last executing test programs: 4m23.645986149s ago: executing program 32 (id=214): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}, {r0, 0xa041}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 3m43.875571026s ago: executing program 1 (id=448): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffbfffd9, 0x10001, 0x0, 0xa, 0x4, "03f00900", 0x566, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) 3m43.075631775s ago: executing program 1 (id=452): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000240)={{@hyper, 0xfffffffc}, 0x2, 0x9, 0x2, 0x1, 0x7ff, 0x1, 0x0, 0x8}) 3m42.519222645s ago: executing program 1 (id=455): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 3m42.057459135s ago: executing program 1 (id=458): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) 3m41.517626567s ago: executing program 1 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0xff}]}]}, 0x28}}, 0x0) 3m41.031333247s ago: executing program 1 (id=464): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001140)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffe, 0x8}}, 0x28) 3m40.134211654s ago: executing program 33 (id=464): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001140)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffe, 0x8}}, 0x28) 1m27.371463185s ago: executing program 2 (id=1401): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1m26.546386411s ago: executing program 2 (id=1406): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(r1) 1m26.097544163s ago: executing program 2 (id=1410): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 1m25.451119234s ago: executing program 2 (id=1415): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x4) 1m24.74166124s ago: executing program 2 (id=1420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x4000001, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) accept4(r0, 0x0, 0x0, 0x80800) 1m24.224148229s ago: executing program 2 (id=1425): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 1m23.516952979s ago: executing program 34 (id=1425): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 1m8.517498829s ago: executing program 7 (id=1505): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x79a5, 0x2, 0x46, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) 1m7.954852691s ago: executing program 7 (id=1508): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0xf, 0xb, {0xb, 0x30, "9e9669a6ac046bca3f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x387}, 0x0, 0x2161, 0x1, {0x3}}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x20, 0x0, 0x0) 1m6.180800746s ago: executing program 7 (id=1532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fchown(r1, 0x0, 0x0) 1m5.85110383s ago: executing program 7 (id=1523): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000001c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x9c) lseek(r0, 0x12, 0x0) getdents64(r0, 0x0, 0x22) 1m4.396332363s ago: executing program 7 (id=1531): r0 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m3.186559637s ago: executing program 7 (id=1540): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x4}}}}, 0x7) 1m2.44777232s ago: executing program 35 (id=1540): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x4}}}}, 0x7) 46.795812448s ago: executing program 4 (id=1621): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x42ab, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 46.348252462s ago: executing program 4 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 45.774882818s ago: executing program 4 (id=1625): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0xc810}, 0x4814) recvmmsg$unix(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000040, 0x0) 45.171493856s ago: executing program 4 (id=1626): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 44.943093465s ago: executing program 4 (id=1627): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r0) 44.295178604s ago: executing program 4 (id=1631): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$eJzs3U1rE0Ecx/HfbJIm2lK3DyKIp2rBk/ThIl4KknfgxZOoTYRiqKAV1FP1LL4A730LvgCPnsSz4K0nX0BukZmdmE2ym01Dt5uk3w8kbLrzn53Jznbmv6WsAFxaD+t/TnZP7ctIJZUkPZACSTWpLOm6btTeHh4dHLWajVEVlVyEfRlFkWaozP5hMynUxrkIL7SfylqK/wz5qP3WcdFtQPHc1Z8gkKr+6nT7axfesnxc9kFv2mrrnZaLbgcAoFh+/g/8PL/k1+9BIG36ab9//p/xCbRddANy9j1jf2z+d1lWx9jze83t6uV7LoUrq+KDTnZPJ2nLgqKR1bfANFlZpWtLcOXFQat5b/9VqxHok/a8Sq/YuntvREO3q5vT2u2Pw1Vv+Nx0zPwyXtvZLLo+VGwfduLtjxVZO98jZjM/zE/zxIT6qsb/9V+5Y+xpcmcqHDhTUfu30mt0vVyQK5XSyxV3kJv+CN7IXpaUkpGoO6JWBk5gmNVOF7U6EBX1bjsjai0xaicjan0wqjea0yPzZr6Yx2ZDf/VN9dj6P7Df9qbGuTJtGVfSj4yR/Sm7kqGbT/wdoeNbiSWDSXuECXzWc93X8pv3H14+a7War+d2w16JU9CMqdroDoJpac/cbtgvuZCjd+edyetJ/9XBbfn50TvpZwxkEMwLu+4yUf4Xy1e23GLNvoX96/RqPLaTVXmsxu2U3GDVvV9Nz+D6GHfrYTHhr4vDRxyZc92+K90Z54iR0Ldz+uxNEmTq+qWn3P8HAAAAAAAAAAAAAAAAAACYNef3Lwc1pe0quo8AAAAAAAAAAAAAAAAAAAAAAMy6hOf/Vgt9/u8jRZ94/i+Qu38BAAD//0lmcxY=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141842, 0x9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="cc", 0x1}], 0x1, 0x7fff, 0xe, 0x3) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 43.315311593s ago: executing program 36 (id=1631): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141842, 0x9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="cc", 0x1}], 0x1, 0x7fff, 0xe, 0x3) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 5.676113701s ago: executing program 9 (id=1830): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300080000109021b0001000000010904080001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) syz_usb_disconnect(r0) 5.668679745s ago: executing program 3 (id=1832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.298109824s ago: executing program 3 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 5.067107205s ago: executing program 8 (id=1836): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x2c, 0x3, 0x0) close(r0) inotify_init() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.632035916s ago: executing program 0 (id=1837): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1e07c0, 0x78e22799f4a46fbe) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 4.583844403s ago: executing program 3 (id=1838): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.180386901s ago: executing program 0 (id=1840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x3a9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @loopback, 0x2}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 4.00120834s ago: executing program 3 (id=1842): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 3.919847709s ago: executing program 8 (id=1843): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) 3.866778438s ago: executing program 0 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 3.711093099s ago: executing program 8 (id=1845): syz_mount_image$ntfs3(&(0x7f0000000080), &(0x7f000001f740)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1f73f, &(0x7f000001f780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) ftruncate(r1, 0xcbffb) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x4, 0x7, 0x2, 0x8000, 0x8}}, 0x118) 3.597250059s ago: executing program 3 (id=1846): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f00000005c0)='./file0\x00', 0x191f011, 0x0, 0x40, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x2f) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) 3.557485693s ago: executing program 9 (id=1847): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) 3.536399702s ago: executing program 6 (id=1848): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xc0, 0x1, 0x67, 0x401, r2}, 0x20) 3.211909799s ago: executing program 0 (id=1849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.980853057s ago: executing program 8 (id=1851): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x797, &(0x7f0000002040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fallocate(r0, 0x0, 0x3ffd, 0x8000) 2.855660392s ago: executing program 0 (id=1852): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x2000000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.668029221s ago: executing program 5 (id=1853): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1e07c0, 0x78e22799f4a46fbe) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2.568688203s ago: executing program 9 (id=1854): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x1e, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 2.366901346s ago: executing program 6 (id=1855): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a300000009b5400030062930f94ec", @ANYRES32], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 2.289531672s ago: executing program 5 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf13}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408c1}, 0x400c0) 1.857890923s ago: executing program 9 (id=1857): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x40, 0xfd, 0x2, 0x80000100}, {0x6, 0x6, 0x6, 0x3}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000affffffffffffff920000070000060900010073797a300000000014000000020a010200000000000000000000000014000000110001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) 1.784385685s ago: executing program 6 (id=1858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1.466073991s ago: executing program 5 (id=1859): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008009}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000640), 0x10000000000001d0) 1.309311274s ago: executing program 8 (id=1860): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xf1, 0x8, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}}) mount(0x0, 0x0, &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @empty, 0x800006}}, 0x2, 0x9}, &(0x7f0000000000)=0x90) 1.256657133s ago: executing program 9 (id=1861): userfaultfd(0x80001) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1.11464937s ago: executing program 6 (id=1862): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)='<', 0x1, r0) keyctl$unlink(0x9, r2, r0) 925.793026ms ago: executing program 5 (id=1863): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x121202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1) close(r0) 786.64797ms ago: executing program 0 (id=1864): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x498144eedbea24c9, 0x0, 0x1e, 0x0, 0x0, 0x0) 532.996126ms ago: executing program 6 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r2, 0x1, 0xd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8c00) 485.598489ms ago: executing program 5 (id=1866): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x5, 0x213, 0x4, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x5, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 384.381495ms ago: executing program 9 (id=1867): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 260.043971ms ago: executing program 8 (id=1868): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0002000000df00"/20, @ANYRES32=0x0, @ANYBLOB="0000fb940f8e03390000010000000000000000000000000000004a"], 0x50) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 159.733269ms ago: executing program 3 (id=1869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 53.853166ms ago: executing program 5 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[], 0x0) 0s ago: executing program 6 (id=1871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f62, &(0x7f000000ef80)="$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") mknod$loop(&(0x7f0000000140)='./bus\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 00007f4a2400471f R14: 0000000000048de6 R15: 00007ffdeac73480 [ 298.813635][ T5833] [ 299.346278][ T9474] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 299.361651][ T9474] EXT4-fs (loop6): This should not happen!! Data will be lost [ 299.361651][ T9474] [ 299.372115][ T9474] EXT4-fs (loop6): Total free blocks count 0 [ 299.378203][ T9474] EXT4-fs (loop6): Free/Dirty block details [ 299.384311][ T9474] EXT4-fs (loop6): free_blocks=0 [ 299.389406][ T9474] EXT4-fs (loop6): dirty_blocks=10 [ 299.394686][ T9474] EXT4-fs (loop6): Block reservation details [ 299.400692][ T9474] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 299.401877][ T9481] loop7: detected capacity change from 0 to 512 [ 299.464666][ T5833] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 299.532584][ T9481] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.640075][ T9481] EXT4-fs (loop7): 1 truncate cleaned up [ 299.650630][ T9481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.652893][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.760827][ T7423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.915387][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1171'. [ 301.350062][ T9526] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.097164][ T9545] loop6: detected capacity change from 0 to 2048 [ 302.190369][ T9545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.371480][ T9518] loop7: detected capacity change from 0 to 40427 [ 302.425772][ T9518] F2FS-fs (loop7): build fault injection rate: 174 [ 302.453133][ T9555] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 302.457920][ T9518] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 302.528796][ T9518] F2FS-fs (loop7): invalid crc value [ 302.539277][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.889042][ T9518] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 302.933543][ T9518] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 303.105743][ T5963] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 303.125670][ T31] audit: type=1800 audit(1769092371.943:38): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1170" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 303.258299][ T7423] syz-executor: attempt to access beyond end of device [ 303.258299][ T7423] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.284017][ T5963] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.320124][ T5963] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 303.337327][ T7423] CPU: 0 UID: 0 PID: 7423 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 303.337383][ T7423] Tainted: [L]=SOFTLOCKUP [ 303.337396][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 303.337418][ T7423] Call Trace: [ 303.337430][ T7423] [ 303.337445][ T7423] dump_stack_lvl+0x100/0x190 [ 303.337497][ T7423] f2fs_handle_critical_error+0x5d7/0x970 [ 303.337582][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.337629][ T7423] ? f2fs_build_fault_attr+0x53/0x1f0 [ 303.337691][ T7423] f2fs_write_end_io+0xc24/0xf00 [ 303.337757][ T7423] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.337824][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.337881][ T7423] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 303.337942][ T7423] bio_endio+0x755/0x8b0 [ 303.338005][ T7423] submit_bio_noacct+0x1b7/0x1e80 [ 303.338054][ T7423] __submit_merged_bio+0x331/0x6f0 [ 303.338124][ T7423] __submit_merged_write_cond+0x31a/0x3f0 [ 303.338197][ T7423] f2fs_write_cache_pages+0x21c8/0x2720 [ 303.338268][ T7423] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 303.338310][ T7423] ? __lock_acquire+0x4a5/0x2630 [ 303.338377][ T7423] ? css_rstat_updated+0x1ce/0x5a0 [ 303.338431][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.338476][ T7423] ? __lock_acquire+0x4a5/0x2630 [ 303.338532][ T7423] ? __pfx_css_rstat_updated+0x10/0x10 [ 303.338632][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.338716][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.338760][ T7423] ? __mod_zone_page_state+0xe2/0x190 [ 303.338816][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.338868][ T7423] f2fs_write_data_pages+0x5a7/0x1060 [ 303.338920][ T7423] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 303.338968][ T7423] ? do_writepages+0x4b5/0x600 [ 303.339014][ T7423] ? do_writepages+0x4b5/0x600 [ 303.339058][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.339106][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.339150][ T7423] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 303.339193][ T7423] do_writepages+0x278/0x600 [ 303.339246][ T7423] ? __pfx_do_writepages+0x10/0x10 [ 303.339299][ T7423] ? do_raw_spin_unlock+0x145/0x1e0 [ 303.339340][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.339383][ T7423] ? _raw_spin_unlock+0x28/0x50 [ 303.339426][ T7423] filemap_writeback+0x22d/0x2e0 [ 303.339481][ T7423] ? __pfx_filemap_writeback+0x10/0x10 [ 303.339583][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.339627][ T7423] ? find_held_lock+0x2b/0x80 [ 303.339670][ T7423] ? f2fs_sync_dirty_inodes+0x3a7/0x940 [ 303.339713][ T7423] ? f2fs_sync_dirty_inodes+0x3a7/0x940 [ 303.339755][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.339818][ T7423] f2fs_sync_dirty_inodes+0x46a/0x940 [ 303.339880][ T7423] block_operations+0x2a6/0xfc0 [ 303.339920][ T7423] ? lockdep_hardirqs_on+0x78/0x100 [ 303.339973][ T7423] ? __pfx_block_operations+0x10/0x10 [ 303.340014][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340057][ T7423] ? trace_sched_exit_tp+0xcd/0x100 [ 303.340110][ T7423] ? __schedule+0xf65/0x5e10 [ 303.340202][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340249][ T7423] ? ktime_get+0x200/0x300 [ 303.340307][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340350][ T7423] ? lockdep_hardirqs_on+0x78/0x100 [ 303.340392][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340437][ T7423] ? rcu_is_watching+0x12/0xc0 [ 303.340489][ T7423] f2fs_write_checkpoint+0x47d/0x5240 [ 303.340538][ T7423] ? __pfx_try_to_wake_up+0x10/0x10 [ 303.340587][ T7423] ? kfree+0x1c7/0x690 [ 303.340633][ T7423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 303.340672][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340720][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340762][ T7423] ? rcu_is_watching+0x12/0xc0 [ 303.340805][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.340847][ T7423] ? kthread_stop+0x280/0x5c0 [ 303.340911][ T7423] kill_f2fs_super+0x3d0/0x480 [ 303.340956][ T7423] ? __pfx_kill_f2fs_super+0x10/0x10 [ 303.341018][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.341077][ T7423] deactivate_locked_super+0xc1/0x1b0 [ 303.341132][ T7423] deactivate_super+0xe7/0x110 [ 303.341209][ T7423] cleanup_mnt+0x21f/0x450 [ 303.341277][ T7423] task_work_run+0x150/0x240 [ 303.341320][ T7423] ? __pfx_task_work_run+0x10/0x10 [ 303.341361][ T7423] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.341404][ T7423] ? __x64_sys_umount+0x124/0x1a0 [ 303.341450][ T7423] exit_to_user_mode_loop+0x100/0x4b0 [ 303.341486][ T7423] ? rcu_is_watching+0x12/0xc0 [ 303.341533][ T7423] do_syscall_64+0x4fe/0xf80 [ 303.341582][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.341618][ T7423] RIP: 0033:0x7faf7b79bf17 [ 303.341648][ T7423] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 303.341684][ T7423] RSP: 002b:00007ffd2e2203c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 303.341720][ T7423] RAX: 0000000000000000 RBX: 00007faf7b80471f RCX: 00007faf7b79bf17 [ 303.341744][ T7423] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2e220480 [ 303.341767][ T7423] RBP: 00007ffd2e220480 R08: 00007ffd2e221480 R09: 00000000ffffffff [ 303.341792][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2e221510 [ 303.341815][ T7423] R13: 00007faf7b80471f R14: 000000000004a000 R15: 00007ffd2e221550 [ 303.341866][ T7423] [ 303.341880][ T7423] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 303.369459][ T5963] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 303.906402][ T5963] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 303.958645][ T5963] usb 1-1: config 220 has no interface number 2 [ 303.973772][ T5963] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 304.003736][ T5963] usb 1-1: config 220 interface 0 has no altsetting 0 [ 304.013425][ T5963] usb 1-1: config 220 interface 76 has no altsetting 0 [ 304.020335][ T5963] usb 1-1: config 220 interface 1 has no altsetting 0 [ 304.086483][ T5963] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 304.113905][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.122021][ T5963] usb 1-1: Product: syz [ 304.151951][ T5963] usb 1-1: Manufacturer: syz [ 304.157223][ T5963] usb 1-1: SerialNumber: syz [ 304.387387][ T5963] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 304.395879][ T5963] uvcvideo 1-1:220.0: No valid video chain found. [ 304.402369][ T5963] usb 1-1: selecting invalid altsetting 0 [ 304.427011][ T5963] usb 1-1: selecting invalid altsetting 0 [ 304.432875][ T5963] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 304.449070][ T5963] usb 1-1: USB disconnect, device number 14 [ 305.531762][ T9591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'. [ 305.608618][ T9591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'. [ 306.476593][ T9599] loop4: detected capacity change from 0 to 65536 [ 306.624475][ T9599] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 306.712797][ T9599] XFS (loop4): Ending clean mount [ 306.759450][ T9599] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x12d/0x1d0, xfs_agfl block 0x3 [ 306.770542][ T9599] XFS (loop4): Unmount and run xfs_repair [ 306.776558][ T9599] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 306.784123][ T9599] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 306.793032][ T9599] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 306.802760][ T9599] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 306.811901][ T9599] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 306.820812][ T9599] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 306.831475][ T9599] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 306.840789][ T9599] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 306.849729][ T9599] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 306.859015][ T9599] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x23b/0x390" at daddr 0x3 len 1 error 74 [ 306.870423][ T9599] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x910 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 306.885156][ T9599] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 307.343807][ T5833] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 308.406535][ T9628] loop6: detected capacity change from 0 to 64 [ 308.531542][ T9635] syz.7.1216 uses obsolete (PF_INET,SOCK_PACKET) [ 308.826236][ T9638] loop4: detected capacity change from 0 to 1024 [ 308.855081][ T9638] hfsplus: invalid length 32517 has been corrected to 255 [ 308.982479][ T9638] hfsplus: invalid length 32517 has been corrected to 255 [ 309.184471][ T4309] hfsplus: invalid length 32517 has been corrected to 255 [ 309.191968][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 309.526771][ T9649] loop4: detected capacity change from 0 to 256 [ 309.678695][ T9649] FAT-fs (loop4): Directory bread(block 64) failed [ 309.713484][ T9649] FAT-fs (loop4): Directory bread(block 65) failed [ 309.734984][ T9649] FAT-fs (loop4): Directory bread(block 66) failed [ 309.741914][ T9649] FAT-fs (loop4): Directory bread(block 67) failed [ 309.808009][ T9649] FAT-fs (loop4): Directory bread(block 68) failed [ 309.836414][ T9649] FAT-fs (loop4): Directory bread(block 69) failed [ 309.843081][ T9649] FAT-fs (loop4): Directory bread(block 70) failed [ 309.864570][ T89] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 309.900606][ T9649] FAT-fs (loop4): Directory bread(block 71) failed [ 309.919928][ T9662] netlink: 'syz.5.1231': attribute type 2 has an invalid length. [ 309.933893][ T9649] FAT-fs (loop4): Directory bread(block 72) failed [ 309.940457][ T9649] FAT-fs (loop4): Directory bread(block 73) failed [ 309.959721][ T9663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 310.037206][ T89] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 310.064448][ T89] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.123390][ T89] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 310.132424][ T89] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.152606][ T89] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 310.207447][ T89] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 310.225765][ T89] usb 7-1: Product: syz [ 310.229981][ T89] usb 7-1: Manufacturer: syz [ 310.284753][ T89] cdc_wdm 7-1:1.0: skipping garbage [ 310.290024][ T89] cdc_wdm 7-1:1.0: skipping garbage [ 310.347753][ T89] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 310.365198][ T89] cdc_wdm 7-1:1.0: Unknown control protocol [ 310.758537][ C1] cdc_wdm 7-1:1.0: Unexpected error -71 [ 310.766274][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.773156][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.779523][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.786140][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.792545][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.799327][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.806356][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.813069][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.819917][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.826631][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.834018][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.840638][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.847013][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 310.849972][ T5906] usb 7-1: USB disconnect, device number 7 [ 310.853619][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 310.853650][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 311.042703][ T9681] loop7: detected capacity change from 0 to 512 [ 311.080743][ T9681] EXT4-fs: Ignoring removed oldalloc option [ 311.178581][ T9681] EXT4-fs (loop7): 1 truncate cleaned up [ 311.242158][ T9681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.279592][ T9681] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #13: comm syz.7.1238: invalid indirect mapped block 234881024 (level 0) [ 311.302890][ T9681] EXT4-fs (loop7): Remounting filesystem read-only [ 311.451133][ T7423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.887989][ T9704] loop6: detected capacity change from 0 to 7 [ 311.957912][ T9704] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 311.972814][ T9704] loop6: partition table partially beyond EOD, truncated [ 312.025223][ T9704] loop6: p1 size 262016 extends beyond EOD, truncated [ 312.155596][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 312.827901][ T9718] loop0: detected capacity change from 0 to 32768 [ 312.836318][ T9718] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1254 (9718) [ 312.856892][ T9718] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 312.868746][ T9718] BTRFS info (device loop0 state S): using blake2b (blake2b-256-lib) checksum algorithm [ 312.946883][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.046470][ T6538] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0x3448718aab6081bd95fce8e954c3871ec6ededc52ae67923f0a41299beef4ecb level 0, ignored [ 313.162914][ T6412] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0x0569e7ad74b7eeed4560457c12cc9ad943730acde4d26cd8d47d5026297d1d98 level 0, ignored [ 313.264741][ T9718] BTRFS warning (device loop0 state ES): mismatching generation and generation_v2 found in root item. This root was probably mounted with an older kernel. Resetting all new fields. [ 313.286330][ T9718] BTRFS critical (device loop0 state ES): unable to find chunk map for logical 0 length 4096 [ 313.303686][ T9718] BTRFS critical (device loop0 state ES): unable to find chunk map for logical 0 length 4096 [ 313.315162][ T9718] BTRFS warning (device loop0 state ES): failed to read root (objectid=18446744073709551607): -5 [ 313.336264][ T9718] BTRFS error (device loop0 state ES): open_ctree failed: -5 [ 314.027803][ T5832] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 314.483312][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.734787][ T9747] loop6: detected capacity change from 0 to 131072 [ 314.864964][ T9747] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 314.913418][ T9747] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 315.196919][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.220640][ T9747] F2FS-fs (loop6): list inode (7) has corrupted xattr [ 315.455460][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1268'. [ 315.573654][ T5963] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 315.809702][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.907496][ T5963] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.963437][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.022551][ T5963] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.118633][ T5963] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.144944][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.175801][ T5963] usb 3-1: Product: syz [ 316.180034][ T5963] usb 3-1: Manufacturer: syz [ 316.222442][ T5963] usb 3-1: SerialNumber: syz [ 316.281573][ T5963] cdc_mbim 3-1:1.0: skipping garbage [ 316.313900][ T5917] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 316.493721][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 316.516030][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 316.547716][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.617329][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 316.643449][ T5917] pvrusb2: ********** [ 316.657543][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 316.688534][ T5917] pvrusb2: Important functionality might not be entirely working. [ 316.714578][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 316.745491][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.767189][ T5917] pvrusb2: ********** [ 316.784646][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.794600][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.804118][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.829431][ T2341] pvrusb2: Invalid write control endpoint [ 316.984456][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.034502][ T2341] pvrusb2: Invalid write control endpoint [ 317.070229][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 317.123807][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 317.142722][ T5963] cdc_mbim 3-1:1.0: SET_NTB_FORMAT failed [ 317.163475][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 317.202777][ T2341] pvrusb2: Device being rendered inoperable [ 317.204361][ T5963] cdc_mbim 3-1:1.0: bind() failure [ 317.221647][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 317.240050][ T5934] usb 1-1: USB disconnect, device number 15 [ 317.248520][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 317.284925][ T2341] pvrusb2: Attached sub-driver cx25840 [ 317.292260][ T5963] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 317.299571][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 317.313123][ T5963] cdc_ncm 3-1:1.1: bind() failure [ 317.351216][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 317.366398][ T5963] usb 3-1: USB disconnect, device number 12 [ 317.747183][ T9795] loop4: detected capacity change from 0 to 16 [ 317.760031][ T9795] erofs (device loop4): mounted with root inode @ nid 36. [ 318.026797][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.316464][ T9804] loop7: detected capacity change from 0 to 2048 [ 318.387104][ T9804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.425012][ T9804] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.465984][ T9806] loop4: detected capacity change from 0 to 4096 [ 318.522856][ T9806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.578218][ T9806] EXT4-fs (loop4): Test dummy encryption mode enabled [ 318.622059][ T9806] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 318.768466][ T793] kernel read not supported for file /dsp1 (pid: 793 comm: kworker/1:2) [ 318.783231][ T9806] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 318.841600][ T9806] System zones: 0-5 [ 318.859667][ T9806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.874460][ T7423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.040978][ T9801] [U]  [ 319.074640][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.299886][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.341808][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1292'. [ 319.433078][ T9828] loop6: detected capacity change from 0 to 512 [ 319.548282][ T9828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.606103][ T9828] ext4 filesystem being mounted at /180/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.863681][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.888407][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.063557][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 320.116146][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.245345][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 320.272904][ T5917] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 320.313419][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.366474][ T5906] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 320.377726][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 320.403957][ T5917] pvrusb2: ********** [ 320.422354][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 320.466711][ T5917] pvrusb2: Important functionality might not be entirely working. [ 320.510853][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 320.556096][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.580703][ T5917] pvrusb2: ********** [ 320.606155][ T5906] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 320.622765][ T2341] pvrusb2: Invalid write control endpoint [ 320.646878][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.692525][ T5906] usb 7-1: config 0 descriptor?? [ 320.820859][ T2341] pvrusb2: Invalid write control endpoint [ 320.859832][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 320.897413][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 320.922009][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 320.979609][ T2341] pvrusb2: Device being rendered inoperable [ 320.989255][ T5906] usbhid 7-1:0.0: can't add hid device: -71 [ 321.002775][ T5906] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 321.012501][ T9] usb 3-1: USB disconnect, device number 13 [ 321.018651][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 321.064105][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 321.078326][ T5906] usb 7-1: USB disconnect, device number 8 [ 321.099743][ T2341] pvrusb2: Attached sub-driver cx25840 [ 321.122277][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 321.151181][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.166042][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 321.514795][ T5906] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 321.650414][ T9876] loop7: detected capacity change from 0 to 32768 [ 321.735141][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 321.754774][ T9876] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.772419][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.820286][ T5906] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 321.865417][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.882013][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.938216][ T9876] XFS (loop7): Ending clean mount [ 321.948969][ T9876] XFS (loop7): Quotacheck needed: Please wait. [ 321.969684][ T5906] usb 7-1: config 0 descriptor?? [ 322.030860][ T5906] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.049730][ T9876] XFS (loop7): Quotacheck: Done. [ 322.087069][ T5906] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 322.183821][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.434267][ T9904] loop0: detected capacity change from 0 to 1024 [ 322.509471][ T5917] usb 7-1: USB disconnect, device number 9 [ 322.526271][ T6168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.539195][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.550785][ T31] audit: type=1800 audit(1769092391.363:39): pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1319" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 322.564860][ T5917] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 322.666585][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.760474][ T7423] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.152339][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 323.213838][ T9913] netlink: 'syz.2.1324': attribute type 7 has an invalid length. [ 323.248354][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.280641][ T9913] netlink: 'syz.2.1324': attribute type 8 has an invalid length. [ 323.299148][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 323.368114][ T9913] erspan0: entered promiscuous mode [ 323.388702][ T9913] erspan0: left promiscuous mode [ 324.283463][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.485010][ T9952] loop4: detected capacity change from 0 to 764 [ 324.528169][ T9952] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 324.770331][ T9917] loop0: detected capacity change from 0 to 32768 [ 324.845763][ T9917] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.014542][ T9917] XFS (loop0): Ending clean mount [ 325.123443][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 325.313582][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.331789][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 325.361095][ T5917] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 325.384324][ T5917] usb 3-1: config 0 has no interface number 0 [ 325.406859][ T5835] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.428632][ T5917] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 325.499579][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.533978][ T5917] usb 3-1: Product: syz [ 325.538228][ T5917] usb 3-1: Manufacturer: syz [ 325.591711][ T5917] usb 3-1: SerialNumber: syz [ 325.612456][ T5917] usb 3-1: config 0 descriptor?? [ 325.661900][ T5917] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 325.715038][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.902224][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 325.976589][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 326.346023][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.418067][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 326.418522][ T7356] usb 3-1: USB disconnect, device number 14 [ 326.439671][ T9993] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1350'. [ 326.457375][ T7356] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 326.524826][ T7356] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 326.583847][ T7356] quatech2 3-1:0.51: device disconnected [ 327.384350][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.297193][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.307537][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.316462][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.432271][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.049906][T10052] loop6: detected capacity change from 0 to 4096 [ 329.126413][T10052] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 329.291725][T10052] ntfs3(loop6): ino=19, mi_enum_attr [ 329.317366][T10052] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 329.468244][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.811008][T10070] overlayfs: failed to resolve './bus': -2 [ 330.122303][T10075] loop7: detected capacity change from 0 to 256 [ 330.255686][T10075] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 330.404321][T10075] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 1) [ 330.412382][T10075] exFAT-fs (loop7): failed to load alloc-bitmap [ 330.533020][T10075] exFAT-fs (loop7): failed to recognize exfat type [ 330.546428][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.081006][ T5917] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 331.164033][ T5917] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.388398][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.468765][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.469564][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.504983][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.644483][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.552152][T10127] loop0: detected capacity change from 0 to 256 [ 332.663995][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.005762][T10132] loop7: detected capacity change from 0 to 1024 [ 333.363885][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 333.553954][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 333.582303][ T5917] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 333.592537][T10144] loop2: detected capacity change from 0 to 2048 [ 333.636954][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.689049][T10144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.699408][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.731228][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.736603][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.773398][ T5917] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.832591][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.876132][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.024153][ T6150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.034165][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.053643][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.167878][ T5837] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 334.184005][ T5917] usb 1-1: usb_control_msg returned -32 [ 334.190404][ T5837] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 334.198687][ T5917] usbtmc 1-1:16.0: can't read capabilities [ 334.574117][T10159] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 334.619884][ T5934] usb 1-1: USB disconnect, device number 16 [ 334.756574][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.929799][ T6626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.289480][ T6626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.479878][T10177] loop0: detected capacity change from 0 to 256 [ 335.512313][T10177] exfat: Deprecated parameter 'utf8' [ 335.541325][T10177] exfat: Deprecated parameter 'utf8' [ 335.597150][ T6626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.785253][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.786610][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.808950][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.818419][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.827745][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.842643][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.004468][T10188] loop6: detected capacity change from 0 to 512 [ 336.015352][ T6626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.030908][T10188] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 336.150095][T10188] EXT4-fs (loop6): 1 truncate cleaned up [ 336.170974][T10188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.356462][T10188] EXT4-fs error (device loop6): ext4_generic_delete_entry:2665: inode #2: block 13: comm syz.6.1436: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 336.450477][T10188] EXT4-fs (loop6): Remounting filesystem read-only [ 336.466357][T10188] EXT4-fs warning (device loop6): ext4_rename_delete:3727: inode #2: comm syz.6.1436: Deleting old file: nlink 5, error=-117 [ 336.758550][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.781009][ T6626] bridge_slave_1: left allmulticast mode [ 336.801582][ T6626] bridge_slave_1: left promiscuous mode [ 336.808315][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.824552][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.844589][ T6626] bridge_slave_0: left allmulticast mode [ 336.873831][ T6626] bridge_slave_0: left promiscuous mode [ 336.879710][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.144078][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.883570][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.892406][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.958902][ T5832] Bluetooth: hci4: command tx timeout [ 338.360286][T10229] loop4: detected capacity change from 0 to 64 [ 338.543045][T10234] loop7: detected capacity change from 0 to 512 [ 338.665627][T10234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.775276][T10234] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.829184][ T6412] kworker/u8:20: attempt to access beyond end of device [ 338.829184][ T6412] loop4: rw=8388609, sector=65, nr_sectors = 1 limit=64 [ 338.849277][ T31] audit: type=1800 audit(1769092407.663:40): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1454" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 338.897269][ T6412] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 338.907074][ T6412] kworker/u8:20: attempt to access beyond end of device [ 338.907074][ T6412] loop4: rw=8388609, sector=66, nr_sectors = 1 limit=64 [ 338.915016][T10234] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 338.923380][ T6412] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 338.950746][ T6412] kworker/u8:20: attempt to access beyond end of device [ 338.950746][ T6412] loop4: rw=8388609, sector=67, nr_sectors = 1 limit=64 [ 338.974696][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1455'. [ 338.988113][ T793] net_ratelimit: 2 callbacks suppressed [ 338.988141][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.004033][T10234] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 339.058733][T10234] EXT4-fs (loop7): This should not happen!! Data will be lost [ 339.058733][T10234] [ 339.059488][ T6412] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 339.112645][T10234] EXT4-fs (loop7): Total free blocks count 0 [ 339.118867][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.118867][ T6412] loop4: rw=8388609, sector=68, nr_sectors = 1 limit=64 [ 339.131234][T10234] EXT4-fs (loop7): Free/Dirty block details [ 339.157549][ T6412] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 339.162774][T10234] EXT4-fs (loop7): free_blocks=65280 [ 339.172675][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.172675][ T6412] loop4: rw=8388609, sector=72, nr_sectors = 1 limit=64 [ 339.189844][T10234] EXT4-fs (loop7): dirty_blocks=31 [ 339.202172][T10234] EXT4-fs (loop7): Block reservation details [ 339.218910][T10234] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 339.251683][ T6412] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 339.283743][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.283743][ T6412] loop4: rw=8388609, sector=73, nr_sectors = 1 limit=64 [ 339.345872][ T6412] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 339.346572][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.404684][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.404684][ T6412] loop4: rw=8388609, sector=76, nr_sectors = 1 limit=64 [ 339.410932][T10245] loop0: detected capacity change from 0 to 256 [ 339.437878][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.450168][ T6949] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 339.462881][ T6412] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 339.462938][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.462938][ T6412] loop4: rw=8388609, sector=77, nr_sectors = 1 limit=64 [ 339.462978][ T6412] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 339.463113][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.463113][ T6412] loop4: rw=1, sector=78, nr_sectors = 24 limit=64 [ 339.528688][ T6626] bond0 (unregistering): (slave bond1): Releasing backup interface [ 339.573228][T10245] FAT-fs (loop0): Directory bread(block 64) failed [ 339.586640][ T6626] bond0 (unregistering): Released all slaves [ 339.618663][T10245] FAT-fs (loop0): Directory bread(block 65) failed [ 339.622415][ T6412] kworker/u8:20: attempt to access beyond end of device [ 339.622415][ T6412] loop4: rw=8388609, sector=102, nr_sectors = 1 limit=64 [ 339.649493][ T6412] Buffer I/O error on dev loop4, logical block 102, lost async page write [ 339.659890][ T6412] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 339.704327][T10245] FAT-fs (loop0): Directory bread(block 66) failed [ 339.710933][T10245] FAT-fs (loop0): Directory bread(block 67) failed [ 339.731619][T10245] FAT-fs (loop0): Directory bread(block 68) failed [ 339.783847][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.792900][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.808962][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.818435][T10245] FAT-fs (loop0): Directory bread(block 69) failed [ 339.838318][T10245] FAT-fs (loop0): Directory bread(block 70) failed [ 339.863894][T10245] FAT-fs (loop0): Directory bread(block 71) failed [ 339.877714][T10245] FAT-fs (loop0): Directory bread(block 72) failed [ 339.916344][T10245] FAT-fs (loop0): Directory bread(block 73) failed [ 340.023589][ T5832] Bluetooth: hci4: command tx timeout [ 340.035933][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.125999][T10249] loop7: detected capacity change from 0 to 4096 [ 340.144956][T10249] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 340.214261][T10249] ntfs3(loop7): ino=19, mi_enum_attr [ 340.219723][T10249] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 340.464513][ T6626] bond1 (unregistering): Released all slaves [ 340.621190][T10247] netlink: 'syz.4.1456': attribute type 34 has an invalid length. [ 340.996007][T10258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.063870][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.072046][T10258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.081896][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.170866][T10258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.371154][T10254] loop0: detected capacity change from 0 to 32768 [ 341.389176][T10254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1462 (10254) [ 341.422195][T10254] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.494859][T10254] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 341.692217][T10281] loop4: detected capacity change from 0 to 1024 [ 341.808382][T10254] BTRFS info (device loop0): enabling ssd optimizations [ 341.849194][T10254] BTRFS info (device loop0): turning on async discard [ 341.888019][T10254] BTRFS info (device loop0): enabling free space tree [ 342.104496][ T5832] Bluetooth: hci4: command tx timeout [ 342.147841][T10181] chnl_net:caif_netlink_parms(): no params data found [ 342.499847][ T8492] kernel read not supported for file /472/coredump_filter (pid: 8492 comm: kworker/0:9) [ 342.642803][ T5835] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.798781][ T6626] hsr_slave_0: left promiscuous mode [ 342.904226][ T6626] hsr_slave_1: left promiscuous mode [ 342.948613][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.976529][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.094618][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.154064][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.269132][ T6626] veth1_macvtap: left promiscuous mode [ 343.280735][ T6626] veth0_macvtap: left promiscuous mode [ 343.294109][ T6626] veth1_vlan: left promiscuous mode [ 343.313655][ T6626] veth0_vlan: left promiscuous mode [ 344.184174][ T5832] Bluetooth: hci4: command tx timeout [ 344.667163][ T5963] net_ratelimit: 9 callbacks suppressed [ 344.667193][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.959245][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 345.009933][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 345.544420][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.570432][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.583549][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.696678][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.704862][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.724550][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.733695][T10181] bridge_slave_0: entered allmulticast mode [ 345.800715][T10181] bridge_slave_0: entered promiscuous mode [ 345.848914][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.903699][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.911079][T10181] bridge_slave_1: entered allmulticast mode [ 346.022470][T10181] bridge_slave_1: entered promiscuous mode [ 346.255302][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.315177][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.440750][ T31] audit: type=1326 audit(1769092415.263:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.6.