last executing test programs: 8m31.457448973s ago: executing program 1 (id=10457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) 8m30.783184332s ago: executing program 1 (id=10464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)) 8m29.793505146s ago: executing program 1 (id=10474): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/130, 0x3b, 0x82, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 8m29.361131547s ago: executing program 1 (id=10479): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x800000, &(0x7f00000002c0)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@uid}, {@numtail}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x2b3, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) 8m27.661703394s ago: executing program 1 (id=10492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) 8m25.190150332s ago: executing program 1 (id=10512): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 8m24.906607877s ago: executing program 32 (id=10512): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 5m52.868976732s ago: executing program 3 (id=11848): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="4701140000000000ff3383400000000020000000", 0x14, 0x8881, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @random="645bcc77540e"}, 0x14) 5m51.730956868s ago: executing program 3 (id=11860): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xff, 0xe, 0x0, 0xfffffffd, 0x7f, "db8f2d2b3b7596160c6981acf8805985823a7f"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x200) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 5m51.581964332s ago: executing program 3 (id=11862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r3, r0, 0x4, r1}, 0x10) 5m51.326519281s ago: executing program 3 (id=11865): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m51.181015101s ago: executing program 3 (id=11867): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c57511000000", 0x2c}, {&(0x7f0000000300)="72d752833e2c6f2c4c884fbb", 0xc}], 0x2}}], 0x1, 0x4046040) 5m49.029721838s ago: executing program 3 (id=11885): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 5m48.804159301s ago: executing program 33 (id=11885): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 2m47.292277392s ago: executing program 0 (id=13156): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) syncfs(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1}) 2m42.983105293s ago: executing program 0 (id=13171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x101}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d00", 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7a4df1d35cc9bede168d3d8dca779293dd9564877b009d93c99a7a0f983e33e937bfb13b06e611c8c33313821f110e6911643cfabc2c75c42af256a07c8fee22c7795cb5a57dda8df2b668d893dd7a6bbfada01b49c6c96156bd5ebc10f16fd30579fa059207c4c9f69fff76a3e83839697324adc1037b64db5fe6f55a72fc9311a414c8848885071620e2c7539e6ac2684785ce04bba9785b4571e183bc12fdad8d58e57d0355c4082fbe08fdb8feedd6d3d6f7f586f22b06069ed48b931c7cbc2eca14b2e649432953a9ef28928450ca8907b90fce815cdfecf28816817e72fa25317324b64ff7259d1a2bb9ef8469048f652fd47638060a26a48ff9e05a1fc6fed416d5a0f461cb111ce1cc9cdd38032c30e7c6b520274d638ddd69ef1c08d8c66b134d8b8ca861e7eac50714bd71106ff8087f91a8313fc71753487bfd0b44a5050c2a43ba096517db528bff36aafc3e25f18a1e07f8a877c099a84bae3bfa8e6e67a52c5ec681efaa36fc33f82f87c8c7a11f6cbfc792e066ce2c69821aac641b02feaf14a7ee7448da9a5c1dce17852bd342670b0be913f585f055ace4902906b1c52477df7c0328de81d000964fc0ae1a8c3bf98da90cfa549b4e1230cd667ce5cd43a9f23b36d90e154481573b18bc11aa7a2a83f38e62751a8cf7219ca", 0x54b}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m42.505951826s ago: executing program 0 (id=13175): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0xa, 0x6, "42acf1f46133"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="ea0e06"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x20, 0x8, 0x98, "2760e50952ca3b853fa625c28fc7f75f39a59b6d021f5e41027eb5388ebda92cbe4e9d804041cd3b4f80dd10c22d3279c876507e3f06a920acfd0045d389a2dbbc084d49c7b24bef5b197c07f37bdddf1586150c31d30127247252ed3dd27a69e9c26c984016de1d20a27af6649a00731c8d1789cc0b9b322571e6be2ef3afa891d5f67b9e6c623b30ec08b5cf12e3359c92ad490b2f7648"}, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth1_to_hsr\x00', @local}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m39.885482263s ago: executing program 0 (id=13189): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m39.370021156s ago: executing program 0 (id=13193): creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) socketpair(0x10, 0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2m34.559095714s ago: executing program 0 (id=13242): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x10000) 2m19.263934482s ago: executing program 34 (id=13242): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x10000) 19.504962341s ago: executing program 7 (id=13330): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.692100867s ago: executing program 7 (id=13772): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5add, &(0x7f0000000080)={0x0, 0x20000c51, 0x400, 0x5, 0x3a1}, &(0x7f0000000100), 0x0, &(0x7f0000000200)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 16.669959988s ago: executing program 7 (id=13779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}, {0x0}], 0x2}, 0x32}], 0x1, 0x122, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x428901) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @loopback}, 0x40, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x80000000, 0x5b54}) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYBLOB="4a608d9463d8358f18b648d9bcd02635e479cc7ee3f25f21fe92db962402f717ef0135b882f0e9119991dc3c914197b424f34bb226e93278e9da7e33539b66d4957613fde70baa6402d214063a5f0dc8655be1a4f2ba8489499ebe867530e34b392adf49a6f0bb17", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000010601040000004000000000030000070500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'nat\x00', 0x0, [0x6, 0xdd4, 0x5, 0x5a, 0x7]}, &(0x7f0000000100)=0x54) 13.375584413s ago: executing program 4 (id=13787): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 12.576488674s ago: executing program 4 (id=13791): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) fcntl$setlease(r0, 0x400, 0x2) 11.137490243s ago: executing program 4 (id=13794): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11.126365222s ago: executing program 5 (id=13795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000045c0), 0xffffffffffffffff) 8.608781739s ago: executing program 5 (id=13802): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close(r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x20000080) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 8.608050237s ago: executing program 4 (id=13803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) 7.631104913s ago: executing program 7 (id=13807): socket(0x10, 0x80002, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 7.524516999s ago: executing program 2 (id=13808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) 6.759440668s ago: executing program 35 (id=13807): socket(0x10, 0x80002, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 6.634869963s ago: executing program 5 (id=13810): syz_emit_ethernet(0x66, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 6.633662164s ago: executing program 2 (id=13811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) read$FUSE(r0, 0x0, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r2, &(0x7f0000000000)='stack\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xffffffffffffff99) 6.359730451s ago: executing program 2 (id=13812): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, &(0x7f0000003f80)=""/4098, 0x1002) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r0, 0x0, 0x0) 6.203395795s ago: executing program 5 (id=13813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6.019674276s ago: executing program 2 (id=13814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000000), 0xfe7, 0x40801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) 4.648830704s ago: executing program 5 (id=13815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sysfs$1(0x1, &(0x7f0000000140)='hfsplus\x00') 4.647264936s ago: executing program 2 (id=13816): getpgrp(0xffffffffffffffff) capset(0x0, 0x0) io_uring_setup(0x9, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_emit_ethernet(0x16, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x40804) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x6c, 0xe, 0x9e2d, 0x3, 0xb}) 4.541408555s ago: executing program 4 (id=13817): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x10002, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.109409537s ago: executing program 2 (id=13818): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) getpgid(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) write$binfmt_register(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$team(0x0, r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) 3.247998137s ago: executing program 5 (id=13819): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_skbedit={0x4c, 0x17, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9f77}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x5, 0x6, "81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 3.204556764s ago: executing program 4 (id=13820): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.971986508s ago: executing program 6 (id=11887): r0 = epoll_create(0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000004}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 1.430562464s ago: executing program 6 (id=13821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 0s ago: executing program 6 (id=13822): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = getpid() r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r5, r6, 0x2, 0x0, 0x2, 0x1, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0x2, 0xcf2, 0xb, 0xb2bb, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) sched_setscheduler(r1, 0x2, 0x0) kernel console output (not intermixed with test programs): 03] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.988027][ T1261] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1306.988619][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.991341][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.991384][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.991408][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.992077][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.992212][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.992319][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1306.992420][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.000375][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.001762][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1307.022915][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 1307.043680][ T5716] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 1307.043768][ T5716] usb 6-1: config 0 has no interface number 0 [ 1307.043904][ T5716] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1307.074387][ T5716] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1307.074493][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.074556][ T5716] usb 6-1: Product: syz [ 1307.074601][ T5716] usb 6-1: Manufacturer: syz [ 1307.074643][ T5716] usb 6-1: SerialNumber: syz [ 1307.189989][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.190052][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.190082][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.190110][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.190137][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.190189][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.206822][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.262179][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.287538][ T71] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.290350][ T71] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.302490][ T5716] usb 6-1: config 0 descriptor?? [ 1307.346782][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.352528][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.387585][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1307.487209][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1307.641588][T29786] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1307.673031][ T5716] redrat3 6-1:0.83: Couldn't find all endpoints [ 1307.745400][T28493] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.862429][ T5716] usb 6-1: USB disconnect, device number 6 [ 1308.732775][ T1285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.705655][ T1315] loop4: detected capacity change from 0 to 512 [ 1309.709928][ T71] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.711645][ T1315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1309.711921][ T71] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.780836][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.781183][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.803025][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.803114][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.805151][T27029] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1309.808225][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.808696][ T1315] EXT4-fs (loop4): 1 truncate cleaned up [ 1309.809531][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.861867][ T1315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.864630][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.882495][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.911748][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.939359][ T71] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.953847][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1309.978889][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1310.000643][ T1315] EXT4-fs (loop4): shut down requested (2) [ 1310.097605][ T1328] binder: 1320:1328 ioctl c0306201 200000000640 returned -22 [ 1310.309006][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1310.313714][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.586357][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1310.586719][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1310.586902][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1310.587075][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1310.592514][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1312.229512][T29800] hsr_slave_0: left promiscuous mode [ 1312.410312][T29800] hsr_slave_1: left promiscuous mode [ 1312.420615][T29800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.420737][T29800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.471160][T29800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.471187][T29800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.334037][T29800] veth1_macvtap: left promiscuous mode [ 1313.334315][T29800] veth0_macvtap: left promiscuous mode [ 1313.338769][T29800] veth1_vlan: left promiscuous mode [ 