last executing test programs: 2.644538865s ago: executing program 3 (id=1609): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2.122791338s ago: executing program 1 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.767498326s ago: executing program 3 (id=1617): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_control_io$rtl8150(r0, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x20, 0x8, 0x1f, {0x1f, 0x2, "5ecf6a29bfcbf9927b6cb3c7bf4762b9a886d615bc7a108bef88bc7197"}}, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)={0x20, 0xc, 0x11, "561e18d26350d7648385c8c0dd252cbce8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0xc0, 0x5, 0x6, "fa49c9ecce69"}, &(0x7f0000000900)={0x40, 0x5, 0x2, "2802"}}) 1.677704949s ago: executing program 1 (id=1618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) 1.502712483s ago: executing program 1 (id=1619): syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 1.334767457s ago: executing program 1 (id=1621): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.274840308s ago: executing program 1 (id=1624): r0 = shmget$private(0x0, 0x2000, 0x1b8, &(0x7f0000001000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) syz_clone(0x4000, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 1.21253605s ago: executing program 2 (id=1626): mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.183871431s ago: executing program 2 (id=1627): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.084583293s ago: executing program 3 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, &(0x7f0000000080)={0x9, 0x6, 0x4010001, 0x5, 0x11, 0x0, 0x6, 0x1004}, 0x0, 0x0, 0x0) 1.066484384s ago: executing program 3 (id=1630): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x4, &(0x7f0000000000)) 986.084095ms ago: executing program 3 (id=1631): syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, 0x0, 0x0) 873.252099ms ago: executing program 3 (id=1633): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0xc0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 774.783251ms ago: executing program 0 (id=1636): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x2, 0x20006, 0x1}) 628.616855ms ago: executing program 0 (id=1638): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) pwritev2(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 628.535945ms ago: executing program 4 (id=1639): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x806000, 0x0) 596.675105ms ago: executing program 0 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000001080)=""/49) 533.572067ms ago: executing program 4 (id=1641): mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd']) 476.560568ms ago: executing program 0 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 442.576869ms ago: executing program 4 (id=1643): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @loopback, 0xc}, 0x1c) 352.945401ms ago: executing program 4 (id=1644): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x318]}, 0x8, 0x80000) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) 296.470893ms ago: executing program 1 (id=1645): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x0, 0x0, 0x60, 0x0, [{@multicast2}, {@private}, {@multicast1}, {@initdev}, {@private}, {@broadcast}]}}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca24ffffff556ea6e500"/26, 0x1a}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0xedd}}], 0x18}}], 0x2, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) landlock_restrict_self(0xffffffffffffffff, 0xc) 276.397464ms ago: executing program 2 (id=1646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 191.838815ms ago: executing program 4 (id=1647): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0xfff9, 0x700}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 184.415255ms ago: executing program 2 (id=1648): r0 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @loopback, 0xc}, 0x1c) 175.939506ms ago: executing program 0 (id=1649): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x9, 0xffffffff) 60.595989ms ago: executing program 2 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) creat(&(0x7f0000000000)='./file0\x00', 0x100) 60.284609ms ago: executing program 4 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007001000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r4}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 36.511759ms ago: executing program 0 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000005c0), 0x4ed, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000280)="6cb0a5", &(0x7f0000000340)=""/142}, 0x20) 0s ago: executing program 2 (id=1653): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x28) kernel console output (not intermixed with test programs): 8.107248][ T21] usb 1-1: config 0 descriptor?? [ 88.146150][ T4533] loop1: detected capacity change from 0 to 32768 [ 88.228924][ T4533] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.54 (4533) [ 88.533206][ T4533] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 88.549465][ T4533] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.580394][ T4533] BTRFS info (device loop1): use zstd compression, level 3 [ 88.587699][ T4533] BTRFS info (device loop1): using free space tree [ 88.618895][ T4533] BTRFS info (device loop1): has skinny extents [ 88.878953][ C0] net_ratelimit: 20 callbacks suppressed [ 88.878973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.913327][ T4533] BTRFS info (device loop1): enabling ssd optimizations [ 88.941230][ T4540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.992243][ T26] audit: type=1800 audit(1785180224.936:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 89.039040][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.341911][ T4562] loop4: detected capacity change from 0 to 32768 [ 89.419112][ T4562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.58 (4562) [ 89.645970][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.669314][ T4562] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 89.686072][ T4562] BTRFS info (device loop4): setting nodatasum [ 89.695221][ T4562] BTRFS info (device loop4): using free space tree [ 89.708312][ T4562] BTRFS info (device loop4): has skinny extents [ 89.837739][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.851383][ T4566] loop3: detected capacity change from 0 to 32768 [ 89.883244][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.056683][ T4562] BTRFS info (device loop4): enabling ssd optimizations [ 90.088308][ T4566] XFS (loop3): Mounting V5 Filesystem [ 90.265760][ T4566] XFS (loop3): Ending clean mount [ 90.282364][ T4566] XFS (loop3): Quotacheck needed: Please wait. [ 90.337582][ T21] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 90.348253][ T21] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 90.357086][ T21] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 90.365534][ T21] f81534: probe of 1-1:0.12 failed with error -71 [ 90.387514][ T21] usb 1-1: USB disconnect, device number 4 [ 90.420872][ T4566] XFS (loop3): Quotacheck: Done. [ 90.659289][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 90.717985][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.747421][ T4635] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 90.775523][ T4636] netlink: 'syz.1.62': attribute type 10 has an invalid length. [ 90.830069][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'. [ 90.877108][ T4636] device dummy0 entered promiscuous mode [ 90.982955][ T4643] netlink: 128 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.008783][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.054553][ T4643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.076104][ T4195] XFS (loop3): Unmounting Filesystem [ 91.151210][ T4643] process 'syz.4.64' launched './file0' with NULL argv: empty string added [ 91.200508][ T4649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.280969][ T4649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.763525][ T4643] syz.4.64 (4643) used greatest stack depth: 20848 bytes left [ 91.890151][ T4651] loop0: detected capacity change from 0 to 32768 [ 91.905380][ T1325] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.939570][ T4651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.68 (4651) [ 92.029601][ T4651] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.052499][ T4651] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.085151][ T4651] BTRFS info (device loop0): trying to use backup root at mount time [ 92.094653][ T4651] BTRFS info (device loop0): enabling ssd optimizations [ 92.119732][ T4651] BTRFS info (device loop0): using spread ssd allocation scheme [ 92.127837][ T4651] BTRFS info (device loop0): not using spread ssd allocation scheme [ 92.158800][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 92.177075][ T4651] BTRFS info (device loop0): force zlib compression, level 3 [ 92.185008][ T4651] BTRFS info (device loop0): allowing degraded mounts [ 92.208696][ T4651] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.239517][ T4651] BTRFS info (device loop0): force lzo compression, level 0 [ 92.247324][ T4651] BTRFS info (device loop0): turning on sync discard [ 92.278784][ T4651] BTRFS info (device loop0): setting nodatacow [ 92.279470][ T1325] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 92.298840][ T4655] loop2: detected capacity change from 0 to 32768 [ 92.305867][ T4651] BTRFS info (device loop0): using free space tree [ 92.326164][ T4651] BTRFS info (device loop0): has skinny extents [ 92.335428][ T1325] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.363674][ T1325] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.418812][ T1325] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 92.460748][ T1325] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.495462][ T4655] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (4655) [ 92.560426][ T1325] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.607144][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.629018][ T4665] loop1: detected capacity change from 0 to 32768 [ 92.696026][ T4665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.71 (4665) [ 92.723663][ T4655] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 92.748034][ T4655] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.761731][ T1325] usbtmc 4-1:16.0: bulk endpoints not found [ 92.841381][ T4665] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 92.851265][ T4655] BTRFS info (device loop2): use zstd compression, level 3 [ 92.858533][ T4655] BTRFS info (device loop2): using free space tree [ 92.898811][ T4665] BTRFS info (device loop1): setting nodatasum [ 92.905213][ T4665] BTRFS info (device loop1): using free space tree [ 92.913008][ T4655] BTRFS info (device loop2): has skinny extents [ 92.951548][ T4665] BTRFS info (device loop1): has skinny extents [ 93.275779][ T4665] BTRFS info (device loop1): enabling ssd optimizations [ 93.293787][ T4655] BTRFS info (device loop2): enabling ssd optimizations [ 93.301487][ T4725] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 93.337719][ T4725] Zero length message leads to an empty skb [ 93.412906][ T26] audit: type=1800 audit(1785180229.356:4): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 93.509875][ T26] audit: type=1800 audit(1785180229.396:5): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 93.536490][ T7] usb 4-1: USB disconnect, device number 6 [ 94.245246][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 94.479324][ T4229] net_ratelimit: 8 callbacks suppressed [ 94.479341][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.522091][ T4746] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 94.558758][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 94.629163][ T4746] device dummy0 entered promiscuous mode [ 94.660591][ T4735] loop4: detected capacity change from 0 to 32768 [ 94.732148][ T4753] netlink: 128 bytes leftover after parsing attributes in process `syz.1.81'. [ 94.793754][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.844432][ T4753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.892005][ T4735] XFS (loop4): Mounting V5 Filesystem [ 94.913791][ T4276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.980045][ T4735] XFS (loop4): Ending clean mount [ 94.998331][ T4735] XFS (loop4): Quotacheck needed: Please wait. [ 95.116814][ T4735] XFS (loop4): Quotacheck: Done. [ 95.120938][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.198761][ T4276] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.383284][ T4750] loop2: detected capacity change from 0 to 32768 [ 95.400442][ T4750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.80 (4750) [ 95.439132][ T4750] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.448889][ T4200] XFS (loop4): Unmounting Filesystem [ 95.461542][ T4750] BTRFS info (device loop2): setting nodatasum [ 95.468056][ T4750] BTRFS info (device loop2): using free space tree [ 95.480441][ T4750] BTRFS info (device loop2): has skinny extents [ 95.530381][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.585339][ T4763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.829069][ T4276] usb 1-1: no configurations [ 95.837874][ T4276] usb 1-1: can't read configurations, error -22 [ 95.879287][ T4750] BTRFS info (device loop2): enabling ssd optimizations [ 95.996743][ T4464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.631820][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.663476][ T4796] loop4: detected capacity change from 0 to 32768 [ 96.743935][ T4796] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.84 (4796) [ 96.756560][ T4276] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.790739][ T4796] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 96.832747][ T4796] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.878707][ T4796] BTRFS info (device loop4): use zstd compression, level 3 [ 96.900644][ T4796] BTRFS info (device loop4): using free space tree [ 96.927961][ T4796] BTRFS info (device loop4): has skinny extents [ 96.943234][ T4799] loop3: detected capacity change from 0 to 32768 [ 97.017074][ T4799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.86 (4799) [ 97.033484][ T4276] usb 1-1: Using ep0 maxpacket: 8 [ 97.067639][ T4243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.098222][ T4799] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 97.113301][ T4799] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.158969][ T4276] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.166166][ T4799] BTRFS info (device loop3): trying to use backup root at mount time [ 97.170749][ T4276] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.201847][ T4276] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.218821][ T4799] BTRFS info (device loop3): enabling ssd optimizations [ 97.236428][ T4799] BTRFS info (device loop3): using spread ssd allocation scheme [ 97.289877][ T4799] BTRFS info (device loop3): not using spread ssd allocation scheme [ 97.298236][ T4276] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 97.329059][ T4796] BTRFS info (device loop4): enabling ssd optimizations [ 97.336766][ T4799] BTRFS info (device loop3): force zlib compression, level 3 [ 97.355787][ T4276] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.389400][ T4799] BTRFS info (device loop3): allowing degraded mounts [ 97.396296][ T4799] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 97.426440][ T4276] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.449132][ T4799] BTRFS info (device loop3): force lzo compression, level 0 [ 97.464468][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.494290][ T4799] BTRFS info (device loop3): turning on sync discard [ 97.525338][ T26] audit: type=1800 audit(1785180233.466:6): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 97.528627][ T4799] BTRFS info (device loop3): setting nodatacow [ 97.553955][ T4276] usbtmc 1-1:16.0: bulk endpoints not found [ 97.591873][ T26] audit: type=1800 audit(1785180233.506:7): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 97.612649][ T4799] BTRFS info (device loop3): using free space tree [ 97.653329][ T4799] BTRFS info (device loop3): has skinny extents [ 97.726087][ T4806] loop2: detected capacity change from 0 to 32768 [ 97.744461][ T4806] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.87 (4806) [ 97.790887][ T4796] loop4: detected capacity change from 32768 to 0 [ 97.875152][ T4285] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4285) [ 98.114970][ T4276] usb 1-1: USB disconnect, device number 6 [ 98.143199][ T4243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.309151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.420419][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 98.523419][ T4854] loop1: detected capacity change from 0 to 32768 [ 98.547145][ T4854] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.90 (4854) [ 98.828705][ T4860] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 98.836615][ T4860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 98.879127][ T4854] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 98.907750][ T4854] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.934539][ T4860] device dummy0 entered promiscuous mode [ 98.948262][ T4854] BTRFS info (device loop1): use zstd compression, level 3 [ 98.962888][ T4854] BTRFS info (device loop1): using free space tree [ 98.985131][ T4854] BTRFS info (device loop1): has skinny extents [ 99.202627][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'. [ 99.265711][ T4869] loop0: detected capacity change from 0 to 32768 [ 99.408999][ T4869] XFS (loop0): Mounting V5 Filesystem [ 99.441686][ T4854] BTRFS info (device loop1): enabling ssd optimizations [ 99.518408][ T26] audit: type=1800 audit(1785180235.456:8): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 99.556924][ T26] audit: type=1800 audit(1785180235.466:9): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 99.614995][ T4869] XFS (loop0): Ending clean mount [ 99.635519][ T4869] XFS (loop0): Quotacheck needed: Please wait. [ 99.703802][ T4869] XFS (loop0): Quotacheck: Done. [ 100.003729][ T4188] XFS (loop0): Unmounting Filesystem [ 100.063478][ T4887] net_ratelimit: 2 callbacks suppressed [ 100.063499][ T4887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.081490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.231159][ T4878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.311319][ T4919] loop3: detected capacity change from 0 to 32768 [ 100.407573][ T4919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.98 (4919) [ 100.423926][ T4927] netlink: 128 bytes leftover after parsing attributes in process `syz.1.101'. [ 100.463497][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 100.497028][ T4919] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.508573][ T4927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.531487][ T4919] BTRFS info (device loop3): setting nodatasum [ 100.538410][ T4919] BTRFS info (device loop3): using free space tree [ 100.545792][ T4919] BTRFS info (device loop3): has skinny extents [ 100.728274][ T4919] BTRFS info (device loop3): enabling ssd optimizations [ 100.780036][ T4949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.788716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.417897][ T4878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.521347][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.541097][ T4972] device syzkaller0 entered promiscuous mode [ 101.749319][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.759354][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 101.803759][ T4975] device dummy0 left promiscuous mode [ 101.839431][ T4975] netlink: 'syz.1.107': attribute type 10 has an invalid length. [ 101.861067][ T4975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.107'. [ 101.880641][ T4975] device dummy0 entered promiscuous mode [ 102.064628][ T4230] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.158997][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.348734][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 102.489025][ T4230] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 102.501147][ T4230] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.524750][ T4230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.544760][ T4230] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 102.568295][ T4230] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.595276][ T4230] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.605002][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.670148][ T4230] usbtmc 4-1:16.0: bulk endpoints not found [ 103.209896][ T4631] usb 4-1: USB disconnect, device number 7 [ 103.854583][ T5009] device dummy0 left promiscuous mode [ 103.900492][ T5009] netlink: 'syz.1.120': attribute type 10 has an invalid length. [ 103.908298][ T5009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 103.928882][ T5009] device dummy0 entered promiscuous mode [ 104.138766][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.428731][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 104.673383][ T5025] loop2: detected capacity change from 0 to 32768 [ 104.715121][ T5022] loop1: detected capacity change from 0 to 32768 [ 104.739025][ T4230] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 104.758730][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 104.767168][ T4230] usb 4-1: Product: syz [ 104.787252][ T5025] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.125 (5025) [ 104.797341][ T4230] usb 4-1: Manufacturer: syz [ 104.808614][ T4230] usb 4-1: SerialNumber: syz [ 104.827341][ T4230] usb 4-1: config 0 descriptor?? [ 104.858906][ T5022] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.124 (5022) [ 104.873265][ T5025] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 104.891289][ T4230] gspca_main: sq905-2.14.0 probing 2770:9120 [ 104.912331][ T5025] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.959109][ T5025] BTRFS info (device loop2): use zstd compression, level 3 [ 104.980317][ T5025] BTRFS info (device loop2): using free space tree [ 104.988207][ T5025] BTRFS info (device loop2): has skinny extents [ 105.005852][ T4180] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4180) [ 105.164060][ T5025] BTRFS info (device loop2): enabling ssd optimizations [ 105.191015][ T26] audit: type=1800 audit(1785180241.136:10): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.125" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 105.258264][ T26] audit: type=1800 audit(1785180241.136:11): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.125" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 105.588988][ T1325] net_ratelimit: 6 callbacks suppressed [ 105.589005][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.909288][ T4230] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 105.982422][ T4230] sq905: probe of 4-1:0.0 failed with error -110 [ 106.175557][ T5031] loop0: detected capacity change from 0 to 32768 [ 106.259340][ T5031] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.127 (5031) [ 106.335128][ T5031] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 106.384909][ T5031] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.429708][ T5031] BTRFS info (device loop0): use zstd compression, level 3 [ 106.450361][ T5031] BTRFS info (device loop0): using free space tree [ 106.477367][ T5031] BTRFS info (device loop0): has skinny extents [ 106.629087][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.711347][ T5081] device dummy0 left promiscuous mode [ 106.793894][ T5089] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 106.807067][ T5031] BTRFS info (device loop0): enabling ssd optimizations [ 106.865697][ T5089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'. [ 106.885574][ T26] audit: type=1800 audit(1785180242.826:12): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.127" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 106.924656][ T26] audit: type=1800 audit(1785180242.856:13): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.127" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 106.945483][ T5089] device dummy0 entered promiscuous mode [ 107.235532][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 107.267245][ T5031] loop0: detected capacity change from 32768 to 0 [ 107.286947][ T5107] tipc: Enabling of bearer rejected, failed to enable media [ 107.848533][ T4449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.910578][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.207916][ T5122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.228281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.270601][ T5122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.296029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.312543][ T4630] usb 4-1: USB disconnect, device number 8 [ 108.361377][ T5121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.370483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.056068][ T5126] loop3: detected capacity change from 0 to 32768 [ 109.137200][ T5126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.141 (5126) [ 109.214499][ T5126] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 109.244927][ T5126] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.296695][ T5126] BTRFS info (device loop3): use zstd compression, level 3 [ 109.306212][ T5126] BTRFS info (device loop3): using free space tree [ 109.379350][ T5126] BTRFS info (device loop3): has skinny extents [ 109.840766][ T5126] BTRFS info (device loop3): enabling ssd optimizations [ 109.929455][ T26] audit: type=1800 audit(1785180245.876:14): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 109.968565][ T26] audit: type=1800 audit(1785180245.906:15): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 110.488849][ T4468] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.768768][ T4468] usb 2-1: Using ep0 maxpacket: 8 [ 110.956210][ T4455] net_ratelimit: 4 callbacks suppressed [ 110.956229][ T4455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.140140][ T4468] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 111.159148][ T4468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 111.186409][ T4468] usb 2-1: Product: syz [ 111.194911][ T4468] usb 2-1: Manufacturer: syz [ 111.216764][ T4468] usb 2-1: SerialNumber: syz [ 111.249004][ T4468] usb 2-1: config 0 descriptor?? [ 111.301057][ T4468] gspca_main: sq905-2.14.0 probing 2770:9120 [ 111.749346][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.968802][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.989002][ T4455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.127565][ T5223] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 112.154450][ T5223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.166'. [ 112.185391][ T5223] device dummy0 entered promiscuous mode [ 112.229018][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.237445][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 112.278867][ T4468] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 112.288712][ T4468] sq905: probe of 2-1:0.0 failed with error -110 [ 112.360429][ T4230] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 112.381719][ T4230] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.492064][ T4230] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.552921][ T4230] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.619046][ T4230] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.677121][ T4230] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.713901][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.789832][ T4230] usbtmc 3-1:16.0: bulk endpoints not found [ 112.953441][ T5218] loop3: detected capacity change from 0 to 32768 [ 112.978278][ T5218] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.164 (5218) [ 113.030623][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.108366][ T5218] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 113.152739][ T5218] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.192091][ T4468] usb 3-1: USB disconnect, device number 5 [ 113.229375][ T5218] BTRFS info (device loop3): use zstd compression, level 3 [ 113.261293][ T5218] BTRFS info (device loop3): using free space tree [ 113.271295][ T5218] BTRFS info (device loop3): has skinny extents [ 113.573854][ T5218] BTRFS info (device loop3): enabling ssd optimizations [ 113.629697][ T26] audit: type=1800 audit(1785180249.576:16): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 113.690853][ T5267] fuse: Bad value for 'fd' [ 113.740584][ T26] audit: type=1800 audit(1785180249.606:17): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 113.816315][ T5269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.090565][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.551207][ T4563] usb 2-1: USB disconnect, device number 4 [ 114.646216][ T5288] input: syz1 as /devices/virtual/input/input6 [ 115.104302][ T5307] fuse: Bad value for 'fd' [ 115.109346][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.269299][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.310197][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.429885][ T5311] capability: warning: `syz.3.185' uses deprecated v2 capabilities in a way that may be insecure [ 115.548871][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 115.568357][ T5301] loop1: detected capacity change from 0 to 32768 [ 115.670293][ T4232] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 115.691242][ T4232] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.709140][ T4232] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.725941][ T4232] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 115.737976][ T4232] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.752495][ T4631] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.760446][ T4232] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.770300][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.788206][ T5301] XFS (loop1): Mounting V5 Filesystem [ 115.822477][ T4232] usbtmc 3-1:16.0: bulk endpoints not found [ 115.920756][ T5301] XFS (loop1): Ending clean mount [ 115.938350][ T5301] XFS (loop1): Quotacheck needed: Please wait. [ 115.981620][ T5301] XFS (loop1): Quotacheck: Done. [ 115.998730][ T4631] usb 4-1: Using ep0 maxpacket: 8 [ 116.032897][ T4232] usb 3-1: USB disconnect, device number 6 [ 116.121243][ T4187] XFS (loop1): Unmounting Filesystem [ 116.159863][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.181568][ T5328] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.226332][ T5330] device dummy0 left promiscuous mode [ 116.268548][ T5331] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 116.278947][ T4631] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 116.291153][ T5331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 116.294888][ T4631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 116.309580][ T4631] usb 4-1: Product: syz [ 116.314158][ T4631] usb 4-1: Manufacturer: syz [ 116.326059][ T4631] usb 4-1: SerialNumber: syz [ 116.338834][ T5331] device dummy0 entered promiscuous mode [ 116.356943][ T4631] usb 4-1: config 0 descriptor?? [ 116.406528][ T4631] gspca_main: sq905-2.14.0 probing 2770:9120 [ 116.751278][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 116.780371][ T5354] tipc: Started in network mode [ 116.794485][ T5354] tipc: Node identity 2e000000000000000000000000000001, cluster identity 4711 [ 116.812310][ T5354] tipc: Enabling of bearer rejected, failed to enable media [ 116.854086][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 117.108809][ T4468] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.190165][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.359174][ T4631] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 117.373182][ T4631] sq905: probe of 4-1:0.0 failed with error -110 [ 117.494274][ T5363] loop1: detected capacity change from 0 to 32768 [ 117.528956][ T4468] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 117.538966][ T5363] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.198 (5363) [ 117.557774][ T4468] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 117.603305][ T5363] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 117.622867][ T5363] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 117.664196][ T5363] BTRFS info (device loop1): use zstd compression, level 3 [ 117.676374][ T5363] BTRFS info (device loop1): using free space tree [ 117.699130][ T5363] BTRFS info (device loop1): has skinny extents [ 117.772561][ T4468] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 117.803061][ T4468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.873132][ T4468] usb 3-1: Product: syz [ 117.877682][ T5363] BTRFS info (device loop1): enabling ssd optimizations [ 117.905824][ T4468] usb 3-1: Manufacturer: syz [ 117.937200][ T4468] usb 3-1: SerialNumber: syz [ 117.974235][ T26] audit: type=1800 audit(1785180253.916:18): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 118.101033][ T26] audit: type=1800 audit(1785180253.936:19): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 118.138823][ T4468] rndis_wlan 3-1:7.0: skipping garbage [ 118.144782][ T4468] usb 3-1: bad CDC descriptors [ 118.167196][ T4468] rndis_host 3-1:7.0: skipping garbage [ 118.183204][ T4468] usb 3-1: bad CDC descriptors [ 118.211673][ T4468] option 3-1:7.0: GSM modem (1-port) converter detected [ 118.267216][ T26] audit: type=1804 audit(1785180254.206:20): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.198" name="/newroot/41/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 118.297846][ T4876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.309111][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.349842][ T4876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.476764][ T5426] tipc: Enabled bearer , priority 0 [ 119.491744][ T5425] tipc: Disabling bearer [ 119.685425][ T4876] usb 3-1: USB disconnect, device number 7 [ 119.695570][ T4876] option 3-1:7.0: device disconnected [ 119.847897][ T4466] usb 4-1: USB disconnect, device number 9 [ 120.388880][ T4466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.825304][ T5432] loop2: detected capacity change from 0 to 32768 [ 120.913716][ T5432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.212 (5432) [ 120.957236][ T5432] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 120.992283][ T5432] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.031823][ T5432] BTRFS info (device loop2): trying to use backup root at mount time [ 121.050909][ T5446] loop3: detected capacity change from 0 to 32768 [ 121.072387][ T5432] BTRFS info (device loop2): enabling ssd optimizations [ 121.123485][ T5446] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.217 (5446) [ 121.153967][ T5432] BTRFS info (device loop2): using spread ssd allocation scheme [ 121.178201][ T5432] BTRFS info (device loop2): not using spread ssd allocation scheme [ 121.206183][ T5446] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 121.225381][ T5432] BTRFS info (device loop2): force zlib compression, level 3 [ 121.266043][ T5446] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.283564][ T5432] BTRFS info (device loop2): allowing degraded mounts [ 121.302564][ T5446] BTRFS info (device loop3): use zstd compression, level 3 [ 121.312746][ T5432] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 121.343255][ T5446] BTRFS info (device loop3): using free space tree [ 121.359974][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.368343][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.378776][ T5432] BTRFS info (device loop2): force lzo compression, level 0 [ 121.418803][ T5446] BTRFS info (device loop3): has skinny extents [ 121.430103][ T4466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.471596][ T5432] BTRFS info (device loop2): turning on sync discard [ 121.478371][ T5432] BTRFS info (device loop2): setting nodatacow [ 121.535743][ T5432] BTRFS info (device loop2): using free space tree [ 121.554692][ T5432] BTRFS info (device loop2): has skinny extents [ 121.944060][ T5446] BTRFS info (device loop3): enabling ssd optimizations [ 121.990897][ T26] audit: type=1800 audit(1785180257.936:21): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 122.054354][ T26] audit: type=1800 audit(1785180257.966:22): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 122.890356][ T4465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.816125][ T5526] netlink: 5 bytes leftover after parsing attributes in process `syz.3.222'. [ 123.911198][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.328790][ T4631] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.408043][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.429774][ T5543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.513769][ T5543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.598815][ T4631] usb 4-1: Using ep0 maxpacket: 32 [ 124.740361][ T4631] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 124.756853][ T4631] usb 4-1: config 0 has no interface number 0 [ 124.801498][ T4631] usb 4-1: config 0 interface 12 has no altsetting 0 [ 124.889996][ T5554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.949430][ T4862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.028954][ T4631] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 125.051875][ T4631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.100426][ T4631] usb 4-1: Product: syz [ 125.117622][ T4631] usb 4-1: Manufacturer: syz [ 125.139160][ T4631] usb 4-1: SerialNumber: syz [ 125.182023][ T4631] usb 4-1: config 0 descriptor?? [ 125.989597][ T4862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.469052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.488701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 126.536885][ T5571] loop1: detected capacity change from 0 to 32768 [ 126.706284][ T5571] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.232 (5571) [ 126.766269][ T5571] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 126.802045][ T5571] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.837464][ T5571] BTRFS info (device loop1): use zstd compression, level 3 [ 126.839253][ T4631] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 126.879981][ T5571] BTRFS info (device loop1): using free space tree [ 126.909122][ T5571] BTRFS info (device loop1): has skinny extents [ 126.919239][ T4631] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.968091][ T4631] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 127.014411][ T4631] f81534: probe of 4-1:0.12 failed with error -71 [ 127.084879][ T4631] usb 4-1: USB disconnect, device number 10 [ 127.159119][ T4878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.309450][ T5571] BTRFS info (device loop1): enabling ssd optimizations [ 127.427393][ T26] audit: type=1800 audit(1785180263.366:23): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 127.448136][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.531477][ T26] audit: type=1800 audit(1785180263.426:24): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 127.749953][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.849551][ T5620] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 127.857360][ T5620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.237'. [ 127.923328][ T5620] device dummy0 entered promiscuous mode [ 128.229246][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.703601][ T26] audit: type=1326 audit(1785180264.646:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 128.785265][ T26] audit: type=1326 audit(1785180264.686:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 128.898702][ T26] audit: type=1326 audit(1785180264.686:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.012307][ T26] audit: type=1326 audit(1785180264.686:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.109679][ T26] audit: type=1326 audit(1785180264.696:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.207576][ T5627] loop2: detected capacity change from 0 to 32768 [ 129.218782][ T26] audit: type=1326 audit(1785180264.696:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.269127][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.343093][ T5627] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.238 (5627) [ 129.399313][ T26] audit: type=1326 audit(1785180264.696:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.436588][ T5627] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 129.479606][ T5627] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.517560][ T5627] BTRFS info (device loop2): use zstd compression, level 3 [ 129.527415][ T26] audit: type=1326 audit(1785180264.696:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9630f51e99 code=0x7ffc0000 [ 129.570087][ T5627] BTRFS info (device loop2): using free space tree [ 129.587062][ T5627] BTRFS info (device loop2): has skinny extents [ 129.806800][ T5627] BTRFS info (device loop2): enabling ssd optimizations [ 129.984329][ T5705] device dummy0 left promiscuous mode [ 130.013715][ T5705] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 130.042313][ T5705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.250'. [ 130.062753][ T5705] device dummy0 entered promiscuous mode [ 130.309852][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.708100][ T5728] netlink: 44 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.790010][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.950251][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.960242][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.589105][ T4516] net_ratelimit: 1 callbacks suppressed [ 131.589123][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.606052][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.615792][ T4631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.624981][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.989009][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.088958][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.388893][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.871964][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878451][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.962862][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.054911][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.076557][ T5750] loop2: detected capacity change from 0 to 32768 [ 133.115786][ T5750] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.266 (5750) [ 133.188143][ T5750] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 133.249031][ T5750] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.287809][ T5770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.275'. [ 133.288764][ T5750] BTRFS info (device loop2): use zstd compression, level 3 [ 133.343847][ T5750] BTRFS info (device loop2): using free space tree [ 133.358773][ T5750] BTRFS info (device loop2): has skinny extents [ 133.431044][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.579272][ T5750] BTRFS info (device loop2): enabling ssd optimizations [ 133.672803][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 