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facb399acb9 code=0x0 [ 346.519310][T10181] team0: Port device team_slave_0 added [ 346.537855][T10181] team0: Port device team_slave_1 added [ 346.746694][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.806082][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.813080][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.950212][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.014398][T10379] dummy0: entered allmulticast mode [ 347.045320][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.072653][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.216587][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.316609][T10377] dummy0: left allmulticast mode [ 347.550786][T10181] hsr_slave_0: entered promiscuous mode [ 347.604934][T10181] hsr_slave_1: entered promiscuous mode [ 347.641008][T10181] debugfs: 'hsr0' already exists in 'hsr' [ 347.681270][T10181] Cannot create hsr debugfs directory [ 347.766806][T10361] loop0: detected capacity change from 0 to 40427 [ 347.779934][T10363] loop4: detected capacity change from 0 to 32768 [ 347.787940][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.842595][T10361] F2FS-fs (loop0): build fault injection rate: 174 [ 347.878924][T10361] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 347.929005][T10361] F2FS-fs (loop0): invalid crc value [ 348.000967][T10363] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.093876][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 348.322387][T10363] XFS (loop4): Ending clean mount [ 348.454386][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 348.466783][ T9] usb 7-1: config 7 has an invalid interface number: 98 but max is 0 [ 348.495941][ T9] usb 7-1: config 7 has no interface number 0 [ 348.511230][T10361] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 348.553540][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 348.562663][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.638335][T10361] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 348.641908][T10363] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 348.663629][ T9] usb 7-1: Product: syz [ 348.667952][ T9] usb 7-1: Manufacturer: syz [ 348.672688][ T9] usb 7-1: SerialNumber: syz [ 348.729428][T10363] XFS (loop4): Unmount and run xfs_repair [ 348.744841][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.776023][T10363] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 348.816617][T10363] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 348.825962][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.918919][T10363] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 348.969502][T10363] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 348.995783][T10361] bio_check_eod: 10 callbacks suppressed [ 348.995808][T10361] syz.0.1488: attempt to access beyond end of device [ 348.995808][T10361] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 349.029607][T10363] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 349.050412][T10363] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 349.086160][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.0.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.086221][T10361] Tainted: [L]=SOFTLOCKUP [ 349.086234][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 349.086256][T10361] Call Trace: [ 349.086274][T10361] [ 349.086288][T10361] dump_stack_lvl+0x100/0x190 [ 349.086343][T10361] f2fs_handle_critical_error+0x5d7/0x970 [ 349.086404][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.086449][T10361] ? f2fs_build_fault_attr+0x53/0x1f0 [ 349.086511][T10361] f2fs_write_end_io+0xc24/0xf00 [ 349.086574][T10361] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 349.086640][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.086694][T10361] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 349.086753][T10361] bio_endio+0x755/0x8b0 [ 349.086813][T10361] submit_bio_noacct+0x1b7/0x1e80 [ 349.086868][T10361] __submit_merged_bio+0x331/0x6f0 [ 349.086935][T10361] __submit_merged_write_cond+0x31a/0x3f0 [ 349.087008][T10361] f2fs_write_cache_pages+0x21c8/0x2720 [ 349.087071][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087118][T10361] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 349.087158][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087203][T10361] ? is_bpf_text_address+0x8a/0x1a0 [ 349.087250][T10361] ? rcu_is_watching+0x12/0xc0 [ 349.087302][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087349][T10361] ? bpf_ksym_find+0x124/0x1c0 [ 349.087409][T10361] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.087463][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087508][T10361] ? css_rstat_updated+0x1ce/0x5a0 [ 349.087555][T10361] ? is_bpf_text_address+0x94/0x1a0 [ 349.087603][T10361] ? __pfx_css_rstat_updated+0x10/0x10 [ 349.087658][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087723][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087788][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087831][T10361] ? check_irq_usage+0xe5/0x810 [ 349.087937][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.087990][T10361] f2fs_write_data_pages+0x5a7/0x1060 [ 349.088044][T10361] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 349.088094][T10361] ? do_writepages+0x4b5/0x600 [ 349.088141][T10361] ? do_writepages+0x4b5/0x600 [ 349.088185][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.088234][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.088285][T10361] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 349.088330][T10361] do_writepages+0x278/0x600 [ 349.088384][T10361] ? __pfx_do_writepages+0x10/0x10 [ 349.088430][T10361] ? do_raw_spin_unlock+0x145/0x1e0 [ 349.088472][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.088531][T10361] ? _raw_spin_unlock+0x28/0x50 [ 349.088575][T10361] filemap_writeback+0x22d/0x2e0 [ 349.088630][T10361] ? __pfx_filemap_writeback+0x10/0x10 [ 349.088678][T10361] ? check_noncircular+0x97/0x160 [ 349.088784][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.088829][T10361] ? find_held_lock+0x2b/0x80 [ 349.088874][T10361] ? f2fs_sync_dirty_inodes+0x3a7/0x940 [ 349.088919][T10361] ? f2fs_sync_dirty_inodes+0x3a7/0x940 [ 349.088960][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089017][T10361] f2fs_sync_dirty_inodes+0x46a/0x940 [ 349.089087][T10361] block_operations+0x2a6/0xfc0 [ 349.089099][T10363] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 349.089128][T10361] ? __pfx___schedule+0x10/0x10 [ 349.089172][T10361] ? __pfx_block_operations+0x10/0x10 [ 349.089210][T10361] ? check_noncircular+0x97/0x160 [ 349.089403][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089450][T10361] ? ktime_get+0x200/0x300 [ 349.089500][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089542][T10361] ? lockdep_hardirqs_on+0x78/0x100 [ 349.089585][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089628][T10361] ? rcu_is_watching+0x12/0xc0 [ 349.089692][T10361] f2fs_write_checkpoint+0x47d/0x5240 [ 349.089739][T10361] ? check_irq_usage+0xe5/0x810 [ 349.089795][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089842][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.089885][T10361] ? down_write+0x146/0x1f0 [ 349.089932][T10361] ? __pfx_down_write+0x10/0x10 [ 349.089991][T10361] f2fs_issue_checkpoint+0x177/0x590 [ 349.090039][T10361] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 349.090090][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.090133][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.090175][T10361] ? __lock_acquire+0xd73/0x2630 [ 349.090273][T10361] ? __up_read+0x2c5/0x700 [ 349.090308][T10361] ? f2fs_is_checkpointed_node+0xa3/0xc0 [ 349.090356][T10361] ? __pfx___up_read+0x10/0x10 [ 349.090392][T10361] ? f2fs_do_sync_file+0x18eb/0x1c70 [ 349.090455][T10361] f2fs_sync_fs+0x317/0x3d0 [ 349.090507][T10361] f2fs_do_sync_file+0xbd4/0x1c70 [ 349.090575][T10361] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 349.090692][T10361] ? __pfx_down_write+0x10/0x10 [ 349.090741][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.090784][T10361] ? rcu_read_lock_any_held+0x6a/0xa0 [ 349.090838][T10361] __f2fs_ioctl+0x4ca9/0xade0 [ 349.090879][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.090922][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.090965][T10361] ? find_held_lock+0x2b/0x80 [ 349.091017][T10361] ? tomoyo_path_number_perm+0x28f/0x580 [ 349.091070][T10361] ? tomoyo_path_number_perm+0x28f/0x580 [ 349.091120][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.091172][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.091215][T10361] ? tomoyo_path_number_perm+0x188/0x580 [ 349.091277][T10361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.091330][T10361] ? __pfx___f2fs_ioctl+0x10/0x10 [ 349.091377][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.091420][T10361] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.091473][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.091515][T10361] ? do_vfs_ioctl+0x226/0x13e0 [ 349.091566][T10361] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 349.091635][T10361] f2fs_ioctl+0x1f7/0x740 [ 349.091671][T10361] ? __pfx_f2fs_ioctl+0x10/0x10 [ 349.091705][T10361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.091747][T10361] ? __fget_files+0x21f/0x3d0 [ 349.091813][T10361] ? __pfx_f2fs_ioctl+0x10/0x10 [ 349.091850][T10361] __x64_sys_ioctl+0x18e/0x210 [ 349.091903][T10361] do_syscall_64+0xc9/0xf80 [ 349.091950][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.091987][T10361] RIP: 0033:0x7fc797b9acb9 [ 349.092016][T10361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.092053][T10361] RSP: 002b:00007fc798ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.092087][T10361] RAX: ffffffffffffffda RBX: 00007fc797e15fa0 RCX: 00007fc797b9acb9 [ 349.092118][T10361] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005 [ 349.092149][T10361] RBP: 00007fc797c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 349.092172][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.092194][T10361] R13: 00007fc797e16038 R14: 00007fc797e15fa0 R15: 00007ffca8bfe1e8 [ 349.092245][T10361] [ 349.119429][T10361] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 349.137192][T10363] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 349.156140][T10181] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.391061][T10363] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 349.491595][T10418] loop7: detected capacity change from 0 to 512 [ 349.533554][T10363] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74 [ 349.688096][T10418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.860482][T10363] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x910 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 349.879924][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.888240][T10181] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.907920][ T9] usb 7-1: USB disconnect, device number 10 [ 349.956960][T10181] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.958671][T10363] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 349.994085][ T9484] loop4: writeback error on inode 9286, offset 0, sector 18692 [ 350.013597][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.98/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.059791][T10181] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.107097][ T31] audit: type=1800 audit(1769092418.923:42): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1501" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 350.227848][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.330286][ T7423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.547187][T10432] loop6: detected capacity change from 0 to 1024 [ 350.663745][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.779476][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.884458][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.904768][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.963236][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.970520][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.126996][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.134689][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.286021][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.336743][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.373260][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.433092][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.474358][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.521043][T10450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.789305][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.363020][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.738280][T10486] loop0: detected capacity change from 0 to 256 [ 353.395715][T10501] loop0: detected capacity change from 0 to 4096 [ 353.513929][T10506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.859211][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.064303][T10513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.289473][T10498] loop7: detected capacity change from 0 to 32768 [ 354.670240][ T7423] read_mapping_page failed! [ 354.678567][ T7423] ERROR: (device loop7): txAbort: [ 354.678567][ T7423] [ 354.769195][ T7423] read_mapping_page failed! [ 354.811792][ T7423] ERROR: (device loop7): txAbort: [ 354.811792][ T7423] [ 354.865543][T10181] veth0_vlan: entered promiscuous mode [ 354.956790][T10181] veth1_vlan: entered promiscuous mode [ 355.071118][ T9484] net_ratelimit: 4 callbacks suppressed [ 355.071145][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.121147][T10181] veth0_macvtap: entered promiscuous mode [ 355.161653][T10181] veth1_macvtap: entered promiscuous mode [ 355.220595][T10541] loop6: detected capacity change from 0 to 512 [ 355.256190][T10541] EXT4-fs (loop6): Test dummy encryption mode enabled [ 355.293808][T10541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 355.348125][T10541] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1537: bad orphan inode 131083 [ 355.385710][T10541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.455650][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.489876][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.583631][ T31] audit: type=1326 audit(1769092424.403:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6ab9acb9 code=0x7fc00000 [ 355.636223][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.710134][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.909542][ T2992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.938345][ T31] audit: type=1326 audit(1769092424.753:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf6ab3c0d9 code=0x7fc00000 [ 