1313.338970][T29800] veth0_vlan: left promiscuous mode [ 1316.112815][T29800] team0 (unregistering): Port device team_slave_1 removed [ 1316.280782][T29800] team0 (unregistering): Port device team_slave_0 removed [ 1317.562818][ T1490] loop5: detected capacity change from 0 to 512 [ 1317.566794][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.576117][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.634756][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.634809][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.637909][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.715645][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.716443][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.716827][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1317.718860][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.720580][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.723320][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.725764][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.731147][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.842068][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.853640][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1317.865130][ T1490] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1317.865396][ T1490] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1317.984033][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1318.048757][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1318.049904][ T1490] EXT4-fs (loop5): 1 truncate cleaned up [ 1318.073724][ T1490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.579025][ T68] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1318.579098][ T68] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1318.581325][ T1528] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1318.606546][ T1490] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1318.624724][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1318.760458][ T1490] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1318.877434][T31097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.902820][ T1528] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1319.068666][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1324.104075][ T1587] loop5: detected capacity change from 0 to 32768 [ 1324.116303][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.117675][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.151017][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.171985][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.193363][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.194578][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.196327][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.197270][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.199204][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.199899][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.202287][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.216765][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.222132][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.227482][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.229907][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.232127][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.239203][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.245446][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.250801][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.356769][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.389707][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.398983][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.400891][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.419390][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.439201][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.441708][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.458694][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.470293][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.492502][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.523450][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.528234][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.531953][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.532010][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.532045][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.534632][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.535623][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.542906][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.569553][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.575460][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.583639][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.599112][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.642742][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.643881][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.644133][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1324.644381][ T1528] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1324.644669][ T1528] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1324.644969][ T1528] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1324.645858][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1325.015180][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1325.139209][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.140028][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.140674][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.141245][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.141756][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.141936][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.209257][ T1619] overlayfs: statfs failed on './file0' [ 1325.285101][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.320147][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.353890][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1325.555222][T27029] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1325.699103][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1326.618726][ T1245] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1326.854193][ T1245] usb 6-1: Using ep0 maxpacket: 16 [ 1326.856795][ T1245] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.856857][ T1245] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1326.859971][ T1245] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1326.860007][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.860031][ T1245] usb 6-1: Product: syz [ 1326.860048][ T1245] usb 6-1: Manufacturer: syz [ 1326.860066][ T1245] usb 6-1: SerialNumber: syz [ 1327.086512][ T1245] usb 6-1: 0:2 : does not exist [ 1327.330184][ T1245] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1327.736630][ T625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1327.773560][ T625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1327.776980][ T625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1327.910002][ T625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1327.967024][ T625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1328.455407][ T1245] usb 6-1: USB disconnect, device number 7 [ 1328.526983][ T625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.529909][ T625] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1328.990995][ T625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.027641][ T37] audit: type=1326 audit(1328.707:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1329.028890][ T37] audit: type=1326 audit(1328.707:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1329.028947][ T37] audit: type=1326 audit(1328.707:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1329.029000][ T37] audit: type=1326 audit(1328.707:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1329.029430][ T37] audit: type=1326 audit(1328.707:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c6d73cbc2 code=0x7ffc0000 [ 1329.029970][ T37] audit: type=1326 audit(1328.707:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c6d6fd68e code=0x7ffc0000 [ 1329.030234][ T37] audit: type=1326 audit(1328.707:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6c6d73cc87 code=0x7ffc0000 [ 1329.030782][ T37] audit: type=1326 audit(1328.707:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6d6fd68e code=0x7ffc0000 [ 1329.031246][ T37] audit: type=1326 audit(1328.707:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c6d73caeb code=0x7ffc0000 [ 1329.031870][ T1698] loop5: detected capacity change from 0 to 8 [ 1329.093443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.322743][ T37] audit: type=1326 audit(1328.997:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1696 comm="syz.5.12718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c6d6fd68e code=0x7ffc0000 [ 1329.566757][ T1698] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1329.930697][T29404] udevd[29404]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.569201][ T1727] loop5: detected capacity change from 0 to 128 [ 1330.668646][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668728][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668758][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668787][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668814][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668841][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668870][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.668897][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.670218][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.671509][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.672375][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.682474][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.801738][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.822227][ T151] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.822978][ T1727] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1330.823013][ T1727] hpfs: filesystem error: improperly stopped [ 1330.823039][ T1727] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1330.823115][ T1727] hpfs: You really don't want any checks? You are crazy... [ 1330.823136][ T1727] hpfs: Code page index out of array [ 1330.823146][ T1727] hpfs: code page support is disabled [ 1330.823528][ T1727] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.823803][ T1727] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.823894][ T1727] hpfs: filesystem error: unable to find root dir [ 1330.879352][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.894937][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.931749][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.931924][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.932057][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.932172][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.932286][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1330.932401][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1331.748585][ T625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.790799][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1332.012102][ T1754] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 1332.175260][ T625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.197258][T29403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.197595][T29403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.267271][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.267552][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.146736][T28493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1336.286766][T28493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1336.307307][T28493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1336.320379][T28493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1336.334783][T28493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1338.145353][ T1883] loop5: detected capacity change from 0 to 32768 [ 1338.146845][ T1883] btrfs: Deprecated parameter 'usebackuproot' [ 1338.146871][ T1883] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1338.154593][ T71] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.169111][ T1883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12790 (1883) [ 1338.215791][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.274210][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.340786][ T1883] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1338.340826][ T1883] BTRFS info (device loop5): using crc32c checksum algorithm [ 1338.374162][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.376470][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.377301][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.379435][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.384051][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.517232][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.569851][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.595653][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.596173][ T71] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1338.596341][ T1883] BTRFS error (device loop5): failed to load root extent [ 1338.596393][ T1883] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1338.643236][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.658118][ T41] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1338.662127][ T1883] BTRFS warning (device loop5): couldn't read tree root [ 1338.662158][ T1883] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1338.664789][ T584] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.689306][ T584] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1338.717212][ T1883] BTRFS warning (device loop5): couldn't read tree root [ 1338.717245][ T1883] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1338.722393][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.760665][ T5620] Bluetooth: hci3: command tx timeout [ 1338.820358][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.825732][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.826495][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.829583][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.853760][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.856761][ T71] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.864531][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1338.998948][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.033285][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.034655][ T71] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.036532][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.040569][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.046621][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.051163][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.075601][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.106047][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.122870][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.178408][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.198993][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.210075][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.224021][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.227310][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.230159][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.255887][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.272174][ T151] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.281108][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.282237][ T151] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.310626][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.325622][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.331186][T27029] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.348496][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.348561][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.348598][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.348650][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.398082][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.477313][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1339.477952][ T1883] BTRFS info (device loop5): rebuilding free space tree [ 1339.655504][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1339.728499][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1340.007384][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.198450][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1340.208145][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.217749][ T1883] BTRFS info (device loop5): checking UUID tree [ 1340.219251][ T1883] BTRFS info (device loop5): enabling ssd optimizations [ 1340.219301][ T1883] BTRFS info (device loop5): turning on async discard [ 1340.219321][ T1883] BTRFS info (device loop5): enabling free space tree [ 1340.219340][ T1883] BTRFS info (device loop5): force clearing of disk cache [ 1340.219381][ T1883] BTRFS info (device loop5): enabling auto defrag [ 1340.219400][ T1883] BTRFS info (device loop5): trying to use backup root at mount time [ 1340.219486][ T1883] BTRFS info (device loop5): use zstd compression, level 3 [ 1340.349203][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.350895][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.352325][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.376956][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.382498][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.636486][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.664409][ T1917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.775574][ T5620] Bluetooth: hci3: command tx timeout [ 1342.879061][ T5620] Bluetooth: hci3: command tx timeout [ 1344.628817][ T5823] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1344.848004][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.848044][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.848085][ T5823] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1344.848106][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.901647][ T5823] usb 1-1: config 0 descriptor?? [ 1344.952167][ T5620] Bluetooth: hci3: command tx timeout [ 1345.499455][ T5823] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 1345.499499][ T5823] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 1345.499529][ T5823] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 1345.499560][ T5823] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 1345.499591][ T5823] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 1345.653383][ T5823] playstation 0003:054C:0DF2.002C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1346.135137][ T1989] loop4: detected capacity change from 0 to 256 [ 1346.155350][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.158631][ T1989] FAT-fs (loop4): bogus logical sector size 128 [ 1346.158680][ T1989] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1346.252445][ T5823] playstation 0003:054C:0DF2.002C: Failed to retrieve feature with reportID 32: -71 [ 1346.252480][ T5823] playstation 0003:054C:0DF2.002C: Failed to retrieve DualSense firmware info: -71 [ 1346.289415][ T5823] playstation 0003:054C:0DF2.002C: Failed to get firmware info from DualSense [ 1346.289441][ T5823] playstation 0003:054C:0DF2.002C: Failed to create dualsense. [ 1346.290671][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290715][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290737][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290758][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290789][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290809][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.290829][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.395819][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.397795][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.400876][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.435113][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.498820][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.569503][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.605498][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.643025][ T5823] playstation 0003:054C:0DF2.002C: probe with driver playstation failed with error -71 [ 1346.669973][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1346.681882][ T5823] usb 1-1: USB disconnect, device number 52 [ 1346.959847][T29786] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1347.805945][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12834'. [ 1348.087704][T29800] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1348.316301][T29800] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1348.784254][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1348.901445][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1349.841851][T31097] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1351.456839][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1358.606183][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.606498][ T1847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.606870][ T1847] bridge_slave_0: entered allmulticast mode [ 1358.611171][ T1847] bridge_slave_0: entered promiscuous mode [ 1358.741335][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.741732][ T1847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.742060][ T1847] bridge_slave_1: entered allmulticast mode [ 1358.817415][ T1847] bridge_slave_1: entered promiscuous mode [ 1358.892400][ T2173] loop4: detected capacity change from 0 to 512 [ 1358.912204][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1358.925279][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1358.946919][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1358.947018][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1358.955466][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1359.012087][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.012127][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.012145][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.013625][ T2173] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.12904: iget: bad i_size value: 38620345925642 [ 1359.013750][ T2173] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1359.018768][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1359.027388][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1359.027502][ C1] EXT4-fs (loop4): initial error at time 1358: ext4_orphan_get:1397: inode 15 [ 1359.027540][ C1] EXT4-fs (loop4): last error at time 1358: ext4_orphan_get:1397: inode 15 [ 1359.087081][ T2173] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.12904: couldn't read orphan inode 15 (err -117) [ 1359.087189][ T2173] loop4: lost filesystem error report for type 5 error -117 [ 1359.088201][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1359.098071][ T2173] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.181283][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.192620][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.196829][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.224487][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.232747][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.258846][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.274015][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.279879][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1359.512849][ T1847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.545517][ T1847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.080879][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 1360.144677][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1360.201129][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1360.684173][ T2208] loop5: detected capacity change from 0 to 164 [ 1360.689848][ T1847] team0: Port device team_slave_0 added [ 1360.696252][ T151] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.708518][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.731925][ T1847] team0: Port device team_slave_1 added [ 1360.772756][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.774076][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.775709][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.778931][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1360.804601][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.040200][ T1847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.040218][ T1847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.040246][ T1847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.088378][ T1847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.088398][ T1847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.088429][ T1847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.193561][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.195426][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.196197][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.197821][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.292439][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.351705][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1361.847651][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.847780][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.850374][ T1337] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1362.039126][ T1847] hsr_slave_0: entered promiscuous mode [ 1362.080080][ T1847] hsr_slave_1: entered promiscuous mode [ 1362.088095][ T1847] debugfs: 'hsr0' already exists in 'hsr' [ 1362.088181][ T1847] Cannot create hsr debugfs directory [ 1362.654276][ T2238] overlayfs: statfs failed on './file0' [ 1362.699537][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1365.452737][ T5801] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1365.666373][ T5801] usb 5-1: Using ep0 maxpacket: 8 [ 1365.746680][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.746759][ T5801] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1365.746787][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.756621][ T5801] usb 5-1: config 0 descriptor?? [ 1365.795840][ T5801] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 1366.097665][ T5801] usb 5-1: USB disconnect, device number 63 [ 1367.878793][ T584] bridge_slave_1: left allmulticast mode [ 1367.878830][ T584] bridge_slave_1: left promiscuous mode [ 1367.879124][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.039171][ T2345] loop4: detected capacity change from 0 to 512 [ 1368.055167][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.060534][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.070545][ T2345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1368.071498][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.076790][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.091293][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1368.112737][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.115618][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1368.147331][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.147411][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.148673][ T584] bridge_slave_0: left allmulticast mode [ 1368.148710][ T584] bridge_slave_0: left promiscuous mode [ 1368.149028][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.182739][T27029] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1368.188320][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.211600][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.211668][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.212335][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.232101][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.249923][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.276962][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.277795][ T2345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.284749][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.320791][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.334997][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1368.512182][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1369.351435][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1369.874687][ T37] kauditd_printk_skb: 162 callbacks suppressed [ 1369.874734][ T37] audit: type=1800 audit(1369.437:1120): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12967" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1370.459715][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.460257][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.460542][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.460812][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.490240][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.718787][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.738322][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1370.818812][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1373.726488][ T584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.809263][ T584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.869348][ T584] bond0 (unregistering): Released all slaves [ 1373.953874][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1374.381975][ T2435] loop4: detected capacity change from 0 to 256 [ 1374.385070][ T2435] vfat: Bad value for 'dmask' [ 1374.385569][ T2435] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1375.629242][ T2467] trusted_key: syz.4.13017 sent an empty control message without MSG_MORE. [ 1377.751351][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1378.395310][ T584] hsr_slave_0: left promiscuous mode [ 1378.437458][ T584] hsr_slave_1: left promiscuous mode [ 1378.456157][ T584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.749243][ T584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.934862][ T2551] loop5: detected capacity change from 0 to 1024 [ 