last executing test programs: 2m25.300129774s ago: executing program 3 (id=224): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0x4f, 0x3, 0xbb, 0x80, 0x6, 0xfe, 0x8, 0x8, 0xa, 0x1}, {0xb, 0xa6f2, 0x6, 0x48, 0x9, 0xfb, 0x44, 0x87, 0xe, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fe, 0x7, 0x40, 0x21, 0x25, 0x6, 0x1, 0x6, 0x3, 0xf, 0x0, 0x2, 0x80000000004}], 0x2}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff0200000000000000"], 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 2m24.748765197s ago: executing program 3 (id=228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dc94992ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4", 0x1b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m24.567012591s ago: executing program 3 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2m24.433621935s ago: executing program 1 (id=232): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchownat(r2, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff4, 0x238d117e43691579, 0x4, 0x3, 0x86, 0x1, 0xc00, 0x0, 0x20, 0xffd}}, 0x50) 2m24.103752983s ago: executing program 3 (id=235): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m23.501474377s ago: executing program 3 (id=239): close(0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="06"], 0x0) 2m23.290445152s ago: executing program 1 (id=240): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 2m23.021797199s ago: executing program 1 (id=241): semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3) io_setup(0x2, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d1e000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2d}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x348}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m22.739811476s ago: executing program 3 (id=243): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810c70b0001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m22.233598258s ago: executing program 32 (id=243): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810c70b0001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m22.12501146s ago: executing program 1 (id=247): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0xa}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@errors_continue}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m21.437733437s ago: executing program 1 (id=250): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="41cd", 0x2}], 0x1}}], 0x1, 0x20008000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0) 2m19.496040534s ago: executing program 1 (id=259): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") dup(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x9, 0x7b, 0x4, 0x10000, 0x5, 0x6}}}, 0x60) 2m18.759522741s ago: executing program 33 (id=259): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") dup(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x9, 0x7b, 0x4, 0x10000, 0x5, 0x6}}}, 0x60) 1m59.223937823s ago: executing program 0 (id=308): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) msgget$private(0x0, 0x355) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 1m58.758513374s ago: executing program 0 (id=309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0xffffffffffffffc0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x167}]}]}, 0xfc}}, 0x84) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1m58.309778525s ago: executing program 0 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m57.6877626s ago: executing program 0 (id=312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 1m56.740058353s ago: executing program 0 (id=315): iopl(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8000200003) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 1m54.692091752s ago: executing program 0 (id=323): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x20000000, 0x0) setpriority(0x0, r0, 0x2) 1m53.391574133s ago: executing program 34 (id=323): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x20000000, 0x0) setpriority(0x0, r0, 0x2) 1m18.962020404s ago: executing program 5 (id=453): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) rseq(&(0x7f0000001080), 0x20, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6a73, &(0x7f0000000600)) 1m18.524606165s ago: executing program 5 (id=456): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x46400, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000a00)}, 0x20) 1m18.173002513s ago: executing program 5 (id=457): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000010) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x745, 0x10000b, 0x1, 0x20, 0x16, 0x5, 0x9}}, 0x138) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m17.553514389s ago: executing program 5 (id=462): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rmdir(&(0x7f00000001c0)='./file0\x00') 1m15.914830228s ago: executing program 5 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bf8000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.311864125s ago: executing program 5 (id=473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}], 0x1, 0x6085094) ppoll(&(0x7f00000000c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 1m11.573283353s ago: executing program 35 (id=473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}], 0x1, 0x6085094) ppoll(&(0x7f00000000c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 4.794006894s ago: executing program 7 (id=840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 4.652172828s ago: executing program 7 (id=842): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001400)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.404436283s ago: executing program 7 (id=845): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) 4.184946929s ago: executing program 7 (id=848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3.226540082s ago: executing program 7 (id=855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}}, 0x0, 0x32, 0x0, 0x8}, 0x28) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.700401269s ago: executing program 4 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x18b) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x2060028, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) rmdir(&(0x7f0000000000)='./file0/file1\x00') 1.65593148s ago: executing program 6 (id=873): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r0, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) 1.469816534s ago: executing program 6 (id=874): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$bpf(0x0, 0x0, 0x0, 0x834, &(0x7f0000000240)=ANY=[@ANYRESOCT]) mount$9p_fd(0x0, 0x0, 0x0, 0x91412, &(0x7f0000000200)=ANY=[@ANYBLOB='tran', @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c616e616d653d62c58c09d6cb19a2712c76657273696f6e3d3970323030302c63616368653d"]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x14000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.408531856s ago: executing program 4 (id=876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bf00", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 1.25700451s ago: executing program 4 (id=877): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, &(0x7f0000000000)) 1.243479659s ago: executing program 6 (id=878): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000240)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 1.166797592s ago: executing program 4 (id=879): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200058, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="8f885045210635adb7e6436894228db3ca307a6a34ed8bcac81952ee0bd544cd75dfb41348803558a5fce3ce459f0520b79b93828d78bdefc834dd46e379d43441d36a2175580482bac07e9f8e36e0c0ed7665883da3c4307fcec811da2a770ebeb360ee9f7feab5696ff3736fc5d0299fd2f93ce9c0f30bd2f5c5c3efe112e0b6f4968d88ad0095457ca2847daf624d643e11daf40e9e8953f2eda4e319da17d99f30c215919c5ffed73a4a908ea9829108fc04e3666f7cf793825539f06254d0cad1dc084027bc029ba42e450b3592f440145b3b4b12f076472702", @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX], 0x2, 0x1d9, &(0x7f0000000440)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.001359225s ago: executing program 6 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ea"], 0x3c}}, 0x20004000) 895.220638ms ago: executing program 4 (id=881): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000002640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000002c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 829.182809ms ago: executing program 6 (id=882): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x31) 765.058371ms ago: executing program 4 (id=883): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, 0x0, 0x0) 679.999413ms ago: executing program 2 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 677.105643ms ago: executing program 6 (id=885): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f0000af3000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 591.445315ms ago: executing program 2 (id=886): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, 0x0, r2, 0x5, 0x4, 0x9}) 516.583067ms ago: executing program 2 (id=887): r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) 340.015181ms ago: executing program 2 (id=888): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 296.158313ms ago: executing program 2 (id=889): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 159.864236ms ago: executing program 2 (id=890): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb8609cd3cef6af0ce8a00dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 7 (id=891): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = syz_io_uring_setup(0x63, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 05.806701][ T6115] bridge0: port 3(erspan0) entered forwarding state [ 105.827272][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.889953][ T6117] erspan0: left allmulticast mode [ 105.932639][ T6117] erspan0: left promiscuous mode [ 105.939059][ T6117] bridge0: port 3(erspan0) entered disabled state [ 106.152559][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.256962][ T6123] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET) [ 106.503502][ T6126] loop3: detected capacity change from 0 to 1024 [ 106.514184][ T6126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.628241][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.708662][ T6126] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.995216][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 107.008568][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.147267][ T6136] loop0: detected capacity change from 0 to 32768 [ 108.211429][ T6136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.107 (6136) [ 108.277629][ T6156] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 108.370558][ T6136] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.414250][ T6136] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.465169][ T6136] BTRFS info (device loop0): setting nodatacow, compression disabled [ 108.493224][ T6136] BTRFS info (device loop0): disabling tree log [ 108.517102][ T6136] BTRFS info (device loop0): max_inline at 0 [ 108.535578][ T6136] BTRFS info (device loop0): using free space tree [ 108.684448][ T6136] BTRFS info (device loop0): auto enabling async discard [ 109.456313][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.528102][ T6182] loop2: detected capacity change from 0 to 1024 [ 109.792963][ T6184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.903497][ T6184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.995529][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 110.676157][ T6196] "syz.3.126" (6196) uses obsolete ecb(arc4) skcipher [ 110.729945][ T6196] trusted_key: syz.3.126 sent an empty control message without MSG_MORE. [ 110.772360][ T6198] loop2: detected capacity change from 0 to 64 [ 111.331425][ T5845] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.477943][ T6210] loop8: detected capacity change from 0 to 8 [ 111.529885][ T6210] Dev loop8: unable to read RDB block 8 [ 111.550531][ T6210] loop8: unable to read partition table [ 111.556866][ T6210] loop8: partition table beyond EOD, truncated [ 111.574324][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.607710][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.648467][ T5845] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.663694][ T6210] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 111.691478][ T5845] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.752221][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.775708][ T5845] usb 1-1: config 0 descriptor?? [ 112.254889][ T5845] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 112.306388][ T5845] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 112.410315][ T5845] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.631255][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.704047][ T5845] usb 1-1: USB disconnect, device number 3 [ 112.876396][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.929314][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.977654][ T8] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 112.989092][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.999071][ T8] usb 4-1: Product: syz [ 113.004334][ T8] usb 4-1: Manufacturer: syz [ 113.010122][ T8] usb 4-1: SerialNumber: syz [ 113.363479][ T8] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 113.386335][ T6220] loop1: detected capacity change from 0 to 40427 [ 113.437159][ T6220] F2FS-fs (loop1): invalid crc value [ 113.469360][ T6220] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.742634][ T6220] F2FS-fs (loop1): Start checkpoint disabled! [ 113.817626][ T6220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 113.928284][ T9] usb 4-1: USB disconnect, device number 2 [ 113.985730][ T9] usblp0: removed [ 114.611675][ T6236] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 114.730171][ T11] kworker/u4:0: attempt to access beyond end of device [ 114.730171][ T11] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 114.781165][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 114.800393][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 114.808619][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 115.546996][ T6249] Console: switching to colour VGA+ 80x25 [ 116.312084][ T6261] loop0: detected capacity change from 0 to 256 [ 116.436274][ T6263] loop1: detected capacity change from 0 to 2048 [ 116.538122][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.655187][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.637223][ T6299] loop5: detected capacity change from 0 to 7 [ 118.670996][ T6299] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 118.676486][ T6299] loop5: partition table partially beyond EOD, truncated [ 118.721265][ T6299] loop5: p1 size 1042712361 extends beyond EOD, truncated [ 119.105847][ T6234] udevd[6234]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 119.485825][ T6309] loop3: detected capacity change from 0 to 128 [ 119.611246][ T6309] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.721675][ T6309] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.262563][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.556106][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.241867][ T5845] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.485303][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.510908][ T5845] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.538296][ T5845] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 121.584627][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.674445][ T6350] loop3: detected capacity change from 0 to 128 [ 121.713245][ T6350] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.730737][ T6350] hpfs: filesystem error: improperly stopped [ 121.738390][ T6350] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 121.748125][ T6350] hpfs: You really don't want any checks? You are crazy... [ 121.757168][ T6350] hpfs: Code page index out of array [ 121.776054][ T6350] hpfs: code page support is disabled [ 121.801064][ T6350] hpfs: hpfs_map_4sectors(): unaligned read [ 121.817288][ T6350] hpfs: hpfs_map_4sectors(): unaligned read [ 121.827598][ T6350] hpfs: filesystem error: unable to find root dir [ 122.281189][ T6358] loop0: detected capacity change from 0 to 256 [ 122.318518][ T6358] FAT-fs (loop0): bogus sectors per cluster 0 [ 122.356301][ T6358] FAT-fs (loop0): Can't find a valid FAT filesystem [ 122.422032][ T6361] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 122.480682][ T5845] gud 2-1:1.0: Failed to get connectors (error=-5) [ 122.510159][ T5845] gud: probe of 2-1:1.0 failed with error -5 [ 122.576283][ T6362] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 122.741960][ T27] usb 2-1: USB disconnect, device number 4 [ 123.531170][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.542172][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.553286][ T6382] batadv_slave_0: entered promiscuous mode [ 123.559176][ T6382] batadv_slave_0: entered allmulticast mode [ 123.761009][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 123.790832][ T55] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 123.802690][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.812971][ T55] usb 3-1: Product: syz [ 123.828581][ T55] usb 3-1: Manufacturer: syz [ 123.838769][ T55] usb 3-1: SerialNumber: syz [ 123.859181][ T55] usb 3-1: config 0 descriptor?? [ 123.884384][ T55] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.425178][ T6390] block nbd0: Unsupported socket: should be TCP or UNIX. [ 125.148446][ T55] gspca_ov534_9: reg_w failed -71 [ 125.284778][ T27] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.353172][ T27] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.560481][ T55] gspca_ov534_9: Unknown sensor 0000 [ 125.560809][ T55] ov534_9: probe of 3-1:0.0 failed with error -22 [ 125.598106][ T55] usb 3-1: USB disconnect, device number 3 [ 126.283570][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.470509][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 126.485647][ T55] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 126.498073][ T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.510534][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.524216][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.537692][ T55] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.565381][ T55] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.576339][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.862817][ T55] usb 3-1: usb_control_msg returned -32 [ 126.876320][ T55] usbtmc 3-1:16.0: can't read capabilities [ 127.520314][ T5905] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 127.732618][ T6438] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 127.733872][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.767427][ T5905] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 127.796870][ T5905] usb 1-1: config 100 has no interface number 0 [ 127.814797][ T5905] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 127.845365][ T5905] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 127.878087][ T5905] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 127.920495][ T5905] usb 1-1: config 100 interface 173 has no altsetting 0 [ 127.938535][ T55] usb 3-1: USB disconnect, device number 4 [ 127.940679][ T5905] usb 1-1: string descriptor 0 read error: -22 [ 127.973024][ T5905] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 127.997006][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.038304][ T6429] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.067727][ T6429] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.115316][ T5905] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 128.167676][ T5905] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 128.461388][ T6429] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 128.475219][ C0] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 128.506573][ T5905] usb 1-1: USB disconnect, device number 4 [ 128.551108][ T5905] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 128.599480][ T5905] metro_usb 1-1:100.173: device disconnected [ 129.706870][ T6477] loop3: detected capacity change from 0 to 128 [ 129.824740][ T6477] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.860003][ T6483] loop0: detected capacity change from 0 to 1024 [ 129.868334][ T6483] EXT4-fs: Ignoring removed orlov option [ 129.926657][ T6477] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.938634][ T6483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.426257][ T6452] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.758229][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.714237][ T6503] loop1: detected capacity change from 0 to 512 [ 131.803877][ T6503] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 131.829442][ T6503] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.247: corrupted in-inode xattr: e_value size too large [ 131.883379][ T6503] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.247: couldn't read orphan inode 15 (err -117) [ 131.936848][ T6503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.215396][ T5778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 132.338439][ T5778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 132.411339][ T5778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 132.485001][ T5778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 132.552246][ T5778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 132.612238][ T5778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 132.667938][ T5778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 132.714656][ T5778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 132.785471][ T5778] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 132.824152][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.837495][ T5778] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 132.863356][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.901867][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.912425][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.923342][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.932186][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.164501][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.179447][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.574170][ T6527] loop2: detected capacity change from 0 to 1024 [ 133.629876][ T6527] EXT4-fs: inline encryption not supported [ 133.682304][ T6527] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 133.743337][ T6527] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 133.781210][ T6527] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.810962][ T6527] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 133.909791][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 133.985846][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.186330][ T3434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.538638][ T3434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.604308][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.618740][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.636027][ T6517] bridge_slave_0: entered allmulticast mode [ 134.647499][ T6517] bridge_slave_0: entered promiscuous mode [ 134.702859][ T3434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.722190][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.751532][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.758842][ T6517] bridge_slave_1: entered allmulticast mode [ 134.798934][ T6517] bridge_slave_1: entered promiscuous mode [ 134.857070][ T3434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.980744][ T5085] Bluetooth: hci2: command tx timeout [ 135.005039][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.042257][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.181910][ T6517] team0: Port device team_slave_0 added [ 135.217405][ T6517] team0: Port device team_slave_1 added [ 135.446620][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.480503][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.513032][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.556949][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.603365][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.635795][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.963878][ T6517] hsr_slave_0: entered promiscuous mode [ 135.978984][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.999730][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.012909][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.027935][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.036576][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.047577][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.064031][ T6517] hsr_slave_1: entered promiscuous mode [ 136.071259][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.078933][ T6517] Cannot create hsr debugfs directory [ 136.362011][ T28] audit: type=1326 audit(1786312853.078:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe02df9e0d9 code=0x0 [ 137.060636][ T5085] Bluetooth: hci2: command tx timeout [ 138.115948][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.181129][ T5085] Bluetooth: hci3: command tx timeout [ 138.269938][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.291024][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.456639][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.938533][ T3434] hsr_slave_0: left promiscuous mode [ 138.968031][ T3434] hsr_slave_1: left promiscuous mode [ 138.975577][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.063826][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.088571][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.119695][ T3434] bridge_slave_1: left allmulticast mode [ 139.125848][ T3434] bridge_slave_1: left promiscuous mode [ 139.141586][ T5085] Bluetooth: hci2: command tx timeout [ 139.158559][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.241545][ T3434] bridge_slave_0: left allmulticast mode [ 139.260424][ T3434] bridge_slave_0: left promiscuous mode [ 139.266295][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.473945][ T3434] veth1_macvtap: left promiscuous mode [ 139.490121][ T3434] veth1_vlan: left promiscuous mode [ 139.506178][ T3434] veth0_vlan: left promiscuous mode [ 140.270346][ T5085] Bluetooth: hci3: command tx timeout [ 140.541251][ T6623] loop2: detected capacity change from 0 to 2048 [ 140.656268][ T6623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.132629][ T6630] input: syz1 as /devices/virtual/input/input6 [ 141.220776][ T5085] Bluetooth: hci2: command tx timeout [ 141.620614][ T5905] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.825959][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 141.852166][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.865273][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.887174][ T5905] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.898087][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.933594][ T5905] usb 1-1: config 0 descriptor?? [ 141.959928][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 142.037000][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.117726][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.340657][ T5085] Bluetooth: hci3: command tx timeout [ 142.372696][ T5905] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 142.380105][ T5905] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 142.444950][ T5905] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input7 [ 142.526266][ T28] audit: type=1326 audit(1786312859.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe02df9e0d9 code=0x0 [ 142.565074][ T5905] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 142.650884][ T5905] usb 1-1: USB disconnect, device number 5 [ 142.847366][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.137680][ T3434] bond0 (unregistering): Released all slaves [ 143.408271][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 143.497434][ T6643] xt_hashlimit: size too large, truncated to 1048576 [ 143.739642][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.091777][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.098994][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.169565][ T6553] bridge_slave_0: entered allmulticast mode [ 144.214107][ T6553] bridge_slave_0: entered promiscuous mode [ 144.269622][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.313307][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.358963][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.381854][ T6553] bridge_slave_1: entered allmulticast mode [ 144.393762][ T6657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.420772][ T5085] Bluetooth: hci3: command tx timeout [ 144.423703][ T6553] bridge_slave_1: entered promiscuous mode [ 144.634271][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.713215][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.742431][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.749770][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.832849][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.840103][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.026101][ T6553] team0: Port device team_slave_0 added [ 145.064637][ T28] audit: type=1326 audit(1786312861.778:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.096534][ T6553] team0: Port device team_slave_1 added [ 145.180304][ T28] audit: type=1326 audit(1786312861.