356.031082][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.104952][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.128728][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.173437][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.271116][ T2992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.574470][ T2992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.826060][ T2992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.844143][ T5917] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 356.906996][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.918692][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.927720][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.936405][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.945973][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.044373][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.083447][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.096209][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.104982][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 357.144668][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.154319][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.202194][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 357.245300][ T5917] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 357.300076][ T5917] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 357.331678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.339799][ T5917] usb 7-1: Manufacturer: syz [ 357.350726][ T5917] usb 7-1: config 0 descriptor?? [ 357.397995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.614656][ T7356] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 357.803500][ T7356] usb 5-1: Using ep0 maxpacket: 32 [ 357.809983][ T2992] bridge_slave_1: left allmulticast mode [ 357.827744][ T2992] bridge_slave_1: left promiscuous mode [ 357.828264][ T7356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 357.850450][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.863245][ T7356] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 357.866549][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.887167][ T5917] rc_core: IR keymap rc-hauppauge not found [ 357.893989][ T7356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.902471][ T7356] usb 5-1: Product: syz [ 357.906702][ T5917] Registered IR keymap rc-empty [ 357.906857][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.912198][ T7356] usb 5-1: Manufacturer: syz [ 357.921025][ T2992] bridge_slave_0: left allmulticast mode [ 357.954198][ T2992] bridge_slave_0: left promiscuous mode [ 357.954664][ T7356] usb 5-1: SerialNumber: syz [ 357.974400][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.984917][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.998900][ T7356] usb 5-1: config 0 descriptor?? [ 358.015011][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 358.080755][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 358.129985][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.183673][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.184304][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.235266][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.304435][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.354359][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.423541][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.436969][ T7356] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 358.463591][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.496076][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.564457][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.593563][ T5917] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 358.665419][ T5917] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 358.687376][ T5917] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 358.716002][ T5917] usb 7-1: USB disconnect, device number 11 [ 359.039384][ T7356] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 359.065012][ T5832] Bluetooth: hci0: command tx timeout [ 359.125781][ T7356] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 359.193753][ T7356] usb 5-1: USB disconnect, device number 16 [ 359.246586][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.391482][T10599] loop0: detected capacity change from 0 to 4096 [ 359.468947][T10602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.985384][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.999495][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.019821][ T2992] bond0 (unregistering): Released all slaves [ 360.154616][ T9484] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 360.266398][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.275525][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.335260][ T9484] usb 1-1: Using ep0 maxpacket: 8 [ 360.347669][ T9484] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.359650][ T9484] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.371230][ T9484] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.425914][ T9484] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.443406][ T9484] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.462841][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.660661][T10570] chnl_net:caif_netlink_parms(): no params data found [ 360.717096][ T9484] usb 1-1: GET_CAPABILITIES returned 0 [ 360.733062][ T9484] usbtmc 1-1:16.0: can't read capabilities [ 360.906657][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.930732][T10613] loop6: detected capacity change from 0 to 32768 [ 360.991499][ T5963] usb 1-1: USB disconnect, device number 17 [ 361.144804][ T5832] Bluetooth: hci0: command tx timeout [ 361.303671][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.369287][ T2992] hsr_slave_0: left promiscuous mode [ 361.400981][ T2992] hsr_slave_1: left promiscuous mode [ 361.448546][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.476359][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.509335][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.522549][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.692935][ T2992] veth1_macvtap: left promiscuous mode [ 361.731161][ T2992] veth0_macvtap: left promiscuous mode [ 361.754820][ T2992] veth1_vlan: left promiscuous mode [ 361.760233][ T2992] veth0_vlan: left promiscuous mode [ 361.861002][T10653] loop0: detected capacity change from 0 to 1024 [ 362.193877][ T5963] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 362.349187][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.394060][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 362.413795][ T5963] usb 1-1: config 0 has no interfaces? [ 362.441946][ T5963] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 362.484193][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.492367][ T5963] usb 1-1: Product: syz [ 362.513448][ T5963] usb 1-1: Manufacturer: syz [ 362.538606][ T5963] usb 1-1: SerialNumber: syz [ 362.573725][ T5963] usb 1-1: config 0 descriptor?? [ 362.842272][T10653] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 362.866242][ T9484] usb 1-1: USB disconnect, device number 18 [ 363.243803][ T5832] Bluetooth: hci0: command tx timeout [ 363.383771][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.716320][ T6949] hfsplus: b-tree write err: -5, ino 4 [ 363.944744][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.423980][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.753292][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 364.838259][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 365.143142][T10706] loop6: detected capacity change from 0 to 1024 [ 365.215868][T10706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.238775][T10706] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.305707][ T5832] Bluetooth: hci0: command tx timeout [ 365.355652][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.467002][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.759101][T10654] geneve2: entered promiscuous mode [ 365.800396][T10654] geneve2: entered allmulticast mode [ 365.843135][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.852569][T10683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.946663][T10711] loop6: detected capacity change from 0 to 40427 [ 365.956083][T10711] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 365.965607][T10711] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 366.019191][T10711] F2FS-fs (loop6): invalid crc value [ 366.098097][T10570] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.106391][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.126580][T10570] bridge_slave_0: entered allmulticast mode [ 366.147252][T10570] bridge_slave_0: entered promiscuous mode [ 366.180002][T10570] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.208360][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.236142][T10570] bridge_slave_1: entered allmulticast mode [ 366.276831][T10570] bridge_slave_1: entered promiscuous mode [ 366.447087][T10711] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.486494][T10570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.503983][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.542062][T10711] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 366.576423][T10570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.579747][T10711] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 366.754388][ T31] audit: type=1800 audit(1769092435.573:45): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1595" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 366.775565][ T5963] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 366.801057][T10711] syz.6.1595: attempt to access beyond end of device [ 366.801057][T10711] loop6: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 366.806048][T10570] team0: Port device team_slave_0 added [ 366.882141][T10570] team0: Port device team_slave_1 added [ 366.908387][T10711] syz.6.1595: attempt to access beyond end of device [ 366.908387][T10711] loop6: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 366.953744][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 366.997792][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.014234][T10711] syz.6.1595: attempt to access beyond end of device [ 367.014234][T10711] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 367.049793][T10570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.065539][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.092082][ T31] audit: type=1800 audit(1769092435.883:46): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1595" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 367.183857][ T5963] usb 5-1: config 7 has an invalid interface number: 98 but max is 0 [ 367.192115][ T5963] usb 5-1: config 7 has no interface number 0 [ 367.198578][T10570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.237130][T10570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.252457][ T5963] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 367.272082][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.283743][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.323460][ T5963] usb 5-1: Product: syz [ 367.327800][ T5963] usb 5-1: Manufacturer: syz [ 367.350105][ T5963] usb 5-1: SerialNumber: syz [ 367.392533][T10570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.543856][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.676476][T10570] hsr_slave_0: entered promiscuous mode [ 367.704146][T10570] hsr_slave_1: entered promiscuous mode [ 367.734642][T10570] debugfs: 'hsr0' already exists in 'hsr' [ 367.766036][T10570] Cannot create hsr debugfs directory [ 367.908943][ T5963] usb 5-1: USB disconnect, device number 17 [ 368.035399][T10723] loop0: detected capacity change from 0 to 32768 [ 368.105553][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.98/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.164421][T10723] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4 [ 368.164421][T10723] [ 368.200550][T10723] ERROR: (device loop0): remounting filesystem as read-only [ 368.238418][T10747] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4 [ 368.238418][T10747] [ 368.594000][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.631744][T10751] loop8: detected capacity change from 0 to 512 [ 368.707124][T10751] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 368.793200][T10751] EXT4-fs (loop8): 1 truncate cleaned up [ 368.805097][T10755] @: renamed from vlan0 (while UP) [ 368.832555][T10751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.004738][T10751] syz.8.1604 (pid 10751) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 369.165812][T10755] loop4: detected capacity change from 0 to 4096 [ 369.213385][T10755] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 369.268345][T10763] netlink: 'syz.6.1607': attribute type 11 has an invalid length. [ 369.308736][T10570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 369.355315][T10181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.366977][T10755] ntfs3(loop4): ino=19, mi_enum_attr [ 369.374257][T10570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 369.410041][T10755] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 369.515803][T10570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 369.585120][T10570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 369.624054][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.777352][T10769] loop8: detected capacity change from 0 to 1024 [ 369.861936][T10769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.920772][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.034153][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.321349][T10570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.364428][T10759] loop0: detected capacity change from 0 to 32768 [ 370.407846][T10759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1605 (10759) [ 370.453956][T10570] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.469785][T10181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.529578][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.536805][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.658000][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.665228][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.676934][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.737008][T10759] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.789282][T10759] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 370.879602][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1613'. [ 371.315696][T10759] BTRFS info (device loop0): rebuilding free space tree [ 371.439751][T10759] BTRFS info (device loop0): disabling free space tree [ 371.503458][T10759] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 371.570160][T10759] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 371.678640][T10759] BTRFS info (device loop0): setting nodatasum [ 371.704467][T10759] BTRFS info (device loop0): setting nodatacow [ 371.713517][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.723536][T10759] BTRFS info (device loop0): turning off barriers [ 371.729999][T10759] BTRFS info (device loop0): force clearing of disk cache [ 372.007950][ T5835] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.386647][T10570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.697246][T10846] netlink: 'syz.4.1623': attribute type 11 has an invalid length. [ 372.744501][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.074045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.368373][T10826] loop6: detected capacity change from 0 to 32768 [ 373.377290][T10824] loop8: detected capacity change from 0 to 32768 [ 373.486051][T10826] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 373.517387][T10826] JBD2: Ignoring recovery information on journal [ 373.528692][T10824] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 373.746258][T10826] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 373.784385][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.849061][T10824] XFS (loop8): Ending clean mount [ 373.906795][T10824] XFS (loop8): Quotacheck needed: Please wait. [ 374.139627][T10824] XFS (loop8): Quotacheck: Done. [ 374.410518][ T6564] ocfs2: Unmounting device (7,6) on (node local) [ 374.510124][T10181] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.680628][T10570] veth0_vlan: entered promiscuous mode [ 374.826186][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.998778][T10855] loop0: detected capacity change from 0 to 32768 [ 375.052627][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.068280][T10855] (syz.0.1624,10855,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 375.123876][T10855] (syz.0.1624,10855,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 375.176368][T10888] loop6: detected capacity change from 0 to 