133.672818][ T26] audit: type=1800 audit(1785180269.616:36): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.266" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 133.722435][ T26] audit: type=1800 audit(1785180269.626:37): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.266" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 133.746805][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.923994][ T5800] device dummy0 left promiscuous mode [ 133.944881][ T5800] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 133.973415][ T5800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.279'. [ 133.988834][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 134.005175][ T5800] device dummy0 entered promiscuous mode [ 134.116810][ T23] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 134.141483][ T23] usb 4-1: config 0 has no interface number 0 [ 134.161880][ T23] usb 4-1: config 0 interface 12 has no altsetting 0 [ 134.332270][ T23] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 134.354400][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.381017][ T23] usb 4-1: Product: syz [ 134.385366][ T23] usb 4-1: Manufacturer: syz [ 134.405732][ T23] usb 4-1: SerialNumber: syz [ 134.437862][ T23] usb 4-1: config 0 descriptor?? [ 134.457308][ T5797] loop1: detected capacity change from 0 to 32768 [ 134.488390][ T5797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.278 (5797) [ 134.578824][ T5797] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 134.618262][ T5797] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 134.666493][ T5797] BTRFS info (device loop1): trying to use backup root at mount time [ 134.706507][ T5797] BTRFS info (device loop1): enabling ssd optimizations [ 134.736876][ T5797] BTRFS info (device loop1): using spread ssd allocation scheme [ 134.793227][ T5797] BTRFS info (device loop1): not using spread ssd allocation scheme [ 134.813498][ T5797] BTRFS info (device loop1): force zlib compression, level 3 [ 134.842870][ T5797] BTRFS info (device loop1): allowing degraded mounts [ 134.860843][ T5797] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.888718][ T5797] BTRFS info (device loop1): force lzo compression, level 0 [ 134.900738][ T5797] BTRFS info (device loop1): turning on sync discard [ 134.919051][ T5797] BTRFS info (device loop1): setting nodatacow [ 134.934535][ T5797] BTRFS info (device loop1): using free space tree [ 134.949097][ T5797] BTRFS info (device loop1): has skinny extents [ 135.286022][ T5836] tipc: Enabling of bearer rejected, failed to enable media [ 135.642485][ T5847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'. [ 136.076738][ T23] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 136.089315][ T23] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 136.104610][ T23] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 136.117733][ T23] f81534: probe of 4-1:0.12 failed with error -71 [ 136.129003][ T23] usb 4-1: USB disconnect, device number 11 [ 136.214344][ T5867] device dummy0 left promiscuous mode [ 136.237373][ T5867] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 136.246280][ T5867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.291'. [ 136.255867][ T5867] device dummy0 entered promiscuous mode [ 136.511657][ T5882] tipc: Enabling of bearer rejected, failed to enable media [ 136.798839][ T23] net_ratelimit: 12 callbacks suppressed [ 136.798859][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.853068][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 136.879015][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.207260][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.259830][ T5873] loop1: detected capacity change from 0 to 32768 [ 137.349634][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.361884][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.371771][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.395378][ T5873] XFS (loop1): Mounting V5 Filesystem [ 137.414435][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.422886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.560547][ T5873] XFS (loop1): Ending clean mount [ 137.606879][ T5873] XFS (loop1): Quotacheck needed: Please wait. [ 137.762349][ T5873] XFS (loop1): Quotacheck: Done. [ 137.829080][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.847845][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.118750][ T5913] device dummy0 left promiscuous mode [ 138.139641][ T26] audit: type=1326 audit(1785180274.086:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.2.304" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa77179ce99 code=0x0 [ 138.187561][ T5914] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 138.222753][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'. [ 138.260025][ T5914] device dummy0 entered promiscuous mode [ 138.281915][ T5915] netlink: 'syz.2.304': attribute type 10 has an invalid length. [ 138.325587][ T4187] XFS (loop1): Unmounting Filesystem [ 138.425944][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.606912][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.689191][ T5916] bond0 (unregistering): Released all slaves [ 138.779795][ T5918] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 139.517557][ T5931] tipc: Enabled bearer , priority 0 [ 139.529003][ T5930] tipc: Disabling bearer [ 139.668558][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 140.496321][ T5943] loop1: detected capacity change from 0 to 32768 [ 140.572186][ T5943] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.316 (5943) [ 140.662863][ T5943] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 140.719188][ T5943] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.764588][ T5943] BTRFS info (device loop1): use zstd compression, level 3 [ 140.885853][ T5943] BTRFS info (device loop1): using free space tree [ 140.944322][ T5943] BTRFS info (device loop1): has skinny extents [ 141.226776][ T5943] BTRFS info (device loop1): enabling ssd optimizations [ 141.296815][ T26] audit: type=1800 audit(1785180277.236:39): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 141.374801][ T26] audit: type=1800 audit(1785180277.266:40): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 142.143068][ T4878] net_ratelimit: 10 callbacks suppressed [ 142.143084][ T4878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.236128][ T6000] tipc: Enabled bearer , priority 0 [ 142.278909][ T5999] tipc: Disabling bearer [ 142.288828][ T4228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.578757][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 142.708807][ T4228] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 142.722613][ T4228] usb 3-1: config 0 has no interface number 0 [ 142.802699][ T4228] usb 3-1: config 0 interface 12 has no altsetting 0 [ 142.864375][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 142.906378][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 142.993461][ T6012] device dummy0 left promiscuous mode [ 143.019062][ T4228] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.033861][ T6012] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 143.054844][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.071429][ T4228] usb 3-1: Product: syz [ 143.082550][ T4228] usb 3-1: Manufacturer: syz [ 143.094102][ T4228] usb 3-1: SerialNumber: syz [ 143.108131][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 143.125169][ T4228] usb 3-1: config 0 descriptor?? [ 143.168481][ T6012] device dummy0 entered promiscuous mode [ 143.188970][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.090386][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.229135][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.511729][ T6037] ALSA: mixer_oss: invalid OSS volume 'LINtination' [ 144.528881][ T6037] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 144.798939][ T4228] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 144.816790][ T4228] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 144.855711][ T4228] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 144.876030][ T4228] f81534: probe of 3-1:0.12 failed with error -71 [ 144.924482][ T6023] loop3: detected capacity change from 0 to 32768 [ 144.943381][ T4228] usb 3-1: USB disconnect, device number 8 [ 145.084328][ T6023] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.334 (6023) [ 145.176238][ T6023] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 145.228870][ T6023] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.238355][ T6023] BTRFS info (device loop3): use zstd compression, level 3 [ 145.269180][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.340533][ T6023] BTRFS info (device loop3): using free space tree [ 145.370276][ T6023] BTRFS info (device loop3): has skinny extents [ 145.671431][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.789700][ T6023] BTRFS info (device loop3): enabling ssd optimizations [ 145.831978][ T26] audit: type=1800 audit(1785180281.776:41): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.334" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 145.862958][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 145.891158][ T26] audit: type=1800 audit(1785180281.826:42): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.334" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 146.028934][ T4450] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.310275][ T4878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.328780][ T4450] usb 2-1: Using ep0 maxpacket: 8 [ 146.608990][ T4450] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 146.628501][ T4450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 146.688880][ T4450] usb 2-1: Product: syz [ 146.693117][ T4450] usb 2-1: Manufacturer: syz [ 146.697734][ T4450] usb 2-1: SerialNumber: syz [ 146.750668][ T4450] usb 2-1: config 0 descriptor?? [ 146.791266][ T4450] gspca_main: sq905-2.14.0 probing 2770:9120 [ 147.119034][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.355158][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.562768][ T6104] ALSA: mixer_oss: invalid OSS volume 'LINtination' [ 147.610592][ T6104] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 147.748889][ T4450] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 147.772517][ T4450] sq905: probe of 2-1:0.0 failed with error -110 [ 148.442477][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.601116][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 149.072995][ T6121] loop3: detected capacity change from 0 to 32768 [ 149.120002][ T6121] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.352 (6121) [ 149.220458][ T6121] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 149.254680][ T6121] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.305217][ T6121] BTRFS info (device loop3): use zstd compression, level 3 [ 149.352313][ T6121] BTRFS info (device loop3): using free space tree [ 149.369455][ T6121] BTRFS info (device loop3): has skinny extents [ 149.509782][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.621090][ T6121] BTRFS info (device loop3): enabling ssd optimizations [ 149.656950][ T26] audit: type=1800 audit(1785180285.596:43): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 149.804229][ T26] audit: type=1800 audit(1785180285.636:44): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 149.920254][ T26] audit: type=1804 audit(1785180285.866:45): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.352" name="/newroot/56/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 149.984866][ T6135] loop2: detected capacity change from 0 to 32768 [ 150.039577][ T6135] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.358 (6135) [ 150.159268][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.176170][ T4450] usb 2-1: USB disconnect, device number 5 [ 150.266270][ T4285] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4285) [ 150.320467][ T6162] ALSA: mixer_oss: invalid OSS volume 'LINtination' [ 150.327143][ T6162] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 150.548924][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.885402][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 150.982541][ T6187] device dummy0 left promiscuous mode [ 151.024270][ T6189] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 151.048713][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'. [ 151.077105][ T6189] device dummy0 entered promiscuous mode [ 151.292991][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 151.588925][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.628908][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.175599][ T6212] loop3: detected capacity change from 0 to 32768 [ 153.201698][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.267438][ T6212] XFS (loop3): Mounting V5 Filesystem [ 153.338714][ T4861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.422211][ T6212] XFS (loop3): Ending clean mount [ 153.442800][ T6212] XFS (loop3): Quotacheck needed: Please wait. [ 153.551942][ T6212] XFS (loop3): Quotacheck: Done. [ 153.588777][ T4861] usb 2-1: Using ep0 maxpacket: 32 [ 153.671284][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.719929][ T4861] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 153.735311][ T4861] usb 2-1: config 0 has no interface number 0 [ 153.756760][ T4861] usb 2-1: config 0 interface 12 has no altsetting 0 [ 153.811426][ T4195] XFS (loop3): Unmounting Filesystem [ 153.914907][ T6227] loop2: detected capacity change from 0 to 32768 [ 153.930614][ T4861] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 153.948154][ T4861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.958371][ T4861] usb 2-1: Product: syz [ 153.963836][ T4861] usb 2-1: Manufacturer: syz [ 153.969189][ T4861] usb 2-1: SerialNumber: syz [ 153.992285][ T4861] usb 2-1: config 0 descriptor?? [ 154.008043][ T6227] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (6227) [ 154.033248][ T6227] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 154.052088][ T6227] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.068403][ T6227] BTRFS info (device loop2): use zstd compression, level 3 [ 154.076055][ T6227] BTRFS info (device loop2): using free space tree [ 154.086640][ T6227] BTRFS info (device loop2): has skinny extents [ 154.333336][ T6227] BTRFS info (device loop2): enabling ssd optimizations [ 154.369774][ T26] audit: type=1800 audit(1785180290.316:46): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.378" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 154.493373][ T6260] fuse: Bad value for 'fd' [ 154.515798][ T26] audit: type=1800 audit(1785180290.366:47): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.378" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 154.709179][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.136836][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 155.252171][ T6275] device dummy0 left promiscuous mode [ 155.269182][ T6276] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 155.290219][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.385'. [ 155.325825][ T4623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.326444][ T6276] device dummy0 entered promiscuous mode [ 155.583449][ T6290] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 155.649529][ T4861] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 155.670169][ T4861] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 155.698568][ T4861] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 155.727444][ T4861] f81534: probe of 2-1:0.12 failed with error -71 [ 155.774230][ T4861] usb 2-1: USB disconnect, device number 6 [ 155.798922][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.068967][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.212053][ T6299] loop2: detected capacity change from 0 to 32768 [ 156.228927][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.257962][ T6299] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.390 (6299) [ 156.334875][ T6299] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 156.386161][ T6299] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 156.396422][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.458708][ T6299] BTRFS info (device loop2): use zstd compression, level 3 [ 156.493755][ T6299] BTRFS info (device loop2): using free space tree [ 156.515702][ T6299] BTRFS info (device loop2): has skinny extents [ 156.523262][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 156.550010][ T4623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.579465][ T6315] device dummy0 left promiscuous mode [ 156.639747][ T6321] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 156.667264][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.397'. [ 156.690270][ T6321] device dummy0 entered promiscuous mode [ 156.830479][ T6306] loop1: detected capacity change from 0 to 32768 [ 156.911911][ T6306] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.393 (6306) [ 157.047552][ T6299] BTRFS info (device loop2): enabling ssd optimizations [ 157.087677][ T26] audit: type=1800 audit(1785180293.026:48): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 157.162498][ T26] audit: type=1800 audit(1785180293.086:49): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 157.282169][ T4180] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4180) [ 157.663723][ T26] audit: type=1800 audit(1785180293.606:50): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 158.008827][ T4623] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.067481][ T4231] net_ratelimit: 2 callbacks suppressed [ 158.067495][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.288902][ T4623] usb 2-1: Using ep0 maxpacket: 32 [ 158.372566][ T6367] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.386572][ T6367] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.438929][ T4623] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.450539][ T4623] usb 2-1: config 0 has no interface number 0 [ 158.466330][ T4623] usb 2-1: config 0 interface 12 has no altsetting 0 [ 158.485751][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.656063][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'. [ 158.668825][ T4623] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.690145][ T4623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.699780][ T4623] usb 2-1: Product: syz [ 158.704776][ T4623] usb 2-1: Manufacturer: syz [ 158.712069][ T4623] usb 2-1: SerialNumber: syz [ 158.729914][ T4623] usb 2-1: config 0 descriptor?? [ 158.746639][ T6376] device dummy0 left promiscuous mode [ 158.786097][ T6374] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 158.816693][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 158.848839][ T6371] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.857550][ T6374] device dummy0 entered promiscuous mode [ 158.867422][ T6371] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 159.109137][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.116338][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.125447][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.134925][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.144547][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.268973][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.310160][ T6385] device syzkaller0 entered promiscuous mode [ 159.519484][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.128852][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.158896][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.348902][ T4623] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 160.387406][ T4623] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 160.398307][ T4623] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 160.431905][ T4623] f81534: probe of 2-1:0.12 failed with error -71 [ 160.461980][ T4623] usb 2-1: USB disconnect, device number 7 [ 160.498960][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.512959][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.543787][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 160.599068][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.608431][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.616906][ T7] usb 4-1: SerialNumber: syz [ 160.761137][ T6410] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.769383][ T6410] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 160.828977][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.903177][ T7] usb 4-1: 0:2 : does not exist [ 160.946422][ T7] usb 4-1: USB disconnect, device number 12 [ 161.189028][ T1107] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 161.204568][ T1107] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 161.221092][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.408957][ T1107] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 161.426491][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.445117][ T1107] usb 3-1: Product: syz [ 161.468756][ T1107] usb 3-1: Manufacturer: syz [ 161.485253][ T1107] usb 3-1: SerialNumber: syz [ 161.583047][ T1107] rndis_wlan 3-1:7.0: skipping garbage [ 161.606196][ T1107] usb 3-1: bad CDC descriptors [ 161.646238][ T1107] rndis_host 3-1:7.0: skipping garbage [ 161.715720][ T1107] usb 3-1: bad CDC descriptors [ 161.741492][ T1107] option 3-1:7.0: GSM modem (1-port) converter detected [ 162.888122][ T6465] device syzkaller0 entered promiscuous mode [ 163.232628][ T6468] net_ratelimit: 9 callbacks suppressed [ 163.232646][ T6468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.246709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.328392][ T6469] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 163.349048][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.472635][ T1107] usb 3-1: USB disconnect, device number 9 [ 163.492605][ T1107] option 3-1:7.0: device disconnected [ 163.759845][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.219352][ T1107] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.389173][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.389496][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.505500][ T6501] device syzkaller0 entered promiscuous mode [ 164.589484][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.610715][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.709016][ T1107] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.730955][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.754807][ T1107] usb 3-1: SerialNumber: syz [ 164.797315][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.806218][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.815327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.838260][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 164.850307][ T6508] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 164.870280][ T4623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.051752][ T1107] usb 3-1: 0:2 : does not exist [ 165.157177][ T1107] usb 3-1: USB disconnect, device number 10 [ 165.163510][ T4861] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.470382][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.590542][ T4861] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 165.606313][ T4861] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 165.799106][ T4861] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 165.814379][ T4861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.836306][ T4861] usb 4-1: Product: syz [ 165.842981][ T4861] usb 4-1: Manufacturer: syz [ 165.857229][ T4861] usb 4-1: SerialNumber: syz [ 165.911443][ T6525] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.919806][ T4861] rndis_wlan 4-1:7.0: skipping garbage [ 165.931660][ T6525] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 165.934868][ T4861] usb 4-1: bad CDC descriptors [ 165.989593][ T4861] rndis_host 4-1:7.0: skipping garbage [ 166.008792][ T4861] usb 4-1: bad CDC descriptors [ 166.024744][ T4861] option 4-1:7.0: GSM modem (1-port) converter detected [ 166.642296][ T6539] device syzkaller0 entered promiscuous mode [ 166.888973][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 166.934085][ T6544] device dummy0 left promiscuous mode [ 166.978076][ T6544] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 167.028992][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.462'. [ 167.044918][ T6544] device dummy0 entered promiscuous mode [ 167.105210][ T6549] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 167.240774][ T6537] loop2: detected capacity change from 0 to 32768 [ 167.277099][ T6537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.460 (6537) [ 167.332550][ T6537] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 167.364501][ T6537] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 167.394747][ T6537] BTRFS info (device loop2): use zstd compression, level 3 [ 167.430765][ T6537] BTRFS info (device loop2): using free space tree [ 167.459536][ T6537] BTRFS info (device loop2): has skinny extents [ 167.505445][ T6537] BTRFS info (device loop2): enabling ssd optimizations [ 167.544820][ T26] audit: type=1800 audit(1785180303.486:51): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 167.606614][ T26] audit: type=1800 audit(1785180303.516:52): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 167.851553][ T23] usb 4-1: USB disconnect, device number 13 [ 167.858451][ T23] option 4-1:7.0: device disconnected [ 168.226734][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 168.303574][ T6615] device dummy0 left promiscuous mode [ 168.333608][ T6617] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 168.354156][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 168.364828][ T6617] device dummy0 entered promiscuous mode [ 168.404758][ T4739] net_ratelimit: 9 callbacks suppressed [ 168.404777][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.582512][ T6619] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 168.807766][ T4861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.966665][ T6627] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.268659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 169.408963][ T4861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.648848][ T4861] usb 2-1: Using ep0 maxpacket: 32 [ 169.663162][ T6644] device syzkaller0 entered promiscuous mode [ 169.769059][ T4861] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 169.787595][ T4861] usb 2-1: config 0 has no interface number 0 [ 169.818307][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 169.829582][ T4861] usb 2-1: config 0 interface 12 has no altsetting 0 [ 169.845705][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.976832][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 169.989919][ T4861] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 170.002540][ T4861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.028812][ T4861] usb 2-1: Product: syz [ 170.043228][ T4861] usb 2-1: Manufacturer: syz [ 170.058160][ T4861] usb 2-1: SerialNumber: syz [ 170.063086][ T6657] device dummy0 left promiscuous mode [ 170.080544][ T4861] usb 2-1: config 0 descriptor?? [ 170.104729][ T6642] loop2: detected capacity change from 0 to 32768 [ 170.112438][ T6657] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 170.120807][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'. [ 170.132025][ T6657] device dummy0 entered promiscuous mode [ 170.209030][ T6642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.484 (6642) [ 170.237893][ T6642] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 170.268125][ T6642] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 170.318742][ T6642] BTRFS info (device loop2): use zstd compression, level 3 [ 170.355118][ T6642] BTRFS info (device loop2): using free space tree [ 170.362067][ T6642] BTRFS info (device loop2): has skinny extents [ 170.417373][ T6666] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 170.569199][ T6642] BTRFS info (device loop2): enabling ssd optimizations [ 170.596187][ T26] audit: type=1800 audit(1785180306.536:53): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.484" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 170.629793][ T26] audit: type=1800 audit(1785180306.566:54): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.484" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 170.881750][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.959005][ T6688] loop2: detected capacity change from 32768 to 0 [ 171.352487][ T6693] loop3: detected capacity change from 0 to 32768 [ 171.412346][ T6693] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.493 (6693) [ 171.447412][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.493541][ T6693] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 171.548560][ T6693] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 171.574782][ T6693] BTRFS info (device loop3): use zstd compression, level 3 [ 171.597750][ T6693] BTRFS info (device loop3): using free space tree [ 171.614105][ T6693] BTRFS info (device loop3): has skinny extents [ 171.833669][ T6693] BTRFS info (device loop3): enabling ssd optimizations [ 171.874817][ T26] audit: type=1800 audit(1785180307.816:55): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 171.909302][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.039598][ T26] audit: type=1800 audit(1785180307.846:56): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 172.320474][ T4861] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 172.334824][ T4861] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 172.385856][ T4861] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 172.412024][ T4861] f81534: probe of 2-1:0.12 failed with error -71 [ 172.454332][ T4861] usb 2-1: USB disconnect, device number 8 [ 172.955256][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.296189][ T6739] device syzkaller0 entered promiscuous mode [ 173.729025][ T6747] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 173.993764][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.463061][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 174.478178][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.487343][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.842974][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.852001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.893841][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.953469][ T6780] device syzkaller0 entered promiscuous mode [ 175.038042][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.093424][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.102156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.112284][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.598867][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.858686][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 176.158830][ T7] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 176.168443][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 176.236826][ T7] usb 2-1: Product: syz [ 176.257025][ T7] usb 2-1: Manufacturer: syz [ 176.283560][ T7] usb 2-1: SerialNumber: syz [ 176.319533][ T7] usb 2-1: config 0 descriptor?? [ 176.381055][ T7] gspca_main: sq905-2.14.0 probing 2770:9120 [ 177.348821][ T7] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 177.365690][ T7] sq905: probe of 2-1:0.0 failed with error -110 [ 178.374091][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.529'. [ 178.475787][ T6840] device dummy0 left promiscuous mode [ 178.556995][ T6839] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 178.588862][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 178.639741][ T6839] device dummy0 entered promiscuous mode [ 179.153764][ T6850] fuse: Bad value for 'fd' [ 179.269015][ T4468] net_ratelimit: 6 callbacks suppressed [ 179.269033][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.648257][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 179.685738][ T6859] device syzkaller0 entered promiscuous mode [ 179.787592][ T7] usb 2-1: USB disconnect, device number 9 [ 180.009799][ T6871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.018153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.246690][ T6870] device syzkaller0 entered promiscuous mode [ 180.308858][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.549288][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.349040][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.429433][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.968886][ T4468] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.218828][ T4468] usb 2-1: Using ep0 maxpacket: 8 [ 182.396398][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.469230][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.559454][ T4468] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 182.568583][ T4468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 182.629644][ T4468] usb 2-1: Product: syz [ 182.634065][ T4468] usb 2-1: Manufacturer: syz [ 182.648788][ T4468] usb 2-1: SerialNumber: syz [ 182.684968][ T4468] usb 2-1: config 0 descriptor?? [ 182.766504][ T4468] gspca_main: sq905-2.14.0 probing 2770:9120 [ 183.429101][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.641228][ T6941] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 183.728957][ T4468] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 183.745662][ T4468] sq905: probe of 2-1:0.0 failed with error -110 [ 184.024196][ T6955] device dummy0 left promiscuous mode [ 184.067943][ T6962] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 184.131639][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 184.185744][ T6962] device dummy0 entered promiscuous mode [ 184.288906][ T4468] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.468986][ T4463] net_ratelimit: 5 callbacks suppressed [ 184.469007][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.729953][ T4468] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 184.744932][ T4468] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 184.955522][ T4468] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 184.980906][ T4468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.006675][ T4468] usb 4-1: Product: syz [ 185.017098][ T4468] usb 4-1: Manufacturer: syz [ 185.032992][ T4468] usb 4-1: SerialNumber: syz [ 185.129776][ T4468] rndis_wlan 4-1:7.0: skipping garbage [ 185.135567][ T4468] usb 4-1: bad CDC descriptors [ 185.150272][ T4468] rndis_host 4-1:7.0: skipping garbage [ 185.156148][ T4468] usb 4-1: bad CDC descriptors [ 185.164231][ T4468] option 4-1:7.0: GSM modem (1-port) converter detected [ 185.515369][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.244131][ T4468] usb 2-1: USB disconnect, device number 10 [ 186.548903][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.633127][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 186.642868][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.949156][ T4265] usb 4-1: USB disconnect, device number 14 [ 186.966417][ T4265] option 4-1:7.0: device disconnected [ 187.091255][ T6984] loop1: detected capacity change from 0 to 32768 [ 187.265832][ T6984] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.572 (6984) [ 187.293592][ T6984] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 187.340766][ T6984] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 187.373384][ T6984] BTRFS info (device loop1): use zstd compression, level 3 [ 187.418820][ T7017] device dummy0 left promiscuous mode [ 187.427706][ T6984] BTRFS info (device loop1): using free space tree [ 187.435024][ T6984] BTRFS info (device loop1): has skinny extents [ 187.477157][ T7021] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 187.486291][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.580'. [ 187.501122][ T7021] device dummy0 entered promiscuous mode [ 187.544249][ T6984] BTRFS info (device loop1): enabling ssd optimizations [ 187.600482][ T4463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.681929][ T26] audit: type=1800 audit(1785180323.626:57): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 187.715611][ T26] audit: type=1800 audit(1785180323.656:58): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 187.910469][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.945408][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.953895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.368424][ T7063] tipc: Enabling of bearer rejected, failed to enable media [ 188.716934][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.725581][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.804035][ T7067] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 188.821712][ T7069] fuse: Bad value for 'user_id' [ 189.162212][ T7081] fuse: Bad value for 'fd' [ 189.284938][ T7079] device syzkaller0 entered promiscuous mode [ 189.764063][ T4864] net_ratelimit: 2 callbacks suppressed [ 189.764083][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.597429][ T7096] device syzkaller0 entered promiscuous mode [ 190.647634][ T7096] tipc: Enabled bearer , priority 0 [ 190.685240][ T7095] tipc: Resetting bearer [ 190.775074][ T7095] tipc: Disabling bearer [ 190.801710][ T4466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.951810][ T7094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.960348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.969032][ T7094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.032020][ T7094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.040808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.095697][ T7094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.111785][ T7116] fuse: Bad value for 'user_id' [ 191.133207][ T7093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.142275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.268775][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.289908][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.334233][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 191.373847][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.406095][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.791785][ T7135] device syzkaller0 entered promiscuous mode [ 191.835952][ T7135] tipc: Started in network mode [ 191.854840][ T7135] tipc: Node identity da6ebd1b4812, cluster identity 4711 [ 191.879936][ T7135] tipc: Enabled bearer , priority 0 [ 191.920142][ T7134] tipc: Resetting bearer [ 191.969869][ T7134] tipc: Disabling bearer [ 193.094126][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 193.146965][ T7157] device dummy0 left promiscuous mode [ 193.189105][ T7156] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 193.203566][ T7149] loop3: detected capacity change from 0 to 32768 [ 193.213962][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.624'. [ 193.223718][ T7156] device dummy0 entered promiscuous mode [ 193.243189][ T7149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.621 (7149) [ 193.309197][ T7149] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 193.343602][ T7149] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.386630][ T7149] BTRFS info (device loop3): use zstd compression, level 3 [ 193.418945][ T7149] BTRFS info (device loop3): using free space tree [ 193.438459][ T7149] BTRFS info (device loop3): has skinny extents [ 193.489640][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 193.563346][ T7149] BTRFS info (device loop3): enabling ssd optimizations [ 193.645942][ T26] audit: type=1800 audit(1785180329.586:59): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.621" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 193.761518][ T26] audit: type=1800 audit(1785180329.616:60): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.621" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 194.310790][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317250][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.955995][ T4563] net_ratelimit: 5 callbacks suppressed [ 194.956011][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.160136][ T7208] loop1: detected capacity change from 0 to 32768 [ 195.194099][ T7208] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.634 (7208) [ 195.257542][ T7208] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 195.268997][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.294647][ T7208] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.335151][ T7208] BTRFS info (device loop1): use zstd compression, level 3 [ 195.388770][ T7208] BTRFS info (device loop1): using free space tree [ 195.395391][ T7208] BTRFS info (device loop1): has skinny extents [ 195.511203][ T7235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.522180][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.553319][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.665340][ T7234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.674498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.815099][ T7208] BTRFS info (device loop1): enabling ssd optimizations [ 195.886368][ T26] audit: type=1800 audit(1785180331.826:61): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.634" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 195.957584][ T26] audit: type=1800 audit(1785180331.846:62): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.634" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 195.996986][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.367236][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 196.377889][ T7262] device dummy0 left promiscuous mode [ 196.418568][ T7262] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 196.433111][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.646'. [ 196.442720][ T7262] device dummy0 entered promiscuous mode [ 196.569244][ T7271] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 196.990448][ T7273] tipc: Enabling of bearer rejected, failed to enable media [ 197.039659][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.483247][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.661'. [ 197.505940][ T7304] device dummy0 left promiscuous mode [ 197.542913][ T7304] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 197.568131][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.661'. [ 197.589347][ T7304] device dummy0 entered promiscuous mode [ 198.032907][ T7312] device syzkaller0 entered promiscuous mode [ 198.084007][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.132824][ T7314] tipc: Enabled bearer , priority 0 [ 198.172661][ T7311] tipc: Resetting bearer [ 198.224688][ T7311] tipc: Disabling bearer [ 199.041864][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 199.087284][ T7336] device dummy0 left promiscuous mode [ 199.133855][ T7336] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 199.175643][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.674'. [ 199.213221][ T7336] device dummy0 entered promiscuous mode [ 199.407333][ T7354] tipc: Enabling of bearer rejected, failed to enable media [ 200.149195][ T4563] net_ratelimit: 3 callbacks suppressed [ 200.149210][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.163570][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.610141][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 