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.335530][ T28] audit: type=1326 audit(1786312861.788:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.434404][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.468460][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.504390][ T28] audit: type=1326 audit(1786312861.788:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.563161][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.576868][ T28] audit: type=1326 audit(1786312861.808:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.645506][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.668795][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.696971][ T28] audit: type=1326 audit(1786312861.808:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.777708][ T28] audit: type=1326 audit(1786312861.818:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 145.812367][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.898089][ T28] audit: type=1326 audit(1786312861.818:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 146.029041][ T28] audit: type=1326 audit(1786312861.818:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02df9e0d9 code=0x7ffc0000 [ 146.177333][ T6553] hsr_slave_0: entered promiscuous mode [ 146.211467][ T6553] hsr_slave_1: entered promiscuous mode [ 147.029626][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.229777][ T6553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.264531][ T6553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.317847][ T6553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.374617][ T6553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.889961][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.980172][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.086308][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.093553][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.189912][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.197175][ T3260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.721911][ T6517] veth0_vlan: entered promiscuous mode [ 148.818755][ T6517] veth1_vlan: entered promiscuous mode [ 149.097799][ T6517] veth0_macvtap: entered promiscuous mode [ 149.335906][ T6517] veth1_macvtap: entered promiscuous mode [ 149.503349][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.580446][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.620589][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.648786][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.701709][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.760305][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.796289][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.854404][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.946174][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.958133][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.972054][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.010444][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.049074][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.064176][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.096617][ T6517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.116277][ T6517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.127366][ T6517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.138703][ T6517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.473986][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.810548][ T5820] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.862165][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.895798][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.010828][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 151.023579][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.070589][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.113323][ T5820] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.124869][ T3260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.158393][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.172473][ T3260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.228386][ T5820] usb 3-1: config 0 descriptor?? [ 151.252701][ T5820] hub 3-1:0.0: USB hub found [ 151.374749][ T6732] loop0: detected capacity change from 0 to 2048 [ 151.516173][ T5820] hub 3-1:0.0: 1 port detected [ 151.543793][ T6732] loop0: p2 < > p4 [ 151.587908][ T6732] loop0: p4 size 262144 extends beyond EOD, truncated [ 152.204277][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.250648][ T790] hub 3-1:0.0: activate --> -90 [ 152.276874][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.386445][ T6553] veth0_vlan: entered promiscuous mode [ 152.499202][ T6553] veth1_vlan: entered promiscuous mode [ 152.621506][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.646646][ T6553] veth0_macvtap: entered promiscuous mode [ 152.653592][ T790] usb 3-1-port1: config error [ 152.659140][ T23] usb 3-1: USB disconnect, device number 5 [ 152.677478][ T6553] veth1_macvtap: entered promiscuous mode [ 152.738443][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.761628][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.808120][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.819478][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.837375][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.847918][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.868715][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.879348][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.896402][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.915156][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.941365][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.959062][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.993602][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.022437][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.062405][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.070804][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 153.085865][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.110587][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 153.130376][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.150534][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 153.174317][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 153.180352][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.198013][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.213903][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 153.217970][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.257719][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 153.292498][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.295335][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.344666][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.350967][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.410353][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 153.427897][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.492447][ T6553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.520329][ T6553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.531634][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 153.540889][ T6553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.540976][ T6553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.683608][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.762622][ T8] usb 5-1: Product: syz [ 153.767661][ T8] usb 5-1: Manufacturer: syz [ 153.780783][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.791678][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.820616][ T8] usb 5-1: SerialNumber: syz [ 153.867203][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.891220][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.899832][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.940907][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.948374][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.990854][ T3260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.998755][ T3260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.010424][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.017784][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.066033][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.087035][ T8] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 154.099449][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 154.110978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.133303][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 154.159061][ T8] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 154.178787][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 154.189641][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 154.199687][ T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 154.226681][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.255630][ T8] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 154.265356][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.673303][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.783432][ T6770] loop5: detected capacity change from 0 to 8 [ 154.826128][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.904912][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.023350][ T6770] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.071020][ T5820] usb 5-1: USB disconnect, device number 2 [ 155.096999][ T6770] SQUASHFS error: Failed to read block 0x13e: -5 [ 155.139369][ T6770] SQUASHFS error: Unable to read metadata cache entry [13c] [ 155.169140][ T5820] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 155.207192][ T6770] SQUASHFS error: Unable to read directory block [13c:26] [ 155.243269][ T5820] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 155.287766][ T6774] SQUASHFS error: Unable to read metadata cache entry [13c] [ 155.305490][ T5820] keyspan 5-1:1.0: device disconnected [ 155.366276][ T6774] SQUASHFS error: Unable to read directory block [13c:26] [ 156.217679][ T6792] loop0: detected capacity change from 0 to 1024 [ 156.265219][ T6762] loop2: detected capacity change from 0 to 40427 [ 156.322194][ T6792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.412093][ T6762] F2FS-fs (loop2): invalid crc value [ 156.501701][ T6762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.902123][ T6762] F2FS-fs (loop2): Start checkpoint disabled! [ 156.957764][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.033091][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.203861][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.261394][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.321785][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.397681][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.464369][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.520637][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.588050][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.645714][ T5774] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 157.941568][ T27] net_ratelimit: 4 callbacks suppressed [ 157.941586][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.769085][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.985675][ T6800] loop4: detected capacity change from 0 to 40427 [ 159.002176][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.082682][ T6832] loop5: detected capacity change from 0 to 128 [ 159.155179][ T6800] F2FS-fs (loop4): invalid crc value [ 159.206217][ T6832] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 159.257096][ T6800] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.330704][ T6832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.446793][ T3434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.520948][ T6839] netlink: 'syz.2.324': attribute type 6 has an invalid length. [ 159.935422][ T3434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.023817][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.152995][ T3434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.181270][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.418583][ T3434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.061355][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.179083][ T6855] loop4: detected capacity change from 0 to 128 [ 161.321285][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.334120][ T6855] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 161.401529][ T6855] hpfs: filesystem error: improperly stopped [ 161.407611][ T6855] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 161.501942][ T6855] hpfs: You really don't want any checks? You are crazy... [ 161.509230][ T6855] hpfs: Code page index out of array [ 161.557069][ T6855] hpfs: code page support is disabled [ 161.587443][ T6855] hpfs: hpfs_map_4sectors(): unaligned read [ 161.629542][ T6855] hpfs: hpfs_map_4sectors(): unaligned read [ 161.671260][ T6855] hpfs: filesystem error: unable to find root dir [ 161.948614][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.100578][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.113886][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.125086][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.134787][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.143177][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.151203][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.158736][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.630413][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.828700][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.860535][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.897063][ T5820] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.930387][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.970176][ T5820] usb 5-1: SerialNumber: syz [ 163.141071][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.221486][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.257372][ T5820] usb 5-1: 0:2 : does not exist [ 163.292327][ T5820] usb 5-1: unit 48 not