1378.938276][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.960611][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.960741][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.960825][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.961819][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.965670][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1378.965907][T29403] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1378.973617][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.011225][ T41] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.011339][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1379.014180][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1379.027781][ T2552] loop4: detected capacity change from 0 to 512 [ 1379.036629][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.050056][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.061502][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.061657][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.061730][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.066125][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.086178][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.086428][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.142115][ T2551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.146728][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.146847][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.192432][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.192491][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.195595][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.203346][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1379.213585][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.242826][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.244307][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.245204][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.247495][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.248667][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.251234][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.321850][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.373693][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.418168][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1379.457756][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.457833][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.458334][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1379.459470][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.563374][ T2552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.788026][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1379.867566][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1380.043274][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.047380][T31097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.309828][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.310997][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.320251][ T41] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.398761][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1380.399334][ T2583] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.13047'. [ 1380.720605][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.720864][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.720996][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.721136][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.721314][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.721525][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.786840][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.964621][T29800] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.966590][T29800] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1380.993206][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1381.248577][ T2608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13054'. [ 1381.267142][ T584] team0 (unregistering): Port device team_slave_1 removed [ 1381.436582][ T584] team0 (unregistering): Port device team_slave_0 removed [ 1382.137452][ T2608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.278845][ T2608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.581450][ T2697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13089'. [ 1394.466452][ T2936] loop5: detected capacity change from 0 to 40427 [ 1394.479808][ T166] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.496695][T29800] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.555909][ T2936] F2FS-fs (loop5): build fault injection rate: 174 [ 1394.555939][ T2936] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 1394.558083][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.558156][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.558883][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.559157][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.559236][ T2936] F2FS-fs (loop5): invalid crc value [ 1394.559969][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.563264][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.565586][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.575247][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.615320][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.621314][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.624677][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.665003][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.756077][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.832316][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.904535][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.930472][ T151] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1394.939397][ T2936] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1394.984809][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.030182][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.030747][ T2936] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1395.040657][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.136577][ T1528] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.137455][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.138262][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.139067][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.139780][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.194457][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.215152][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.364167][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.386751][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.442754][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.447630][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.458631][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.466621][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.492087][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.531368][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.539296][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.543979][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.566071][T29797] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.569888][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.569941][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.569969][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.575954][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1395.605917][T29403] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1397.118454][ T2965] batman_adv: batadv0: Adding interface: dummy0 [ 1397.118474][ T2965] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.118509][ T2965] batman_adv: batadv0: Interface activated: dummy0 [ 1397.122745][T28493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1397.324736][T28493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1397.389894][T28493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1397.466554][T28493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1397.470185][T28493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1397.511181][T31097] syz-executor: attempt to access beyond end of device [ 1397.511181][T31097] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1397.564267][T31097] CPU: 1 UID: 0 PID: 31097 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1397.564305][T31097] Tainted: [L]=SOFTLOCKUP [ 1397.564313][T31097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1397.564327][T31097] Call Trace: [ 1397.564336][T31097] [ 1397.564347][T31097] dump_stack_lvl+0xe8/0x150 [ 1397.564381][T31097] f2fs_stop_checkpoint+0x3cd/0x590 [ 1397.564530][T31097] f2fs_write_end_io+0x1274/0x1740 [ 1397.564618][T31097] __submit_merged_bio+0x256/0x6a0 [ 1397.564675][T31097] __submit_merged_write_cond+0x3c9/0x4e0 [ 1397.564713][T31097] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1397.564763][T31097] f2fs_write_data_pages+0x287e/0x34f0 [ 1397.564815][T31097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1397.564847][T31097] ? ktime_get+0x45/0x220 [ 1397.564928][T31097] ? do_raw_spin_lock+0x12b/0x2f0 [ 1397.565014][T31097] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1397.565036][T31097] ? lockdep_hardirqs_on+0x7a/0x110 [ 1397.565058][T31097] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1397.565079][T31097] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1397.565106][T31097] ? reacquire_held_locks+0x104/0x190 [ 1397.565131][T31097] ? rt_spin_lock+0x1e0/0x400 [ 1397.565165][T31097] ? rt_spin_unlock+0x14f/0x200 [ 1397.565196][T31097] ? rt_spin_unlock+0x160/0x200 [ 1397.565222][T31097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1397.565246][T31097] do_writepages+0x32e/0x550 [ 1397.565316][T31097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1397.565345][T31097] ? rt_spin_unlock+0x14f/0x200 [ 1397.565381][T31097] filemap_fdatawrite+0x1ec/0x2f0 [ 1397.565457][T31097] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1397.565498][T31097] ? __lock_acquire+0x6b5/0x2d10 [ 1397.565560][T31097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1397.565596][T31097] ? rt_spin_unlock+0x160/0x200 [ 1397.565625][T31097] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1397.565661][T31097] f2fs_write_checkpoint+0x9df/0x26a0 [ 1397.565683][T31097] ? __lock_acquire+0x6b5/0x2d10 [ 1397.565731][T31097] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1397.565804][T31097] kill_f2fs_super+0x314/0x730 [ 1397.565834][T31097] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1397.565869][T31097] ? lockdep_hardirqs_on+0x7a/0x110 [ 1397.565903][T31097] deactivate_locked_super+0xbc/0x130 [ 1397.565938][T31097] cleanup_mnt+0x437/0x4d0 [ 1397.566003][T31097] ? _raw_spin_unlock_irq+0x23/0x50 [ 1397.566027][T31097] task_work_run+0x1d9/0x270 [ 1397.566058][T31097] ? __pfx_task_work_run+0x10/0x10 [ 1397.566095][T31097] exit_to_user_mode_loop+0xf3/0x4d0 [ 1397.566118][T31097] ? rcu_is_watching+0x15/0xb0 [ 1397.566147][T31097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.566166][T31097] do_syscall_64+0x33e/0xf80 [ 1397.566187][T31097] ? trace_irq_disable+0x3b/0x140 [ 1397.566206][T31097] ? clear_bhb_loop+0x40/0x90 [ 1397.566228][T31097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.566247][T31097] RIP: 0033:0x7f6c6d73e097 [ 1397.566267][T31097] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1397.566283][T31097] RSP: 002b:00007ffda69ea228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1397.566303][T31097] RAX: 0000000000000000 RBX: 00007f6c6d7d21ca RCX: 00007f6c6d73e097 [ 1397.566316][T31097] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda69ea2e0 [ 1397.566327][T31097] RBP: 00007ffda69ea2e0 R08: 00007ffda69eb2e0 R09: 00000000ffffffff [ 1397.566340][T31097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda69eb370 [ 1397.566351][T31097] R13: 00007f6c6d7d21ca R14: 00000000001549fa R15: 00007ffda69eb3b0 [ 1397.566379][T31097] [ 1397.571224][T31097] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1398.228944][T29797] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1398.393700][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1399.409999][ T2966] batadv0: mtu less than device minimum [ 1400.001824][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.006976][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.012142][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.017327][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.022267][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.027387][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.032355][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.037945][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.043021][ T2966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 1400.271774][ T5620] Bluetooth: hci5: command tx timeout [ 1400.461448][T31097] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1401.222892][ T5626] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1401.372869][ T5626] usb 1-1: Using ep0 maxpacket: 16 [ 1401.378974][ T5626] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1401.379008][ T5626] usb 1-1: config 0 has no interface number 0 [ 1401.379060][ T5626] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1401.379090][ T5626] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1401.380135][ T3027] loop4: detected capacity change from 0 to 2048 [ 1401.394507][ T5626] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1401.394545][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.394567][ T5626] usb 1-1: Product: syz [ 1401.394583][ T5626] usb 1-1: Manufacturer: syz [ 1401.394602][ T5626] usb 1-1: SerialNumber: syz [ 1401.476792][ T5626] usb 1-1: config 0 descriptor?? [ 1401.477728][ T3017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1401.478072][ T3017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1401.490987][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.712130][T27029] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.723259][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.728825][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.729750][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.730487][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.731246][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.731866][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.732493][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.739387][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.741218][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.741894][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1401.786064][ T3017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1401.786277][ T3017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1401.855699][ T3022] uprobe: syz.5.13153:3022 failed to unregister, leaking uprobe [ 1402.006247][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1402.019173][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1402.056406][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1402.094317][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1402.094588][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1402.094983][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1402.293390][ T5620] Bluetooth: hci5: command tx timeout [ 1402.469568][ T3027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1402.493977][ T37] audit: type=1800 audit(1402.177:1121): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13178" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1402.608763][ T3027] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1402.623668][ T3027] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 642 with error 28 [ 1402.623703][ T3027] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1402.623703][ T3027] [ 1402.623718][ T3027] EXT4-fs (loop4): Total free blocks count 0 [ 1402.623732][ T3027] EXT4-fs (loop4): Free/Dirty block details [ 1402.626301][ T3027] EXT4-fs (loop4): free_blocks=66060288 [ 1402.628880][ T3027] EXT4-fs (loop4): dirty_blocks=672 [ 1402.628906][ T3027] EXT4-fs (loop4): Block reservation details [ 1402.628919][ T3027] EXT4-fs (loop4): i_reserved_data_blocks=42 [ 1402.658523][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1402.865743][ T37] audit: type=1800 audit(1402.537:1122): pid=3042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13178" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1402.866656][ T5626] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1402.866963][ T5626] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1402.939376][ T5626] usb 1-1: USB disconnect, device number 53 [ 1403.143374][T29800] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1403.386926][T29800] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1403.431619][ T5617] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1403.574007][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1403.624096][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1403.849357][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1404.374838][ T5620] Bluetooth: hci5: command tx timeout [ 1404.623180][ T5626] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1404.690698][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.691039][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.793084][ T5626] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1404.793114][ T5626] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1404.793134][ T5626] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.793155][ T5626] usb 6-1: config 220 has no interface number 2 [ 1404.793217][ T5626] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1404.793245][ T5626] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1404.793261][ T5626] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1404.793278][ T5626] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1404.797694][ T5626] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1404.797724][ T5626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.797744][ T5626] usb 6-1: Product: syz [ 1404.797758][ T5626] usb 6-1: Manufacturer: syz [ 1404.797772][ T5626] usb 6-1: SerialNumber: syz [ 1405.104587][ T3081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.235720][ T3071] .`: left allmulticast mode [ 1405.235748][ T3071] bond_slave_0: left allmulticast mode [ 1405.303100][ T3071] bond_slave_1: left allmulticast mode [ 1405.417299][ T5626] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1405.417340][ T5626] uvcvideo 6-1:220.0: No valid video chain found. [ 1405.417407][ T5626] usb 6-1: selecting invalid altsetting 0 [ 1405.696151][ T5626] usb 6-1: selecting invalid altsetting 0 [ 1405.696195][ T5626] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1405.737760][ T5626] usb 6-1: USB disconnect, device number 8 [ 1405.887991][ T3071] bridge0: port 3(.`) entered disabled state [ 1406.389324][ T3104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13209'. [ 1406.456162][ T5620] Bluetooth: hci5: command tx timeout [ 1406.608318][ T3110] binder: 3109:3110 ioctl c0306201 200000000040 returned -14 [ 1406.608405][ T3112] binder: 3109:3112 ioctl c0306201 200000000640 returned -22 [ 1406.673522][ T3071] bridge_slave_1: left allmulticast mode [ 1406.673567][ T3071] bridge_slave_1: left promiscuous mode [ 1406.714562][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.985475][ T3071] bridge_slave_0: left allmulticast mode [ 1406.985506][ T3071] bridge_slave_0: left promiscuous mode [ 1406.985830][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.402776][T29877] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1407.552730][T29877] usb 6-1: Using ep0 maxpacket: 16 [ 1407.555626][T29877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1407.558581][T29877] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1407.558612][T29877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.558632][T29877] usb 6-1: Product: syz [ 1407.558647][T29877] usb 6-1: Manufacturer: syz [ 1407.558661][T29877] usb 6-1: SerialNumber: syz [ 1407.585544][T29877] usb 6-1: config 0 descriptor?? [ 1407.640149][T29877] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1407.640189][T29877] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1408.269539][T29877] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1408.976411][ T3167] net_ratelimit: 10 callbacks suppressed [ 1408.976439][ T3167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.434225][T29877] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1409.434324][T29877] em28xx 6-1:0.0: board has no eeprom [ 1409.869723][T29877] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1409.869881][T29877] em28xx 6-1:0.0: dvb set to bulk mode. [ 1409.871862][ T1245] em28xx 6-1:0.0: Binding DVB extension [ 1409.937068][T29877] usb 6-1: USB disconnect, device number 9 [ 1409.959782][T29877] em28xx 6-1:0.0: Disconnecting em28xx [ 1410.748576][ T37] audit: type=1326 audit(1410.427:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748643][ T37] audit: type=1326 audit(1410.427:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748697][ T37] audit: type=1326 audit(1410.427:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748750][ T37] audit: type=1326 audit(1410.427:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748800][ T37] audit: type=1326 audit(1410.427:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748851][ T37] audit: type=1326 audit(1410.427:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748913][ T37] audit: type=1326 audit(1410.427:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.748964][ T37] audit: type=1326 audit(1410.427:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.752494][ T37] audit: type=1326 audit(1410.427:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1410.760677][ T37] audit: type=1326 audit(1410.427:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.5.13258" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1412.896927][ T1245] em28xx 6-1:0.0: Registering input extension [ 1413.116046][T29877] em28xx 6-1:0.0: Closing input extension [ 1413.602500][ T3244] uprobe: syz.4.13268:3244 failed to unregister, leaking uprobe [ 1414.567609][ T3266] loop4: detected capacity change from 0 to 256 [ 1414.658213][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.658268][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.658288][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.658306][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.658324][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.660024][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.660053][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.660072][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.739895][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.741633][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.746782][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.746949][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.769442][ T584] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1414.769452][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.785029][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.818570][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.829275][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.839341][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.870873][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1414.874827][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1414.936464][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1415.820810][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1415.847672][T29877] em28xx 6-1:0.0: Freeing device [ 1415.941024][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1416.107461][ T3285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.912685][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.913021][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.913358][ T2970] bridge_slave_0: entered allmulticast mode [ 1416.919531][ T2970] bridge_slave_0: entered promiscuous mode [ 1416.952929][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.953355][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.953716][ T2970] bridge_slave_1: entered allmulticast mode [ 1416.959008][ T2970] bridge_slave_1: entered promiscuous mode [ 1417.074801][ T2970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.080894][ T2970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.173555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.379216][ T2970] team0: Port device team_slave_0 added [ 1417.427020][ T2970] team0: Port device team_slave_1 added [ 1418.003704][ T2970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.003722][ T2970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.003747][ T2970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.006825][ T2970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.006842][ T2970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.006867][ T2970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.503139][ T2970] hsr_slave_0: entered promiscuous mode [ 1418.510177][ T2970] hsr_slave_1: entered promiscuous mode [ 1418.513747][ T2970] debugfs: 'hsr0' already exists in 'hsr' [ 1418.513780][ T2970] Cannot create hsr debugfs directory [ 1419.142627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1420.213867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.263576][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.263659][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.264886][ T1337] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1423.664263][T27029] bridge_slave_1: left allmulticast mode [ 1423.664294][T27029] bridge_slave_1: left promiscuous mode [ 1423.664536][T27029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.398128][T27029] bridge_slave_0: left allmulticast mode [ 1424.398160][T27029] bridge_slave_0: left promiscuous mode [ 1424.398402][T27029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.678079][T28493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1425.855630][T28493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1425.905769][T28493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1425.930860][T28493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1425.939494][T28493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1426.453342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.213941][ T3430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13333'. [ 1427.366453][T27029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.517193][T27029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.634080][T27029] bond0 (unregistering): Released all slaves [ 1427.727412][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1428.392759][ T5620] Bluetooth: hci3: command tx timeout [ 1429.681330][ T3508] loop4: detected capacity change from 0 to 256 [ 1429.688821][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.689012][ T3508] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1429.689030][ T3508] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1429.689265][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.689563][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.690635][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.691590][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.695475][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.696489][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.696977][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.972890][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.972949][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975209][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975256][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975286][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975313][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975340][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.975367][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.977007][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.977788][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.983648][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.986113][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.989581][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.993868][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1429.999084][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.020913][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.035898][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.044191][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.055801][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.056714][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.057827][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.058396][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.059009][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.059528][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.060710][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.063086][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.063786][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.066406][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.066819][ T3508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1430.117660][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1430.120398][ T3508] exFAT-fs (loop4): failed to load alloc-bitmap [ 1430.120414][ T3508] exFAT-fs (loop4): failed to recognize exfat type [ 1430.388894][ T3288] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1430.532810][ T5620] Bluetooth: hci3: command tx timeout [ 1430.704936][T27029] hsr_slave_0: left promiscuous mode [ 1430.752754][T27029] hsr_slave_1: left promiscuous mode [ 1430.753905][T27029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.793763][T27029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.469919][ T3549] binder: 3545:3549 ioctl c0306201 0 returned -14 [ 1432.612874][ T5620] Bluetooth: hci3: command tx timeout [ 1432.856206][ T3555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13379'. [ 1433.385007][T27029] team0 (unregistering): Port device team_slave_1 removed [ 1433.486793][T27029] team0 (unregistering): Port device team_slave_0 removed [ 1434.085030][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1434.633406][ T3583] loop4: detected capacity change from 0 to 1024 [ 1434.636551][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.689016][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.690084][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.690241][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.690355][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.690501][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.692784][ T5620] Bluetooth: hci3: command tx timeout [ 1434.705642][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.705813][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.705907][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.705974][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.803750][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.807039][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.807084][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.807105][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.807124][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.808936][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.808974][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.808994][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.809013][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.812088][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.812224][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.812335][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.812411][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.813966][ T1528] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.816671][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1434.829051][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.853306][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.878229][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1434.878728][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1434.917846][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.007339][T29800] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1435.029556][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.031417][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.035975][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.044019][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.058313][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.097370][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1435.196344][ T3288] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1438.622189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.017407][ T3673] loop4: detected capacity change from 0 to 2048 [ 1441.081855][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.088059][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.124020][T29800] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.126977][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.127860][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.129625][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.151003][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.167926][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.195984][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.237387][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.240736][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241093][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241538][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241676][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241782][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241894][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.241995][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.242099][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.242199][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.242316][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.242419][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.243104][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.243446][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.246205][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.257573][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.380921][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381075][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381181][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381291][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381409][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381507][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381605][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381697][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381797][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.381904][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.382002][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.382097][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.382194][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.382291][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.382412][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.500513][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548010][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548075][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548096][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548116][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548135][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548155][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548173][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.548192][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.559867][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.642457][T29403] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.673585][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.673668][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.673696][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.707171][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.709915][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.712186][ T166] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1441.971826][ T41] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.018689][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.022785][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.045744][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.128136][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.158887][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.158942][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.158972][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.163979][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.165930][ T3685] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1442.168514][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1442.221324][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1442.253199][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.280215][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.338808][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.415574][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1442.431247][T29797] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 1443.253152][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.271668][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.302891][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.315199][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.381058][ T37] kauditd_printk_skb: 69 callbacks suppressed [ 1443.381135][ T37] audit: type=1804 audit(1442.529:1202): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13419" name="/newroot/2133/file2/file1" dev="loop4" ino=15 res=1 errno=0 [ 1443.381426][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.433542][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.449996][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.463503][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.478309][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.480517][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.482252][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.503133][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.511492][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.521244][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.530792][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.540080][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.541931][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.570242][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.583554][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.603037][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.614615][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.627873][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.628333][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.628697][ T3425] bridge_slave_0: entered allmulticast mode [ 1443.630932][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.659397][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.680039][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.687371][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.696675][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.697037][ T3425] bridge_slave_0: entered promiscuous mode [ 1443.701978][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.708271][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.729211][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.731478][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.731890][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.732234][ T3425] bridge_slave_1: entered allmulticast mode [ 1443.764499][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.791051][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.792149][ T3425] bridge_slave_1: entered promiscuous mode [ 1443.799363][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.807749][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.815529][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.833756][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.836970][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.844501][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.922110][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.939660][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.945168][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.949888][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.990509][T29797] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1443.998415][T29403] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.006607][ T166] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.014668][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.021059][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.035449][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.047674][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.064776][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.075078][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.086256][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.096444][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.107497][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.130611][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.138649][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.150213][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.158285][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1444.367844][ T3425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.565740][ T3425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.639855][ T3425] team0: Port device team_slave_0 added [ 1444.650897][ T3425] team0: Port device team_slave_1 added [ 1444.914752][ T41] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1445.157568][ T3425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.157586][ T3425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.157612][ T3425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.207645][ T3425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.207663][ T3425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.207688][ T3425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.693937][T27029] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 1445.789776][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1446.203151][ T3425] hsr_slave_0: entered promiscuous mode [ 1446.209346][ T3425] hsr_slave_1: entered promiscuous mode [ 1446.211450][ T3425] debugfs: 'hsr0' already exists in 'hsr' [ 1446.211476][ T3425] Cannot create hsr debugfs directory [ 1447.058251][ T3744] raw_sendmsg: syz.4.13439 forgot to set AF_INET. Fix it! [ 1450.457823][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13461'. [ 1451.840680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.841070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.934933][ T2970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1452.116225][ T2970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1452.140758][ T2970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1452.188265][ T2970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.191544][ T2970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1452.276980][ T2970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.300665][ T2970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1452.344772][ T2970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1457.679678][T28493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1457.848536][T28493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1457.943627][T28493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1458.022335][T28493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1458.035945][T28493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1458.456424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.456810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.900345][ T3910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.540486][ T3926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13495'. [ 1460.031336][ T3425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1460.344438][ T3425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1460.345782][ T3425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1460.553508][ T3941] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13500'. [ 1460.852874][ T5620] Bluetooth: hci6: command tx timeout [ 1462.384041][ T3425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.287739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.297260][ T5620] Bluetooth: hci6: command tx timeout [ 1467.937968][ T4018] syz.4.13536 (4018): attempted to duplicate a private mapping with mremap. This is not supported. [ 1468.377750][T28493] Bluetooth: hci6: command tx timeout [ 1468.683787][ T37] audit: type=1326 audit(1468.319:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.685430][ T37] audit: type=1326 audit(1468.319:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.685499][ T37] audit: type=1326 