200.634601][ T7389] device dummy0 left promiscuous mode [ 200.672002][ T7389] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 200.729308][ T7389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'. [ 200.755953][ T7389] device dummy0 entered promiscuous mode [ 200.894196][ T7397] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 201.189145][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.197526][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.348996][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.989311][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.999484][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.008942][ T4466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.155963][ T7416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.188907][ T7416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.208174][ T7416] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 203.057807][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 203.100418][ T7442] device dummy0 left promiscuous mode [ 203.167893][ T7448] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 203.183164][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'. [ 203.197304][ T7448] device dummy0 entered promiscuous mode [ 203.697383][ T7463] tipc: Enabling of bearer rejected, failed to enable media [ 204.751849][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 205.362741][ T4466] net_ratelimit: 7 callbacks suppressed [ 205.362760][ T4466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.510677][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.784027][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'. [ 205.799854][ T7510] device dummy0 left promiscuous mode [ 205.830617][ T7510] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 205.863860][ T7510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 205.874051][ T7510] device dummy0 entered promiscuous mode [ 206.268820][ T4466] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.389554][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.738856][ T4466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.849037][ T4466] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.874583][ T4466] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.899563][ T4466] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 206.927086][ T4466] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 206.961049][ T4466] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.997198][ T4466] usb 2-1: config 1 interface 1 has no altsetting 0 [ 207.269075][ T4466] usb 2-1: string descriptor 0 read error: -22 [ 207.287031][ T4466] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 207.301153][ T4466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.310093][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'. [ 207.430765][ T4466] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 207.474210][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.502877][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.945120][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 207.955788][ T7561] device dummy0 left promiscuous mode [ 207.979668][ T7561] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 207.987637][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.752'. [ 207.996863][ T7561] device dummy0 entered promiscuous mode [ 208.554853][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.571697][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.605057][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.711457][ T4630] usb 2-1: USB disconnect, device number 11 [ 210.188718][ T4630] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.549499][ T4630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.560117][ T4630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.648292][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.659057][ T4630] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.668217][ T4630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.693412][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 210.694794][ T4630] usb 2-1: SerialNumber: syz [ 210.757640][ T7646] device dummy0 left promiscuous mode [ 210.787007][ T7647] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 210.808731][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'. [ 210.817839][ T7647] device dummy0 entered promiscuous mode [ 211.001565][ T4630] usb 2-1: 0:2 : does not exist [ 211.036680][ T4630] usb 2-1: USB disconnect, device number 12 [ 211.466064][ T7675] tipc: Enabling of bearer rejected, failed to enable media [ 211.588979][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.617384][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 211.668959][ T7678] device dummy0 left promiscuous mode [ 211.714870][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.726538][ T7685] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 211.748253][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.799'. [ 211.773515][ T7685] device dummy0 entered promiscuous mode [ 212.249516][ T7707] tipc: Enabling of bearer rejected, failed to enable media [ 212.354174][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 212.393837][ T7720] device dummy0 left promiscuous mode [ 212.446598][ T7725] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 212.456276][ T7725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'. [ 212.474108][ T7725] device dummy0 entered promiscuous mode [ 212.804602][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.879156][ T7750] tipc: Enabling of bearer rejected, failed to enable media [ 213.112304][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 213.132780][ T7763] device dummy0 left promiscuous mode [ 213.156735][ T7763] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 213.166101][ T7763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.831'. [ 213.175389][ T7763] device dummy0 entered promiscuous mode [ 213.836973][ T4563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.855893][ T7796] tipc: Enabling of bearer rejected, failed to enable media [ 214.150416][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.298837][ T4466] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 214.558689][ T4466] usb 2-1: Using ep0 maxpacket: 32 [ 214.628866][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.694528][ T4466] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.702975][ T4466] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.720698][ T4466] usb 2-1: config 0 has no interface number 0 [ 214.726991][ T4466] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.740934][ T4466] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.756651][ T4466] usb 2-1: config 0 interface 12 has no altsetting 0 [ 214.864226][ T7825] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 214.922547][ T4466] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.937493][ T4466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.963632][ T4466] usb 2-1: Product: syz [ 214.968178][ T4466] usb 2-1: Manufacturer: syz [ 214.975848][ T4466] usb 2-1: SerialNumber: syz [ 214.995189][ T4466] usb 2-1: config 0 descriptor?? [ 215.052921][ T4466] f81534 2-1:0.12: required endpoints missing [ 215.177255][ T7829] tipc: Enabling of bearer rejected, failed to enable media [ 215.901571][ T7860] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 215.996916][ T26] audit: type=1326 audit(1785180351.936:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.867" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe693c86e99 code=0x0 [ 216.050383][ T7864] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 216.108213][ T7864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.131165][ T7864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.152981][ T7864] bond0 (unregistering): Released all slaves [ 216.361721][ T1107] usb 2-1: USB disconnect, device number 13 [ 216.508230][ T7872] tipc: Enabled bearer , priority 0 [ 216.536349][ T7871] tipc: Disabling bearer [ 217.568682][ T4864] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 217.676245][ T7912] tipc: Enabling of bearer rejected, failed to enable media [ 217.989005][ T4864] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 217.996288][ T4864] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 218.183965][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 218.219067][ T4864] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 218.228202][ T4864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.268669][ T4864] usb 2-1: Product: syz [ 218.272903][ T4864] usb 2-1: Manufacturer: syz [ 218.277559][ T4864] usb 2-1: SerialNumber: syz [ 218.314098][ T7923] device dummy0 left promiscuous mode [ 218.346283][ T7922] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 218.385816][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 218.386683][ T4864] rndis_wlan 2-1:7.0: skipping garbage [ 218.411718][ T4864] usb 2-1: bad CDC descriptors [ 218.419435][ T4864] rndis_host 2-1:7.0: skipping garbage [ 218.424968][ T4864] usb 2-1: bad CDC descriptors [ 218.438254][ T7922] device dummy0 entered promiscuous mode [ 218.441904][ T4864] option 2-1:7.0: GSM modem (1-port) converter detected [ 219.571138][ T7960] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 219.592729][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 219.625058][ T7959] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 219.648052][ T7959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.903'. [ 220.207075][ T4630] usb 2-1: USB disconnect, device number 14 [ 220.226318][ T4630] option 2-1:7.0: device disconnected [ 220.633812][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 220.668710][ T4630] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.696134][ T7990] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 220.729674][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.915'. [ 221.046323][ T4630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.056938][ T4630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.081844][ T8006] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 221.111924][ T8007] tipc: Enabling of bearer rejected, failed to enable media [ 221.159099][ T4630] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.176430][ T4630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.197311][ T4630] usb 2-1: SerialNumber: syz [ 221.501597][ T4630] usb 2-1: 0:2 : does not exist [ 221.552938][ T4630] usb 2-1: USB disconnect, device number 15 [ 221.608308][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 221.661066][ T8023] netlink: 'syz.2.927': attribute type 10 has an invalid length. [ 221.693075][ T8023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.927'. [ 221.830778][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.319430][ T8039] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 222.358848][ T8041] tipc: Enabling of bearer rejected, failed to enable media [ 222.401616][ T8032] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 222.412186][ T8032] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 223.569831][ T8081] tipc: Enabling of bearer rejected, failed to enable media [ 224.399713][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 225.336223][ T8136] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 225.794723][ T8154] tipc: Enabling of bearer rejected, failed to enable media [ 226.656117][ T8148] loop1: detected capacity change from 0 to 32768 [ 226.665317][ T8175] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 226.681095][ T8148] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.973 (8148) [ 226.751618][ T8148] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 226.764894][ T8148] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 226.785105][ T8148] BTRFS info (device loop1): use zstd compression, level 3 [ 226.797480][ T8148] BTRFS info (device loop1): using free space tree [ 226.807340][ T8148] BTRFS info (device loop1): has skinny extents [ 227.014269][ T8148] BTRFS info (device loop1): enabling ssd optimizations [ 227.052401][ T26] audit: type=1800 audit(1785180362.996:64): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.973" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 227.125680][ T26] audit: type=1800 audit(1785180363.016:65): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.973" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 227.150623][ T8211] tipc: Enabling of bearer rejected, failed to enable media [ 229.050943][ T8255] tipc: Enabling of bearer rejected, failed to enable media [ 229.991272][ T8285] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 230.155665][ T8279] loop1: detected capacity change from 0 to 32768 [ 230.228914][ T8279] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1009 (8279) [ 230.267208][ T8279] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 230.277041][ T8279] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 230.290863][ T8279] BTRFS info (device loop1): use zstd compression, level 3 [ 230.298334][ T8279] BTRFS info (device loop1): using free space tree [ 230.305883][ T8279] BTRFS info (device loop1): has skinny extents [ 230.370663][ T8304] tipc: Enabling of bearer rejected, failed to enable media [ 230.504525][ T8279] BTRFS info (device loop1): enabling ssd optimizations [ 230.536562][ T26] audit: type=1800 audit(1785180366.476:66): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1009" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 230.580095][ T26] audit: type=1800 audit(1785180366.526:67): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1009" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 231.117176][ T26] audit: type=1804 audit(1785180367.056:68): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1009" name="/newroot/174/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 231.636398][ T8342] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 232.724498][ T8361] tipc: Enabling of bearer rejected, failed to enable media [ 233.093212][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 233.113703][ T8372] device dummy0 left promiscuous mode [ 233.140914][ T8372] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 233.171950][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1031'. [ 233.182718][ T8372] device dummy0 entered promiscuous mode [ 233.306907][ T8380] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 233.666393][ T8396] tipc: Enabling of bearer rejected, failed to enable media [ 234.764345][ T8432] tipc: Enabling of bearer rejected, failed to enable media [ 236.029958][ T8464] tipc: Enabling of bearer rejected, failed to enable media [ 236.428942][ T8480] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 237.474178][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 237.618237][ T8506] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 237.685408][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1077'. [ 239.165399][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 239.200438][ T8536] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 239.228687][ T8536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1091'. [ 239.404070][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.431563][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.452801][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.481300][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.500913][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.521091][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.559338][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.578560][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.600857][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 239.630532][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 240.404867][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 240.449980][ T8567] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 240.482016][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'. [ 241.055191][ T8573] Invalid ELF header len 1 [ 241.988636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 248.427797][ T8665] mmap: syz.1.1134 (8665): VmData 37593088 exceed data ulimit 3171. Update limits or use boot option ignore_rlimit_data. [ 250.805876][ T8723] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.895475][ T8781] futex_wake_op: syz.0.1173 tries to shift op by 32; fix this program [ 254.928098][ T8781] 9pnet: Insufficient options for proto=fd [ 255.750467][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756822][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.585006][ T8801] tipc: Cannot configure node identity twice [ 265.488597][ C0] sched: RT throttling activated [ 266.280449][ T8884] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 270.548042][ T8954] overlayfs: failed to clone lowerpath [ 270.583054][ T8955] overlayfs: failed to clone lowerpath [ 271.107939][ T8966] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 289.178644][ T9180] mmap: syz.1.1301 (9180) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 291.094312][ T9233] overlayfs: failed to clone upperpath [ 291.925205][ T9263] x_tables: duplicate underflow at hook 3 [ 293.037866][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 294.395904][ T9327] fuse: Bad value for 'fd' [ 297.137452][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 297.180423][ T9365] device macsec1 entered promiscuous mode [ 297.440318][ T26] audit: type=1107 audit(1785180433.376:69): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 298.507194][ T9389] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 299.338060][ T9436] tipc: Cannot configure node identity twice [ 299.348418][ T9436] tipc: Enabling of bearer rejected, failed to enable media [ 299.615430][ T9447] Illegal XDP return value 4294967274, expect packet loss! [ 305.604171][ T9520] tipc: Cannot configure node identity twice [ 305.619681][ T9520] tipc: Enabling of bearer rejected, failed to enable media [ 310.527051][ T9591] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 314.638594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 314.648604][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 314.658580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 314.668579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 314.678583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 314.688579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 314.698582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 317.194073][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200511][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.301290][ T9652] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 318.320915][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 318.348764][ T9665] net_ratelimit: 7 callbacks suppressed [ 318.348784][ T9665] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 319.404753][ T9702] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 324.249962][ T9784] overlayfs: failed to clone upperpath [ 326.706451][ T9780] overlayfs: failed to clone upperpath [ 328.099117][ T9821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.962967][ T9991] tipc: Enabling of bearer rejected, failed to enable media [ 335.407247][T10010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.816556][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 336.327696][T10085] xt_hashlimit: max too large, truncated to 1048576 [ 336.344963][T10085] No such timeout policy "syz1" [ 336.597327][T10095] tipc: Enabling of bearer rejected, failed to enable media [ 336.717301][T10112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.074686][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 337.315711][T10150] tipc: Enabling of bearer rejected, failed to enable media [ 337.454789][T10153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1579'. [ 337.474244][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1579'. [ 337.487222][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'. [ 337.501699][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'. [ 337.920907][T10172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.767060][T10206] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 338.777100][T10206] netlink: 'syz.4.1597': attribute type 2 has an invalid length. [ 339.276538][T10239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.697357][T10257] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 341.452020][T10327] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 342.228981][T10368] ------------[ cut here ]------------ [ 342.234513][T10368] trace type BPF program uses run-time allocation [ 342.266141][T10368] WARNING: CPU: 1 PID: 10368 at kernel/bpf/verifier.c:11760 check_map_prog_compatibility+0x6cf/0x870 [ 342.313837][T10368] Modules linked in: [ 342.334808][T10368] CPU: 1 PID: 10368 Comm: syz.4.1651 Not tainted syzkaller #0 [ 342.366747][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.385508][T10368] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 342.394240][T10368] Code: ff e8 45 c0 ef ff 48 c7 c6 80 46 31 8a e9 0d fd ff ff e8 34 c0 ef ff c6 05 93 12 ee 0b 01 48 c7 c7 e0 42 31 8a e8 71 e8 2b 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 342.425596][T10368] RSP: 0018:ffffc900034bf470 EFLAGS: 00010246 [ 342.435728][T10368] RAX: 7988915bdb5dca00 RBX: 0000000000000001 RCX: 0000000000080000 [ 342.455897][T10368] RDX: ffffc9000e631000 RSI: 0000000000002c51 RDI: 0000000000002c52 [ 342.474216][T10368] RBP: ffff88802bb08000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 342.492841][T10368] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900011ac038 [ 342.517223][T10368] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000235807 [ 342.552032][T10368] FS: 00007f8289d156c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 342.577423][T10368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.622003][T10368] CR2: 000000110c4204f0 CR3: 000000002eeca000 CR4: 00000000003506f0 [ 342.637812][T10368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.652420][T10368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.663214][T10368] Call Trace: [ 342.666565][T10368] [ 342.673478][T10368] resolve_pseudo_ldimm64+0x616/0xfd0 [ 342.681511][T10368] ? check_attach_btf_id+0xde0/0xde0 [ 342.686870][T10368] ? __mark_reg_known+0x1a0/0x1a0 [ 342.695814][T10368] bpf_check+0x2c3d/0xf6b0 [ 342.702978][T10368] ? mark_lock+0x94/0x320 [ 342.707421][T10368] ? bpf_get_btf_vmlinux+0x10/0x10 [ 342.717017][T10368] ? __lock_acquire+0x13dc/0x7b50 [ 342.725170][T10368] ? verify_lock_unused+0x140/0x140 [ 342.734142][T10368] ? verify_lock_unused+0x140/0x140 [ 342.741999][T10368] ? rcu_lock_release+0x5/0x20 [ 342.746859][T10368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 342.757111][T10368] ? lock_chain_count+0x20/0x20 [ 342.765868][T10368] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 342.775829][T10368] ? lockdep_hardirqs_on+0x94/0x140 [ 342.783720][T10368] ? ktime_get_with_offset+0xff/0x320 [ 342.801682][T10368] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 342.808123][T10368] ? ktime_get_real_ts64+0x440/0x440 [ 342.817211][T10368] ? pcpu_alloc+0x11e6/0x16d0 [ 342.825432][T10368] ? __might_fault+0xb3/0x110 [ 342.834232][T10368] ? memset+0x1e/0x40 [ 342.838297][T10368] ? bpf_obj_name_cpy+0x190/0x1d0 [ 342.846062][T10368] bpf_prog_load+0xfdf/0x14e0 [ 342.854503][T10368] ? map_freeze+0x360/0x360 [ 342.861624][T10368] ? __might_fault+0xb7/0x110 [ 342.866520][T10368] ? __might_fault+0xb3/0x110 [ 342.872932][T10368] ? bpf_lsm_bpf+0x5/0x10 [ 342.877332][T10368] ? security_bpf+0x7a/0xa0 [ 342.882389][T10368] __sys_bpf+0x532/0x6f0 [ 342.886870][T10368] ? bpf_link_show_fdinfo+0x380/0x380 [ 342.892825][T10368] __x64_sys_bpf+0x78/0x90 [ 342.897305][T10368] do_syscall_64+0x4c/0xa0 [ 342.902185][T10368] ? clear_bhb_loop+0x30/0x80 [ 342.906918][T10368] ? clear_bhb_loop+0x30/0x80 [ 342.912096][T10368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.918069][T10368] RIP: 0033:0x7f828babce99 [ 342.922942][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.943768][T10368] RSP: 002b:00007f8289d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.953602][T10368] RAX: ffffffffffffffda RBX: 00007f828bd44fa0 RCX: 00007f828babce99 [ 342.961987][T10368] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 342.971115][T10368] RBP: 00007f828bb52eaf R08: 0000000000000000 R09: 0000000000000000 [ 342.980183][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.988206][T10368] R13: 00007f828bd45038 R14: 00007f828bd44fa0 R15: 00007ffc47a21658 [ 342.996721][T10368] [ 343.006799][T10368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.014144][T10368] CPU: 0 PID: 10368 Comm: syz.4.1651 Not tainted syzkaller #0 [ 343.021826][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.031948][T10368] Call Trace: [ 343.035273][T10368] [ 343.038235][T10368] dump_stack_lvl+0x188/0x250 [ 343.042978][T10368] ? show_regs_print_info+0x20/0x20 [ 343.048235][T10368] ? load_image+0x410/0x410 [ 343.052844][T10368] panic+0x2f8/0x850 [ 343.056841][T10368] ? bpf_jit_dump+0xd0/0xd0 [ 343.061402][T10368] ? check_map_prog_compatibility+0x6cf/0x870 [ 343.067512][T10368] __warn+0x248/0x2b0 [ 343.071527][T10368] ? check_map_prog_compatibility+0x6cf/0x870 [ 343.077626][T10368] report_bug+0x1b9/0x2e0 [ 343.082174][T10368] handle_bug+0x3a/0x70 [ 343.086353][T10368] exc_invalid_op+0x16/0x40 [ 343.090910][T10368] asm_exc_invalid_op+0x16/0x20 [ 343.095782][T10368] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 343.102485][T10368] Code: ff e8 45 c0 ef ff 48 c7 c6 80 46 31 8a e9 0d fd ff ff e8 34 c0 ef ff c6 05 93 12 ee 0b 01 48 c7 c7 e0 42 31 8a e8 71 e8 2b 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 343.122112][T10368] RSP: 0018:ffffc900034bf470 EFLAGS: 00010246 [ 343.128203][T10368] RAX: 7988915bdb5dca00 RBX: 0000000000000001 RCX: 0000000000080000 [ 343.136193][T10368] RDX: ffffc9000e631000 RSI: 0000000000002c51 RDI: 0000000000002c52 [ 343.144189][T10368] RBP: ffff88802bb08000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 343.152186][T10368] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc900011ac038 [ 343.160180][T10368] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000235807 [ 343.168198][T10368] resolve_pseudo_ldimm64+0x616/0xfd0 [ 343.173705][T10368] ? check_attach_btf_id+0xde0/0xde0 [ 343.179024][T10368] ? __mark_reg_known+0x1a0/0x1a0 [ 343.184100][T10368] bpf_check+0x2c3d/0xf6b0 [ 343.188571][T10368] ? mark_lock+0x94/0x320 [ 343.192935][T10368] ? bpf_get_btf_vmlinux+0x10/0x10 [ 343.198080][T10368] ? __lock_acquire+0x13dc/0x7b50 [ 343.203146][T10368] ? verify_lock_unused+0x140/0x140 [ 343.208381][T10368] ? verify_lock_unused+0x140/0x140 [ 343.213605][T10368] ? rcu_lock_release+0x5/0x20 [ 343.218406][T10368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.224416][T10368] ? lock_chain_count+0x20/0x20 [ 343.229392][T10368] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 343.235669][T10368] ? lockdep_hardirqs_on+0x94/0x140 [ 343.240915][T10368] ? ktime_get_with_offset+0xff/0x320 [ 343.246316][T10368] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 343.252576][T10368] ? ktime_get_real_ts64+0x440/0x440 [ 343.257882][T10368] ? pcpu_alloc+0x11e6/0x16d0 [ 343.262580][T10368] ? __might_fault+0xb3/0x110 [ 343.267278][T10368] ? memset+0x1e/0x40 [ 343.271278][T10368] ? bpf_obj_name_cpy+0x190/0x1d0 [ 343.276322][T10368] bpf_prog_load+0xfdf/0x14e0 [ 343.281023][T10368] ? map_freeze+0x360/0x360 [ 343.285542][T10368] ? __might_fault+0xb7/0x110 [ 343.290241][T10368] ? __might_fault+0xb3/0x110 [ 343.294936][T10368] ? bpf_lsm_bpf+0x5/0x10 [ 343.299549][T10368] ? security_bpf+0x7a/0xa0 [ 343.304078][T10368] __sys_bpf+0x532/0x6f0 [ 343.308349][T10368] ? bpf_link_show_fdinfo+0x380/0x380 [ 343.313782][T10368] __x64_sys_bpf+0x78/0x90 [ 343.318224][T10368] do_syscall_64+0x4c/0xa0 [ 343.322657][T10368] ? clear_bhb_loop+0x30/0x80 [ 343.327356][T10368] ? clear_bhb_loop+0x30/0x80 [ 343.332057][T10368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.338003][T10368] RIP: 0033:0x7f828babce99 [ 343.342440][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.362151][T10368] RSP: 002b:00007f8289d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.370590][T10368] RAX: ffffffffffffffda RBX: 00007f828bd44fa0 RCX: 00007f828babce99 [ 343.378582][T10368] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 343.386577][T10368] RBP: 00007f828bb52eaf R08: 0000000000000000 R09: 0000000000000000 [ 343.394564][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.402553][T10368] R13: 00007f828bd45038 R14: 00007f828bd44fa0 R15: 00007ffc47a21658 [ 343.410556][T10368] [ 343.413707][T10368] Kernel Offset: disabled [ 343.418058][T10368] Rebooting in 86400 seconds..