found! [ 163.490759][ T5820] usb 5-1: USB disconnect, device number 3 [ 163.753885][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.860504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.874084][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.045716][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 164.181278][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.260793][ T51] Bluetooth: hci0: command tx timeout [ 164.515274][ T3434] hsr_slave_0: left promiscuous mode [ 164.572087][ T3434] hsr_slave_1: left promiscuous mode [ 164.599917][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.640583][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.692812][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.720569][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.762912][ T3434] bridge_slave_1: left allmulticast mode [ 164.769795][ T3434] bridge_slave_1: left promiscuous mode [ 164.801573][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.825400][ T3434] bridge_slave_0: left allmulticast mode [ 164.870318][ T3434] bridge_slave_0: left promiscuous mode [ 164.901184][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.981051][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.115424][ T6887] loop2: detected capacity change from 0 to 32768 [ 165.131518][ T3434] veth1_macvtap: left promiscuous mode [ 165.150722][ T3434] veth0_macvtap: left promiscuous mode [ 165.157838][ T3434] veth1_vlan: left promiscuous mode [ 165.214208][ T3434] veth0_vlan: left promiscuous mode [ 165.222917][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.405058][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 165.405072][ T28] audit: type=1800 audit(1786312882.128:34): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.334" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 166.270983][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.341473][ T51] Bluetooth: hci0: command tx timeout [ 166.614207][ T6905] loop2: detected capacity change from 0 to 512 [ 166.632928][ T6905] EXT4-fs: Ignoring removed bh option [ 166.806318][ T6905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.833028][ T6905] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.913335][ T6905] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.339: path /105/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 167.009153][ T6905] EXT4-fs (loop2): Remounting filesystem read-only [ 167.156642][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.301145][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.031310][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.167864][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 168.351496][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.407213][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 168.420447][ T51] Bluetooth: hci0: command tx timeout [ 168.518288][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.597299][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.134702][ T3434] bond0 (unregistering): Released all slaves [ 169.390367][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.706305][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.714971][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.723727][ T6860] bridge_slave_0: entered allmulticast mode [ 169.732947][ T6860] bridge_slave_0: entered promiscuous mode [ 169.754051][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.801731][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.810622][ T6860] bridge_slave_1: entered allmulticast mode [ 169.822334][ T6860] bridge_slave_1: entered promiscuous mode [ 169.994338][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.081838][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.356715][ T6943] loop2: detected capacity change from 0 to 32768 [ 170.368239][ T6943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.350 (6943) [ 170.418186][ T6943] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.428710][ T6943] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 170.437578][ T6943] BTRFS info (device loop2): using free space tree [ 170.445516][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.513035][ T51] Bluetooth: hci0: command tx timeout [ 170.537259][ T28] audit: type=1326 audit(1786312887.248:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.5.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a9f99e0d9 code=0x0 [ 170.610164][ T6943] BTRFS info (device loop2): enabling ssd optimizations [ 170.619220][ T6943] BTRFS info (device loop2): auto enabling async discard [ 170.676751][ T6860] team0: Port device team_slave_0 added [ 170.746761][ T6860] team0: Port device team_slave_1 added [ 171.024989][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.054552][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.062654][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.126350][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.146987][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.231946][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.239043][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.424676][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.461019][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.827724][ T6860] hsr_slave_0: entered promiscuous mode [ 171.852335][ T6860] hsr_slave_1: entered promiscuous mode [ 171.919448][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.951990][ T6860] Cannot create hsr debugfs directory [ 172.181792][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.196257][ T6990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.500936][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.140789][ T6860] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.207411][ T6860] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.266850][ T6860] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.327700][ T6860] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.463076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.541004][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.813114][ T7011] "syz.5.365" (7011) uses obsolete ecb(arc4) skcipher [ 173.848878][ T7013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.880658][ T7013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.889235][ T7013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.981632][ T7013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.990103][ T7013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.017297][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.056935][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.113410][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.146534][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.245416][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.252681][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.334130][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.341378][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.570439][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.592434][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.733784][ T7023] loop2: detected capacity change from 0 to 4096 [ 174.786182][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.831476][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.878694][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.896942][ T7023] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.915922][ T5838] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.947479][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.019539][ T5838] usb 6-1: config 0 descriptor?? [ 175.589657][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 175.648183][ T5838] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 175.676307][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.732952][ T5838] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 176.076909][ T27] usb 6-1: USB disconnect, device number 2 [ 176.235198][ T7041] fido_id[7041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 176.967629][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 176.993826][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 177.047336][ T7062] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.056818][ T7062] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.066105][ T7062] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.074978][ T7062] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.164523][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 177.198507][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 177.406654][ T6860] veth0_vlan: entered promiscuous mode [ 177.447484][ T6860] veth1_vlan: entered promiscuous mode [ 177.630144][ T6860] veth0_macvtap: entered promiscuous mode [ 177.669750][ T6860] veth1_macvtap: entered promiscuous mode [ 177.801535][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.847471][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.913781][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.961558][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.988187][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.062172][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.123721][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.187169][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.271799][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.359529][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.430763][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.480261][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.571123][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.631091][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.673227][ T7092] loop4: detected capacity change from 0 to 512 [ 178.679895][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.709503][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.743191][ T27] net_ratelimit: 18 callbacks suppressed [ 178.743217][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.770809][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.812956][ T7092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.849305][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.879656][ T7092] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.895107][ T6860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.904711][ T6860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.913912][ T6860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.923370][ T6860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.220634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.782041][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.837235][ T6517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.893787][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.189850][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.236827][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.340920][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.440893][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.448796][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.510794][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.832611][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.863023][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.215210][ T7144] loop5: detected capacity change from 0 to 256 [ 182.324844][ T7144] Bluetooth: MGMT ver 1.22 [ 182.357385][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 182.909314][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.202538][ T7136] loop2: detected capacity change from 0 to 32768 [ 183.214771][ T7157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.314137][ T7136] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.905330][ T7155] net_ratelimit: 4 callbacks suppressed [ 183.905366][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.928606][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.939138][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.950841][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.032230][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 184.982498][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.296983][ T7199] loop2: detected capacity change from 0 to 128 [ 185.389673][ T5819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.409666][ T7199] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.454367][ T7199] hpfs: filesystem error: improperly stopped [ 185.486163][ T7199] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.536952][ T7199] hpfs: You really don't want any checks? You are crazy... [ 185.577371][ T7199] hpfs: Code page index out of array [ 185.595410][ T7199] hpfs: code page support is disabled [ 185.615881][ T7199] hpfs: hpfs_map_4sectors(): unaligned read [ 185.635144][ T5819] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 185.660382][ T5819] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 185.663192][ T7199] hpfs: hpfs_map_4sectors(): unaligned read [ 185.676321][ T7199] hpfs: filesystem error: unable to find root dir [ 185.731355][ T6725] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.760521][ T5819] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.802236][ T5819] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 185.815522][ T5819] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 185.866235][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.934056][ T6725] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.953211][ T7193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.986651][ T6725] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 186.000504][ T7193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.007858][ T7193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.020864][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.056569][ T6725] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 186.069185][ T7193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.078816][ T6725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.110016][ T6725] usb 5-1: Product: syz [ 186.140020][ T5819] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 186.149366][ T6725] usb 5-1: Manufacturer: syz [ 186.160300][ T6725] usb 5-1: SerialNumber: syz [ 186.287826][ T7209] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 186.349836][ T7173] loop6: detected capacity change from 0 to 40427 [ 186.370386][ T7209] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 186.418747][ T7173] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 186.434081][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.483412][ T7173] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 186.502870][ T7211] loop2: detected capacity change from 0 to 512 [ 186.531341][ T7173] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 186.539671][ T7211] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.555420][ T6725] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 186.597183][ T7211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.613963][ T7173] F2FS-fs (loop6): Found nat_bits in checkpoint [ 186.692342][ T7211] EXT4-fs (loop2): 1 truncate cleaned up [ 186.707483][ T6725] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 186.716076][ T6725] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 186.735380][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.018983][ T7173] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 187.046034][ T7173] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 187.061588][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.125864][ T6725] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 187.153305][ T6725] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 187.287257][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.324868][ T6725] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 187.446635][ T6725] usb 5-1: USB disconnect, device number 4 [ 187.554264][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.693989][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.721089][ T8] usb 6-1: USB disconnect, device number 3 [ 188.050805][ T7231] Bluetooth: MGMT ver 1.22 [ 188.068888][ T7231] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 188.101022][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.941634][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 188.953179][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 188.960628][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.970733][ T51] Workqueue: hci2 hci_rx_work [ 188.975500][ T51] Call Trace: [ 188.978832][ T51] [ 188.981815][ T51] dump_stack_lvl+0x18c/0x250 [ 188.986576][ T51] ? show_regs_print_info+0x20/0x20 [ 188.991840][ T51] ? load_image+0x420/0x420 [ 188.996433][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 189.001607][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 189.006710][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 189.011454][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 189.016717][ T51] kobject_add_internal+0x617/0xc90 [ 189.021995][ T51] kobject_add+0x164/0x240 [ 189.026483][ T51] ? kobject_init+0x1d0/0x1d0 [ 189.031224][ T51] ? get_device_parent+0x366/0x390 [ 189.036408][ T51] device_add+0x3fa/0xc40 [ 189.040807][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 189.045812][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 189.051186][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 189.057496][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 189.063206][ T51] ? mutex_unlock+0x10/0x10 [ 189.067766][ T51] ? skb_pull_data+0xf0/0x1f0 [ 189.072505][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 189.078114][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 189.084263][ T51] hci_event_packet+0x7b4/0x1280 [ 189.089255][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 189.094368][ T51] ? lock_chain_count+0x20/0x20 [ 189.099262][ T51] ? bis_list+0x290/0x290 [ 189.103643][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 189.108911][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 189.114159][ T51] hci_rx_work+0x43a/0xd60 [ 189.118629][ T51] ? process_scheduled_works+0x975/0x1600 [ 189.124401][ T51] process_scheduled_works+0xa60/0x1600 [ 189.130016][ T51] ? worker_attach_to_pool+0x370/0x370 [ 189.135559][ T51] ? assign_work+0x3cc/0x5d0 [ 189.140212][ T51] worker_thread+0xa5e/0xfe0 [ 189.144887][ T51] kthread+0x2fa/0x390 [ 189.149001][ T51] ? pr_cont_work+0x550/0x550 [ 189.153735][ T51] ? kthread_blkcg+0xd0/0xd0 [ 189.158367][ T51] ret_from_fork+0x48/0x80 [ 189.162824][ T51] ? kthread_blkcg+0xd0/0xd0 [ 189.167443][ T51] ret_from_fork_asm+0x11/0x20 [ 189.172254][ T51] [ 189.182981][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.200474][ T51] Bluetooth: hci2: failed to register connection device [ 189.212092][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.283508][ T7250] loop5: detected capacity change from 0 to 2048 [ 189.332140][ T7250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.502142][ T7252] process 'syz.6.424' launched './file0' with NULL argv: empty string added [ 190.092392][ T7264] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 190.103285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.260887][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.292625][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.330668][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 190.464844][ T7270] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 190.506889][ T7270] bond1: option mode: unable to set because the bond device is up [ 190.591806][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.750975][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.314755][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.417425][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.173685][ T7325] input: syz0 as /devices/virtual/input/input9 [ 193.509276][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.620852][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.665309][ T7334] loop5: detected capacity change from 0 to 256 [ 193.873497][ T7336] loop6: detected capacity change from 0 to 1024 [ 194.586313][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.600986][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609577][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.699771][ T48] hfsplus: b-tree write err: -5, ino 3 [ 194.792753][ T6860] hfsplus: node 4:3 still has 1 user(s)! [ 195.014373][ T7354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.660666][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.451160][ T7382] loop5: detected capacity change from 0 to 2048 [ 196.509567][ T7387] Invalid argument reading file caps for ./file0 [ 196.551094][ T7382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.747829][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.270882][ T7395] kvm: user requested TSC rate below hardware speed [ 197.778958][ T6553] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 197.830570][ T6553] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 200.701408][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.711480][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.719786][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.426629][ T3260] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.474738][ T3260] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.706469][ T3260] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.751688][ T3260] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.790459][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.076931][ T3260] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.142638][ T3260] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.475044][ T3260] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.529174][ T3260] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.840342][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.971439][ T7446] loop4: detected capacity change from 0 to 40427 [ 203.048165][ T7446] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 203.086130][ T7446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 203.184263][ T7446] F2FS-fs (loop4): invalid crc value [ 203.199332][ T7446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.610476][ T7446] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 203.618939][ T7446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.791227][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.860499][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.944587][ T7446] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 204.113012][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.126788][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.136102][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.144834][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.154922][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.163570][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.863695][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 204.900708][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.041467][ T7497] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 205.126657][ T7497] gretap0: entered promiscuous mode [ 205.300401][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 205.942725][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.344872][ T51] Bluetooth: hci3: command tx timeout [ 206.461147][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 206.663260][ T28] audit: type=1326 audit(1786312923.378:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.4.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66d79e0d9 code=0x0 [ 206.821621][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.903772][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.982479][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.390502][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.452317][ T7488] chnl_net:caif_netlink_parms(): no params data found [ 207.637653][ T3260] hsr_slave_0: left promiscuous mode [ 207.656072][ T3260] hsr_slave_1: left promiscuous mode [ 207.673398][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.704601][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.730029][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.750937][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.781676][ T3260] bridge_slave_1: left allmulticast mode [ 207.819421][ T3260] bridge_slave_1: left promiscuous mode [ 207.838264][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.884060][ T3260] bridge_slave_0: left allmulticast mode [ 207.889785][ T3260] bridge_slave_0: left promiscuous mode [ 207.956881][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.023333][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.102575][ T3260] veth1_macvtap: left promiscuous mode [ 208.108208][ T3260] veth0_macvtap: left promiscuous mode [ 208.138936][ T3260] veth1_vlan: left promiscuous mode [ 208.158207][ T3260] veth0_vlan: left promiscuous mode [ 208.421063][ T5085] Bluetooth: hci3: command tx timeout [ 209.060987][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.948356][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.110673][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.436770][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.503796][ T5085] Bluetooth: hci3: command tx timeout [ 211.138603][ T3260] team0 (unregistering): Port device team_slave_1 removed [ 211.145572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.156920][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.283719][ T6725] IPVS: starting estimator thread 0... [ 211.356048][ T3260] team0 (unregistering): Port device team_slave_0 removed [ 211.400636][ T7580] IPVS: using max 16 ests per chain, 38400 per kthread [ 211.545755][ T3260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.737673][ T3260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.804862][ T7586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.841919][ T7586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.861249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.924559][ T7586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.950791][ T7586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.972267][ T7589] sctp: [Deprecated]: syz.4.509 (pid 7589) Use of int in max_burst socket option deprecated. [ 211.972267][ T7589] Use struct sctp_assoc_value instead [ 212.036559][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.064921][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.079645][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.581551][ T5085] Bluetooth: hci3: command tx timeout [ 212.869227][ T3260] bond0 (unregistering): Released all slaves [ 213.653331][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.700702][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.723082][ T7488] bridge_slave_0: entered allmulticast mode [ 213.761523][ T7488] bridge_slave_0: entered promiscuous mode [ 213.820334][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.835505][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.861075][ T7488] bridge_slave_1: entered allmulticast mode [ 213.878444][ T7488] bridge_slave_1: entered promiscuous mode [ 214.397009][ T7488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.502955][ T7488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.707549][ T7488] team0: Port device team_slave_0 added [ 214.773502][ T7488] team0: Port device team_slave_1 added [ 214.953809][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.976623][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.116152][ T7488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.126967][ T7649] loop6: detected capacity change from 0 to 128 [ 215.213419][ T7649] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.271312][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.300087][ T7649] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.327948][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.436114][ T7488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.554159][ T6860] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.718782][ T7488] hsr_slave_0: entered promiscuous mode [ 215.747880][ T7488] hsr_slave_1: entered promiscuous mode [ 216.431853][ T23] net_ratelimit: 11 callbacks suppressed [ 216.431869][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.549211][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.803133][ T7488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.833444][ T7488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.908021][ T7488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.000349][ T7488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.467619][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.582930][ T7488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.622295][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.738654][ T7488] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.840135][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.848787][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.899157][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.907768][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.510038][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.286578][ T7488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.526730][ T7717] bridge1: entered promiscuous mode [ 219.551108][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.573987][ T7717] bridge1: entered allmulticast mode [ 220.582030][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.659635][ T7737] loop6: detected capacity change from 0 to 1024 [ 220.666602][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.168924][ T7488] veth0_vlan: entered promiscuous mode [ 221.248961][ T7488] veth1_vlan: entered promiscuous mode [ 221.495838][ T7749] "syz.2.545" (7749) uses obsolete ecb(arc4) skcipher [ 221.512863][ T7488] veth0_macvtap: entered promiscuous mode [ 221.555588][ T7488] veth1_macvtap: entered promiscuous mode [ 221.621413][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.683075][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.736118][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.782994][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.829723][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.904688][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.936990][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.963029][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.026875][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.064967][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.145169][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.198561][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.241742][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.310742][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.364223][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.395313][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.424911][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.477501][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.487538][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.488258][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.488884][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.556463][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.598715][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.620776][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.661168][ T7488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.680778][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.690075][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.720356][ T7488] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.756411][ T7488] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.770373][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.801381][ T7488] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.832290][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.153299][ T7778] netlink: 14 bytes leftover after parsing attributes in process `syz.6.553'. [ 223.573473][ T7782] fuse: Bad value for 'fd' [ 223.610685][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.668984][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.844178][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.891328][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.264960][ T7793] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 224.475144][ T7793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.699940][ T7796] bond2: (slave geneve2): making interface the new active one [ 224.753472][ T7796] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 224.995417][ T7796] syz.2.558 (7796) used greatest stack depth: 20360 bytes left [ 226.144685][ T7831] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 226.375598][ T7831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.616664][ T7837] bond1: (slave geneve2): making interface the new active one [ 226.636579][ T7837] net_ratelimit: 779 callbacks suppressed [ 226.636616][ T7837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.654420][ T7837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.667187][ T7837] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 226.940748][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.952982][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.975091][ T7847] input: syz1 as /devices/virtual/input/input10 [ 227.032764][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.101483][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.243452][ T7837] syz.4.570 (7837) used greatest stack depth: 19896 bytes left [ 227.466329][ T3434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.684281][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.805124][ T7864] loop4: detected capacity change from 0 to 1024 [ 227.880356][ T7864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.108340][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.200383][ T28] audit: type=1800 audit(1786312944.908:37): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.577" name="bus" dev="loop4" ino=990 res=0 errno=0 [ 228.366441][ T7878] loop6: detected capacity change from 0 to 1024 [ 228.440620][ T7878] EXT4-fs: inline encryption not supported [ 228.503180][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.528481][ T7878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.608479][ T7878] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.756589][ T7878] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 3: comm syz.6.581: lblock 3 mapped to illegal pblock 3 (length 3) [ 228.880490][ T7878] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 228.963704][ T7878] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.963704][ T7878] [ 228.990907][ T7882] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 229.098539][ T7891] warning: `syz.4.584' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.273091][ T11] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 229.356420][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 229.415744][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 229.415744][ T11] [ 229.483880][ T6860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.594250][ T7901] loop4: detected capacity change from 0 to 512 [ 229.642824][ T7901] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.807118][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.096010][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.371251][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.663447][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.009060][ T7934] loop6: detected capacity change from 0 to 512 [ 232.062971][ T7934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 232.172447][ T7934] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.598: bad orphan inode 131083 [ 232.207884][ T7934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.251745][ T48] net_ratelimit: 9 callbacks suppressed [ 232.251762][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.421923][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.563914][ T6860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.740513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.781360][ T7944] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 233.071830][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.142601][ T11] wlan1: Trigger new scan to find an IBSS to join [ 233.403168][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.490145][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.518169][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.531809][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.424771][ T60] hsr_slave_0: left promiscuous mode [ 235.526390][ T60] hsr_slave_1: left promiscuous mode [ 235.544102][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.600731][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.612996][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.690092][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.699337][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.708462][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.782478][ T60] bridge_slave_1: left allmulticast mode [ 235.789979][ T60] bridge_slave_1: left promiscuous mode [ 235.840335][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.982165][ T60] bridge_slave_0: left allmulticast mode [ 235.999244][ T60] bridge_slave_0: left promiscuous mode [ 236.043504][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.191953][ T3434] wlan1: Trigger new scan to find an IBSS to join [ 236.276214][ T60] veth1_macvtap: left promiscuous mode [ 236.291354][ T60] veth0_macvtap: left promiscuous mode [ 236.309916][ T60] veth1_vlan: left promiscuous mode [ 236.327065][ T60] veth0_vlan: left promiscuous mode [ 237.131992][ T8034] jffs2: notice: (8034) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.158876][ T48] wlan1: Creating new IBSS network, BSSID 9e:c4:70:1c:70:5e [ 237.649617][ T5820] net_ratelimit: 3 callbacks suppressed [ 237.649636][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.816384][ T8043] loop4: detected capacity change from 0 to 256 [ 237.873533][ T8043] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.040671][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.213479][ T8045] loop4: detected capacity change from 0 to 512 [ 238.276007][ T8050] Core dump to core aborted: cannot preserve file permissions [ 238.293376][ T8045] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.631: inode has both inline data and extents flags [ 238.329799][ T8045] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.631: couldn't read orphan inode 15 (err -117) [ 238.355247][ T8045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.549766][ T60] team0 (unregistering): Port device team_slave_1 removed [ 238.675119][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.675152][ T60] team0 (unregistering): Port device team_slave_0 removed [ 238.785027][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.902330][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.146393][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.187838][ T6517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.210591][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.351925][ T8059] loop4: detected capacity change from 0 to 128 [ 239.706907][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.766798][ T60] bond0 (unregistering): Released all slaves [ 239.918539][ T8059] ªªªªªª: renamed from vlan0 (while UP) [ 240.226165][ T8072] loop7: detected capacity change from 0 to 1024 [ 240.262139][ T8074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.308467][ T8074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.350482][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.370505][ T8074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.398419][ T8072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.820403][ T7488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.389073][ T8105] loop6: detected capacity change from 0 to 4096 [ 241.412080][ T8105] EXT4-fs: inline encryption not supported [ 241.458786][ T8105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.501839][ T8105] EXT4-fs (loop6): Test dummy encryption mode enabled [ 241.521441][ T8105] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 241.529912][ T8105] System zones: 0-5 [ 241.543165][ T8105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.778368][ T28] audit: type=1800 audit(1786312958.498:38): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.646" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 241.798712][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.049701][ T6860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.366184][ T8139] loop7: detected capacity change from 0 to 512 [ 242.391351][ T8139] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 242.429591][ T8139] EXT4-fs (loop7): 1 truncate cleaned up [ 242.444503][ T8139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.830640][ T5820] net_ratelimit: 8 callbacks suppressed [ 242.830658][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.863506][ T7488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.905452][ T8153] overlayfs: refusing to follow metacopy origin for (/file1) [ 243.696195][ T8182] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004ÿ€Œ [ 243.770517][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.891220][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.934360][ T60] tipc: Subscription rejected, illegal request [ 243.950514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.025598][ T8158] loop4: detected capacity change from 0 to 32768 [ 244.058138][ T8158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.661 (8158) [ 244.097061][ T8158] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.126760][ T8158] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 244.150587][ T8158] BTRFS info (device loop4): force clearing of disk cache [ 244.167759][ T8158] BTRFS info (device loop4): enabling auto defrag [ 244.185567][ T8158] BTRFS info (device loop4): enabling disk space caching [ 244.204502][ T8158] BTRFS info (device loop4): disk space caching is enabled [ 244.371030][ T8158] BTRFS info (device loop4): enabling ssd optimizations [ 244.408635][ T8158] BTRFS info (device loop4): rebuilding free space tree [ 244.588055][ T8158] BTRFS info (device loop4): disabling free space tree [ 244.595645][ T8158] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.620252][ T8158] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.835074][ T56] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 244.847876][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198) [ 244.859936][ T56] Buffer I/O error on device sda1, logical block 92160 [ 244.868531][ T56] device offline error, dev sda, sector 745774 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 244.879244][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93221) [ 244.893199][ T56] device offline error, dev sda, sector 749662 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 244.903801][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93707) [ 244.915909][ T56] Buffer I/O error on device sda1, logical block 93669 [ 244.922945][ T56] Buffer I/O error on device sda1, logical block 93670 [ 244.929892][ T56] Buffer I/O error on device sda1, logical block 93671 [ 244.937008][ T56] Buffer I/O error on device sda1, logical block 93672 [ 244.944029][ T56] Buffer I/O error on device sda1, logical block 93673 [ 244.948234][ T3468] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 244.951583][ T56] Buffer I/O error on device sda1, logical block 93674 [ 244.971544][ T56] Buffer I/O error on device sda1, logical block 93675 [ 244.978465][ T56] Buffer I/O error on device sda1, logical block 93676 [ 244.985515][ T56] Buffer I/O error on device sda1, logical block 93677 [ 244.993608][ T56] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.004270][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 96294) [ 245.005008][ T3434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.016606][ T56] device offline error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.034612][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 97317) [ 245.047173][ T56] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.057884][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 100390) [ 245.069395][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.070606][ T56] device offline error, dev sda, sector 815198 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 245.088300][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 101899) [ 245.102755][ T56] device offline error, dev sda, sector 700726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.113530][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2027 starting block 87590) [ 245.127027][ T3468] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2033, error -5) [ 245.220500][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.252410][ T48] device offline error, dev sda, sector 721342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.354732][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90167) [ 245.393160][ T48] device offline error, dev sda, sector 721358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 245.405820][ T3488] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 245.427743][ T48] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90169) [ 245.470262][ T3488] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 245.523650][ T3488] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 245.539209][ T6517] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.586003][ T8221] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 245.596514][ T5102] Aborting journal on device sda1-8. [ 245.612104][ T98] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 245.630291][ T5102] JBD2: I/O error when updating journal superblock for sda1-8. [ 245.641905][ T8221] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 245.665663][ T8221] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 245.691352][ T8221] Buffer I/O error on dev sda1, logical block 8214, lost async page write [ 245.711511][ T8221] Buffer I/O error on dev sda1, logical block 8215, lost async page write [ 245.802644][ T5762] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 245.848095][ T98] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 245.872264][ T5762] EXT4-fs (sda1): I/O error while writing superblock [ 245.889287][ T5762] EXT4-fs (sda1): Remounting filesystem read-only [ 246.118440][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.296931][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.475052][ T8253] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 246.505246][ T8221] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 247.192230][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.620844][ T8318] capability: warning: `syz.7.684' uses deprecated v2 capabilities in a way that may be insecure [ 247.935111][ T8324] loop4: detected capacity change from 0 to 4096 [ 248.260586][ T5818] net_ratelimit: 1 callbacks suppressed [ 248.260605][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.283057][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.623363][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.981420][ T6725] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.068141][ T8373] fuse: Bad value for 'fd' [ 249.086765][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.193093][ T6725] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 249.203411][ T6725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.215665][ T6725] usb 7-1: config 0 descriptor?? [ 249.301219][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.380023][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 249.770569][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.860338][ T5819] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.053214][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.068534][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.078535][ T5819] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.089148][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.099876][ T5819] usb 5-1: config 0 descriptor?? [ 250.340693][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.468985][ T6725] usb 7-1: Cannot set autoneg [ 250.483512][ T6725] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 250.511408][ T6725] usb 7-1: USB disconnect, device number 2 [ 250.730365][ T5819] usb 5-1: string descriptor 0 read error: -22 [ 250.913401][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.919815][ T7209] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 250.942972][ T5819] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 250.980029][ T8419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.711'. [ 251.195382][ T6725] usb 5-1: USB disconnect, device number 5 [ 251.300956][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.401630][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.674441][ T28] audit: type=1800 audit(1786312968.388:39): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.717" name="use" dev="configfs" ino=17347 res=0 errno=0 [ 252.360316][ T8453] loop7: detected capacity change from 0 to 1024 [ 252.541974][ T8453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.631285][ T8453] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.758362][ T8453] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.724: Freeing blocks not in datazone - block = 0, count = 16 [ 252.827873][ T8453] EXT4-fs (loop7): Remounting filesystem read-only [ 252.936554][ T7488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.181144][ T8469] loop7: detected capacity change from 0 to 256 [ 253.282465][ T48] net_ratelimit: 2 callbacks suppressed [ 253.282484][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.460686][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.895135][ T8462] loop4: detected capacity change from 0 to 40427 [ 253.916907][ T8462] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 253.931838][ T8462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 253.970586][ T8462] F2FS-fs (loop4): invalid crc value [ 254.022632][ T8462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 254.268929][ T8462] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 254.286560][ T8462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.322857][ T8503] input: syz0 as /devices/virtual/input/input11 [ 254.340837][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.500830][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.509052][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.731345][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 254.940458][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 254.962364][ T5819] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.990213][ T5819] usb 7-1: config 0 has no interface number 0 [ 255.001465][ T5819] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.038888][ T5819] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.062571][ T5819] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 255.100324][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.129597][ T5819] usb 7-1: config 0 descriptor?? [ 255.502926][ T8523] overlayfs: failed to clone lowerpath [ 255.545888][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.730826][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.040909][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.047407][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.273120][ T8536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.308137][ T5819] usbhid 7-1:0.1: can't add hid device: -71 [ 256.324528][ T8536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.343025][ T5819] usbhid: probe of 7-1:0.1 failed with error -71 [ 256.364914][ T5819] usb 7-1: USB disconnect, device number 3 [ 256.386178][ T8534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.980864][ T28] audit: type=1326 audit(1786312973.708:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.7.750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc71359e0d9 code=0x0 [ 258.150521][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 258.580618][ C1] net_ratelimit: 5 callbacks suppressed [ 258.580640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.927498][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.232640][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.318994][ T8594] all: renamed from veth0_to_batadv (while UP) [ 259.490853][ T5820] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 259.541032][ T8605] batadv_slave_1: entered promiscuous mode [ 259.603015][ T8604] batadv_slave_1: left promiscuous mode [ 259.707662][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.727924][ T5820] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.769339][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.821460][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 259.850436][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 259.879607][ T5820] usb 7-1: Product: syz [ 259.884955][ T5820] usb 7-1: Manufacturer: syz [ 259.899861][ T5820] usb 7-1: SerialNumber: syz [ 259.941490][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.136289][ T5820] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.254973][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.282753][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.301878][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.312257][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.322860][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.332306][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.406242][ T5820] usb 7-1: USB disconnect, device number 4 [ 260.424884][ T8591] usblp0: removed [ 260.559204][ T8632] loop4: detected capacity change from 0 to 1024 [ 261.379086][ T8646] loop6: detected capacity change from 0 to 32768 [ 261.418547][ T8646] JBD2: Ignoring recovery information on journal [ 261.472799][ T8646] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 261.552182][ T8646] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 261.567939][ T8646] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 261.577892][ T8646] OCFS2: File system is now read-only. [ 261.583553][ T8646] (syz.6.782,8646,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 261.592363][ T8646] (syz.6.782,8646,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 261.601309][ T8646] (syz.6.782,8646,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 261.609750][ T8646] (syz.6.782,8646,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 261.620094][ T8646] (syz.6.782,8646,1):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 261.629290][ T8646] (syz.6.782,8646,1):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 261.637366][ T8646] (syz.6.782,8646,1):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 261.646018][ T8646] (syz.6.782,8646,1):ocfs2_reflink_remap_blocks:4658 ERROR: status = -30 [ 261.655338][ T8646] (syz.6.782,8646,1):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 261.677211][ T5817] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.867551][ T6860] ocfs2: Unmounting device (7,6) on (node local) [ 261.905245][ T5817] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 261.927378][ T5817] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 261.951561][ T5817] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 261.961257][ T8659] bridge0: entered allmulticast mode [ 261.971678][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.979735][ T5817] usb 5-1: Product: syz [ 261.993568][ T5817] usb 5-1: Manufacturer: syz [ 261.998527][ T5817] usb 5-1: SerialNumber: syz [ 262.048275][ T8644] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.070491][ T8644] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.079607][ T5817] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 262.107190][ T5817] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 262.139189][ T5817] usbserial_generic 5-1:1.0: generic converter detected [ 262.171707][ T5817] usb 5-1: generic converter now attached to ttyUSB0 [ 262.218888][ T8662] loop6: detected capacity change from 0 to 4096 [ 262.250378][ T8662] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 262.409133][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 262.681272][ T5819] usb 5-1: USB disconnect, device number 6 [ 262.728989][ T5819] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 262.745383][ T8672] loop7: detected capacity change from 0 to 256 [ 262.757348][ T5819] usbserial_generic 5-1:1.0: device disconnected [ 262.782090][ T8672] exfat: Deprecated parameter 'namecase' [ 262.840053][ T8672] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 262.948924][ T8662] ntfs3: loop6: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs3_write_inode failed, -22. [ 263.801387][ T3488] net_ratelimit: 59 callbacks suppressed [ 263.801406][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.040266][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 264.100899][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.150606][ T28] audit: type=1326 audit(1786312980.878:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.6.801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb10919e0d9 code=0x0 [ 264.284603][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 264.295438][ T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.314562][ T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.332696][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.354929][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.375356][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.388126][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.409003][ T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.419489][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.442535][ T8] usb 5-1: config 0 descriptor?? [ 264.492051][ T8693] loop7: detected capacity change from 0 to 32768 [ 