audit(1468.319:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.686291][ T37] audit: type=1326 audit(1468.319:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.686350][ T37] audit: type=1326 audit(1468.319:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.686405][ T37] audit: type=1326 audit(1468.319:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.686754][ T37] audit: type=1326 audit(1468.319:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.687088][ T37] audit: type=1326 audit(1468.319:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.687723][ T37] audit: type=1326 audit(1468.319:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1468.688343][ T37] audit: type=1326 audit(1468.319:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4032 comm="syz.5.13543" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6c6d73ce59 code=0x7ffc0000 [ 1469.185816][ T3425] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1469.269462][ T3425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1469.419791][ T3425] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1469.687284][ T3425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1470.458108][T28493] Bluetooth: hci6: command tx timeout [ 1470.626874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.627215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.599133][ T4115] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13573'. [ 1478.049775][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1478.049796][ T37] audit: type=1326 audit(1477.679:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.049850][ T37] audit: type=1326 audit(1477.679:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.049901][ T37] audit: type=1326 audit(1477.679:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.052713][ T37] audit: type=1326 audit(1477.679:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.052775][ T37] audit: type=1326 audit(1477.679:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.052826][ T37] audit: type=1326 audit(1477.679:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.055130][ T37] audit: type=1326 audit(1477.689:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.055186][ T37] audit: type=1326 audit(1477.689:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.055236][ T37] audit: type=1326 audit(1477.689:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1478.096667][ T37] audit: type=1326 audit(1477.729:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.13596" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1845ce59 code=0x7ffc0000 [ 1480.821204][ T4200] fuse: Bad value for 'fd' [ 1481.273466][ T4211] fuse: Bad value for 'fd' [ 1483.120963][ T3425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.759360][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.759468][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.761118][ T1337] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1485.504234][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1485.578346][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1485.625665][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1485.701873][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1485.766995][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1488.072652][T28493] Bluetooth: hci5: command tx timeout [ 1488.232522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1488.867458][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.867721][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.868039][ T3898] bridge_slave_0: entered allmulticast mode [ 1488.876354][ T3898] bridge_slave_0: entered promiscuous mode [ 1489.012979][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.013301][ T3898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.013747][ T3898] bridge_slave_1: entered allmulticast mode [ 1489.017559][ T3898] bridge_slave_1: entered promiscuous mode [ 1490.149770][T28493] Bluetooth: hci5: command tx timeout [ 1491.377733][ T3898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.298197][T28493] Bluetooth: hci5: command tx timeout [ 1494.374553][T28493] Bluetooth: hci5: command tx timeout [ 1494.418625][ T3898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.934903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.935140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.512354][ T3898] team0: Port device team_slave_0 added [ 1495.637179][ T3898] team0: Port device team_slave_1 added [ 1496.726390][ T3898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.726411][ T3898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.726445][ T3898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.968684][ T3898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.968705][ T3898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.968738][ T3898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.322940][ T166] bridge_slave_1: left allmulticast mode [ 1497.322979][ T166] bridge_slave_1: left promiscuous mode [ 1497.323291][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.538423][ T166] bridge_slave_0: left allmulticast mode [ 1497.538463][ T166] bridge_slave_0: left promiscuous mode [ 1497.554936][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.710422][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.843725][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.927606][ T166] bond0 (unregistering): Released all slaves [ 1498.989019][ T4423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1499.286239][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1501.595858][ T166] hsr_slave_0: left promiscuous mode [ 1502.472696][ T166] hsr_slave_1: left promiscuous mode [ 1502.473898][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.552575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.572565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.582555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.592549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.602542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.612594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.622584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.632552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1502.931442][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.019452][ T4521] overlayfs: failed to clone upperpath [ 1503.763713][ T166] team0 (unregistering): Port device team_slave_1 removed [ 1503.844190][ T166] team0 (unregistering): Port device team_slave_0 removed [ 1504.059145][ T4549] overlayfs: failed to clone upperpath [ 1504.194102][ T3898] hsr_slave_0: entered promiscuous mode [ 1504.196703][ T3898] hsr_slave_1: entered promiscuous mode [ 1504.198860][ T3898] debugfs: 'hsr0' already exists in 'hsr' [ 1504.198890][ T3898] Cannot create hsr debugfs directory [ 1506.459767][ T4598] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13752'. [ 1507.830165][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13755'. [ 1507.830305][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13755'. [ 1510.510219][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1513.742655][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.743022][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.743739][ T4247] bridge_slave_0: entered allmulticast mode [ 1513.747775][ T4247] bridge_slave_0: entered promiscuous mode [ 1513.764272][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.764586][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.765285][ T4247] bridge_slave_1: entered allmulticast mode [ 1513.769278][ T4247] bridge_slave_1: entered promiscuous mode [ 1514.274147][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.280005][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.436816][ T4247] team0: Port device team_slave_0 added [ 1514.481214][ T4247] team0: Port device team_slave_1 added [ 1515.310926][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.310947][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.310980][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.413529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.803392][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.803412][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.803444][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.521261][ T4247] hsr_slave_0: entered promiscuous mode [ 1516.530579][ T4247] hsr_slave_1: entered promiscuous mode [ 1516.539083][ T4247] debugfs: 'hsr0' already exists in 'hsr' [ 1516.539109][ T4247] Cannot create hsr debugfs directory [ 1518.037729][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1518.151277][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1518.158063][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1518.201189][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1518.209086][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1520.533060][T28493] Bluetooth: hci3: command tx timeout [ 1522.005794][ T166] bridge_slave_1: left allmulticast mode [ 1522.005834][ T166] bridge_slave_1: left promiscuous mode [ 1522.006141][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.154502][ T166] bridge_slave_0: left allmulticast mode [ 1522.154541][ T166] bridge_slave_0: left promiscuous mode [ 1522.166872][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.613238][T28493] Bluetooth: hci3: command tx timeout [ 1523.243502][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.345803][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.404884][ T166] bond0 (unregistering): Released all slaves [ 1523.451520][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1524.272796][ T166] hsr_slave_0: left promiscuous mode [ 1524.312887][ T166] hsr_slave_1: left promiscuous mode [ 1524.314102][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.354399][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.702662][T28493] Bluetooth: hci3: command tx timeout [ 1524.833539][ T166] team0 (unregistering): Port device team_slave_1 removed [ 1524.883337][ T166] team0 (unregistering): Port device team_slave_0 removed [ 1525.487881][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.488219][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.488611][ T4700] bridge_slave_0: entered allmulticast mode [ 1525.492296][ T4700] bridge_slave_0: entered promiscuous mode [ 1525.530950][ T4700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.531299][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.531627][ T4700] bridge_slave_1: entered allmulticast mode [ 1525.555702][ T4700] bridge_slave_1: entered promiscuous mode [ 1525.636191][ T4700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.641823][ T4700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.783677][ T4700] team0: Port device team_slave_0 added [ 1525.790133][ T4700] team0: Port device team_slave_1 added [ 1526.583793][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.583813][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.583846][ T4700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.782610][T28493] Bluetooth: hci3: command tx timeout [ 1526.855554][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.855570][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.855593][ T4700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.521946][ T4700] hsr_slave_0: entered promiscuous mode [ 1527.530100][ T4700] hsr_slave_1: entered promiscuous mode [ 1527.531581][ T4700] debugfs: 'hsr0' already exists in 'hsr' [ 1527.531615][ T4700] Cannot create hsr debugfs directory [ 1530.172931][ T166] bridge_slave_1: left allmulticast mode [ 1530.172969][ T166] bridge_slave_1: left promiscuous mode [ 1530.173270][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.333804][ T166] bridge_slave_0: left allmulticast mode [ 1530.333832][ T166] bridge_slave_0: left promiscuous mode [ 1530.334068][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.863769][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.943728][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1531.004913][ T166] bond0 (unregistering): Released all slaves [ 1531.040018][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1531.822777][ T166] hsr_slave_0: left promiscuous mode [ 1531.862845][ T166] hsr_slave_1: left promiscuous mode [ 1531.863772][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.904425][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.373319][ T166] team0 (unregistering): Port device team_slave_1 removed [ 1532.423365][ T166] team0 (unregistering): Port device team_slave_0 removed [ 1536.098353][ T4247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1536.163650][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1536.165589][ T4247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1536.206734][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1536.215725][ T4247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1536.275293][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1536.307970][ T4247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1536.368442][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1536.972024][ T4700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1537.022119][ T4700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1537.031622][ T4700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1537.066588][ T4700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1537.083962][ T4700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1537.117131][ T4700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1537.121279][ T4700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1537.157201][ T4700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1537.383147][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.464255][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.509578][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.509761][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.573874][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.574025][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.856504][ T4700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.938608][ T4700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.986430][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.986686][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.069341][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.071100][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.268910][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.756308][ T4700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.167660][ T4247] veth0_vlan: entered promiscuous mode [ 1540.200118][ T4247] veth1_vlan: entered promiscuous mode [ 1540.349354][ T4247] veth0_macvtap: entered promiscuous mode [ 1540.379007][ T4247] veth1_macvtap: entered promiscuous mode [ 1540.520154][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1540.553825][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.608110][ T4700] veth0_vlan: entered promiscuous mode [ 1540.610667][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.620455][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.635824][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.642199][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.771793][ T4700] veth1_vlan: entered promiscuous mode [ 1541.958526][ T4700] veth0_macvtap: entered promiscuous mode [ 1542.145324][ T4700] veth1_macvtap: entered promiscuous mode [ 1542.532955][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.532978][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.868182][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.238676][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.281142][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.281165][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.317477][ T4665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.320627][ T4665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.322280][ T4665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.322320][ T4665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.619894][ T4938] overlayfs: failed to clone lowerpath [ 1546.133019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.138549][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.138647][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.140004][ T1337] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1546.148728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.311967][ T4665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.311993][ T4665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.252700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.252725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.553445][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1558.681110][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1558.736235][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1558.737537][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1558.738337][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1559.113161][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.767657][ T1497] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.019360][ T5620] Bluetooth: hci5: command tx timeout [ 1563.117564][ T5620] Bluetooth: hci5: command tx timeout [ 1563.423021][ T38] INFO: task syz.0.13242:3169 blocked for more than 143 seconds. [ 1563.423051][ T38] Tainted: G L syzkaller #0 [ 1563.423063][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1563.423072][ T38] task:syz.0.13242 state:D stack:24824 pid:3169 tgid:3169 ppid:5616 task_flags:0x400040 flags:0x00080003 [ 1563.423130][ T38] Call Trace: [ 1563.423136][ T38] [ 1563.423149][ T38] __schedule+0x16f9/0x5500 [ 1563.423201][ T38] ? __pfx___schedule+0x10/0x10 [ 1563.423231][ T38] ? schedule+0x90/0x360 [ 1563.423252][ T38] schedule+0x164/0x360 [ 1563.423272][ T38] fuse_chan_send+0x1057/0x1aa0 [ 1563.423422][ T38] ? __pfx_fuse_chan_send+0x10/0x10 [ 1563.423449][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1563.423475][ T38] ? pid_nr_ns+0xd4/0x150 [ 1563.423501][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1563.423522][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 1563.423548][ T38] ? __fuse_simple_request+0x7a/0xb0 [ 1563.423600][ T38] fuse_flush+0x677/0x8b0 [ 1563.423631][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1563.423661][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1563.423711][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1563.423741][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1563.423770][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1563.423798][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1563.423824][ T38] filp_flush+0xc0/0x190 [ 1563.423855][ T38] filp_close+0x1d/0x40 [ 1563.423899][ T38] __se_sys_close_range+0x3d7/0x900 [ 1563.423968][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1563.423995][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 1563.424055][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.424076][ T38] do_syscall_64+0x15f/0xf80 [ 1563.424097][ T38] ? trace_irq_disable+0x3b/0x140 [ 1563.424117][ T38] ? clear_bhb_loop+0x40/0x90 [ 1563.424140][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.424159][ T38] RIP: 0033:0x7fafe210ce59 [ 1563.424179][ T38] RSP: 002b:00007ffc803c2358 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1563.424200][ T38] RAX: ffffffffffffffda RBX: 00007fafe2387da0 RCX: 00007fafe210ce59 [ 1563.424214][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1563.424226][ T38] RBP: 00007fafe2387da0 R08: 00007fafe2386128 R09: 0000000000000000 [ 1563.424239][ T38] R10: 00000000005f620c R11: 0000000000000246 R12: 0000000000158118 [ 1563.424251][ T38] R13: 00007fafe2385fac R14: 0000000000157ee4 R15: 00007fafe2385fa0 [ 1563.424281][ T38] [ 1563.424346][ T38] [ 1563.424346][ T38] Showing all locks held in the system: [ 1563.424357][ T38] 2 locks held by kworker/u8:0/12: [ 1563.424369][ T38] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.424458][ T38] #1: ffffc90000117c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.424516][ T38] 1 lock held by khungtaskd/38: [ 1563.424527][ T38] #0: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1563.424585][ T38] 3 locks held by kworker/u8:7/166: [ 1563.424595][ T38] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.424645][ T38] #1: ffffc90003977c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.424702][ T38] #2: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1563.424755][ T38] 8 locks held by kworker/u8:12/1497: [ 1563.424765][ T38] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.424813][ T38] #1: ffffc90006d7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.424862][ T38] #2: ffffffff8f36aa60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1563.424902][ T38] #3: ffff88806206f160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1563.424947][ T38] #4: ffff888058da2310 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1563.424995][ T38] #5: ffff88803fbb0178 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 1563.425104][ T38] #6: ffff88803f8f7c90 (&lockref->lock){+.+.}-{3:3}, at: __dentry_kill+0x1e1/0x5c0 [ 1563.425148][ T38] #7: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1563.425199][ T38] 2 locks held by kworker/u8:15/1539: [ 1563.425209][ T38] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.425260][ T38] #1: ffffc90006dcfc40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.425326][ T38] 2 locks held by getty/5369: [ 1563.425336][ T38] #0: ffff888035a5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1563.425430][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1563.425489][ T38] 3 locks held by kworker/u8:3/27029: [ 1563.425500][ T38] #0: ffff888032439938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.425552][ T38] #1: ffffc9000692fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.425605][ T38] #2: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 1563.425660][ T38] 2 locks held by kworker/1:1/29875: [ 1563.425680][ T38] #0: ffff88802c545538 ((wq_completion)wg-crypt-wg2#8){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.425737][ T38] #1: ffffc90005697c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.425812][ T38] 14 locks held by kworker/0:6/4947: [ 1563.425826][ T38] #0: ffff88813fe46538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1563.425886][ T38] #1: ffffc90005687c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1563.425949][ T38] #2: ffffffff8de612c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1563.426053][ T38] #3: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1563.426116][ T38] #4: ffffffff8f4a83f8 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0xc64/0xe90 [ 1563.426182][ T38] #5: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1563.426245][ T38] #6: ffffffff8de612c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1563.426312][ T38] #7: ffff88806e8080a8 (&n->lock){++..}-{3:3}, at: neigh_cleanup_and_release+0xb1/0x2d0 [ 1563.426378][ T38] #8: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 1563.426442][ T38] #9: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: __neigh_notify+0x29/0x310 [ 1563.426499][ T38] #10: ffffffff8de612c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1563.426566][ T38] #11: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1563.426663][ T38] #12: ffff8880b863b860 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1563.426784][ T38] #13: ffff8880b8624508 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1563.426881][ T38] 1 lock held by syz-executor/5043: [ 1563.426896][ T38] #0: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1563.426950][ T38] 4 locks held by syz.2.13818/5069: [ 1563.426963][ T38] #0: ffffffff8f35a4f8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x644/0x7f0 [ 1563.427025][ T38] #1: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 1563.427083][ T38] #2: ffffffff8f45ffe0 ((inetaddr_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1563.427143][ T38] #3: ffffffff8f3e85c8 (nl_table_lock){++++}-{3:3}, at: netlink_broadcast_filtered+0x91/0xea0 [ 1563.427201][ T38] 2 locks held by syz.4.13820/5073: [ 1563.427215][ T38] #0: ffffffff8f3eab00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1563.427276][ T38] #1: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0 [ 1563.427341][ T38] 1 lock held by syz.5.13819/5075: [ 1563.427355][ T38] #0: ffffffff8f379f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1563.427422][ T38] 1 lock held by dhcpcd/5085: [ 1563.427435][ T38] #0: ffff88803d9f03b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 1563.427517][ T38] 6 locks held by syz-executor/5086: [ 1563.427532][ T38] #0: ffff888028c6e6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1563.427615][ T38] #1: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2940 [ 1563.427679][ T38] #2: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1db/0x1c50 [ 1563.427739][ T38] #3: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1563.427826][ T38] #4: ffff888060988898 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1563.427897][ T38] #5: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1563.427962][ T38] [ 1563.427969][ T38] ============================================= [ 1563.427969][ T38] [ 1563.427987][ T38] NMI backtrace for cpu 1 [ 1563.428007][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1563.428038][ T38] Tainted: [L]=SOFTLOCKUP [ 1563.428047][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.428061][ T38] Call Trace: [ 1563.428070][ T38] [ 1563.428080][ T38] dump_stack_lvl+0xe8/0x150 [ 1563.428113][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1563.428148][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1563.428211][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1563.428249][ T38] sys_info+0x135/0x170 [ 1563.428278][ T38] watchdog+0xfd3/0x1030 [ 1563.428310][ T38] ? watchdog+0x1c9/0x1030 [ 1563.428339][ T38] kthread+0x389/0x470 [ 1563.428366][ T38] ? __pfx_watchdog+0x10/0x10 [ 1563.428387][ T38] ? __pfx_kthread+0x10/0x10 [ 1563.428415][ T38] ret_from_fork+0x514/0xb70 [ 1563.428447][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.428477][ T38] ? __switch_to+0xc79/0x1410 [ 1563.428505][ T38] ? __pfx_kthread+0x10/0x10 [ 1563.428533][ T38] ret_from_fork_asm+0x1a/0x30 [ 1563.428582][ T38] [ 1563.428591][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1563.428628][ C0] NMI backtrace for cpu 0 [ 1563.428646][ C0] CPU: 0 UID: 0 PID: 4947 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1563.428673][ C0] Tainted: [L]=SOFTLOCKUP [ 1563.428681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.428695][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1563.428727][ C0] RIP: 0010:mark_lock+0x95/0x190 [ 1563.428751][ C0] Code: 83 3d 32 c9 ea 0d 00 75 13 48 8d 3d a5 ef ed 0d 48 c7 c6 7a c5 74 8d 67 48 0f b9 3a 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 57 f9 8d 09 cc 49 [ 1563.428768][ C0] RSP: 0018:ffffc90005687920 EFLAGS: 00000006 [ 1563.428784][ C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff932139f8 [ 1563.428797][ C0] RDX: 0000000000000002 RSI: ffff888034138c20 RDI: ffff888034138000 [ 1563.428811][ C0] RBP: 0000000000000004 R08: ffffffff8f8b8937 R09: 1ffffffff1f17126 [ 1563.428824][ C0] R10: dffffc0000000000 R11: fffffbfff1f17127 R12: ffff888034138c20 [ 1563.428838][ C0] R13: 1ffff92000ad0f3c R14: ffff888034138bf8 R15: 0000000000000001 [ 1563.428852][ C0] FS: 0000000000000000(0000) GS:ffff888125f00000(0000) knlGS:0000000000000000 [ 1563.428868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.428881][ C0] CR2: 000000110c2b6311 CR3: 0000000032cb2000 CR4: 00000000003526f0 [ 1563.428898][ C0] Call Trace: [ 1563.428905][ C0] [ 1563.428915][ C0] lockdep_hardirqs_on_prepare+0x110/0x260 [ 1563.428938][ C0] trace_hardirqs_on+0x28/0x40 [ 1563.429007][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1563.429029][ C0] rt_mutex_slowunlock+0x4a7/0x8b0 [ 1563.429056][ C0] ? reacquire_held_locks+0x104/0x190 [ 1563.429080][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1563.429106][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1563.429134][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1563.429161][ C0] ? rt_spin_unlock+0x160/0x200 [ 1563.429199][ C0] neigh_periodic_work+0xc25/0xe90 [ 1563.429230][ C0] ? neigh_periodic_work+0x57/0xe90 [ 1563.429261][ C0] ? process_one_work+0x8be/0x1630 [ 1563.429287][ C0] process_one_work+0x98b/0x1630 [ 1563.429325][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1563.429351][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1563.429388][ C0] worker_thread+0xb49/0x1140 [ 1563.429421][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1563.429448][ C0] kthread+0x389/0x470 [ 1563.429469][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1563.429495][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.429517][ C0] ret_from_fork+0x514/0xb70 [ 1563.429541][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.429565][ C0] ? __switch_to+0xc79/0x1410 [ 1563.429585][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.429606][ C0] ret_from_fork_asm+0x1a/0x30 [ 1563.429641][ C0] [ 1563.430636][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1563.430663][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1563.430702][ T38] Tainted: [L]=SOFTLOCKUP [ 1563.430710][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.430725][ T38] Call Trace: [ 1563.430735][ T38] [ 1563.430745][ T38] vpanic+0x56c/0xa60 [ 1563.430786][ T38] ? __pfx_vpanic+0x10/0x10 [ 1563.430827][ T38] panic+0xc5/0xd0 [ 1563.430858][ T38] ? __pfx_panic+0x10/0x10 [ 1563.430899][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1563.430937][ T38] watchdog+0x102c/0x1030 [ 1563.430967][ T38] ? watchdog+0x1c9/0x1030 [ 1563.430994][ T38] kthread+0x389/0x470 [ 1563.431021][ T38] ? __pfx_watchdog+0x10/0x10 [ 1563.431040][ T38] ? __pfx_kthread+0x10/0x10 [ 1563.431069][ T38] ret_from_fork+0x514/0xb70 [ 1563.431101][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.431132][ T38] ? __switch_to+0xc79/0x1410 [ 1563.431160][ T38] ? __pfx_kthread+0x10/0x10 [ 1563.431188][ T38] ret_from_fork_asm+0x1a/0x30 [ 1563.431238][ T38] [ 1563.431940][ T38] Kernel Offset: disabled