47 [ 375.231767][T10855] JBD2: Ignoring recovery information on journal [ 375.332114][T10855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 375.349196][T10570] veth1_vlan: entered promiscuous mode [ 375.791110][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.865809][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.957139][T10570] veth0_macvtap: entered promiscuous mode [ 376.086388][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 376.131629][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.155457][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.186914][ T5963] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 376.279831][T10570] veth1_macvtap: entered promiscuous mode [ 376.365029][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 376.379688][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.385469][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.402032][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.410398][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.412634][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.437814][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.447161][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.453452][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.491943][ T5963] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 376.511451][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.535177][ T5963] usb 7-1: config 0 descriptor?? [ 376.571079][ T5963] hub 7-1:0.0: USB hub found [ 376.655230][T10570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.724000][T10570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.798057][ T5963] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 376.881743][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.906852][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.923437][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.097020][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.166477][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.209900][ T5963] hid (null): bogus close delimiter [ 377.258929][ T5963] hid-generic 0003:046D:C31C.000D: bogus close delimiter [ 377.297455][ T5963] hid-generic 0003:046D:C31C.000D: item 0 0 2 10 parsing failed [ 377.322346][ T9484] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 377.355594][ T5963] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 377.445303][ T5963] usb 7-1: USB disconnect, device number 12 [ 377.513619][ T9484] usb 9-1: Using ep0 maxpacket: 8 [ 377.555961][ T9484] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 377.610380][ T9484] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 377.634462][ T39] bridge_slave_1: left allmulticast mode [ 377.663460][ T9484] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.687388][ T9484] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.754036][ T9484] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.806807][ T9484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.845417][ T39] bridge_slave_1: left promiscuous mode [ 377.891529][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.938077][ T39] bridge_slave_0: left allmulticast mode [ 377.975955][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.977593][ T39] bridge_slave_0: left promiscuous mode [ 377.990266][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.028804][T10934] Bluetooth: MGMT ver 1.23 [ 378.075979][ T9484] usb 9-1: GET_CAPABILITIES returned 0 [ 378.085318][ T9484] usbtmc 9-1:16.0: can't read capabilities [ 378.320498][T10938] loop0: detected capacity change from 0 to 512 [ 378.344499][ T9484] usb 9-1: USB disconnect, device number 2 [ 378.468600][ T31] audit: type=1800 audit(1769092447.283:47): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1648" name="nullb0" dev="tmpfs" ino=1634 res=0 errno=0 [ 378.504641][ T5832] Bluetooth: hci1: command tx timeout [ 378.528498][T10938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.603267][T10938] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.737868][T10938] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #12: comm syz.0.1646: directory missing '..' [ 378.784421][T10938] EXT4-fs (loop0): Remounting filesystem read-only [ 378.896968][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.984279][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.153705][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.468128][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.498414][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.526998][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.551262][ T39] bond0 (unregistering): Released all slaves [ 380.002091][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.024147][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.025000][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.282249][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1658'. [ 380.303018][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1658'. [ 380.319802][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1658'. [ 380.358634][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1658'. [ 380.584327][ T5832] Bluetooth: hci1: command tx timeout [ 380.608636][T10983] loop6: detected capacity change from 0 to 1024 [ 380.699022][T10903] chnl_net:caif_netlink_parms(): no params data found [ 380.753856][T10983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.784352][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.843074][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.974430][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.004044][ T39] hsr_slave_0: left promiscuous mode [ 381.042012][ T39] hsr_slave_1: left promiscuous mode [ 381.099077][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.170732][ T39] veth1_macvtap: left promiscuous mode [ 381.213610][ T39] veth0_macvtap: left promiscuous mode [ 381.219286][ T39] veth1_vlan: left promiscuous mode [ 381.239764][ T39] veth0_vlan: left promiscuous mode [ 381.267858][T11004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.085099][T11024] loop8: detected capacity change from 0 to 1024 [ 382.111570][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.170960][T11024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.183791][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.560046][T10181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.668998][ T5832] Bluetooth: hci1: command tx timeout [ 382.758226][T11042] binder: 11041:11042 ioctl c0306201 200000000680 returned -14 [ 383.144224][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.372875][ T39] team0 (unregistering): Port device team_slave_1 removed [ 383.460895][ T39] team0 (unregistering): Port device team_slave_0 removed [ 383.590189][T11050] Set syz1 is full, maxelem 14 reached [ 383.962303][T11048] loop8: detected capacity change from 0 to 32768 [ 383.999954][T11048] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1677 (11048) [ 384.129010][T11048] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 384.162977][T11048] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 384.194176][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.482929][T11018] geneve2: entered promiscuous mode [ 384.490427][T11048] BTRFS info (device loop8): rebuilding free space tree [ 384.528723][T11048] BTRFS info (device loop8): disabling free space tree [ 384.538029][T11018] geneve2: entered allmulticast mode [ 384.546188][T11048] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 384.569780][T11048] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 384.620352][T11048] BTRFS info (device loop8): setting nodatasum [ 384.629054][T11048] BTRFS info (device loop8): setting nodatacow [ 384.636268][T11048] BTRFS info (device loop8): turning off barriers [ 384.643122][T11048] BTRFS info (device loop8): force clearing of disk cache [ 384.743823][ T5832] Bluetooth: hci1: command tx timeout [ 384.948869][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.992005][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.032325][T10903] bridge_slave_0: entered allmulticast mode [ 385.061290][T10181] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 385.086496][T10903] bridge_slave_0: entered promiscuous mode [ 385.131922][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.163663][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.176035][T10903] bridge_slave_1: entered allmulticast mode [ 385.216785][T10903] bridge_slave_1: entered promiscuous mode [ 385.226914][ T9484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.235051][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.405517][ T39] IPVS: stop unused estimator thread 0... [ 385.557137][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.612397][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.890494][T10903] team0: Port device team_slave_0 added [ 385.909689][T10903] team0: Port device team_slave_1 added [ 386.029625][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.073714][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.224456][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.268813][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.306822][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.343612][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.487866][T11101] loop0: detected capacity change from 0 to 128 [ 386.495825][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.617308][T11101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.695405][T11101] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.879623][T11107] loop8: detected capacity change from 0 to 512 [ 386.885990][T10903] hsr_slave_0: entered promiscuous mode [ 386.899001][T10903] hsr_slave_1: entered promiscuous mode [ 386.925662][T11107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.976833][ T5835] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.037481][T11107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.059397][T11107] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.312783][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.230834][T10181] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.288383][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.344701][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.580397][T11137] vlan3: entered allmulticast mode [ 388.633034][T11144] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1697'. [ 388.685937][T11137] bond0: entered allmulticast mode [ 388.711175][T11137] bond_slave_0: entered allmulticast mode [ 388.739454][T11137] bond_slave_1: entered allmulticast mode [ 389.075667][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.165690][T11144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.189718][T11144] bond_slave_0: left allmulticast mode [ 389.237407][T11144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.269431][T11156] loop9: detected capacity change from 0 to 512 [ 389.288231][T11144] bond_slave_1: left allmulticast mode [ 389.304679][T11156] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 389.350461][T11144] bond0 (unregistering): Released all slaves [ 389.384478][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.431189][T11156] EXT4-fs (loop9): 1 truncate cleaned up [ 389.440316][T11159] overlayfs: failed to clone upperpath [ 389.477008][T11156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.496873][T11159] overlayfs: failed to resolve './cgroup': -2 [ 389.901474][T10570] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.921771][T11164] loop6: detected capacity change from 0 to 4096 [ 390.001717][T11164] EXT4-fs (loop6): Test dummy encryption mode enabled [ 390.049886][T11164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0103] [ 390.059969][T11164] System zones: 0-5 [ 390.173266][T11164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.300385][T10903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.422189][T10903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.459734][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.528335][T10903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.646566][T10903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.682700][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.087304][T11192] loop6: detected capacity change from 0 to 4096 [ 391.129892][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.186488][T11195] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.292103][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.303650][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.369288][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.376619][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.471321][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.506768][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.514058][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.966846][T11210] loop6: detected capacity change from 0 to 128 [ 391.966887][T11208] loop0: detected capacity change from 0 to 512 [ 392.044764][T11208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.070558][ T31] audit: type=1800 audit(1769092460.883:48): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1714" name="bus" dev="loop6" ino=1048679 res=0 errno=0 [ 392.111853][T11212] tipc: Started in network mode [ 392.152497][T11212] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 392.198695][T11208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.219067][T11208] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.247066][T11212] tipc: Enabled bearer , priority 10 [ 392.312069][T11217] tipc: Resetting bearer [ 392.322849][T11173] loop9: detected capacity change from 0 to 40427 [ 392.395351][T11173] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 392.403182][T11173] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 392.492753][T11173] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 392.552355][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.674099][T11217] tipc: Disabling bearer [ 392.908857][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.915747][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.985540][T11173] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 393.037627][T11173] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 393.058565][T11173] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 393.331756][T11173] syz.9.1705: attempt to access beyond end of device [ 393.331756][T11173] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 393.440079][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.474721][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.634345][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.892013][T10903] veth0_vlan: entered promiscuous mode [ 394.002627][T10903] veth1_vlan: entered promiscuous mode [ 394.177960][T10903] veth0_macvtap: entered promiscuous mode [ 394.221518][T10903] veth1_macvtap: entered promiscuous mode [ 394.343712][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.521611][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.596200][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.665354][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.686765][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.707488][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.733094][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.849664][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.205352][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.250150][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.359984][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.398460][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.703922][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.072035][T11288] loop6: detected capacity change from 0 to 2048 [ 396.221942][T11288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.555646][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.800338][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.763440][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.875073][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.028002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.365815][T11324] loop9: detected capacity change from 0 to 4096 [ 398.424559][T11326] loop0: detected capacity change from 0 to 8192 [ 398.556796][ T31] audit: type=1800 audit(1769092467.373:49): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1743" name="file2" dev="loop0" ino=1048685 res=0 errno=0 [ 398.623902][T11326] syz.0.1743: attempt to access beyond end of device [ 398.623902][T11326] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 398.671820][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.684993][T11326] buffer_io_error: 6 callbacks suppressed [ 398.685023][T11326] Buffer I/O error on dev loop0, logical block 57847, async page read [ 