dffffc0000000000 R11: fffff52000954c61 R12: 0000000000000000 [ 433.342757][ T5818] R13: dffffc0000000000 R14: ffff88805d9d3420 R15: ffff88801dfe82a8 [ 433.350882][ T5818] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 433.359879][ T5818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.366620][ T5818] CR2: 00007fbb2ea2ea10 CR3: 00000001523b3000 CR4: 00000000003506f0 [ 433.374648][ T5818] Call Trace: [ 433.377974][ T5818] [ 433.380982][ T5818] rate_control_send_low+0x194/0x790 [ 433.386427][ T5818] rate_control_get_rate+0x20b/0x5c0 [ 433.391766][ T5818] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 433.397490][ T5818] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 433.403531][ T5818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.409599][ T5818] invoke_tx_handlers_late+0xb1/0x17c0 [ 433.415146][ T5818] ? ieee80211_tx_h_select_key+0xd19/0x19e0 [ 433.421165][ T5818] ieee80211_tx_dequeue+0x38d4/0x4b90 [ 433.426671][ T5818] ? ieee80211_tx_frags+0x8b0/0x8b0 [ 433.431894][ T5818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.437374][ T5818] ? ieee80211_next_txq+0x88c/0x9f0 [ 433.442631][ T5818] ieee80211_handle_wake_tx_queue+0x133/0x2c0 [ 433.448781][ T5818] ? ieee80211_ctstoself_duration+0x460/0x460 [ 433.454906][ T5818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.460504][ T5818] ? _local_bh_enable+0xa0/0xa0 [ 433.465431][ T5818] ? do_raw_spin_unlock+0x121/0x230 [ 433.470659][ T5818] ieee80211_queue_skb+0x1915/0x2190 [ 433.476119][ T5818] ieee80211_tx+0x2c3/0x460 [ 433.480740][ T5818] ? ieee80211_skb_resize+0x610/0x610 [ 433.486190][ T5818] ? ieee80211_xmit+0x2e0/0x3c0 [ 433.491070][ T5818] __ieee80211_subif_start_xmit+0xe21/0x1540 [ 433.497151][ T5818] ? __ieee80211_subif_start_xmit+0x2c8/0x1540 [ 433.503427][ T5818] ? ieee80211_txq_schedule_start+0x310/0x310 [ 433.509566][ T5818] ? mark_lock+0x94/0x320 [ 433.513945][ T5818] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 433.520253][ T5818] ieee80211_subif_start_xmit+0xf2/0x570 [ 433.525942][ T5818] ? lock_chain_count+0x20/0x20 [ 433.530908][ T5818] ? ieee80211_build_hdr+0x2840/0x2840 [ 433.536447][ T5818] dev_hard_start_xmit+0x269/0x790 [ 433.541632][ T5818] ? __dev_queue_xmit+0x275/0x3630 [ 433.546863][ T5818] __dev_queue_xmit+0x198c/0x3630 [ 433.552016][ T5818] ? __dev_queue_xmit+0x275/0x3630 [ 433.557226][ T5818] ? lockdep_hardirqs_on+0x98/0x150 [ 433.562469][ T5818] ? read_seqbegin+0x1b6/0x250 [ 433.567312][ T5818] ? netdev_core_pick_tx+0x370/0x370 [ 433.572727][ T5818] ? __asan_memcpy+0x40/0x70 [ 433.577384][ T5818] ? eth_header+0x11b/0x200 [ 433.581909][ T5818] ? llc_sysctl_exit+0x70/0x70 [ 433.586718][ T5818] ? neigh_resolve_output+0x5f5/0x710 [ 433.592130][ T5818] ip6_finish_output2+0xe2e/0x1620 [ 433.597312][ T5818] ? ip6_finish_output2+0x642/0x1620 [ 433.602647][ T5818] ? nf_hook+0x390/0x390 [ 433.607001][ T5818] ? ip6_mtu+0x321/0x3f0 [ 433.611279][ T5818] ? ip6_finish_output+0x567/0x7f0 [ 433.616477][ T5818] NF_HOOK+0x167/0x4a0 [ 433.620576][ T5818] ? mld_send_report+0x380/0x380 [ 433.625680][ T5818] ? NF_HOOK+0x4a0/0x4a0 [ 433.629968][ T5818] ? icmp6_dst_alloc+0x386/0x400 [ 433.635000][ T5818] mld_sendpack+0x802/0xd60 [ 433.639629][ T5818] ? mld_sendpack+0x212/0xd60 [ 433.644368][ T5818] ? add_grec+0x19c0/0x19c0 [ 433.648910][ T5818] mld_ifc_work+0x842/0xd60 [ 433.653475][ T5818] ? process_scheduled_works+0x975/0x1600 [ 433.659297][ T5818] process_scheduled_works+0xa60/0x1600 [ 433.665016][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 433.670521][ T5818] ? assign_work+0x3cc/0x5d0 [ 433.675358][ T5818] worker_thread+0xa5e/0xfe0 [ 433.679994][ T5818] ? _raw_spin_unlock+0x40/0x40 [ 433.684934][ T5818] ? __kthread_parkme+0x71/0x1c0 [ 433.689950][ T5818] kthread+0x2fa/0x390 [ 433.694093][ T5818] ? pr_cont_work+0x550/0x550 [ 433.698802][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 433.703414][ T5818] ret_from_fork+0x48/0x80 [ 433.707897][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 433.712589][ T5818] ret_from_fork_asm+0x11/0x20 [ 433.717430][ T5818] [ 433.720467][ T5818] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.727763][ T5818] CPU: 0 PID: 5818 Comm: kworker/0:3 Not tainted syzkaller #0 [ 433.735232][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.745321][ T5818] Workqueue: mld mld_ifc_work [ 433.750024][ T5818] Call Trace: [ 433.753319][ T5818] [ 433.756263][ T5818] dump_stack_lvl+0x18c/0x250 [ 433.760981][ T5818] ? show_regs_print_info+0x20/0x20 [ 433.766210][ T5818] ? load_image+0x420/0x420 [ 433.770772][ T5818] panic+0x2ca/0x720 [ 433.774694][ T5818] ? bpf_jit_dump+0xd0/0xd0 [ 433.779223][ T5818] ? ret_from_fork_asm+0x11/0x20 [ 433.784210][ T5818] __warn+0x2e0/0x470 [ 433.788216][ T5818] ? __rate_control_send_low+0x632/0x880 [ 433.793889][ T5818] ? __rate_control_send_low+0x632/0x880 [ 433.799560][ T5818] report_bug+0x2be/0x4f0 [ 433.803912][ T5818] ? __rate_control_send_low+0x632/0x880 [ 433.809566][ T5818] ? __rate_control_send_low+0x632/0x880 [ 433.815222][ T5818] ? __rate_control_send_low+0x634/0x880 [ 433.820872][ T5818] handle_bug+0xcf/0x120 [ 433.825150][ T5818] exc_invalid_op+0x1a/0x50 [ 433.829762][ T5818] asm_exc_invalid_op+0x1a/0x20 [ 433.834647][ T5818] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 433.840911][ T5818] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 00 ba df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 ce 7f 4e f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 433.860730][ T5818] RSP: 0018:ffffc90004aa6700 EFLAGS: 00010246 [ 433.866809][ T5818] RAX: b44ab446d934e900 RBX: 0000000000000008 RCX: ffff88805eba1e00 [ 433.874790][ T5818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 433.882776][ T5818] RBP: 0000000000000054 R08: ffffc90004aa6307 R09: 1ffff92000954c60 [ 433.890763][ T5818] R10: dffffc0000000000 R11: fffff52000954c61 R12: 0000000000000000 [ 433.898768][ T5818] R13: dffffc0000000000 R14: ffff88805d9d3420 R15: ffff88801dfe82a8 [ 433.906897][ T5818] rate_control_send_low+0x194/0x790 [ 433.912212][ T5818] rate_control_get_rate+0x20b/0x5c0 [ 433.917527][ T5818] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 433.923196][ T5818] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 433.929212][ T5818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.935225][ T5818] invoke_tx_handlers_late+0xb1/0x17c0 [ 433.940822][ T5818] ? ieee80211_tx_h_select_key+0xd19/0x19e0 [ 433.946787][ T5818] ieee80211_tx_dequeue+0x38d4/0x4b90 [ 433.952232][ T5818] ? ieee80211_tx_frags+0x8b0/0x8b0 [ 433.957455][ T5818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.962868][ T5818] ? ieee80211_next_txq+0x88c/0x9f0 [ 433.968119][ T5818] ieee80211_handle_wake_tx_queue+0x133/0x2c0 [ 433.974208][ T5818] ? ieee80211_ctstoself_duration+0x460/0x460 [ 433.980289][ T5818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.985684][ T5818] ? _local_bh_enable+0xa0/0xa0 [ 433.990572][ T5818] ? do_raw_spin_unlock+0x121/0x230 [ 433.995892][ T5818] ieee80211_queue_skb+0x1915/0x2190 [ 434.001313][ T5818] ieee80211_tx+0x2c3/0x460 [ 434.005968][ T5818] ? ieee80211_skb_resize+0x610/0x610 [ 434.011382][ T5818] ? ieee80211_xmit+0x2e0/0x3c0 [ 434.016348][ T5818] __ieee80211_subif_start_xmit+0xe21/0x1540 [ 434.022358][ T5818] ? __ieee80211_subif_start_xmit+0x2c8/0x1540 [ 434.028636][ T5818] ? ieee80211_txq_schedule_start+0x310/0x310 [ 434.034730][ T5818] ? mark_lock+0x94/0x320 [ 434.039079][ T5818] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 434.045372][ T5818] ieee80211_subif_start_xmit+0xf2/0x570 [ 434.051129][ T5818] ? lock_chain_count+0x20/0x20 [ 434.056021][ T5818] ? ieee80211_build_hdr+0x2840/0x2840 [ 434.061526][ T5818] dev_hard_start_xmit+0x269/0x790 [ 434.067390][ T5818] ? __dev_queue_xmit+0x275/0x3630 [ 434.072633][ T5818] __dev_queue_xmit+0x198c/0x3630 [ 434.077690][ T5818] ? __dev_queue_xmit+0x275/0x3630 [ 434.082832][ T5818] ? lockdep_hardirqs_on+0x98/0x150 [ 434.088058][ T5818] ? read_seqbegin+0x1b6/0x250 [ 434.092846][ T5818] ? netdev_core_pick_tx+0x370/0x370 [ 434.098211][ T5818] ? __asan_memcpy+0x40/0x70 [ 434.102858][ T5818] ? eth_header+0x11b/0x200 [ 434.107392][ T5818] ? llc_sysctl_exit+0x70/0x70 [ 434.112175][ T5818] ? neigh_resolve_output+0x5f5/0x710 [ 434.117618][ T5818] ip6_finish_output2+0xe2e/0x1620 [ 434.122785][ T5818] ? ip6_finish_output2+0x642/0x1620 [ 434.128100][ T5818] ? nf_hook+0x390/0x390 [ 434.132381][ T5818] ? ip6_mtu+0x321/0x3f0 [ 434.136647][ T5818] ? ip6_finish_output+0x567/0x7f0 [ 434.141784][ T5818] NF_HOOK+0x167/0x4a0 [ 434.145865][ T5818] ? mld_send_report+0x380/0x380 [ 434.150817][ T5818] ? NF_HOOK+0x4a0/0x4a0 [ 434.155102][ T5818] ? icmp6_dst_alloc+0x386/0x400 [ 434.160063][ T5818] mld_sendpack+0x802/0xd60 [ 434.164622][ T5818] ? mld_sendpack+0x212/0xd60 [ 434.169313][ T5818] ? add_grec+0x19c0/0x19c0 [ 434.173852][ T5818] mld_ifc_work+0x842/0xd60 [ 434.178372][ T5818] ? process_scheduled_works+0x975/0x1600 [ 434.184111][ T5818] process_scheduled_works+0xa60/0x1600 [ 434.189698][ T5818] ? worker_attach_to_pool+0x370/0x370 [ 434.195181][ T5818] ? assign_work+0x3cc/0x5d0 [ 434.199796][ T5818] worker_thread+0xa5e/0xfe0 [ 434.204436][ T5818] ? _raw_spin_unlock+0x40/0x40 [ 434.209329][ T5818] ? __kthread_parkme+0x71/0x1c0 [ 434.214324][ T5818] kthread+0x2fa/0x390 [ 434.218408][ T5818] ? pr_cont_work+0x550/0x550 [ 434.223144][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 434.227765][ T5818] ret_from_fork+0x48/0x80 [ 434.232221][ T5818] ? kthread_blkcg+0xd0/0xd0 [ 434.236862][ T5818] ret_from_fork_asm+0x11/0x20 [ 434.241687][ T5818] [ 434.244791][ T5818] Kernel Offset: disabled [ 434.249306][ T5818] Rebooting in 86400 seconds..