264.548389][ T8693] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 264.642605][ T8712] overlayfs: failed to resolve './file0': -2 [ 264.668529][ T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 264.832996][ T8693] syz.7.798 (8693) used greatest stack depth: 18840 bytes left [ 264.935465][ C1] usblp0: nonzero read bulk status received: -71 [ 264.942501][ T5817] usb 5-1: USB disconnect, device number 7 [ 264.971958][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.984397][ T7488] ocfs2: Unmounting device (7,7) on (node local) [ 265.148680][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.192533][ T8690] usblp0: removed [ 265.933931][ T8743] loop7: detected capacity change from 0 to 256 [ 265.947566][ T8741] loop4: detected capacity change from 0 to 4096 [ 266.113933][ T3260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.190395][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.506339][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.004883][ T8759] loop6: detected capacity change from 0 to 256 [ 267.052139][ T8759] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.228836][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.241337][ T3468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.263726][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.417681][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 268.198928][ T28] audit: type=1804 audit(1786312984.918:42): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.835" name="bus" dev="ramfs" ino=19022 res=1 errno=0 [ 268.269137][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.408429][ T8793] batman_adv: batadv0: Adding interface: ip6gretap1 [ 268.417295][ T8793] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.454713][ T8793] batman_adv: batadv0: Interface activated: ip6gretap1 [ 269.312014][ T8808] gadgetfs: bound to dummy_udc driver [ 269.338041][ T23] net_ratelimit: 1 callbacks suppressed [ 269.338060][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.543429][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.578488][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.162833][ T8828] netlink: 48 bytes leftover after parsing attributes in process `syz.6.853'. [ 270.356782][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.723588][ T8836] loop6: detected capacity change from 0 to 4096 [ 270.742963][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.864472][ T8841] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.384169][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.407264][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.883020][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.293052][ T8878] 9p: Unknown Cache mode or invalid value 7777777777777777777 [ 272.421402][ T6725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.489483][ T8888] loop4: detected capacity change from 0 to 64 [ 272.545721][ T8888] syz.4.879: attempt to access beyond end of device [ 272.545721][ T8888] loop4: rw=2049, sector=412, nr_sectors = 2 limit=64 [ 272.562632][ T8888] Buffer I/O error on dev loop4, logical block 206, lost async page write [ 272.629419][ T28] audit: type=1800 audit(1786312989.348:43): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.879" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 273.011638][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.230272][ T6725] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 273.422341][ T6725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 273.440283][ T6725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.456307][ T6725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.468721][ T6725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 273.485183][ T6725] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 273.497471][ T6725] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.514031][ T6725] usb 5-1: Manufacturer: syz [ 273.521962][ T6725] usb 5-1: config 0 descriptor?? [ 273.692210][ T60] ------------[ cut here ]------------ [ 273.698631][ T60] WARNING: CPU: 1 PID: 60 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 273.709689][ T60] Modules linked in: [ 273.713800][ T60] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 273.721364][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.725064][ T3468] ------------[ cut here ]------------ [ 273.731602][ T60] Workqueue: phy17 ieee80211_csa_finalize_work [ 273.737417][ T3468] WARNING: CPU: 0 PID: 3468 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 273.743757][ T60] [ 273.754830][ T3468] Modules linked in: [ 273.754851][ T3468] CPU: 0 PID: 3468 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 273.754874][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.754890][ T3468] Workqueue: phy18 ieee80211_csa_finalize_work [ 273.757740][ T60] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 273.761190][ T3468] [ 273.761200][ T3468] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 273.768831][ T60] Code: 48 89 df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 [ 273.778892][ T3468] Code: 48 89 df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 [ 273.778920][ T3468] RSP: 0018:ffffc9000cbe79c0 EFLAGS: 00010293 [ 273.787540][ C1] ------------[ cut here ]------------ [ 273.793218][ T3468] RAX: ffffffff8a11cf42 RBX: 0000000000000001 RCX: ffff88802ea30000 [ 273.795438][ C1] WARNING: CPU: 1 PID: 60 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 273.803116][ T3468] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 273.822457][ C1] Modules linked in: [ 273.822478][ C1] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 273.842453][ T3468] RBP: dffffc0000000000 R08: ffff88805510562f R09: 1ffff1100aa20ac5 [ 273.848233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.853844][ T3468] R10: dffffc0000000000 R11: ffffed100aa20ac6 R12: 0000000000000001 [ 273.861753][ C1] Workqueue: phy17 ieee80211_csa_finalize_work [ 273.871689][ T3468] R13: ffff888055106659 R14: ffff88802fd3ad48 R15: ffff888023decf00 [ 273.879656][ C1] [ 273.879671][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 273.883626][ T3468] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 273.891041][ C1] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 273.891067][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 273.891088][ C1] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88801c68da00 [ 273.891105][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.891118][ C1] RBP: 0000000000000000 R08: ffff88801c68da00 R09: 0000000000000003 [ 273.891134][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888068b9e440 [ 273.891148][ C1] R13: ffff88805e20e824 R14: ffff888068b9e930 R15: ffff88805e20e800 [ 273.891165][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 273.891184][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.891201][ C1] CR2: 000000110c31af2a CR3: 00000000653b2000 CR4: 00000000003506e0 [ 273.891223][ C1] Call Trace: [ 273.891232][ C1] [ 273.891244][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 273.891292][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 273.891330][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 273.891375][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 273.891424][ C1] __iterate_interfaces+0x225/0x4c0 [ 273.899398][ T3468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.909509][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 273.909539][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 273.917583][ T3468] CR2: 00007fe02dfeb7c0 CR3: 0000000064eb7000 CR4: 00000000003506f0 [ 273.923772][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 273.931810][ T3468] Call Trace: [ 273.934115][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 273.940840][ T3468] [ 273.949416][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 273.969116][ T3468] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 273.975182][ C1] ? hw_scan_work+0xf10/0xf10 [ 273.983273][ T3468] ieee80211_csa_finalize+0x571/0xeb0 [ 273.991227][ C1] __hrtimer_run_queues+0x525/0xc10 [ 273.991276][ C1] ? hrtimer_interrupt+0x980/0x980 [ 273.991299][ C1] ? read_tsc+0x9/0x20 [ 273.991332][ C1] hrtimer_run_softirq+0x177/0x290 [ 273.991364][ C1] handle_softirqs+0x27d/0x820 [ 273.991388][ C1] ? read_tsc+0x9/0x20 [ 273.991421][ C1] ? ktime_get+0x24b/0x280 [ 273.991452][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 273.991477][ C1] ? do_softirq+0x1a0/0x1a0 [ 273.991506][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 273.991541][ C1] __irq_exit_rcu+0xd3/0x190 [ 273.991564][ C1] ? irq_exit_rcu+0x20/0x20 [ 273.991598][ C1] irq_exit_rcu+0x9/0x20 [ 273.991620][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 273.999610][ T3468] ? mutex_lock_nested+0x20/0x20 [ 274.007641][ C1] [ 274.007651][ C1] [ 274.007661][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.007687][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 274.015721][ T3468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.024689][ C1] Code: ed 01 00 00 e8 fe 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 ef 7e 1b 00 eb 06 e8 e8 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 274.024713][ C1] RSP: 0018:ffffc900015b72c0 EFLAGS: 00000293 [ 274.031328][ T3468] ? ieee80211_csa_finalize_work+0x140/0x140 [ 274.039313][ C1] [ 274.039324][ C1] RAX: ffffffff816bf338 RBX: ffffc900015b743f RCX: ffff88801c68da00 [ 274.042673][ T3468] ? read_lock_is_recursive+0x20/0x20 [ 274.045496][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.051206][ T3468] ieee80211_csa_finalize_work+0xf6/0x140 [ 274.056532][ C1] RBP: ffffc900015b7410 R08: ffffffff911ed5c7 R09: 1ffffffff223dab8 [ 274.063331][ T3468] ? process_scheduled_works+0x975/0x1600 [ 274.068886][ C1] R10: dffffc0000000000 R11: fffffbfff223dab9 R12: ffffffff8d8cd680 [ 274.074162][ T3468] process_scheduled_works+0xa60/0x1600 [ 274.080746][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8cd6d8 R15: dffffc0000000000 [ 274.087096][ T3468] ? worker_attach_to_pool+0x370/0x370 [ 274.094236][ C1] ? console_flush_all+0x878/0xcf0 [ 274.094279][ C1] ? console_flush_all+0x10b/0xcf0 [ 274.094318][ C1] ? is_console_locked+0x20/0x20 [ 274.094342][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.094390][ C1] console_unlock+0xad/0x350 [ 274.094422][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 274.094456][ C1] ? vprintk_emit+0x467/0x610 [ 274.094484][ C1] ? vprintk_emit+0x30b/0x610 [ 274.094509][ C1] ? vprintk_emit+0x30b/0x610 [ 274.094538][ C1] vprintk_emit+0x497/0x610 [ 274.094564][ C1] ? vprintk_emit+0x30b/0x610 [ 274.094595][ C1] ? printk_sprint+0x460/0x460 [ 274.103117][ T3468] ? assign_work+0x3cc/0x5d0 [ 274.108849][ C1] ? vprintk_emit+0x30b/0x610 [ 274.112318][ T3468] worker_thread+0xa5e/0xfe0 [ 274.119215][ C1] ? vprintk_emit+0x53d/0x610 [ 274.122280][ T3468] kthread+0x2fa/0x390 [ 274.127413][ C1] _printk+0xde/0x130 [ 274.133968][ T3468] ? pr_cont_work+0x550/0x550 [ 274.138623][ C1] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 274.144112][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 274.149326][ C1] ? load_image+0x420/0x420 [ 274.154460][ T3468] ret_from_fork+0x48/0x80 [ 274.158548][ C1] ? _printk+0xde/0x130 [ 274.163788][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 274.168471][ C1] ? set_worker_desc+0x1f0/0x1f0 [ 274.172615][ T3468] ret_from_fork_asm+0x11/0x20 [ 274.177009][ C1] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 274.182286][ T3468] [ 274.186333][ C1] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 274.191571][ T3468] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.191584][ T3468] CPU: 0 PID: 3468 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 274.191658][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.191704][ T3468] Workqueue: phy18 ieee80211_csa_finalize_work [ 274.191794][ T3468] Call Trace: [ 274.191816][ T3468] [ 274.191837][ T3468] dump_stack_lvl+0x18c/0x250 [ 274.191928][ T3468] ? show_regs_print_info+0x20/0x20 [ 274.191991][ T3468] ? load_image+0x420/0x420 [ 274.192119][ T3468] panic+0x2ca/0x720 [ 274.192212][ T3468] ? bpf_jit_dump+0xd0/0xd0 [ 274.192314][ T3468] ? ret_from_fork_asm+0x11/0x20 [ 274.192402][ T3468] __warn+0x2e0/0x470 [ 274.192467][ T3468] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 274.192551][ T3468] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 274.192630][ T3468] report_bug+0x2be/0x4f0 [ 274.192693][ T3468] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 274.192775][ T3468] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 274.192848][ T3468] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 274.192933][ T3468] handle_bug+0xcf/0x120 [ 274.192996][ T3468] exc_invalid_op+0x1a/0x50 [ 274.193057][ T3468] asm_exc_invalid_op+0x1a/0x20 [ 274.193130][ T3468] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 274.193233][ T3468] Code: 48 89 df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 [ 274.193276][ T3468] RSP: 0018:ffffc9000cbe79c0 EFLAGS: 00010293 [ 274.193346][ T3468] RAX: ffffffff8a11cf42 RBX: 0000000000000001 RCX: ffff88802ea30000 [ 274.193384][ T3468] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 274.193417][ T3468] RBP: dffffc0000000000 R08: ffff88805510562f R09: 1ffff1100aa20ac5 [ 274.193458][ T3468] R10: dffffc0000000000 R11: ffffed100aa20ac6 R12: 0000000000000001 [ 274.193500][ T3468] R13: ffff888055106659 R14: ffff88802fd3ad48 R15: ffff888023decf00 [ 274.193560][ T3468] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 274.193692][ T3468] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 274.193788][ T3468] ieee80211_csa_finalize+0x571/0xeb0 [ 274.193865][ T3468] ? mutex_lock_nested+0x20/0x20 [ 274.193946][ T3468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.194018][ T3468] ? ieee80211_csa_finalize_work+0x140/0x140 [ 274.194106][ T3468] ? read_lock_is_recursive+0x20/0x20 [ 274.194197][ T3468] ieee80211_csa_finalize_work+0xf6/0x140 [ 274.194270][ T3468] ? process_scheduled_works+0x975/0x1600 [ 274.194486][ T3468] process_scheduled_works+0xa60/0x1600 [ 274.194747][ T3468] ? worker_attach_to_pool+0x370/0x370 [ 274.194882][ T3468] ? assign_work+0x3cc/0x5d0 [ 274.194987][ T3468] worker_thread+0xa5e/0xfe0 [ 274.195161][ T3468] kthread+0x2fa/0x390 [ 274.195221][ T3468] ? pr_cont_work+0x550/0x550 [ 274.195289][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 274.195353][ T3468] ret_from_fork+0x48/0x80 [ 274.195432][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 274.195496][ T3468] ret_from_fork_asm+0x11/0x20 [ 274.195612][ T3468] [ 274.196731][ T3468] Kernel Offset: disabled