398.907877][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.020213][T11305] loop3: detected capacity change from 0 to 40427 [ 399.080262][T11305] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 399.134087][T11305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 399.209696][T11305] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 399.481156][T11320] loop8: detected capacity change from 0 to 32768 [ 399.638486][T11320] JBD2: Ignoring recovery information on journal [ 399.820095][T11305] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 399.928902][T11320] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 399.953682][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.384290][ T31] audit: type=1800 audit(1769092469.203:50): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1742" name="bus" dev="loop8" ino=17059 res=0 errno=0 [ 400.744699][T10181] ocfs2: Unmounting device (7,8) on (node local) [ 400.827526][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.991968][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.090206][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1760'. [ 401.257923][T11356] loop9: detected capacity change from 0 to 32768 [ 401.372390][T11356] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 401.577346][T11356] XFS (loop9): Ending clean mount [ 401.936827][T10570] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 402.054389][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.326597][T11421] loop0: detected capacity change from 0 to 128 [ 402.675627][T11428] (syz.3.1769,11428,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 403.072394][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.868640][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.028883][ T5917] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 404.135232][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.213907][ T8492] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 404.234195][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.287893][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.331746][ T5917] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 404.352726][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.385278][ T5917] usb 9-1: config 0 descriptor?? [ 404.427457][ T8492] usb 7-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 404.445578][ T5934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 404.457287][ T8492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.501003][ T8492] usb 7-1: config 0 descriptor?? [ 404.570696][ T8492] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input25 [ 404.625769][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.651886][T11434] loop0: detected capacity change from 0 to 32768 [ 404.680880][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.719106][ T5934] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 404.753056][ T5934] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.773355][ T5934] usb 4-1: Manufacturer: syz [ 404.788635][ T5934] usb 4-1: config 0 descriptor?? [ 404.807970][T11434] JBD2: Ignoring recovery information on journal [ 405.068390][ T8492] usb 7-1: USB disconnect, device number 13 [ 405.242120][ T5917] hid-led 0003:27B8:01ED.000E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 405.368717][ T5917] hid-led 0003:27B8:01ED.000E: ThingM blink(1) initialized [ 405.516457][ T5917] usb 9-1: USB disconnect, device number 3 [ 405.580573][T11481] fido_id[11481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 405.885978][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.898663][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.063668][T11434] JBD2: journal reset failed [ 406.110538][T11434] (syz.0.1771,11434,0):ocfs2_journal_load:1160 ERROR: Failed to load journal! [ 406.176451][T11477] loop9: detected capacity change from 0 to 131072 [ 406.185204][T11477] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 406.193491][T11477] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 406.206014][T11477] F2FS-fs (loop9): invalid crc value [ 406.223127][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.230250][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.237184][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.238278][T11434] (syz.0.1771,11434,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 406.245350][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.262977][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.350784][T11477] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 406.392832][ T5934] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 406.399794][T11477] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 406.408613][T11477] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 406.468814][ T5934] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 406.705497][T11498] overlayfs: failed to clone upperpath [ 406.746221][ T5934] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 406.803990][ T5934] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 406.839147][ T5934] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 406.904254][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.940351][ T5934] usb 4-1: USB disconnect, device number 3 [ 407.017104][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.573948][ T5917] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 407.687976][T11508] fido_id[11508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 407.814119][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.865191][ T5917] usb 7-1: config 0 has no interfaces? [ 407.907564][ T5917] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 407.977625][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.033509][ T5917] usb 7-1: Product: syz [ 408.037745][ T5917] usb 7-1: Manufacturer: syz [ 408.052052][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.072895][ T5917] usb 7-1: SerialNumber: syz [ 408.134863][ T5917] usb 7-1: config 0 descriptor?? [ 408.393527][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.422338][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1803'. [ 408.532999][T11539] loop3: detected capacity change from 0 to 512 [ 408.559607][ T5934] usb 7-1: USB disconnect, device number 14 [ 408.607753][T11539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.690057][T11539] EXT4-fs (loop3): DAX unsupported by block device. [ 409.089570][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.165914][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 409.500835][T11557] loop6: detected capacity change from 0 to 512 [ 409.829326][T11555] loop8: detected capacity change from 0 to 4096 [ 409.859468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.942213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 409.975115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.119933][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.305957][ T31] audit: type=1800 audit(1769092479.123:51): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1809" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 410.893130][T11578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.933662][T11578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.996215][T11578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.079656][T11580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.136186][T11580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.037425][T11598] (syz.8.1821,11598,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 412.296517][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.306755][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.556083][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.575210][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.093529][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.122105][ T4309] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.162402][ T4309] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.219608][ T4309] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.239514][ T5934] net_ratelimit: 14 callbacks suppressed [ 413.239540][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.452659][T11629] loop0: detected capacity change from 0 to 1024 [ 413.491110][T11629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.542148][T11635] misc userio: Begin command sent, but we're already running [ 413.584343][ T5934] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 413.609266][T11629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.748262][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 413.803459][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 413.825560][ T5934] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 413.860895][ T5934] usb 10-1: config 0 has no interface number 0 [ 413.886321][ T5934] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.939262][ T5934] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 413.957823][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 413.977464][ T5934] usb 10-1: Product: syz [ 414.004703][ T5934] usb 10-1: config 0 descriptor?? [ 414.064470][ T5934] iowarrior 10-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 414.228174][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.280183][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.378819][ T89] usb 10-1: USB disconnect, device number 2 [ 414.385054][ C0] iowarrior 10-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 415.311979][ T6257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.492884][T11675] loop8: detected capacity change from 0 to 4096 [ 415.779391][T11680] team0: Port device team_slave_0 removed [ 415.868870][ T13] ntfs3(loop8): ino=5, mi_enum_attr [ 416.025387][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.277974][T11696] loop8: detected capacity change from 0 to 2048 [ 416.355892][ T6257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.371760][T11696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.393818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 416.577570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 416.652180][T11709] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1855'. [ 416.684468][T11696] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 416.854107][T11696] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 416.908678][T11696] EXT4-fs (loop8): This should not happen!! Data will be lost [ 416.908678][T11696] [ 416.957169][T11696] EXT4-fs (loop8): Total free blocks count 0 [ 416.993061][T11696] EXT4-fs (loop8): Free/Dirty block details [ 417.018382][T11696] EXT4-fs (loop8): free_blocks=2415919504 [ 417.111378][T11696] EXT4-fs (loop8): dirty_blocks=48 [ 417.127747][T11696] EXT4-fs (loop8): Block reservation details [ 417.143677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 417.188708][T11696] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 417.224069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 417.252017][T11679] loop3: detected capacity change from 0 to 32768 [ 417.271490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 417.283439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 417.329752][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1858'. [ 417.350058][T11679] (syz.3.1846,11679,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 417.390614][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.431074][T11679] (syz.3.1846,11679,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 417.561672][T11721] ip6gretap0: entered promiscuous mode [ 417.616722][ T6147] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 417.621379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 417.639404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 417.686978][T11679] JBD2: Ignoring recovery information on journal [ 417.865258][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.049417][T11679] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 418.433223][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.837283][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 418.848931][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.848993][ T5832] Tainted: [L]=SOFTLOCKUP [ 418.849006][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 418.849032][ T5832] Workqueue: hci0 hci_rx_work [ 418.849087][ T5832] Call Trace: [ 418.849099][ T5832] [ 418.849112][ T5832] dump_stack_lvl+0x100/0x190 [ 418.849166][ T5832] sysfs_warn_dup.cold+0x1c/0x28 [ 418.849219][ T5832] sysfs_create_dir_ns+0x24b/0x2b0 [ 418.849268][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 418.849311][ T5832] ? find_held_lock+0x2b/0x80 [ 418.849358][ T5832] ? kobject_add_internal+0x25f/0x930 [ 418.849437][ T5832] ? kobject_add_internal+0x25f/0x930 [ 418.849493][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.849545][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 418.849590][ T5832] kobject_add_internal+0x2c8/0x930 [ 418.849651][ T5832] kobject_add+0x16a/0x1e0 [ 418.849701][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 418.849749][ T5832] ? class_to_subsys+0x10f/0x150 [ 418.849809][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.849855][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.849899][ T5832] ? kobject_put+0xb9/0x640 [ 418.849944][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 418.849996][ T5832] device_add+0x294/0x1950 [ 418.850048][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 418.850108][ T5832] ? __pfx_device_add+0x10/0x10 [ 418.850160][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.850204][ T5832] ? mgmt_send_event_skb+0x2fb/0x460 [ 418.850267][ T5832] hci_conn_add_sysfs+0x1a3/0x260 [ 418.850326][ T5832] le_conn_complete_evt+0x11cb/0x1f40 [ 418.850388][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 418.850447][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 418.850495][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 418.850552][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 418.850602][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 418.850657][ T5832] hci_event_packet+0x682/0x11c0 [ 418.850705][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 418.850759][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 418.850804][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.850849][ T5832] ? kcov_remote_start+0x374/0x660 [ 418.850899][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 418.850941][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.850996][ T5832] hci_rx_work+0x451/0xfc0 [ 418.851053][ T5832] process_one_work+0x9c2/0x1840 [ 418.851115][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 418.851155][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.851212][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.851261][ T5832] ? assign_work+0x19c/0x250 [ 418.851302][ T5832] worker_thread+0x5da/0xe40 [ 418.851354][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 418.851400][ T5832] ? kthread+0x17d/0x730 [ 418.851432][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 418.851473][ T5832] kthread+0x3b3/0x730 [ 418.851517][ T5832] ? __pfx_kthread+0x10/0x10 [ 418.851550][ T5832] ? ret_from_fork+0x79/0xaf0 [ 418.851589][ T5832] ? ret_from_fork+0x79/0xaf0 [ 418.851627][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.851671][ T5832] ? rcu_is_watching+0x12/0xc0 [ 418.851731][ T5832] ? __pfx_kthread+0x10/0x10 [ 418.851768][ T5832] ret_from_fork+0x754/0xaf0 [ 418.851815][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 418.851855][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.851902][ T5832] ? rcu_is_watching+0x12/0xc0 [ 418.851947][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.851992][ T5832] ? __switch_to+0x7b9/0x10c0 [ 418.852043][ T5832] ? __pfx_kthread+0x10/0x10 [ 418.852082][ T5832] ret_from_fork_asm+0x1a/0x30 [ 418.852169][ T5832] [ 419.212941][ T5832] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.227259][ T5832] Bluetooth: hci0: failed to register connection device [ 419.245408][ T5832] ================================================================== [ 419.253511][ T5832] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe75/0x1010 [ 419.261636][ T5832] Read of size 8 at addr ffff88806aec6480 by task kworker/u9:2/5832 [ 419.269641][ T5832] [ 419.271981][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.272038][ T5832] Tainted: [L]=SOFTLOCKUP [ 419.272052][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 419.272079][ T5832] Workqueue: hci0 hci_rx_work [ 419.272130][ T5832] Call Trace: [ 419.272143][ T5832] [ 419.272158][ T5832] dump_stack_lvl+0x100/0x190 [ 419.272206][ T5832] print_report+0x156/0x4c9 [ 419.272259][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.272304][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.272355][ T5832] ? __phys_addr+0xe8/0x180 [ 419.272417][ T5832] ? l2cap_connect_cfm+0xe75/0x1010 [ 419.272462][ T5832] kasan_report+0xdf/0x1a0 [ 419.272504][ T5832] ? l2cap_connect_cfm+0xe75/0x1010 [ 419.272556][ T5832] l2cap_connect_cfm+0xe75/0x1010 [ 419.272608][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 419.272659][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 419.272706][ T5832] le_conn_complete_evt+0x195c/0x1f40 [ 419.272761][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 419.272815][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 419.272864][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 419.272910][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 419.272961][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 419.273013][ T5832] hci_event_packet+0x682/0x11c0 [ 419.273073][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 419.273124][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 419.273171][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.273218][ T5832] ? kcov_remote_start+0x374/0x660 [ 419.273270][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 419.273318][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.273370][ T5832] hci_rx_work+0x451/0xfc0 [ 419.273425][ T5832] process_one_work+0x9c2/0x1840 [ 419.273476][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 419.273516][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.273567][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.273615][ T5832] ? assign_work+0x19c/0x250 [ 419.273653][ T5832] worker_thread+0x5da/0xe40 [ 419.273699][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 419.273739][ T5832] ? kthread+0x17d/0x730 [ 419.273772][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 419.273810][ T5832] kthread+0x3b3/0x730 [ 419.273845][ T5832] ? __pfx_kthread+0x10/0x10 [ 419.273878][ T5832] ? ret_from_fork+0x79/0xaf0 [ 419.273916][ T5832] ? ret_from_fork+0x79/0xaf0 [ 419.273953][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.273998][ T5832] ? rcu_is_watching+0x12/0xc0 [ 419.274045][ T5832] ? __pfx_kthread+0x10/0x10 [ 419.274081][ T5832] ret_from_fork+0x754/0xaf0 [ 419.274120][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 419.274159][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.274204][ T5832] ? rcu_is_watching+0x12/0xc0 [ 419.274248][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.274293][ T5832] ? __switch_to+0x7b9/0x10c0 [ 419.274347][ T5832] ? __pfx_kthread+0x10/0x10 [ 419.274387][ T5832] ret_from_fork_asm+0x1a/0x30 [ 419.274457][ T5832] [ 419.274470][ T5832] [ 419.564576][ T5832] Allocated by task 5832: [ 419.568905][ T5832] kasan_save_stack+0x30/0x50 [ 419.573623][ T5832] kasan_save_track+0x14/0x30 [ 419.578411][ T5832] __kasan_kmalloc+0xaa/0xb0 [ 419.583055][ T5832] l2cap_chan_create+0x44/0x940 [ 419.588047][ T5832] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 419.593883][ T5832] l2cap_sock_new_connection_cb+0x101/0x260 [ 419.599804][ T5832] l2cap_connect_cfm+0x4e2/0x1010 [ 419.604838][ T5832] le_conn_complete_evt+0x195c/0x1f40 [ 419.610230][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 419.615794][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 419.620584][ T5832] hci_event_packet+0x682/0x11c0 [ 419.625536][ T5832] hci_rx_work+0x451/0xfc0 [ 419.629991][ T5832] process_one_work+0x9c2/0x1840 [ 419.634967][ T5832] worker_thread+0x5da/0xe40 [ 419.639572][ T5832] kthread+0x3b3/0x730 [ 419.643651][ T5832] ret_from_fork+0x754/0xaf0 [ 419.648525][ T5832] ret_from_fork_asm+0x1a/0x30 [ 419.653350][ T5832] [ 419.655765][ T5832] Freed by task 11742: [ 419.659839][ T5832] kasan_save_stack+0x30/0x50 [ 419.664550][ T5832] kasan_save_track+0x14/0x30 [ 419.669279][ T5832] kasan_save_free_info+0x3b/0x70 [ 419.674372][ T5832] __kasan_slab_free+0x5f/0x80 [ 419.679271][ T5832] kfree+0x1c7/0x690 [ 419.683187][ T5832] l2cap_chan_put+0x235/0x300 [ 419.687939][ T5832] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 419.693511][ T5832] l2cap_sock_release+0x69/0x280 [ 419.698647][ T5832] __sock_release+0xb3/0x260 [ 419.703478][ T5832] sock_close+0x1c/0x30 [ 419.707873][ T5832] __fput+0x3ff/0xb40 [ 419.711886][ T5832] task_work_run+0x150/0x240 [ 419.716493][ T5832] exit_to_user_mode_loop+0x100/0x4b0 [ 419.721883][ T5832] do_syscall_64+0x4fe/0xf80 [ 419.726491][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.732399][ T5832] [ 419.734801][ T5832] The buggy address belongs to the object at ffff88806aec6000 [ 419.734801][ T5832] which belongs to the cache kmalloc-2k of size 2048 [ 419.748865][ T5832] The buggy address is located 1152 bytes inside of [ 419.748865][ T5832] freed 2048-byte region [ffff88806aec6000, ffff88806aec6800) [ 419.762972][ T5832] [ 419.765294][ T5832] The buggy address belongs to the physical page: [ 419.771710][ T5832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6aec0 [ 419.780491][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 419.788993][ T5832] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 419.797108][ T5832] page_type: f5(slab) [ 419.801110][ T5832] raw: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 419.809715][ T5832] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 419.818354][ T5832] head: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 419.827059][ T5832] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 419.835761][ T5832] head: 00fff00000000003 ffffea0001abb001 00000000ffffffff 00000000ffffffff [ 419.844562][ T5832] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 419.853242][ T5832] page dumped because: kasan: bad access detected [ 419.859660][ T5832] page_owner tracks the page as allocated [ 419.865378][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10570, tgid 10570 (syz-executor), ts 357444114792, free_ts 357417921541 [ 419.887393][ T5832] post_alloc_hook+0x1e1/0x250 [ 419.892193][ T5832] get_page_from_freelist+0xe3d/0x2e10 [ 419.897680][ T5832] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 419.903602][ T5832] alloc_pages_mpol+0x1fb/0x550 [ 419.908585][ T5832] new_slab+0x2c4/0x440 [ 419.912752][ T5832] ___slab_alloc+0xda3/0x1ca0 [ 419.917792][ T5832] __slab_alloc.isra.0+0x63/0x110 [ 419.922834][ T5832] __kmalloc_noprof+0x618/0x9c0 [ 419.927701][ T5832] ops_init+0x77/0x5f0 [ 419.931800][ T5832] setup_net+0x118/0x3a0 [ 419.936063][ T5832] copy_net_ns+0x46f/0x7c0 [ 419.940484][ T5832] create_new_namespaces+0x3ea/0xab0 [ 419.945899][ T5832] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 419.951588][ T5832] ksys_unshare+0x455/0xab0 [ 419.956148][ T5832] __x64_sys_unshare+0x31/0x40 [ 419.960942][ T5832] do_syscall_64+0xc9/0xf80 [ 419.965463][ T5832] page last free pid 12 tgid 12 stack trace: [ 419.971454][ T5832] __free_frozen_pages+0x822/0x1130 [ 419.976677][ T5832] __put_partials+0x127/0x160 [ 419.981464][ T5832] qlist_free_all+0x47/0xe0 [ 419.985995][ T5832] kasan_quarantine_reduce+0x1a0/0x1f0 [ 419.991571][ T5832] __kasan_slab_alloc+0x69/0x90 [ 419.996422][ T5832] __kmalloc_noprof+0x300/0x9c0 [ 420.001322][ T5832] ieee80211_alloc_chanctx+0x9f/0x4b0 [ 420.006714][ T5832] ieee80211_new_chanctx+0x84/0x320 [ 420.011929][ T5832] _ieee80211_link_use_channel+0x9f5/0xba0 [ 420.017760][ T5832] __ieee80211_sta_join_ibss+0x615/0x1900 [ 420.023512][ T5832] ieee80211_sta_create_ibss.cold+0xaf/0x104 [ 420.029525][ T5832] ieee80211_ibss_work.cold+0x253/0x431 [ 420.035092][ T5832] ieee80211_iface_work+0xc05/0x1350 [ 420.040388][ T5832] cfg80211_wiphy_work+0x3f7/0x560 [ 420.045520][ T5832] process_one_work+0x9c2/0x1840 [ 420.050463][ T5832] worker_thread+0x5da/0xe40 [ 420.055144][ T5832] [ 420.057459][ T5832] Memory state around the buggy address: [ 420.063083][ T5832] ffff88806aec6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.071245][ T5832] ffff88806aec6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.079344][ T5832] >ffff88806aec6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.087517][ T5832] ^ [ 420.091595][ T5832] ffff88806aec6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.099756][ T5832] ffff88806aec6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.107927][ T5832] ================================================================== [ 420.116428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.125985][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.134414][ T5832] Disabling lock debugging due to kernel taint [ 420.140581][ T5832] ================================================================== [ 420.148738][ T5832] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x7c0/0x1010 [ 420.156696][ T5832] Read of size 4 at addr deacfffffffffc8c by task kworker/u9:2/5832 [ 420.164698][ T5832] [ 420.167029][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:2 Tainted: G B L syzkaller #0 PREEMPT(full) [ 420.167084][ T5832] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 420.167098][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 420.167126][ T5832] Workqueue: hci0 hci_rx_work [ 420.167172][ T5832] Call Trace: [ 420.167184][ T5832] [ 420.167198][ T5832] dump_stack_lvl+0x100/0x190 [ 420.167241][ T5832] kasan_report+0xdf/0x1a0 [ 420.167278][ T5832] ? l2cap_connect_cfm+0x7c0/0x1010 [ 420.167326][ T5832] kasan_check_range+0x10f/0x1e0 [ 420.167367][ T5832] l2cap_connect_cfm+0x7c0/0x1010 [ 420.167429][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 420.167473][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 420.167515][ T5832] le_conn_complete_evt+0x195c/0x1f40 [ 420.167570][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 420.167619][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 420.167663][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 420.167705][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 420.167750][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 420.167797][ T5832] hci_event_packet+0x682/0x11c0 [ 420.167838][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 420.167884][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 420.167926][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.167969][ T5832] ? kcov_remote_start+0x374/0x660 [ 420.168016][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 420.168055][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168101][ T5832] hci_rx_work+0x451/0xfc0 [ 420.168147][ T5832] process_one_work+0x9c2/0x1840 [ 420.168193][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 420.168229][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168274][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168315][ T5832] ? assign_work+0x19c/0x250 [ 420.168349][ T5832] worker_thread+0x5da/0xe40 [ 420.168389][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 420.168430][ T5832] ? kthread+0x17d/0x730 [ 420.168460][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 420.168498][ T5832] kthread+0x3b3/0x730 [ 420.168529][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.168565][ T5832] ? ret_from_fork+0x79/0xaf0 [ 420.168599][ T5832] ? ret_from_fork+0x79/0xaf0 [ 420.168632][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168673][ T5832] ? rcu_is_watching+0x12/0xc0 [ 420.168715][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.168747][ T5832] ret_from_fork+0x754/0xaf0 [ 420.168782][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 420.168817][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168858][ T5832] ? rcu_is_watching+0x12/0xc0 [ 420.168897][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.168937][ T5832] ? __switch_to+0x7b9/0x10c0 [ 420.168981][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.169014][ T5832] ret_from_fork_asm+0x1a/0x30 [ 420.169076][ T5832] [ 420.169088][ T5832] ================================================================== [ 420.446932][ T5832] Oops: general protection fault, probably for non-canonical address 0xfbd59bffffffff91: 0000 [#1] SMP KASAN NOPTI [ 420.459262][ T5832] KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f] [ 420.468647][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:2 Tainted: G B L syzkaller #0 PREEMPT(full) [ 420.479700][ T5832] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 420.485323][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 420.495404][ T5832] Workqueue: hci0 hci_rx_work [ 420.500125][ T5832] RIP: 0010:l2cap_connect_cfm+0x7c7/0x1010 [ 420.506045][ T5832] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 f1 15 8c f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 10 74 f5 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 83 [ 420.525672][ T5832] RSP: 0018:ffffc90003e8f7d0 EFLAGS: 00010213 [ 420.531904][ T5832] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001c7c1000 [ 420.539940][ T5832] RDX: 0000000000000000 RSI: ffffffff81c58cad RDI: ffff88803420db80 [ 420.548009][ T5832] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 [ 420.556040][ T5832] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff8880323fc03d [ 420.564028][ T5832] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff8880332632c0 [ 420.572006][ T5832] FS: 0000000000000000(0000) GS:ffff8881246de000(0000) knlGS:0000000000000000 [ 420.581030][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.587632][ T5832] CR2: 0000001b30d1dff8 CR3: 0000000012b25000 CR4: 0000000000350ef0 [ 420.595613][ T5832] Call Trace: [ 420.598885][ T5832] [ 420.602347][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 420.607834][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 420.613342][ T5832] le_conn_complete_evt+0x195c/0x1f40 [ 420.618830][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 420.624659][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 420.630221][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 420.635002][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 420.639784][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 420.645879][ T5832] hci_event_packet+0x682/0x11c0 [ 420.650832][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 420.656141][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 420.661527][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.667203][ T5832] ? kcov_remote_start+0x374/0x660 [ 420.672367][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 420.677590][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.683248][ T5832] hci_rx_work+0x451/0xfc0 [ 420.687705][ T5832] process_one_work+0x9c2/0x1840 [ 420.692761][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 420.698171][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.703924][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.709578][ T5832] ? assign_work+0x19c/0x250 [ 420.714176][ T5832] worker_thread+0x5da/0xe40 [ 420.718788][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 420.723908][ T5832] ? kthread+0x17d/0x730 [ 420.728151][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 420.733273][ T5832] kthread+0x3b3/0x730 [ 420.737358][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.741951][ T5832] ? ret_from_fork+0x79/0xaf0 [ 420.746659][ T5832] ? ret_from_fork+0x79/0xaf0 [ 420.751354][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.757003][ T5832] ? rcu_is_watching+0x12/0xc0 [ 420.761874][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.766488][ T5832] ret_from_fork+0x754/0xaf0 [ 420.771613][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 420.776737][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.782388][ T5832] ? rcu_is_watching+0x12/0xc0 [ 420.787166][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.792813][ T5832] ? __switch_to+0x7b9/0x10c0 [ 420.797506][ T5832] ? __pfx_kthread+0x10/0x10 [ 420.802113][ T5832] ret_from_fork_asm+0x1a/0x30 [ 420.807130][ T5832] [ 420.810147][ T5832] Modules linked in: [ 420.814721][ T5832] ---[ end trace 0000000000000000 ]--- [ 420.830920][T10903] ocfs2: Unmounting device (7,3) on (node local) [ 420.830987][ T5832] RIP: 0010:l2cap_connect_cfm+0x7c7/0x1010 [ 420.843203][ T5832] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 f1 15 8c f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 10 74 f5 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 83 [ 420.862947][ T5832] RSP: 0018:ffffc90003e8f7d0 EFLAGS: 00010213 [ 420.869416][ T5832] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001c7c1000 [ 420.877751][ T5832] RDX: 0000000000000000 RSI: ffffffff81c58cad RDI: ffff88803420db80 [ 420.885905][ T5832] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 [ 420.894071][ T5832] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff8880323fc03d [ 420.902442][ T5832] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff8880332632c0 [ 420.910564][ T5832] FS: 0000000000000000(0000) GS:ffff8881246de000(0000) knlGS:0000000000000000 [ 420.919553][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.926441][ T5832] CR2: 0000001b30d1dff8 CR3: 0000000012b25000 CR4: 0000000000350ef0 [ 420.934528][ T5832] Kernel panic - not syncing: Fatal exception [ 420.940989][ T5832] Kernel Offset: disabled [ 420.945376][ T5832] Rebooting in 86400 seconds..